This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cMs2FA-8f8eCF8f1tjGPSumlPXU.roa File: cMs2FA-8f8eCF8f1tjGPSumlPXU.roa (raw, json) Hash identifier: 7SaNzB0Clj9yEs4zeaEza+gtiz7sNEkqBfOg+ioIRds= Subject key identifier: 70:CB:36:14:0F:BC:7F:C7:82:17:C7:F5:B6:31:8F:4A:E9:A5:3D:75 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758E52480DAFA4CD4D61B5CEE94B762 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cMs2FA-8f8eCF8f1tjGPSumlPXU.roa Signing time: Thu 01 Jan 2026 02:17:53 +0000 ROA not before: Thu 01 Jan 2026 02:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48646 IP address blocks: 94.247.45.0/24 maxlen: 24 178.251.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e5:24:80:da:fa:4c:d4:d6:1b:5c:ee:94:b7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70cb36140fbc7fc78217c7f5b6318f4ae9a53d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:de:2d:95:3f:d6:85:4c:0b:2f:b3:21:6e:06: c1:49:43:81:81:f3:f9:65:23:91:e0:11:4e:6e:10: cf:e8:92:c3:40:b1:54:0d:c7:2a:04:ba:5f:da:75: ff:40:94:e2:d1:76:52:17:3e:4a:63:c6:16:bd:9c: 34:31:bd:8f:dc:ad:65:51:29:da:71:09:a1:3d:5d: 95:21:91:0c:b2:9e:02:1e:0c:59:17:b2:8e:c1:bb: 6e:48:42:6a:79:d0:35:98:7f:ab:d1:6d:5a:cc:9b: 74:3f:cb:ee:2f:72:db:ec:fa:3d:5a:b6:49:95:ad: 74:03:31:06:2a:05:07:76:96:74:13:59:7c:a6:a6: 7e:2e:68:d0:08:9a:20:92:71:1d:5e:fb:f3:17:dd: ab:1d:f1:b2:8b:e1:9d:e1:92:66:61:fe:8b:18:28: 82:61:65:99:30:35:b9:b2:9c:c2:a0:a9:38:f3:20: ae:f4:3d:92:8c:a8:20:57:ab:27:4f:ce:f1:33:bc: 2f:bd:62:ff:c8:9f:81:15:9a:31:7a:a9:37:75:dc: d1:f3:6f:80:9a:9e:68:bc:72:ed:86:37:1c:a5:8b: 46:30:3e:fc:f9:ae:9c:30:ef:f9:4e:b0:73:ff:d6: 66:77:24:a4:b9:0c:37:73:98:dc:f5:14:64:45:48: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CB:36:14:0F:BC:7F:C7:82:17:C7:F5:B6:31:8F:4A:E9:A5:3D:75 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cMs2FA-8f8eCF8f1tjGPSumlPXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.45.0/24 178.251.226.0/24 Signature Algorithm: sha256WithRSAEncryption 69:de:a8:ba:3d:9f:f8:41:62:2a:72:f2:4a:e5:0a:3c:fc:90: 70:b7:75:c4:64:65:2e:b9:9e:2d:63:17:35:db:fa:ce:88:c4: e8:4a:ba:e0:cf:9c:ee:37:bb:1f:58:3d:d6:9b:b3:8b:03:79: 23:70:60:e6:cb:77:4b:f4:09:c2:83:8f:5b:ee:ad:50:18:a4: 6b:62:f9:0a:7c:c0:63:e5:d9:21:e3:8b:2a:82:a3:16:53:ec: f4:10:57:f1:63:5c:fa:95:d5:d0:a7:bd:03:96:5f:53:3f:98: 9e:6d:06:54:bd:7a:d2:c6:16:a9:e7:f5:49:37:f5:bc:d3:94: 4d:ae:79:67:ba:b1:dd:11:a7:08:a8:9c:82:cf:21:ab:61:ca: fe:1a:73:34:44:b1:6b:98:a0:ea:62:e7:cc:8a:80:bd:74:aa: fc:58:d6:1d:48:74:25:83:5e:ea:cc:03:6f:5e:3e:6b:fc:2c: c7:53:dd:2f:02:fe:fa:ae:d1:aa:f7:50:dc:e5:96:f2:3f:4e: 3f:87:a5:20:f3:71:44:cb:ed:17:77:98:0b:07:8c:4a:22:f6: 8e:d4:59:57:3e:0b:bd:28:e3:2f:bd:55:fc:e4:7a:62:e2:c5: 60:4c:b8:8b:68:d1:3d:31:9f:1b:ed:43:49:58:0b:28:2f:7a: ec:3f:8a:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WOUkgNr6TNTWG1zulLdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGNiMzYxNDBmYmM3ZmM3ODIxN2M3ZjViNjMxOGY0YWU5YTUzZDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo94tlT/WhUwLL7MhbgbBSUOBgfP5 ZSOR4BFObhDP6JLDQLFUDccqBLpf2nX/QJTi0XZSFz5KY8YWvZw0Mb2P3K1lUSna cQmhPV2VIZEMsp4CHgxZF7KOwbtuSEJqedA1mH+r0W1azJt0P8vuL3Lb7Po9WrZJ la10AzEGKgUHdpZ0E1l8pqZ+LmjQCJogknEdXvvzF92rHfGyi+Gd4ZJmYf6LGCiC YWWZMDW5spzCoKk48yCu9D2SjKggV6snT87xM7wvvWL/yJ+BFZoxeqk3ddzR82+A mp5ovHLthjccpYtGMD78+a6cMO/5TrBz/9ZmdySkuQw3c5jc9RRkRUjHKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHDLNhQPvH/HghfH9bYxj0rppT11MB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvY01zMkZBLThmOGVDRjhmMXRqR1BTdW1sUFhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXvctAwQA svviMA0GCSqGSIb3DQEBCwUAA4IBAQBp3qi6PZ/4QWIqcvJK5Qo8/JBwt3XEZGUu uZ4tYxc12/rOiMToSrrgz5zuN7sfWD3Wm7OLA3kjcGDmy3dL9AnCg49b7q1QGKRr YvkKfMBj5dkh44sqgqMWU+z0EFfxY1z6ldXQp70Dll9TP5iebQZUvXrSxhap5/VJ N/W805RNrnlnurHdEacIqJyCzyGrYcr+GnM0RLFrmKDqYufMioC9dKr8WNYdSHQl g17qzANvXj5r/CzHU90vAv76rtGq91Dc5ZbyP04/h6Ug83FEy+0Xd5gLB4xKIvaO 1FlXPgu9KOMvvVX85Hpi4sVgTLiLaNE9MZ8b7UNJWAsoL3rsP4p2 -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:49 2026 by rpki-client