This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa File: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (raw, json) Hash identifier: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU= Subject key identifier: 0A:EC:C0:01:4D:E1:D0:E4:C1:3A:BF:F6:98:4B:F8:44:EB:C2:9C:69 Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019B76EB3428DFE3CE5CAAA31BDED2C00CDF Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47595 IP address blocks: 31.177.86.0/23 maxlen: 24 2a02:2090:9800::/48 maxlen: 48 2a02:2090:a800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:34:28:df:e3:ce:5c:aa:a3:1b:de:d2:c0:0c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aecc0014de1d0e4c13abff6984bf844ebc29c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:56:2c:33:4a:b9:b7:23:b1:33:c2:c2:16: 0a:ab:a8:20:fe:9b:6d:30:a6:9a:33:49:f8:ce:86: bf:50:db:3a:8b:4b:f4:56:ce:86:73:35:22:43:9b: 29:0a:1f:4a:93:bf:c2:c5:3c:6a:7e:d0:23:09:8f: fa:0d:93:b8:f5:f3:b1:59:01:32:79:79:ac:d3:ac: b5:11:88:eb:b4:59:79:7b:3e:0e:81:c2:9e:4b:55: 15:d6:10:77:ee:59:ed:03:06:e1:c7:d4:4d:e6:53: 0d:35:b0:1a:24:00:ff:da:63:e3:28:35:ac:07:2b: 44:f3:ff:37:14:26:15:1f:09:23:36:0b:09:8b:4b: fa:f4:55:06:b3:a5:20:a7:e7:a4:42:1c:47:08:4b: ae:f7:fc:3f:55:57:8c:b8:f3:45:0a:31:cb:25:e4: 94:6b:64:ca:0e:1c:db:ef:a9:f8:be:3c:2e:1a:c5: b9:20:cf:7d:64:a9:06:82:9b:69:62:51:a0:12:6d: 52:f8:54:be:e5:b0:b4:d7:70:77:12:e7:fb:ac:aa: af:fe:83:73:98:6a:65:60:62:56:03:8c:1f:8e:05: e4:dc:bd:a9:4e:f3:16:b8:89:12:ff:63:cc:39:9a: 11:91:87:14:d5:e3:4d:2d:96:dc:03:c2:bb:39:62: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:EC:C0:01:4D:E1:D0:E4:C1:3A:BF:F6:98:4B:F8:44:EB:C2:9C:69 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.86.0/23 IPv6: 2a02:2090:9800::/48 2a02:2090:a800::/48 Signature Algorithm: sha256WithRSAEncryption 28:f5:63:79:44:2a:8f:22:85:82:99:6b:02:c8:8a:f4:cd:aa: b6:47:15:f9:34:1b:90:30:03:21:55:d2:2f:68:40:0b:4e:01: 9d:7e:cb:dd:09:7a:00:83:9d:76:59:8a:30:23:bb:78:84:6c: 62:b1:5e:3a:7c:0a:c4:99:52:c5:53:7f:73:04:07:b0:96:80: 9c:62:86:58:2c:c6:41:a4:16:14:b1:27:d3:95:e2:eb:87:e6: 81:2f:25:a0:d8:41:fd:b3:77:2e:df:20:71:c5:8f:5b:c7:f4: b6:8f:84:40:0a:f0:19:55:aa:41:96:bb:c6:00:07:13:c7:1e: 81:f9:ca:40:8d:12:19:14:21:bb:55:2b:d4:09:55:96:5a:02: 9a:b4:58:c1:e2:42:09:86:f5:90:50:0e:fc:ab:79:df:c6:71: d7:d1:44:bf:1d:28:9e:a0:99:c7:e4:36:ae:d1:36:85:33:78: ac:7a:d6:41:47:c3:90:18:34:25:36:a1:a0:e0:e5:21:52:cc: 05:d4:5d:14:cb:62:38:74:7f:31:09:98:51:20:c3:8d:8d:34: 59:f3:d0:12:35:a4:22:ba:31:14:5f:0e:28:a1:c1:9e:c1:27: 73:46:fb:25:1a:c0:df:e6:5f:fa:03:05:f8:d2:fc:66:4a:84: 22:8e:2d:ac -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt26zQo3+POXKqjG97SwAzfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWVjYzAwMTRkZTFkMGU0YzEzYWJmZjY5ODRiZjg0NGViYzI5YzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr1WLDNKubcjsTPCwhYKq6gg/ptt MKaaM0n4zoa/UNs6i0v0Vs6GczUiQ5spCh9Kk7/CxTxqftAjCY/6DZO49fOxWQEy eXms06y1EYjrtFl5ez4OgcKeS1UV1hB37lntAwbhx9RN5lMNNbAaJAD/2mPjKDWs BytE8/83FCYVHwkjNgsJi0v69FUGs6Ugp+ekQhxHCEuu9/w/VVeMuPNFCjHLJeSU a2TKDhzb76n4vjwuGsW5IM99ZKkGgptpYlGgEm1S+FS+5bC013B3Euf7rKqv/oNz mGplYGJWA4wfjgXk3L2pTvMWuIkS/2PMOZoRkYcU1eNNLZbcA8K7OWLdowIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFArswAFN4dDkwTq/9phL+ETrwpxpMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvQ3V6QUFVM2gwT1RCT3JfMm1FdjRST3ZDbkdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQBH7FWMBgE AgACMBIDBwAqAiCQmAADBwAqAiCQqAAwDQYJKoZIhvcNAQELBQADggEBACj1Y3lE Ko8ihYKZawLIivTNqrZHFfk0G5AwAyFV0i9oQAtOAZ1+y90JegCDnXZZijAju3iE bGKxXjp8CsSZUsVTf3MEB7CWgJxihlgsxkGkFhSxJ9OV4uuH5oEvJaDYQf2zdy7f IHHFj1vH9LaPhEAK8BlVqkGWu8YABxPHHoH5ykCNEhkUIbtVK9QJVZZaApq0WMHi QgmG9ZBQDvyred/GcdfRRL8dKJ6gmcfkNq7RNoUzeKx61kFHw5AYNCU2oaDg5SFS zAXUXRTLYjh0fzEJmFEgw42NNFnz0BI1pCK6MRRfDiihwZ7BJ3NG+yUawN/mX/oD BfjS/GZKhCKOLaw= -----END CERTIFICATE-----Generated at Tue Jan 27 19:16:14 2026 by rpki-client