This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CvJoVDS0U4UiVrwY4Rr4f26Uj54.roa File: CvJoVDS0U4UiVrwY4Rr4f26Uj54.roa (raw, json) Hash identifier: /khke7IeWSlLq/g6n6f0wKTez8TBCuOE3ScxQSPNJGs= Subject key identifier: 0A:F2:68:54:34:B4:53:85:22:56:BC:18:E1:1A:F8:7F:6E:94:8F:9E Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019C00A4919DEB095B7D7E567685DF878086 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CvJoVDS0U4UiVrwY4Rr4f26Uj54.roa Signing time: Tue 27 Jan 2026 18:08:31 +0000 ROA not before: Tue 27 Jan 2026 18:08:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393942 IP address blocks: 45.151.143.0/24 maxlen: 24 89.106.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Feb 2026 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:a4:91:9d:eb:09:5b:7d:7e:56:76:85:df:87:80:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 27 18:08:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0af2685434b453852256bc18e11af87f6e948f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d6:16:99:42:5e:da:21:7f:c6:97:71:2a:6d: ab:cd:07:33:aa:ce:81:c0:a2:9d:0a:35:6e:87:4b: 7c:73:ed:67:ff:1b:97:cf:5b:2e:a8:fd:1c:77:41: be:5b:4c:95:94:41:8d:4c:9c:68:e1:59:d6:05:b1: c7:37:7a:10:49:33:44:19:21:6c:3e:87:90:59:d3: 54:bd:ce:56:f4:61:75:5c:22:50:d8:51:24:6a:b0: 97:ad:1b:c3:6e:14:b3:fe:d5:9e:7b:cb:b0:d4:23: b9:e0:5f:b0:39:86:05:59:2a:61:97:25:37:b8:62: e4:63:5e:17:71:b9:0e:48:dc:5f:0e:c0:2a:c2:89: 7f:de:c0:a6:76:37:90:83:c9:11:e3:5f:76:46:ae: f3:85:ac:11:fd:2b:1a:df:0b:4d:b8:1e:74:41:30: 38:11:b3:d7:5a:73:67:d4:5e:a9:f2:f4:47:86:e0: be:42:63:9d:0b:d7:70:2b:3b:e0:60:8e:ab:d5:71: 3b:6a:18:0f:9b:0b:68:74:05:e4:d8:2f:24:58:f1: cd:1f:16:0a:10:a1:00:61:c1:54:3f:55:9c:fe:8c: 5e:48:45:f7:62:71:35:2a:bc:01:e5:18:0a:b4:23: 85:63:78:ba:71:e7:03:3c:f7:81:fa:58:37:38:e5: 65:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:68:54:34:B4:53:85:22:56:BC:18:E1:1A:F8:7F:6E:94:8F:9E X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CvJoVDS0U4UiVrwY4Rr4f26Uj54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.143.0/24 89.106.15.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:1f:51:06:4a:12:24:e0:76:a8:2c:1a:0e:e7:f5:41:c5:91: 0e:06:d6:94:d1:aa:e2:61:5e:61:3f:0d:d5:b8:3c:80:73:be: b3:d7:60:c8:b7:39:36:0c:32:4a:ae:34:fa:8c:21:57:65:ed: 0c:a4:44:cd:82:14:4b:f0:16:f4:35:c7:3a:24:cf:8e:21:5e: a6:19:77:89:4f:32:a3:e1:09:9e:cf:fb:f6:82:f8:ee:c2:5d: ee:8d:9b:64:38:e2:4b:8b:02:cf:b8:e0:e3:34:44:b0:8a:90: 27:eb:99:33:09:61:ae:65:74:6a:99:d3:29:eb:24:2c:89:a6: 0d:67:a2:55:db:77:24:09:56:48:81:9d:da:09:23:f9:ce:67: 47:b8:ec:ef:26:b5:45:4b:8b:90:88:46:5d:01:c7:14:ee:88: 91:a5:22:1f:6d:28:e8:aa:37:30:db:d0:24:9f:62:a3:a9:10: cb:93:36:91:20:d1:c8:ee:d4:8a:84:08:c9:37:58:6c:ad:34: 22:52:c8:ce:92:34:4d:33:0a:6f:5c:f3:05:02:65:67:0d:52: 52:31:6d:c7:98:b0:28:49:a7:e0:67:be:61:50:ed:79:1d:0a: 66:7e:63:b6:49:0f:55:23:98:84:98:6a:e0:a6:05:66:3a:cb: 7e:8c:47:7d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwApJGd6wlbfX5WdoXfh4CGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTI3MTgwODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWYyNjg1NDM0YjQ1Mzg1MjI1NmJjMThlMTFhZjg3ZjZlOTQ4ZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNYWmUJe2iF/xpdxKm2rzQczqs6B wKKdCjVuh0t8c+1n/xuXz1suqP0cd0G+W0yVlEGNTJxo4VnWBbHHN3oQSTNEGSFs PoeQWdNUvc5W9GF1XCJQ2FEkarCXrRvDbhSz/tWee8uw1CO54F+wOYYFWSphlyU3 uGLkY14XcbkOSNxfDsAqwol/3sCmdjeQg8kR4192Rq7zhawR/Ssa3wtNuB50QTA4 EbPXWnNn1F6p8vRHhuC+QmOdC9dwKzvgYI6r1XE7ahgPmwtodAXk2C8kWPHNHxYK EKEAYcFUP1Wc/oxeSEX3YnE1KrwB5RgKtCOFY3i6cecDPPeB+lg3OOVl5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAryaFQ0tFOFIla8GOEa+H9ulI+eMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvQ3ZKb1ZEUzBVNFVpVnJ3WTRScjRmMjZVajU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZePAwQA WWoPMA0GCSqGSIb3DQEBCwUAA4IBAQCLH1EGShIk4HaoLBoO5/VBxZEOBtaU0ari YV5hPw3VuDyAc76z12DItzk2DDJKrjT6jCFXZe0MpETNghRL8Bb0Ncc6JM+OIV6m GXeJTzKj4Qmez/v2gvjuwl3ujZtkOOJLiwLPuODjNESwipAn65kzCWGuZXRqmdMp 6yQsiaYNZ6JV23ckCVZIgZ3aCSP5zmdHuOzvJrVFS4uQiEZdAccU7oiRpSIfbSjo qjcw29Akn2KjqRDLkzaRINHI7tSKhAjJN1hsrTQiUsjOkjRNMwpvXPMFAmVnDVJS MW3HmLAoSafgZ75hUO15HQpmfmO2SQ9VI5iEmGrgpgVmOst+jEd9 -----END CERTIFICATE-----Generated at Sat Jan 31 11:51:57 2026 by rpki-client