This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/CvtOzQgg0yU5uNiDJv9sRE54F7w.roa File: CvtOzQgg0yU5uNiDJv9sRE54F7w.roa (raw, json) Hash identifier: /RWVX+MB4g62z+EInyoLc3Ee/IcQswcuywMSa8ZRlSI= Subject key identifier: 0A:FB:4E:CD:08:20:D3:25:39:B8:D8:83:26:FF:6C:44:4E:78:17:BC Certificate issuer: /CN=2c73ef081e2d5731c445743973a96abfdeb142cb Certificate serial: 019B7834C14746E5A7315F102489E3CF1DB6 Authority key identifier: 2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/CvtOzQgg0yU5uNiDJv9sRE54F7w.roa Signing time: Thu 01 Jan 2026 06:18:01 +0000 ROA not before: Thu 01 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28800 IP address blocks: 193.41.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.mft rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c1:47:46:e5:a7:31:5f:10:24:89:e3:cf:1d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c73ef081e2d5731c445743973a96abfdeb142cb Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0afb4ecd0820d32539b8d88326ff6c444e7817bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:18:1c:6f:ff:97:8a:77:8e:20:91:f6:9a:0f: ad:0d:e8:8b:b1:13:dc:98:4e:9e:3a:f0:d6:69:6b: aa:b4:b6:29:62:ca:53:c9:7d:2b:d8:13:f5:e7:47: b6:89:60:74:0d:cf:45:ec:08:b6:77:fe:6b:6d:91: 51:ea:9b:f3:a5:f8:50:7b:4d:57:8e:14:06:b9:ca: 98:23:b5:af:63:b9:0d:6f:56:4f:63:ed:07:89:da: b4:d0:86:77:3a:2f:da:55:4d:65:14:af:2f:92:a3: 81:da:e5:ea:93:32:6b:e5:4e:ee:b7:84:59:b6:a4: 85:32:4d:cd:a4:cf:9d:8a:f1:bb:fb:dd:68:40:fb: 27:7b:65:0a:9c:91:a0:e6:cc:fb:14:53:fb:ef:25: c7:11:7d:d7:07:7a:18:fc:1f:a4:3f:0f:89:ac:3d: 25:c0:7a:dd:7a:8c:6f:da:c3:11:49:fa:41:2b:29: 69:fb:e0:87:c9:b2:15:a7:bd:09:3d:f0:54:46:23: 9a:eb:71:6e:f0:27:0f:35:4f:ae:50:4e:fa:57:99: 83:1a:5c:ac:ca:94:37:9d:a1:a9:6e:f2:c2:46:8f: 62:62:72:43:d4:c8:d2:08:61:27:a1:92:10:b4:d1: a7:c1:f4:3a:27:52:17:5d:07:1b:ea:cd:e7:ae:04: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FB:4E:CD:08:20:D3:25:39:B8:D8:83:26:FF:6C:44:4E:78:17:BC X509v3 Authority Key Identifier: keyid:2C:73:EF:08:1E:2D:57:31:C4:45:74:39:73:A9:6A:BF:DE:B1:42:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHPvCB4tVzHERXQ5c6lqv96xQss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/CvtOzQgg0yU5uNiDJv9sRE54F7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f78d7d-44f8-4099-9a12-6db826b87994/1/LHPvCB4tVzHERXQ5c6lqv96xQss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.140.0/22 Signature Algorithm: sha256WithRSAEncryption 56:88:dd:41:13:6f:c8:dc:fe:91:e7:c2:4f:da:65:96:31:92: 0c:bf:f2:0d:d7:4c:0c:32:73:a8:d4:2a:86:bc:09:36:bd:80: f4:a7:96:4e:71:e4:f7:ab:7f:86:bd:07:7c:db:74:7a:82:92: 9d:9e:6e:af:d3:e7:3c:86:24:1a:53:70:2c:8c:a4:ff:d1:6f: 89:1d:4d:cd:65:b0:15:a7:a7:fa:3f:f9:4e:c1:dd:f3:68:56: 12:d0:13:70:56:cd:23:0c:14:d3:80:24:1f:5e:64:41:ee:58: 3d:3c:c6:70:ce:ac:50:d5:50:3d:dc:d9:1a:f8:4c:da:f8:f5: 78:2d:7f:43:d6:3f:f0:98:06:55:f9:e2:c0:8b:e3:e2:e8:29: 45:c7:c3:74:43:c2:55:96:f3:27:fe:68:b8:22:4f:48:aa:49: 1d:b7:e5:92:a7:0e:dc:84:87:c9:92:e9:47:52:8b:1a:ee:8c: 90:88:e6:84:ec:b1:cf:42:27:fd:03:16:21:16:49:2b:66:e5: 84:d0:f7:23:ac:99:e4:7f:d1:09:55:3f:0c:8c:a0:f2:dd:63: b8:64:cb:18:d8:fb:09:ff:dc:06:a1:78:41:f6:88:1f:c4:81: a6:97:20:08:d3:e5:b8:65:9b:64:4c:27:cf:6a:c7:36:e5:17: d7:e9:af:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NMFHRuWnMV8QJInjzx22MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzNlZjA4MWUyZDU3MzFjNDQ1NzQzOTczYTk2YWJmZGVi MTQyY2IwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWZiNGVjZDA4MjBkMzI1MzliOGQ4ODMyNmZmNmM0NDRlNzgxN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBgcb/+XineOIJH2mg+tDeiLsRPc mE6eOvDWaWuqtLYpYspTyX0r2BP150e2iWB0Dc9F7Ai2d/5rbZFR6pvzpfhQe01X jhQGucqYI7WvY7kNb1ZPY+0Hidq00IZ3Oi/aVU1lFK8vkqOB2uXqkzJr5U7ut4RZ tqSFMk3NpM+divG7+91oQPsne2UKnJGg5sz7FFP77yXHEX3XB3oY/B+kPw+JrD0l wHrdeoxv2sMRSfpBKylp++CHybIVp70JPfBURiOa63Fu8CcPNU+uUE76V5mDGlys ypQ3naGpbvLCRo9iYnJD1MjSCGEnoZIQtNGnwfQ6J1IXXQcb6s3nrgSVmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAr7Ts0IINMlObjYgyb/bEROeBe8MB8GA1UdIwQY MBaAFCxz7wgeLVcxxEV0OXOpar/esULLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhQdkNCNHRWekhFUlhRNWM2bHF2OTZ4UXNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mNzhkN2QtNDRmOC00MDk5LTlhMTIt NmRiODI2Yjg3OTk0LzEvQ3Z0T3pRZ2cweVU1dU5pREp2OXNSRTU0Rjd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mNzhkN2QtNDRmOC00MDk5LTlhMTItNmRiODI2Yjg3OTk0 LzEvTEhQdkNCNHRWekhFUlhRNWM2bHF2OTZ4UXNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSmMMA0G CSqGSIb3DQEBCwUAA4IBAQBWiN1BE2/I3P6R58JP2mWWMZIMv/IN10wMMnOo1CqG vAk2vYD0p5ZOceT3q3+GvQd823R6gpKdnm6v0+c8hiQaU3AsjKT/0W+JHU3NZbAV p6f6P/lOwd3zaFYS0BNwVs0jDBTTgCQfXmRB7lg9PMZwzqxQ1VA93Nka+Eza+PV4 LX9D1j/wmAZV+eLAi+Pi6ClFx8N0Q8JVlvMn/mi4Ik9Iqkkdt+WSpw7chIfJkulH Uosa7oyQiOaE7LHPQif9AxYhFkkrZuWE0PcjrJnkf9EJVT8MjKDy3WO4ZMsY2PsJ /9wGoXhB9ogfxIGmlyAI0+W4ZZtkTCfPasc25RfX6a8s -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:30 2026 by rpki-client