This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CnWQo9RdhcX2ovXhyusMEBC01fc.roa File: CnWQo9RdhcX2ovXhyusMEBC01fc.roa (raw, json) Hash identifier: nzmKsLbQGsB3arOZV1b0+Q0mj0v3dMKwWjkwqB1My4c= Subject key identifier: 0A:75:90:A3:D4:5D:85:C5:F6:A2:F5:E1:CA:EB:0C:10:10:B4:D5:F7 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E227C3A955C78A442B594B59AD47E Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CnWQo9RdhcX2ovXhyusMEBC01fc.roa Signing time: Thu 01 Jan 2026 12:17:48 +0000 ROA not before: Thu 01 Jan 2026 12:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 5.183.207.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:22:7c:3a:95:5c:78:a4:42:b5:94:b5:9a:d4:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a7590a3d45d85c5f6a2f5e1caeb0c1010b4d5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:c8:b1:7c:e0:51:ab:e9:77:86:58:c7:c4: 5f:cc:5e:8c:2e:eb:d7:cd:df:44:f1:53:65:ad:51: f4:5a:37:6d:87:ed:cf:c7:37:69:e2:b1:2e:14:ee: 47:43:cb:2b:f4:b5:c5:51:e3:26:71:db:41:2c:a5: 06:65:83:12:c2:3e:51:90:54:fe:74:f7:9c:fe:27: 80:a0:12:33:fe:a5:d6:25:1c:f1:c9:5a:96:06:cd: 02:1e:d0:30:15:31:52:58:95:8a:d8:30:95:50:4b: 05:f0:25:b3:72:11:f8:24:0b:ca:f7:14:6e:39:21: a6:93:50:f1:ce:ba:0f:cc:25:b6:43:0e:3e:5d:10: 36:f2:eb:05:0b:ef:12:f8:d6:c9:3f:6b:53:18:58: 53:26:78:1b:80:e7:f5:fb:5c:0c:40:44:42:c1:ba: 67:6e:6d:e7:32:23:22:04:e8:d8:a1:b5:1a:b2:66: 17:68:0b:67:28:40:54:f5:00:4e:14:2b:51:ad:8f: 1c:37:8f:1c:e3:c8:c5:d3:12:cf:a9:e6:26:af:49: f5:08:b4:d2:b7:07:92:cf:c5:7d:fa:cd:1b:fb:44: 54:47:e7:86:15:f6:bf:d6:09:5c:9b:7e:98:67:5f: 1b:2b:3c:ca:de:3c:23:49:66:47:af:e3:a9:0c:6d: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:75:90:A3:D4:5D:85:C5:F6:A2:F5:E1:CA:EB:0C:10:10:B4:D5:F7 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CnWQo9RdhcX2ovXhyusMEBC01fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.207.0/24 Signature Algorithm: sha256WithRSAEncryption b4:4c:5e:8c:b6:b8:88:4b:a6:bc:73:b5:1e:7b:b2:60:7e:83: a3:9e:93:d2:35:22:47:99:52:61:22:2b:7d:24:18:ea:8d:c4: f8:21:b5:f2:95:fc:46:66:66:66:b5:45:6f:a0:cd:40:ca:a3: da:2a:b0:47:3f:4e:ec:d9:34:ef:a8:27:e2:4a:14:65:59:10: 87:a0:ce:ec:fb:bf:f8:1e:d5:aa:79:dc:82:c5:b7:80:3e:a1: 01:15:a3:e5:30:ff:22:82:4c:17:93:28:9f:b1:e7:20:f0:9d: 6b:10:09:7d:26:39:12:3e:43:39:f5:be:61:80:a5:37:f3:62: 27:0a:c7:05:b0:94:b7:49:dd:cc:2d:ec:4f:39:40:60:d0:89: 2d:ab:72:e3:d7:56:31:bd:cf:3a:e2:3f:2e:ae:93:32:ba:68: ba:67:cd:91:4e:9c:c8:aa:cc:b8:ab:bc:a5:2d:ed:0f:20:8d: 8a:66:11:dc:74:ac:08:a3:e3:7b:af:d9:30:3a:6a:a6:2e:1f: 13:6e:4c:59:02:ac:90:93:ff:0b:f7:3b:ac:15:90:f0:d8:ec: c4:27:8d:24:26:00:6c:c1:73:b2:ba:e3:3a:7f:0f:41:0e:4f: ec:b7:87:b4:55:f3:4b:aa:0a:24:6d:c8:1e:7b:02:12:1f:17: d8:ad:45:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fiJ8OpVceKRCtZS1mtR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTc1OTBhM2Q0NWQ4NWM1ZjZhMmY1ZTFjYWViMGMxMDEwYjRkNWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2PIsXzgUavpd4ZYx8RfzF6MLuvX zd9E8VNlrVH0Wjdth+3Pxzdp4rEuFO5HQ8sr9LXFUeMmcdtBLKUGZYMSwj5RkFT+ dPec/ieAoBIz/qXWJRzxyVqWBs0CHtAwFTFSWJWK2DCVUEsF8CWzchH4JAvK9xRu OSGmk1DxzroPzCW2Qw4+XRA28usFC+8S+NbJP2tTGFhTJngbgOf1+1wMQERCwbpn bm3nMiMiBOjYobUasmYXaAtnKEBU9QBOFCtRrY8cN48c48jF0xLPqeYmr0n1CLTS tweSz8V9+s0b+0RUR+eGFfa/1glcm36YZ18bKzzK3jwjSWZHr+OpDG3l7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAp1kKPUXYXF9qL14crrDBAQtNX3MB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvQ25XUW85UmRoY1gyb3ZYaHl1c01FQkMwMWZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbfPMA0G CSqGSIb3DQEBCwUAA4IBAQC0TF6MtriIS6a8c7Uee7JgfoOjnpPSNSJHmVJhIit9 JBjqjcT4IbXylfxGZmZmtUVvoM1AyqPaKrBHP07s2TTvqCfiShRlWRCHoM7s+7/4 HtWqedyCxbeAPqEBFaPlMP8igkwXkyifsecg8J1rEAl9JjkSPkM59b5hgKU382In CscFsJS3Sd3MLexPOUBg0Iktq3Lj11Yxvc864j8urpMyumi6Z82RTpzIqsy4q7yl Le0PII2KZhHcdKwIo+N7r9kwOmqmLh8TbkxZAqyQk/8L9zusFZDw2OzEJ40kJgBs wXOyuuM6fw9BDk/st4e0VfNLqgokbcgeewISHxfYrUWQ -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:53 2026 by rpki-client