This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/CvAwcxB4NQhTMik421cY6D4GJSQ.roa File: CvAwcxB4NQhTMik421cY6D4GJSQ.roa (raw, json) Hash identifier: bDEysHdEoYRzyx+ZtQs8J1SFqsQ1uvog9sHvqZgzUSw= Subject key identifier: 0A:F0:30:73:10:78:35:08:53:32:29:38:DB:57:18:E8:3E:06:25:24 Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e Certificate serial: 019B7DCA7DF34909DAFF9906D5DF3203DEA1 Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/CvAwcxB4NQhTMik421cY6D4GJSQ.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209085 IP address blocks: 195.80.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:7d:f3:49:09:da:ff:99:06:d5:df:32:03:de:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0af030731078350853322938db5718e83e062524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:47:bb:04:5c:0b:b7:85:ce:9a:4a:27:46: cb:b0:87:d3:4f:f0:1e:e8:90:f7:dc:d3:4a:01:a9: 3f:11:9b:0e:b1:a5:d9:f3:8c:c5:d2:78:56:3f:87: a2:2c:f5:52:48:2d:ad:54:2f:c4:14:92:85:9d:e5: bc:38:53:20:cf:42:9c:44:cc:de:5f:69:b6:ab:97: e6:b5:1f:fe:56:19:e3:aa:63:a4:3e:33:70:91:6e: a8:8a:ea:d1:a6:22:96:c4:5d:fa:fe:7b:cb:c1:4c: 38:cd:b9:e7:0b:7c:1a:47:46:47:13:18:04:75:51: b6:8a:ff:21:f2:dd:59:85:81:2e:45:7e:26:d6:83: 22:a1:31:f5:71:98:ec:20:6e:bd:63:78:49:e0:f7: 2b:d8:fe:b7:7e:c0:aa:c5:28:dc:14:ed:67:7a:5d: 16:79:47:a0:7f:da:92:82:f9:78:a0:a6:fc:fd:da: 27:96:09:7a:13:a1:31:6d:05:6b:0a:64:d1:40:4c: e0:97:9a:3e:f5:0a:a2:22:98:e2:29:b4:42:4f:ab: 56:06:3c:f3:84:88:fe:42:61:4e:67:07:eb:e9:4c: d7:49:57:51:d7:d7:60:5b:9c:a9:fc:38:e6:1d:ec: 2b:6c:d2:68:92:21:5d:37:b8:13:a1:bb:d0:b4:60: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F0:30:73:10:78:35:08:53:32:29:38:DB:57:18:E8:3E:06:25:24 X509v3 Authority Key Identifier: keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/CvAwcxB4NQhTMik421cY6D4GJSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.80.44.0/22 Signature Algorithm: sha256WithRSAEncryption 58:cd:1c:b6:3c:73:a8:ae:9c:1e:28:17:5c:8a:bc:6f:e0:02: 47:ee:63:75:95:5f:7f:d1:8f:be:4a:96:3a:10:3d:0e:0c:97: a8:d5:08:a0:f2:42:55:3f:56:df:04:6d:1c:b1:bf:c1:16:27: 00:2c:11:34:8d:a4:f2:f1:b5:b0:9d:d7:d1:2a:46:3a:c5:5a: 58:85:91:34:f7:d5:88:f3:9a:b9:0e:a9:aa:f6:ef:da:e4:25: 17:d4:ba:ed:0c:43:1d:40:6b:1b:82:5b:ca:e7:19:68:be:d2: ac:4e:db:9f:7a:70:a1:2c:5e:62:f4:bb:69:e7:c0:e9:82:63: d8:99:70:82:8d:70:87:3b:df:20:37:3d:02:eb:ee:81:d6:db: 58:6a:4c:49:8c:12:a8:ff:e8:e8:86:d3:e2:1c:10:44:57:42: b1:1a:35:50:e7:b6:d5:6f:d2:2b:14:c7:23:0c:b9:12:0f:b4: da:df:1c:f4:19:7f:2d:e2:59:ff:49:24:bc:b7:96:08:11:09: ee:fa:62:ab:11:42:b1:51:bb:ac:09:68:fd:90:e6:0c:2a:34: 3b:88:4a:6d:8c:14:94:47:2c:1b:f3:d1:78:85:74:6e:d2:85: 03:a6:6f:2d:d9:d3:eb:63:3a:c4:ef:3a:b4:e1:75:4b:80:9a: 15:6d:93:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yn3zSQna/5kG1d8yA96hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmMyYjczMDAwNDA2ODI0ZGZiYzdhZTM4ODZlYjc4Njdm OGVjNmUwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWYwMzA3MzEwNzgzNTA4NTMzMjI5MzhkYjU3MThlODNlMDYyNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX9HuwRcC7eFzppKJ0bLsIfTT/Ae 6JD33NNKAak/EZsOsaXZ84zF0nhWP4eiLPVSSC2tVC/EFJKFneW8OFMgz0KcRMze X2m2q5fmtR/+VhnjqmOkPjNwkW6oiurRpiKWxF36/nvLwUw4zbnnC3waR0ZHExgE dVG2iv8h8t1ZhYEuRX4m1oMioTH1cZjsIG69Y3hJ4Pcr2P63fsCqxSjcFO1nel0W eUegf9qSgvl4oKb8/donlgl6E6ExbQVrCmTRQEzgl5o+9QqiIpjiKbRCT6tWBjzz hIj+QmFOZwfr6UzXSVdR19dgW5yp/DjmHewrbNJokiFdN7gTobvQtGDC7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFArwMHMQeDUIUzIpONtXGOg+BiUkMB8GA1UdIwQY MBaAFPYsK3MABAaCTfvHrjiG63hn+OxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYt NTZlYmY4MjlkNmIyLzEvQ3ZBd2N4QjROUWhUTWlrNDIxY1k2RDRHSlNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYtNTZlYmY4MjlkNmIy LzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw1AsMA0G CSqGSIb3DQEBCwUAA4IBAQBYzRy2PHOorpweKBdcirxv4AJH7mN1lV9/0Y++SpY6 ED0ODJeo1Qig8kJVP1bfBG0csb/BFicALBE0jaTy8bWwndfRKkY6xVpYhZE099WI 85q5Dqmq9u/a5CUX1LrtDEMdQGsbglvK5xlovtKsTtufenChLF5i9Ltp58DpgmPY mXCCjXCHO98gNz0C6+6B1ttYakxJjBKo/+johtPiHBBEV0KxGjVQ57bVb9IrFMcj DLkSD7Ta3xz0GX8t4ln/SSS8t5YIEQnu+mKrEUKxUbusCWj9kOYMKjQ7iEptjBSU Rywb89F4hXRu0oUDpm8t2dPrYzrE7zq04XVLgJoVbZOO -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:39 2026 by rpki-client