This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/cpXyEOPsQYnhoiU9YXgEHRotygE.roa File: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (raw, json) Hash identifier: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo= Subject key identifier: 72:95:F2:10:E3:EC:41:89:E1:A2:25:3D:61:78:04:1D:1A:2D:CA:01 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019B7DCA9CFED6D0BEEAFF91FC13EB893BF8 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/cpXyEOPsQYnhoiU9YXgEHRotygE.roa Signing time: Fri 02 Jan 2026 08:19:48 +0000 ROA not before: Fri 02 Jan 2026 08:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 213.178.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9c:fe:d6:d0:be:ea:ff:91:fc:13:eb:89:3b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jan 2 08:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7295f210e3ec4189e1a2253d6178041d1a2dca01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ee:6d:44:da:55:ed:43:ad:e0:cb:14:da:c8: 96:76:23:e3:bf:dc:cd:a5:dd:fb:53:20:fa:cf:78: 7e:30:15:0d:c0:ad:b1:16:89:00:05:da:85:82:30: 39:eb:94:20:c2:64:4e:47:52:ab:7c:ad:3c:a7:0b: 5c:40:97:8d:e3:dd:1b:0a:5a:3f:0b:21:e7:d1:0f: 93:61:21:e8:d6:3d:49:58:2c:db:15:df:bf:d2:17: 0c:5b:eb:b0:bf:12:ce:b1:53:67:0f:78:10:c5:72: 24:ac:e0:cd:ba:4d:40:ce:fb:cb:e3:3c:17:81:6c: ed:d5:36:35:02:70:fc:52:05:1c:d6:52:44:e6:b4: e5:99:90:67:62:b0:c6:71:84:1d:05:e8:50:29:cb: 72:71:4e:28:16:b5:04:7b:14:fb:ab:73:26:da:88: fd:2f:00:ed:9a:33:26:66:a4:94:76:71:dc:32:be: e9:6c:5d:f1:06:d4:eb:93:ea:22:4f:ca:1b:f9:ca: f1:c2:e4:13:f0:26:58:32:06:ea:c4:a1:a8:b7:9a: f3:e5:73:54:a7:8e:2a:42:b7:f0:54:11:51:ed:2e: a1:f0:23:95:49:55:9a:56:98:51:73:20:44:92:8f: 5d:4c:54:57:f2:4f:4e:fb:6d:52:72:dc:bf:80:c7: 86:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:95:F2:10:E3:EC:41:89:E1:A2:25:3D:61:78:04:1D:1A:2D:CA:01 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/cpXyEOPsQYnhoiU9YXgEHRotygE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.178.143.0/24 Signature Algorithm: sha256WithRSAEncryption 08:42:62:02:b4:35:8d:62:53:44:0b:65:3c:d5:5a:df:a3:d0: 05:5d:c8:a3:50:26:fe:8e:21:c3:fe:09:e7:f8:d6:95:1f:9a: d8:94:c9:b5:65:59:23:5c:d5:04:b9:18:d8:5e:dc:f3:bd:9f: 4a:78:fc:db:85:0f:8a:0a:b2:23:15:62:58:f7:a5:05:17:1a: e5:4a:8f:b5:34:7e:c6:91:22:1c:1e:15:d0:cb:6c:fc:eb:b6: 3e:71:76:43:a5:cc:29:51:df:bf:fd:57:ca:97:5f:54:84:f5: f8:15:79:1a:b9:81:bf:c8:6f:ce:ce:46:99:32:fc:6d:2b:5c: 4e:23:cd:c8:ec:d1:57:cd:41:f0:b9:e2:f4:31:f5:c6:9e:c6: f6:23:ae:70:0d:dd:98:67:61:44:53:08:d7:79:a7:b0:55:c8: ab:64:5e:80:4c:36:42:b2:9f:41:3f:f8:24:ea:5a:bf:ed:a8: 83:a1:be:12:10:29:e5:4c:72:c1:39:e2:5f:f5:f5:84:f3:01: 38:7b:b6:f3:59:4f:d3:37:7c:d0:66:97:30:21:79:ce:64:d3: 3c:27:1e:f5:43:32:52:89:b5:ac:69:1a:a5:05:e1:7f:91:91: 49:32:e6:85:a3:61:40:10:4d:3b:1c:a9:f8:9c:5a:90:1d:a4: 6d:5c:59:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ypz+1tC+6v+R/BPriTv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwMTAyMDgxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjk1ZjIxMGUzZWM0MTg5ZTFhMjI1M2Q2MTc4MDQxZDFhMmRjYTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O5tRNpV7UOt4MsU2siWdiPjv9zN pd37UyD6z3h+MBUNwK2xFokABdqFgjA565QgwmROR1KrfK08pwtcQJeN490bClo/ CyHn0Q+TYSHo1j1JWCzbFd+/0hcMW+uwvxLOsVNnD3gQxXIkrODNuk1AzvvL4zwX gWzt1TY1AnD8UgUc1lJE5rTlmZBnYrDGcYQdBehQKctycU4oFrUEexT7q3Mm2oj9 LwDtmjMmZqSUdnHcMr7pbF3xBtTrk+oiT8ob+crxwuQT8CZYMgbqxKGot5rz5XNU p44qQrfwVBFR7S6h8COVSVWaVphRcyBEko9dTFRX8k9O+21Scty/gMeGpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKV8hDj7EGJ4aIlPWF4BB0aLcoBMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvY3BYeUVPUHNRWW5ob2lVOVlYZ0VIUm90eWdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bKPMA0G CSqGSIb3DQEBCwUAA4IBAQAIQmICtDWNYlNEC2U81Vrfo9AFXcijUCb+jiHD/gnn +NaVH5rYlMm1ZVkjXNUEuRjYXtzzvZ9KePzbhQ+KCrIjFWJY96UFFxrlSo+1NH7G kSIcHhXQy2z867Y+cXZDpcwpUd+//VfKl19UhPX4FXkauYG/yG/OzkaZMvxtK1xO I83I7NFXzUHwueL0MfXGnsb2I65wDd2YZ2FEUwjXeaewVcirZF6ATDZCsp9BP/gk 6lq/7aiDob4SECnlTHLBOeJf9fWE8wE4e7bzWU/TN3zQZpcwIXnOZNM8Jx71QzJS ibWsaRqlBeF/kZFJMuaFo2FAEE07HKn4nFqQHaRtXFk3 -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:10 2026 by rpki-client