This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/C2vGVSm17clyafIh3cV7B-ripHg.roa File: C2vGVSm17clyafIh3cV7B-ripHg.roa (raw, json) Hash identifier: KHgKAclXag7Jfkjv2JreihUKD2fJX8kZd6LM/IB1/e4= Subject key identifier: 0B:6B:C6:55:29:B5:ED:C9:72:69:F2:21:DD:C5:7B:07:EA:E2:A4:78 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808204D296D2A91F5312E816D95860 Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/C2vGVSm17clyafIh3cV7B-ripHg.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56630 IP address blocks: 46.243.0.0/24 maxlen: 24 185.37.192.0/24 maxlen: 24 185.37.193.0/24 maxlen: 24 194.79.60.0/24 maxlen: 24 194.79.61.0/24 maxlen: 24 194.79.62.0/24 maxlen: 24 194.79.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:82:04:d2:96:d2:a9:1f:53:12:e8:16:d9:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b6bc65529b5edc97269f221ddc57b07eae2a478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:64:90:80:85:76:de:8b:07:13:fa:b2:69: b0:44:fd:85:4d:81:35:c1:af:09:2f:f2:4c:05:ad: cf:70:da:5d:0d:c4:70:4d:01:fc:10:9b:ec:9b:be: 37:e1:a8:8a:f6:49:d5:44:46:17:0e:4e:3a:b1:a7: 08:07:49:96:4e:cc:d7:26:23:85:f5:81:0b:88:dd: 14:eb:be:e9:00:f8:b8:6c:42:69:ac:03:c6:ad:17: 99:9c:94:38:b0:e5:29:fa:b9:3e:eb:be:a4:6d:90: 1b:6d:38:66:90:80:7c:02:8c:f2:5a:c3:78:fc:b4: 95:3d:c9:11:ac:cc:fe:b3:f4:bd:c8:70:ec:df:a5: 12:6c:0d:c8:bc:b0:b9:25:ea:83:c8:eb:9d:2c:d8: b8:c9:86:80:b6:a3:a7:51:90:e7:2d:72:30:62:fb: 45:e7:69:cb:ea:42:29:7a:28:87:ed:e4:af:d7:95: cd:d6:b2:2c:73:0d:ae:c1:fb:6c:8b:64:9b:9a:81: 41:5d:03:83:c4:64:27:84:0b:62:6a:6a:29:25:e5: 3a:63:2a:46:6d:ff:3f:fe:04:23:8b:76:e7:c9:e0: e5:5d:c6:f8:03:e0:a9:1d:08:b7:b0:6b:2c:c7:54: ff:a4:a0:ea:cf:2f:9f:99:b8:cc:2e:46:45:78:dd: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6B:C6:55:29:B5:ED:C9:72:69:F2:21:DD:C5:7B:07:EA:E2:A4:78 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/C2vGVSm17clyafIh3cV7B-ripHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.0.0/24 185.37.192.0/23 194.79.60.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:93:7c:7a:d0:5f:11:32:1b:36:f1:04:98:14:7f:b7:10:b9: e3:a6:6c:d3:f2:09:d3:dc:13:25:38:02:b5:a7:65:1d:7d:33: 15:34:39:e9:0b:28:56:5b:41:01:67:6c:96:08:b6:0d:2b:5e: d1:52:01:63:be:9c:e5:34:b4:1e:fd:83:4a:87:2f:fb:13:49: 65:a5:16:5c:43:8e:6a:43:0c:de:13:a9:bc:d8:bf:b6:87:83: 4e:b8:c2:b8:a1:7b:9c:90:bb:6c:3e:1f:34:6d:bb:57:ac:c7: 4f:3d:e3:92:48:fc:8d:ac:76:7f:f6:da:23:40:6c:e1:0a:8d: 0c:cc:42:50:f4:02:9b:90:8a:06:8c:9f:a8:64:25:9c:3f:ac: 0b:ed:87:71:a4:b5:9b:5f:b1:d8:3d:03:64:8d:8d:70:d8:f9: 1e:cc:97:b9:06:b5:66:eb:8e:bb:4e:52:74:c3:af:fb:da:b1: 14:d2:d0:d9:c2:d0:53:60:52:d6:a6:c6:d0:06:72:83:bb:8f: 48:65:05:b2:b8:81:f6:53:fb:fd:2c:d7:5e:07:88:aa:1f:7c: 72:64:ce:fd:a5:c3:56:45:54:2e:89:30:55:d8:77:f0:cd:29: ba:12:ec:b0:cb:27:07:1e:72:28:9a:f9:f9:aa:d8:f3:b4:d8: bf:48:a2:f5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gIIE0pbSqR9TEugW2VhgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjZiYzY1NTI5YjVlZGM5NzI2OWYyMjFkZGM1N2IwN2VhZTJhNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlNkkICFdt6LBxP6smmwRP2FTYE1 wa8JL/JMBa3PcNpdDcRwTQH8EJvsm7434aiK9knVREYXDk46sacIB0mWTszXJiOF 9YELiN0U677pAPi4bEJprAPGrReZnJQ4sOUp+rk+676kbZAbbThmkIB8AozyWsN4 /LSVPckRrMz+s/S9yHDs36USbA3IvLC5JeqDyOudLNi4yYaAtqOnUZDnLXIwYvtF 52nL6kIpeiiH7eSv15XN1rIscw2uwftsi2SbmoFBXQODxGQnhAtiamopJeU6YypG bf8//gQji3bnyeDlXcb4A+CpHQi3sGssx1T/pKDqzy+fmbjMLkZFeN3s9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAtrxlUpte3JcmnyId3Fewfq4qR4MB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvQzJ2R1ZTbTE3Y2x5YWZJaDNjVjdCLXJpcEhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALvMAAwQB uSXAAwQCwk88MA0GCSqGSIb3DQEBCwUAA4IBAQCNk3x60F8RMhs28QSYFH+3ELnj pmzT8gnT3BMlOAK1p2UdfTMVNDnpCyhWW0EBZ2yWCLYNK17RUgFjvpzlNLQe/YNK hy/7E0llpRZcQ45qQwzeE6m82L+2h4NOuMK4oXuckLtsPh80bbtXrMdPPeOSSPyN rHZ/9tojQGzhCo0MzEJQ9AKbkIoGjJ+oZCWcP6wL7YdxpLWbX7HYPQNkjY1w2Pke zJe5BrVm6467TlJ0w6/72rEU0tDZwtBTYFLWpsbQBnKDu49IZQWyuIH2U/v9LNde B4iqH3xyZM79pcNWRVQuiTBV2HfwzSm6EuywyycHHnIomvn5qtjztNi/SKL1 -----END CERTIFICATE-----Generated at Tue Jan 20 07:29:52 2026 by rpki-client