This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/CuGS3zx7rl8lkR-Cu7lgkzkBwZg.roa File: CuGS3zx7rl8lkR-Cu7lgkzkBwZg.roa (raw, json) Hash identifier: 2vksMHNswhYKq/rO6uSfal/4CIC3NBayex+XvJ5ElK8= Subject key identifier: 0A:E1:92:DF:3C:7B:AE:5F:25:91:1F:82:BB:B9:60:93:39:01:C1:98 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758F16D9A7F8BE29B7BDF213D564E6F Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/CuGS3zx7rl8lkR-Cu7lgkzkBwZg.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204063 IP address blocks: 5.1.64.0/21 maxlen: 32 94.247.47.0/24 maxlen: 32 185.90.160.0/24 maxlen: 32 185.90.161.0/24 maxlen: 32 185.90.163.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f1:6d:9a:7f:8b:e2:9b:7b:df:21:3d:56:4e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ae192df3c7bae5f25911f82bbb960933901c198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b8:ac:47:fa:a1:45:cd:75:96:3d:b2:75:bf: c0:62:12:64:39:4f:d0:84:34:99:bb:d7:20:86:2f: 81:a0:27:5d:21:12:f0:7b:99:7a:59:8c:8e:65:7a: 81:bd:70:30:99:ab:cb:fc:b9:c8:d7:d7:3b:7c:13: 81:39:cf:2e:3e:9f:78:98:88:ac:3d:bd:81:c5:f7: e6:44:e7:6a:c3:ec:9f:19:6e:9e:76:c5:d0:12:4a: 9f:7d:20:53:53:a0:de:41:f0:6e:b5:31:67:69:05: 19:14:05:17:0e:90:2e:f9:25:ab:43:82:f3:d9:7b: 3b:bf:ff:e2:f0:da:69:42:f1:76:20:79:0e:06:7b: 27:bc:f2:30:1d:1c:a3:69:25:59:31:f1:91:34:14: ef:9b:ea:fd:f4:e6:7e:b8:e8:92:d6:bb:41:20:c4: 7f:5f:29:ed:01:d0:7d:68:2a:1a:43:3e:f2:96:d4: 19:b6:01:8c:ba:c6:fe:86:b0:36:40:d7:0f:9a:9e: a6:69:b3:4e:1c:96:7d:bc:98:a0:13:83:42:85:0d: 96:3e:91:d3:5b:1e:9a:79:1a:15:3a:ef:14:cc:85: 3a:fc:88:65:99:e2:63:da:b6:84:2f:4f:21:f7:bf: 95:c9:2e:c7:17:d7:1d:1f:c2:fc:0f:87:83:8b:78: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E1:92:DF:3C:7B:AE:5F:25:91:1F:82:BB:B9:60:93:39:01:C1:98 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/CuGS3zx7rl8lkR-Cu7lgkzkBwZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.64.0/21 94.247.47.0/24 185.90.160.0/23 185.90.163.0/24 Signature Algorithm: sha256WithRSAEncryption 18:01:f2:b3:9a:c2:6f:fd:ee:26:dd:18:f5:65:ce:fe:2e:d8: 75:f1:88:db:cd:6d:58:fa:95:8f:b7:95:c9:01:ab:94:88:8f: 7c:a6:c0:d8:0d:0d:5e:b8:5f:e3:6d:3e:fa:d7:61:9c:ce:fa: 3c:94:52:0f:cd:65:e2:f7:d3:24:4d:73:d4:40:b4:aa:45:a1: 0b:7c:72:ed:37:49:1d:d8:3e:c0:4c:0f:70:52:18:42:7a:3a: c2:d5:7b:5b:ae:8b:c1:10:38:f7:fc:03:3f:5f:36:fd:86:73: 82:e8:80:bc:b9:cd:0e:c0:35:01:37:e3:e9:ae:a6:3a:a2:c9: f3:10:d9:b7:c6:0e:b8:aa:ee:8f:58:62:68:74:c7:52:21:9f: 0e:bb:bf:fd:87:af:54:d2:71:da:94:47:ca:7a:2c:bb:22:37: 3f:db:e9:ab:88:03:a6:8e:5d:35:ea:43:43:6f:d7:96:a0:99: 78:a5:11:52:19:a6:80:cc:95:0f:40:28:9a:da:77:f2:9f:6a: 8a:fe:cd:98:e2:8c:6d:42:8e:e4:6b:3a:eb:99:2a:67:88:4d: 66:16:d8:21:09:5b:cb:49:85:be:5b:4f:4a:e3:0e:b2:3f:f5: d6:36:e7:f9:97:f4:0f:f3:d8:e5:a5:47:3c:11:18:bb:45:2a: cd:a3:db:c6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WPFtmn+L4pt73yE9Vk5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWUxOTJkZjNjN2JhZTVmMjU5MTFmODJiYmI5NjA5MzM5MDFjMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bisR/qhRc11lj2ydb/AYhJkOU/Q hDSZu9cghi+BoCddIRLwe5l6WYyOZXqBvXAwmavL/LnI19c7fBOBOc8uPp94mIis Pb2BxffmROdqw+yfGW6edsXQEkqffSBTU6DeQfButTFnaQUZFAUXDpAu+SWrQ4Lz 2Xs7v//i8NppQvF2IHkOBnsnvPIwHRyjaSVZMfGRNBTvm+r99OZ+uOiS1rtBIMR/ XyntAdB9aCoaQz7yltQZtgGMusb+hrA2QNcPmp6mabNOHJZ9vJigE4NChQ2WPpHT Wx6aeRoVOu8UzIU6/IhlmeJj2raEL08h97+VyS7HF9cdH8L8D4eDi3jIAwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFArhkt88e65fJZEfgru5YJM5AcGYMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvQ3VHUzN6eDdybDhsa1ItQ3U3bGdremtCd1pnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDBQFAAwQA XvcvAwQBuVqgAwQAuVqjMA0GCSqGSIb3DQEBCwUAA4IBAQAYAfKzmsJv/e4m3Rj1 Zc7+Lth18YjbzW1Y+pWPt5XJAauUiI98psDYDQ1euF/jbT7612Gczvo8lFIPzWXi 99MkTXPUQLSqRaELfHLtN0kd2D7ATA9wUhhCejrC1XtbrovBEDj3/AM/Xzb9hnOC 6IC8uc0OwDUBN+PprqY6osnzENm3xg64qu6PWGJodMdSIZ8Ou7/9h69U0nHalEfK eiy7Ijc/2+mriAOmjl016kNDb9eWoJl4pRFSGaaAzJUPQCia2nfyn2qK/s2Y4oxt Qo7kazrrmSpniE1mFtghCVvLSYW+W09K4w6yP/XWNuf5l/QP89jlpUc8ERi7RSrN o9vG -----END CERTIFICATE-----Generated at Wed Jan 21 00:04:10 2026 by rpki-client