This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/Cvexc6n_uaJqIFgYm7_CN9EvFWs.roa File: Cvexc6n_uaJqIFgYm7_CN9EvFWs.roa (raw, json) Hash identifier: V6TWQDQCL4p57Dn11RRTnLLY4bcDgYRYhxlGQOOXZvA= Subject key identifier: 0A:F7:B1:73:A9:FF:B9:A2:6A:20:58:18:9B:BF:C2:37:D1:2F:15:6B Certificate issuer: /CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17 Certificate serial: 019B78A215BD138C906E0DC370C590E8B80F Authority key identifier: 57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/Cvexc6n_uaJqIFgYm7_CN9EvFWs.roa Signing time: Thu 01 Jan 2026 08:17:26 +0000 ROA not before: Thu 01 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50245 IP address blocks: 91.216.220.0/24 maxlen: 24 2a13:f980::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.mft rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:15:bd:13:8c:90:6e:0d:c3:70:c5:90:e8:b8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c0bd9f8331ea8438fd2a2f671b71af4a2dec17 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0af7b173a9ffb9a26a2058189bbfc237d12f156b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:d5:3d:ea:39:75:e8:48:d7:3d:31:b8:b4: 59:fa:ab:69:e1:35:f7:32:91:cb:61:81:00:f8:d1: 5f:f4:4b:6d:4b:49:8c:e3:4b:c3:00:05:c3:f7:c5: 36:88:17:c8:d6:43:17:dc:2a:bb:ad:52:80:ee:81: 56:61:4e:a0:72:68:43:09:3e:4b:7b:f5:db:5b:0f: 02:2c:0e:89:2d:7e:81:97:39:94:57:a0:09:cd:a7: 87:34:9a:97:72:33:ad:db:2c:88:ca:83:73:47:6a: 1c:34:2a:61:12:80:58:aa:3d:81:7e:4b:b8:27:25: 61:60:ee:04:34:95:cf:95:d1:2e:f4:a0:13:a5:3a: f0:8a:99:5d:62:07:8d:a9:af:0a:2b:97:6b:cf:98: 1f:36:32:15:23:75:ce:b5:8b:71:3c:c2:c7:7f:b6: 89:94:7f:2a:61:3f:47:7d:09:8f:43:f1:57:8b:fc: 0e:8d:18:80:9f:dc:ef:78:99:2e:e5:33:35:50:ff: 0b:72:f8:f0:58:91:63:b1:c1:49:9b:f9:2d:b0:a9: 4b:c5:24:b1:9c:17:75:77:c9:f5:80:83:d2:a6:fc: 75:04:80:77:64:fa:02:37:8e:9c:15:2f:4d:53:17: cf:ae:8e:11:4a:41:62:80:23:67:61:17:e5:4c:77: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F7:B1:73:A9:FF:B9:A2:6A:20:58:18:9B:BF:C2:37:D1:2F:15:6B X509v3 Authority Key Identifier: keyid:57:C0:BD:9F:83:31:EA:84:38:FD:2A:2F:67:1B:71:AF:4A:2D:EC:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/Cvexc6n_uaJqIFgYm7_CN9EvFWs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d5e9f6-3f6d-4694-89b8-a093d100874c/1/V8C9n4Mx6oQ4_SovZxtxr0ot7Bc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.220.0/24 IPv6: 2a13:f980::/29 Signature Algorithm: sha256WithRSAEncryption bf:aa:d0:92:41:c8:09:4e:1a:99:05:50:c8:53:35:3a:57:e2: 45:d6:85:f4:cc:6c:fc:92:b8:bb:3e:a9:4e:00:fe:fd:47:32: 2f:8e:8f:a1:ec:38:58:f7:8e:bb:10:48:4c:8d:f2:12:10:c6: f5:38:37:60:47:8a:70:62:90:b8:ce:17:40:25:a4:d0:28:1a: 82:82:6c:ff:90:f0:58:08:12:77:75:03:04:ab:7e:d5:ec:77: 59:ee:f0:10:cd:2b:ef:fd:a1:f5:8a:8e:08:9e:7a:63:ee:ca: 91:02:0a:9d:b8:95:f2:be:fc:a9:79:2d:0c:2c:88:aa:2f:cb: 45:04:19:ac:ed:96:ba:a8:9e:c0:ad:dc:a2:35:b9:c7:1f:d5: 51:d9:c0:ba:8c:93:e3:b1:4f:4c:d1:7f:b2:ad:bc:6d:a1:04: 31:ac:40:b8:0d:41:ef:ac:ca:2b:df:10:92:72:7f:c2:36:a6: 60:8c:31:79:71:4e:d7:4c:ac:03:18:94:96:51:ff:ec:0c:3b: fc:87:6d:ed:4a:0d:71:17:77:51:b8:3e:1e:12:8f:d4:d0:6e: c6:73:47:0c:ff:fa:1a:74:38:da:8f:1d:16:44:e7:10:4c:f8: a1:e0:25:13:fa:b9:a9:24:42:4e:72:8a:02:c5:b3:9e:3d:eb: 65:0e:88:64 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ohW9E4yQbg3DcMWQ6LgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzBiZDlmODMzMWVhODQzOGZkMmEyZjY3MWI3MWFmNGEy ZGVjMTcwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWY3YjE3M2E5ZmZiOWEyNmEyMDU4MTg5YmJmYzIzN2QxMmYxNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJnVPeo5dehI1z0xuLRZ+qtp4TX3 MpHLYYEA+NFf9EttS0mM40vDAAXD98U2iBfI1kMX3Cq7rVKA7oFWYU6gcmhDCT5L e/XbWw8CLA6JLX6BlzmUV6AJzaeHNJqXcjOt2yyIyoNzR2ocNCphEoBYqj2Bfku4 JyVhYO4ENJXPldEu9KATpTrwipldYgeNqa8KK5drz5gfNjIVI3XOtYtxPMLHf7aJ lH8qYT9HfQmPQ/FXi/wOjRiAn9zveJku5TM1UP8LcvjwWJFjscFJm/ktsKlLxSSx nBd1d8n1gIPSpvx1BIB3ZPoCN46cFS9NUxfPro4RSkFigCNnYRflTHfX3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAr3sXOp/7miaiBYGJu/wjfRLxVrMB8GA1UdIwQY MBaAFFfAvZ+DMeqEOP0qL2cbca9KLewXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhDOW40TXg2b1E0X1Nvdlp4dHhyMG90N0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kNWU5ZjYtM2Y2ZC00Njk0LTg5Yjgt YTA5M2QxMDA4NzRjLzEvQ3ZleGM2bl91YUpxSUZnWW03X0NOOUV2RldzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kNWU5ZjYtM2Y2ZC00Njk0LTg5YjgtYTA5M2QxMDA4NzRj LzEvVjhDOW40TXg2b1E0X1Nvdlp4dHhyMG90N0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9jcMA0E AgACMAcDBQMqE/mAMA0GCSqGSIb3DQEBCwUAA4IBAQC/qtCSQcgJThqZBVDIUzU6 V+JF1oX0zGz8kri7PqlOAP79RzIvjo+h7DhY9467EEhMjfISEMb1ODdgR4pwYpC4 zhdAJaTQKBqCgmz/kPBYCBJ3dQMEq37V7HdZ7vAQzSvv/aH1io4Innpj7sqRAgqd uJXyvvypeS0MLIiqL8tFBBms7Za6qJ7ArdyiNbnHH9VR2cC6jJPjsU9M0X+yrbxt oQQxrEC4DUHvrMor3xCScn/CNqZgjDF5cU7XTKwDGJSWUf/sDDv8h23tSg1xF3dR uD4eEo/U0G7Gc0cM//oadDjajx0WROcQTPih4CUT+rmpJEJOcooCxbOePetlDohk -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:13 2026 by rpki-client