This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/CLncwoK6CeX2DrcZpPqq6Z8pS20.roa File: CLncwoK6CeX2DrcZpPqq6Z8pS20.roa (raw, json) Hash identifier: SMpNvtdgZOEYKhAdG24xw7Idoi3bx91mSGlxUH7c2dc= Subject key identifier: 08:B9:DC:C2:82:BA:09:E5:F6:0E:B7:19:A4:FA:AA:E9:9F:29:4B:6D Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606 Certificate serial: 019B7E384220BD61F5BA9B4B6795CD06915C Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/CLncwoK6CeX2DrcZpPqq6Z8pS20.roa Signing time: Fri 02 Jan 2026 10:19:34 +0000 ROA not before: Fri 02 Jan 2026 10:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41132 IP address blocks: 85.237.128.0/19 maxlen: 19 212.33.160.0/19 maxlen: 19 217.145.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:42:20:bd:61:f5:ba:9b:4b:67:95:cd:06:91:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5164534979e60a564701232b2e5200889542606 Validity Not Before: Jan 2 10:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08b9dcc282ba09e5f60eb719a4faaae99f294b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:28:a1:be:77:48:cb:40:dc:69:42:91:ef: 6a:1c:cb:35:74:c9:50:08:02:5d:e7:80:5b:43:fb: a3:b7:9b:9c:3c:b5:c9:df:d1:ce:f4:92:f6:2e:93: 59:41:79:71:cf:53:8b:1d:33:e4:14:1e:85:c0:92: 91:b3:16:9d:8f:d8:d0:c9:b2:fd:1f:c2:0e:c1:5f: 32:18:9f:01:a6:55:16:24:50:bc:26:25:3a:eb:b9: 0f:24:6c:b3:a5:1a:33:ca:4e:9c:c7:95:ec:f7:61: c2:6f:5d:5a:c5:f8:10:66:36:17:54:9a:2a:39:f4: 51:b1:cc:f8:85:8c:31:91:4f:e1:6f:2c:47:c2:b7: d7:79:55:03:cf:75:91:26:8e:b6:8a:c9:0a:27:75: f1:9c:21:80:0c:b6:bb:03:da:6b:76:9b:bd:eb:de: 33:37:ab:4f:88:7e:88:6c:47:21:e3:8b:29:6a:40: f3:45:cc:3e:53:f3:8e:5e:b2:2c:3e:fa:14:e2:ef: 2b:b5:12:d6:81:87:86:fb:42:91:ae:31:15:bd:30: ca:2d:25:66:cc:85:7f:26:0d:6f:de:e7:8c:c0:dc: 79:aa:48:ba:fa:c1:55:ba:83:af:84:22:1a:15:cf: a0:85:a1:df:e1:a0:0b:cf:9f:b5:80:d0:bc:81:70: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B9:DC:C2:82:BA:09:E5:F6:0E:B7:19:A4:FA:AA:E9:9F:29:4B:6D X509v3 Authority Key Identifier: keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/CLncwoK6CeX2DrcZpPqq6Z8pS20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.128.0/19 212.33.160.0/19 217.145.240.0/20 Signature Algorithm: sha256WithRSAEncryption 50:f5:a0:a4:04:06:7e:b2:19:42:20:f9:51:9c:00:1d:8f:92: 9c:a2:91:4e:b4:59:ab:48:eb:59:20:2d:9d:a2:8a:fa:84:cc: d8:6c:d2:4d:ba:ed:70:83:64:4e:59:ee:f4:83:7b:01:2d:89: 5c:0a:7a:94:0a:ff:2f:3d:a6:b0:d8:07:91:96:75:1a:00:72: aa:e6:4f:9a:09:a7:84:91:ae:52:06:04:3d:eb:6e:02:d6:25: fe:85:aa:14:f0:87:08:29:36:69:bb:0b:df:3c:3e:c7:f4:c4: 3f:bc:5b:68:6a:7f:01:8c:dc:fa:ec:b1:6c:63:ef:3c:a1:67: aa:bc:71:e9:a1:30:0d:0a:d9:d8:07:41:b2:86:bc:fe:c6:d8: 09:ab:50:41:b4:25:40:a1:95:40:98:4f:b4:a6:44:5c:c1:16: 7d:75:e5:60:3d:61:c6:e5:65:f6:bf:11:47:bf:a8:37:bb:f8: a9:22:4c:aa:55:e0:33:a4:57:5b:e9:0a:93:7b:0c:4c:b0:75: 9a:3f:97:87:f6:ce:10:d0:0f:92:ef:2f:89:97:54:ad:19:c3: 47:15:7e:48:ac:3f:4e:5b:3c:da:49:dc:a5:64:da:91:2f:c4: 6a:71:cc:b0:f0:39:5b:97:12:74:ad:35:06:ad:b2:10:0a:25: f6:97:bf:65 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OEIgvWH1uptLZ5XNBpFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MTY0NTM0OTc5ZTYwYTU2NDcwMTIzMmIyZTUyMDA4ODk1 NDI2MDYwHhcNMjYwMTAyMTAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGI5ZGNjMjgyYmEwOWU1ZjYwZWI3MTlhNGZhYWFlOTlmMjk0YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ8oob53SMtA3GlCke9qHMs1dMlQ CAJd54BbQ/ujt5ucPLXJ39HO9JL2LpNZQXlxz1OLHTPkFB6FwJKRsxadj9jQybL9 H8IOwV8yGJ8BplUWJFC8JiU667kPJGyzpRozyk6cx5Xs92HCb11axfgQZjYXVJoq OfRRscz4hYwxkU/hbyxHwrfXeVUDz3WRJo62iskKJ3XxnCGADLa7A9prdpu9694z N6tPiH6IbEch44spakDzRcw+U/OOXrIsPvoU4u8rtRLWgYeG+0KRrjEVvTDKLSVm zIV/Jg1v3ueMwNx5qki6+sFVuoOvhCIaFc+ghaHf4aALz5+1gNC8gXBD0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAi53MKCugnl9g63GaT6qumfKUttMB8GA1UdIwQY MBaAFOUWRTSXnmClZHASMrLlIAiJVCYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEt ZDFlZWIyOWM5NTFiLzEvQ0xuY3dvSzZDZVgyRHJjWnBQcXE2WjhwUzIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lNzdkN2ItYmMwZi00NjM1LTgxMDEtZDFlZWIyOWM5NTFi LzEvNVJaRk5KZWVZS1ZrY0JJeXN1VWdDSWxVSmdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFVe2AAwQF 1CGgAwQE2ZHwMA0GCSqGSIb3DQEBCwUAA4IBAQBQ9aCkBAZ+shlCIPlRnAAdj5Kc opFOtFmrSOtZIC2door6hMzYbNJNuu1wg2ROWe70g3sBLYlcCnqUCv8vPaaw2AeR lnUaAHKq5k+aCaeEka5SBgQ9624C1iX+haoU8IcIKTZpuwvfPD7H9MQ/vFtoan8B jNz67LFsY+88oWeqvHHpoTANCtnYB0Gyhrz+xtgJq1BBtCVAoZVAmE+0pkRcwRZ9 deVgPWHG5WX2vxFHv6g3u/ipIkyqVeAzpFdb6QqTewxMsHWaP5eH9s4Q0A+S7y+J l1StGcNHFX5IrD9OWzzaSdylZNqRL8Rqccyw8DlblxJ0rTUGrbIQCiX2l79l -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:30 2026 by rpki-client