This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa File: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (raw, json) Hash identifier: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs= Subject key identifier: 09:52:F5:08:AF:0E:C3:67:12:28:1A:30:1D:C1:D8:D2:D1:7C:4A:3A Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 019B76EB030497DC77875B3E909A9ACC2DA6 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 185.27.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:03:04:97:dc:77:87:5b:3e:90:9a:9a:cc:2d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0952f508af0ec36712281a301dc1d8d2d17c4a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3a:3d:b0:bf:d3:53:98:bf:a5:42:80:bf:67: 78:08:77:86:2e:eb:59:2f:82:55:ef:95:e2:14:94: 74:c8:5e:44:e9:f1:cd:39:7a:77:fc:42:9d:fe:67: bd:16:22:36:19:ac:6f:2c:ff:e8:53:3d:c7:50:a7: e8:3f:11:8d:24:d0:3d:63:7a:a0:71:7e:64:ca:e1: d8:0d:76:19:c0:ae:e8:62:43:1f:2a:2c:65:59:a9: b6:c7:6f:16:2c:c5:e3:cf:81:3d:36:e6:81:31:47: 4a:97:af:9b:bc:4d:7b:28:ff:64:9e:36:c8:ce:9a: a0:46:a2:bd:b7:a0:d0:6c:e2:12:c1:05:d1:34:3d: 11:bd:d2:1f:8e:ab:78:8c:1e:d6:36:a5:62:0a:71: ef:28:43:41:76:82:f8:bb:ee:18:b3:67:19:82:4e: 2f:65:2b:b4:fd:9a:cd:7b:f1:d7:e0:eb:03:34:e6: f2:d4:e4:ae:e4:af:9a:37:c2:39:32:33:0a:2e:83: a0:ba:21:e6:3d:ad:11:3e:9e:a5:22:0b:9d:29:7f: 8d:b7:f1:35:8c:e3:d9:db:71:6c:ad:aa:73:0c:49: bb:ae:cb:1b:8c:89:ef:6c:cb:41:98:f5:f2:3c:29: 79:76:97:dc:ee:05:60:ab:12:55:5b:ad:7e:10:d3: d0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:52:F5:08:AF:0E:C3:67:12:28:1A:30:1D:C1:D8:D2:D1:7C:4A:3A X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.202.0/24 Signature Algorithm: sha256WithRSAEncryption 82:b0:ff:f4:87:96:f1:2f:fa:be:8e:48:a3:35:0f:a6:34:6f: e8:10:0b:8e:11:6c:f7:6f:69:e9:8a:bb:ce:c2:43:ca:01:d5: 96:46:cd:78:e8:c4:ca:a3:42:e9:e1:8e:e8:8b:98:0a:5c:2f: 84:14:e4:8f:a6:11:a0:14:70:40:c5:88:b2:06:0a:91:16:1e: 88:0a:a1:b8:83:fc:3e:d5:de:c6:b7:a2:57:80:a9:42:a6:eb: b9:67:ef:02:d3:8f:e6:6f:27:53:54:2f:1f:60:72:81:0e:09: f0:25:6f:3b:c9:bb:c2:eb:3a:9f:4a:43:44:15:16:bc:04:52: 07:ed:0a:e4:db:1e:18:e9:8f:e4:35:d1:a6:e8:d7:f2:e1:19: e2:87:8e:ab:aa:6d:95:29:13:c6:d1:32:0b:ae:59:44:e7:71: 22:dc:c9:c0:30:dc:2c:02:27:52:52:d6:61:eb:cd:ff:b9:7e: be:03:81:be:c9:47:3b:29:d3:68:0d:d6:42:ac:64:16:3a:bb: 47:7a:a4:9d:64:39:8c:ca:28:1e:4a:1a:a1:06:bf:76:91:cd: b6:8a:95:de:42:03:9c:ea:87:51:17:00:52:a8:0b:c7:08:93: 4e:f5:07:36:02:a3:23:bc:13:fe:0c:6e:99:b0:d7:de:8d:bb: f5:4c:58:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26wMEl9x3h1s+kJqazC2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTUyZjUwOGFmMGVjMzY3MTIyODFhMzAxZGMxZDhkMmQxN2M0YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Do9sL/TU5i/pUKAv2d4CHeGLutZ L4JV75XiFJR0yF5E6fHNOXp3/EKd/me9FiI2GaxvLP/oUz3HUKfoPxGNJNA9Y3qg cX5kyuHYDXYZwK7oYkMfKixlWam2x28WLMXjz4E9NuaBMUdKl6+bvE17KP9knjbI zpqgRqK9t6DQbOISwQXRND0RvdIfjqt4jB7WNqViCnHvKENBdoL4u+4Ys2cZgk4v ZSu0/ZrNe/HX4OsDNOby1OSu5K+aN8I5MjMKLoOguiHmPa0RPp6lIgudKX+Nt/E1 jOPZ23FsrapzDEm7rssbjInvbMtBmPXyPCl5dpfc7gVgqxJVW61+ENPQrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAlS9QivDsNnEigaMB3B2NLRfEo6MB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvQ1ZMMUNLOE93MmNTS0Jvd0hjSFkwdEY4U2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRvKMA0G CSqGSIb3DQEBCwUAA4IBAQCCsP/0h5bxL/q+jkijNQ+mNG/oEAuOEWz3b2npirvO wkPKAdWWRs146MTKo0Lp4Y7oi5gKXC+EFOSPphGgFHBAxYiyBgqRFh6ICqG4g/w+ 1d7Gt6JXgKlCpuu5Z+8C04/mbydTVC8fYHKBDgnwJW87ybvC6zqfSkNEFRa8BFIH 7Qrk2x4Y6Y/kNdGm6Nfy4Rnih46rqm2VKRPG0TILrllE53Ei3MnAMNwsAidSUtZh 683/uX6+A4G+yUc7KdNoDdZCrGQWOrtHeqSdZDmMyigeShqhBr92kc22ipXeQgOc 6odRFwBSqAvHCJNO9Qc2AqMjvBP+DG6ZsNfejbv1TFjY -----END CERTIFICATE-----Generated at Thu Jan 1 07:05:47 2026 by rpki-client