This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/CvSQt69yariNUKKDqC1XPhdiuj8.roa File: CvSQt69yariNUKKDqC1XPhdiuj8.roa (raw, json) Hash identifier: pwys1feU+wf6rJfc3msKGN9u6EyFPrysSrktRwzgGX4= Subject key identifier: 0A:F4:90:B7:AF:72:6A:B8:8D:50:A2:83:A8:2D:57:3E:17:62:BA:3F Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019B7EA6BCDD764800B8BF29F184A6609870 Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/CvSQt69yariNUKKDqC1XPhdiuj8.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 147.189.216.0/22 maxlen: 32 147.189.220.0/22 maxlen: 32 193.5.16.0/23 maxlen: 32 193.5.18.0/23 maxlen: 32 2a0d:3dc0::/30 maxlen: 128 2a0d:3dc4::/30 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:bc:dd:76:48:00:b8:bf:29:f1:84:a6:60:98:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0af490b7af726ab88d50a283a82d573e1762ba3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:75:55:3a:61:72:63:7e:6d:12:cc:ae:9d:e5: db:77:48:34:47:9d:45:e3:8d:31:26:1e:63:0e:c9: 2f:70:77:01:b6:5c:66:c1:0b:04:9b:5e:92:07:06: 57:d8:5f:1c:38:a0:31:b9:d0:bd:6a:8c:8c:ec:f3: ba:60:e0:23:40:60:1e:87:e0:60:3d:74:4f:c8:23: fd:e0:45:67:6d:00:ab:14:5c:b2:11:14:4d:5d:82: 61:56:00:81:75:74:c7:48:b6:0e:de:f8:4e:46:d9: 01:c6:35:c8:37:c6:f0:55:74:04:fb:36:2d:11:f3: 3c:cc:0f:54:ac:8f:16:99:64:78:ec:83:80:3d:e0: e2:d8:38:cb:6a:29:06:3a:f5:64:f8:4f:85:8f:b8: 14:1c:48:28:99:ea:ec:d5:be:f5:36:05:0d:07:86: 41:f3:55:d0:d9:32:06:7c:54:e7:76:99:a5:84:af: 4e:ad:09:bb:a4:6d:ff:01:d1:bd:aa:93:96:30:5f: 5e:74:3a:21:c6:60:62:2c:b8:89:9e:a5:1e:05:92: dd:16:a9:13:ca:06:4d:53:9b:54:a5:bf:0e:de:e7: 0a:0a:b2:1f:f8:cf:f5:ba:0e:16:0c:b4:5e:73:9f: da:ef:4e:45:cf:26:ef:4a:fc:1b:b1:c5:32:82:d7: b9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F4:90:B7:AF:72:6A:B8:8D:50:A2:83:A8:2D:57:3E:17:62:BA:3F X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/CvSQt69yariNUKKDqC1XPhdiuj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.216.0/21 193.5.16.0/22 IPv6: 2a0d:3dc0::/29 Signature Algorithm: sha256WithRSAEncryption 59:5b:8f:56:72:76:e9:6b:9a:3c:e5:ba:5f:cf:11:a8:e4:0a: 59:98:69:d6:e2:b1:26:72:59:d3:70:b0:71:4d:3a:19:33:98: d5:79:22:0d:3b:39:44:90:bb:3c:c9:54:5d:5c:00:26:c1:4b: a9:22:21:06:e6:24:47:98:62:b6:04:6a:ce:68:bc:bb:3d:b6: cf:e6:e4:af:17:7a:d9:ca:e7:a7:74:ec:b8:58:c1:bd:be:1e: cd:28:e1:d1:d6:5c:ed:dc:d9:dc:27:fb:f1:fe:af:8a:dd:fe: 48:b9:bb:cd:4d:ce:6b:f5:0c:22:13:59:ad:ca:9c:2c:54:09: 7d:8e:a7:45:f3:78:9d:f7:01:3a:c8:24:fa:07:b8:59:21:98: ca:5e:72:85:f9:ea:ea:af:9a:52:ea:e8:8d:7b:2b:1a:25:5b: eb:e5:09:f0:48:eb:52:48:5c:00:8a:cd:28:73:f1:99:7f:f9: 81:a2:0e:c0:41:31:94:ba:27:62:60:1c:41:fc:4c:6e:b9:9f: 68:44:ce:88:12:8e:91:1a:4e:58:b1:42:5f:b1:a4:4c:4e:5b: 83:bf:33:62:30:9c:d7:48:6c:21:2c:0f:3e:ba:a6:f0:d4:b1: 75:f5:c3:78:5c:66:51:fb:5d:41:14:cc:82:96:c2:34:df:3c: cf:91:84:42 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+przddkgAuL8p8YSmYJhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWY0OTBiN2FmNzI2YWI4OGQ1MGEyODNhODJkNTczZTE3NjJiYTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3VVOmFyY35tEsyuneXbd0g0R51F 440xJh5jDskvcHcBtlxmwQsEm16SBwZX2F8cOKAxudC9aoyM7PO6YOAjQGAeh+Bg PXRPyCP94EVnbQCrFFyyERRNXYJhVgCBdXTHSLYO3vhORtkBxjXIN8bwVXQE+zYt EfM8zA9UrI8WmWR47IOAPeDi2DjLaikGOvVk+E+Fj7gUHEgomers1b71NgUNB4ZB 81XQ2TIGfFTndpmlhK9OrQm7pG3/AdG9qpOWMF9edDohxmBiLLiJnqUeBZLdFqkT ygZNU5tUpb8O3ucKCrIf+M/1ug4WDLRec5/a705FzybvSvwbscUygte5SQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAr0kLevcmq4jVCig6gtVz4XYro/MB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvQ3ZTUXQ2OXlhcmlOVUtLRHFDMVhQaGRpdWo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDk73YAwQC wQUQMA0EAgACMAcDBQMqDT3AMA0GCSqGSIb3DQEBCwUAA4IBAQBZW49Wcnbpa5o8 5bpfzxGo5ApZmGnW4rEmclnTcLBxTToZM5jVeSINOzlEkLs8yVRdXAAmwUupIiEG 5iRHmGK2BGrOaLy7PbbP5uSvF3rZyuendOy4WMG9vh7NKOHR1lzt3NncJ/vx/q+K 3f5IubvNTc5r9QwiE1mtypwsVAl9jqdF83id9wE6yCT6B7hZIZjKXnKF+erqr5pS 6uiNeysaJVvr5QnwSOtSSFwAis0oc/GZf/mBog7AQTGUuidiYBxB/ExuuZ9oRM6I Eo6RGk5YsUJfsaRMTluDvzNiMJzXSGwhLA8+uqbw1LF19cN4XGZR+11BFMyClsI0 3zzPkYRC -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:04 2026 by rpki-client