This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/CVSRElmsqlgWcEdghVOc7WPdDdc.roa File: CVSRElmsqlgWcEdghVOc7WPdDdc.roa (raw, json) Hash identifier: Hn/0sT1HWFlLcY0Ekg5urzbmDq/zA7lmExICAldUfLE= Subject key identifier: 09:54:91:12:59:AC:AA:58:16:70:47:60:85:53:9C:ED:63:DD:0D:D7 Certificate issuer: /CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Certificate serial: 019B7A5B858BA36B5E3EB0777D3F777D376D Authority key identifier: 83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/CVSRElmsqlgWcEdghVOc7WPdDdc.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206332 IP address blocks: 185.146.46.0/24 maxlen: 24 185.146.47.0/24 maxlen: 24 185.171.201.0/24 maxlen: 24 2a07:4d80::/32 maxlen: 32 2a10:55c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:85:8b:a3:6b:5e:3e:b0:77:7d:3f:77:7d:37:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8323b9731b196b1acbc829f5b28b325fd9d3e3d4 Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0954911259acaa581670476085539ced63dd0dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:24:a8:07:4c:e1:75:7e:69:25:81:94:61: 9c:ce:41:94:7c:dc:ac:f8:ae:73:d4:a8:a5:ae:c7: 11:2d:88:13:1f:42:91:32:c4:24:cd:c6:3c:8d:37: 45:09:1b:32:cd:25:c4:2e:26:76:c5:88:7d:2f:de: 51:da:04:c0:44:8b:c3:5c:38:ba:2c:8b:ba:09:75: 9e:32:05:f1:25:68:69:05:fd:9d:3f:07:bf:46:3a: 75:9a:7c:a4:7a:91:26:5f:63:65:93:55:be:0d:92: ad:5b:79:8a:b5:df:c9:64:b0:1e:de:35:17:84:4b: 70:00:57:45:12:e5:bb:f9:d9:f5:d7:3b:d5:81:41: 54:49:66:51:fb:bb:25:34:d8:c2:9c:1a:1e:26:17: 7f:d6:ac:c5:46:30:a6:66:8d:20:e3:af:41:4c:14: f0:7a:a5:9d:9b:7d:18:e9:4e:a9:fa:ab:72:57:49: fc:7e:4b:4a:5d:f1:59:49:fd:2b:ab:cd:ce:35:88: 6a:24:47:a2:98:bf:dc:bc:34:e0:4c:70:ee:c1:d1: 65:43:7c:a0:2e:16:f0:ca:1b:9d:ea:b0:61:28:95: 53:22:75:49:41:fe:c8:b7:dd:38:50:46:4a:78:57: 2a:61:1b:3c:68:e9:ae:55:cd:1e:9c:ac:22:b5:33: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:54:91:12:59:AC:AA:58:16:70:47:60:85:53:9C:ED:63:DD:0D:D7 X509v3 Authority Key Identifier: keyid:83:23:B9:73:1B:19:6B:1A:CB:C8:29:F5:B2:8B:32:5F:D9:D3:E3:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyO5cxsZaxrLyCn1sosyX9nT49Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/CVSRElmsqlgWcEdghVOc7WPdDdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/da1f23-3694-4f59-85cf-ca1e5f081950/1/gyO5cxsZaxrLyCn1sosyX9nT49Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.46.0/23 185.171.201.0/24 IPv6: 2a07:4d80::/32 2a10:55c0::/29 Signature Algorithm: sha256WithRSAEncryption 71:aa:10:a7:af:e9:d3:4a:4e:76:d3:64:55:da:8d:31:d3:a4: 0c:e0:37:aa:f2:c8:3f:e8:a6:f1:a1:f3:d8:60:60:e6:56:ca: ea:52:e0:40:b2:1c:1f:c3:4f:46:1a:09:47:9e:fa:b6:73:b7: 99:7a:67:52:33:d5:37:d6:0b:04:1b:4b:84:54:7d:41:43:c3: c4:7d:ba:dd:5d:8b:6a:d4:87:2d:4a:f2:78:1b:a0:11:41:bc: 02:89:7d:c3:41:9a:52:14:3a:8e:22:40:07:99:ca:42:b7:79: ae:fb:c8:df:c8:48:06:a3:17:2d:ca:96:78:1c:43:a0:48:69: be:5b:49:7b:e2:cd:c5:2c:81:a5:57:f1:5f:34:69:03:4a:ba: fe:ce:e8:6c:fc:87:08:8b:f7:20:38:ff:5f:7a:ef:17:e7:96: e3:5f:16:ae:30:a3:94:e7:c7:94:02:7c:cf:90:0c:af:40:bd: 46:d8:98:16:68:89:03:30:82:ad:2b:27:8d:03:8f:7b:e4:4f: d5:73:05:46:73:47:f4:06:0f:7d:76:9c:83:c3:13:6c:61:42: a1:bc:b7:a5:91:25:4d:55:17:2d:76:70:a8:5c:ca:79:b7:65: 8d:82:b6:0b:0a:8d:d8:94:f8:45:63:a1:b7:e0:32:01:f5:ac: b3:c0:6b:49 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt6W4WLo2tePrB3fT93fTdtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMjNiOTczMWIxOTZiMWFjYmM4MjlmNWIyOGIzMjVmZDlk M2UzZDQwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTU0OTExMjU5YWNhYTU4MTY3MDQ3NjA4NTUzOWNlZDYzZGQwZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK8kqAdM4XV+aSWBlGGczkGUfNys +K5z1KilrscRLYgTH0KRMsQkzcY8jTdFCRsyzSXELiZ2xYh9L95R2gTARIvDXDi6 LIu6CXWeMgXxJWhpBf2dPwe/Rjp1mnykepEmX2Nlk1W+DZKtW3mKtd/JZLAe3jUX hEtwAFdFEuW7+dn11zvVgUFUSWZR+7slNNjCnBoeJhd/1qzFRjCmZo0g469BTBTw eqWdm30Y6U6p+qtyV0n8fktKXfFZSf0rq83ONYhqJEeimL/cvDTgTHDuwdFlQ3yg Lhbwyhud6rBhKJVTInVJQf7It904UEZKeFcqYRs8aOmuVc0enKwitTPxtQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAlUkRJZrKpYFnBHYIVTnO1j3Q3XMB8GA1UdIwQY MBaAFIMjuXMbGWsay8gp9bKLMl/Z0+PUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2Yt Y2ExZTVmMDgxOTUwLzEvQ1ZTUkVsbXNxbGdXY0VkZ2hWT2M3V1BkRGRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9kYTFmMjMtMzY5NC00ZjU5LTg1Y2YtY2ExZTVmMDgxOTUw LzEvZ3lPNWN4c1pheHJMeUNuMXNvc3lYOW5UNDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQBuZIuAwQA uavJMBQEAgACMA4DBQAqB02AAwUDKhBVwDANBgkqhkiG9w0BAQsFAAOCAQEAcaoQ p6/p00pOdtNkVdqNMdOkDOA3qvLIP+im8aHz2GBg5lbK6lLgQLIcH8NPRhoJR576 tnO3mXpnUjPVN9YLBBtLhFR9QUPDxH263V2LatSHLUryeBugEUG8Aol9w0GaUhQ6 jiJAB5nKQrd5rvvI38hIBqMXLcqWeBxDoEhpvltJe+LNxSyBpVfxXzRpA0q6/s7o bPyHCIv3IDj/X3rvF+eW418WrjCjlOfHlAJ8z5AMr0C9RtiYFmiJAzCCrSsnjQOP e+RP1XMFRnNH9AYPfXacg8MTbGFCoby3pZElTVUXLXZwqFzKebdljYK2CwqN2JT4 RWOht+AyAfWss8BrSQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:27:51 2026 by rpki-client