This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/cdVP4VMQTXg2CT86yVWAypk62nQ.roa File: cdVP4VMQTXg2CT86yVWAypk62nQ.roa (raw, json) Hash identifier: LC40P/qPiuezV8f6FpcmDk2skf+yITxCG3dFo+ERAAU= Subject key identifier: 71:D5:4F:E1:53:10:4D:78:36:09:3F:3A:C9:55:80:CA:99:3A:DA:74 Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9 Certificate serial: 019B77590BD9DFD9F25F5E90E0A31D3CD1D7 Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/cdVP4VMQTXg2CT86yVWAypk62nQ.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29588 IP address blocks: 91.247.248.0/22 maxlen: 22 91.247.248.0/24 maxlen: 24 91.247.249.0/24 maxlen: 24 91.247.250.0/24 maxlen: 24 91.247.251.0/24 maxlen: 24 213.108.136.0/21 maxlen: 21 213.108.136.0/24 maxlen: 24 213.108.137.0/24 maxlen: 24 213.108.138.0/24 maxlen: 24 213.108.139.0/24 maxlen: 24 213.108.140.0/24 maxlen: 24 213.108.141.0/24 maxlen: 24 213.108.142.0/24 maxlen: 24 213.108.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0b:d9:df:d9:f2:5f:5e:90:e0:a3:1d:3c:d1:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71d54fe153104d7836093f3ac95580ca993ada74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:a9:c0:08:f8:10:b9:22:92:d6:7f:6c:02: df:3e:2d:f2:76:58:73:f6:6a:d3:7f:69:69:a5:94: 8e:21:ae:72:f1:dd:d2:75:b6:c2:a6:c1:73:5d:76: 80:d0:d8:78:df:69:e6:5b:8a:11:9c:5d:57:1a:55: f1:23:97:b1:69:4c:8e:f8:6e:a6:e6:8c:36:e6:a2: f1:88:6f:3f:01:1c:30:23:0c:2f:af:bd:5d:88:58: ff:57:da:42:d4:6e:d7:1d:c3:5e:27:f3:5d:d8:dd: e2:95:69:22:f7:b0:cf:c9:18:ea:a9:b9:fd:59:a6: 50:e2:8d:97:ec:5f:42:1c:70:c3:3f:17:89:fe:4c: 17:f8:b3:34:e4:bb:06:c9:d6:28:97:0e:04:99:23: 66:f6:38:0a:fb:f1:0a:ee:cb:47:4c:c5:34:e7:34: d1:48:85:40:2d:4c:fb:dd:f4:ec:2c:f8:7a:a1:4e: 55:c9:c9:03:89:08:4b:ae:9d:86:90:fe:47:d9:0f: e4:41:e5:2d:93:e2:da:c4:b4:c7:d1:7d:7b:bb:c2: a0:8b:2d:56:f5:34:e1:4c:ad:d3:0d:09:37:7f:e0: 68:0a:16:5d:d5:75:54:06:a2:ee:1c:52:30:ba:c1: 28:be:51:44:81:8d:9e:a2:18:4f:2d:f7:b6:ee:40: 5d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D5:4F:E1:53:10:4D:78:36:09:3F:3A:C9:55:80:CA:99:3A:DA:74 X509v3 Authority Key Identifier: keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/cdVP4VMQTXg2CT86yVWAypk62nQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.247.248.0/22 213.108.136.0/21 Signature Algorithm: sha256WithRSAEncryption 03:60:f8:63:57:d7:99:36:7c:4a:99:ee:8a:f9:a3:1b:b1:5a: ab:42:00:aa:66:12:b8:17:72:42:cb:61:87:93:09:ea:2f:c0: 15:c0:93:17:1b:df:df:38:b7:28:ff:58:4a:8b:0e:3a:74:59: e5:cb:e0:f8:1d:ad:b4:7e:b2:5c:ea:e3:fa:15:f0:f1:a6:af: 6f:6c:e6:1e:10:b8:67:74:7e:b2:7a:6c:95:2d:da:f9:a5:fd: 8c:79:db:af:87:10:d4:df:55:ee:10:78:9d:15:bc:a0:e3:15: 14:dd:5c:df:42:44:4c:fb:25:d5:fe:56:00:6e:51:d0:43:00: 25:6c:f5:59:ca:44:00:73:80:39:a1:73:93:52:67:bb:f3:d2: 80:63:12:a4:99:06:d1:c3:06:a6:a0:3a:b1:98:57:2d:87:63: 7d:78:87:4c:48:af:c6:7c:94:2f:73:10:2e:6e:25:f5:25:92: 96:7d:fb:c7:f3:c8:3a:0c:6f:b0:8b:45:0b:29:41:81:31:e7: dd:93:e3:54:f3:80:d9:d9:2f:c6:03:1e:e8:45:09:a6:a5:b1: 17:2d:5d:11:f5:3b:74:39:49:02:d9:f9:13:19:53:65:f4:63: a6:2a:01:d9:39:d3:54:92:d8:84:04:41:6c:ed:43:d8:bb:c5: ee:33:98:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WQvZ39nyX16Q4KMdPNHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYmU5ZTQzMDI0ZWNjNjkyYzMzNTM5OGJiMmQ5NjcxMTZh YWMyZDkwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWQ1NGZlMTUzMTA0ZDc4MzYwOTNmM2FjOTU1ODBjYTk5M2FkYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NipwAj4ELkiktZ/bALfPi3ydlhz 9mrTf2lppZSOIa5y8d3SdbbCpsFzXXaA0Nh432nmW4oRnF1XGlXxI5exaUyO+G6m 5ow25qLxiG8/ARwwIwwvr71diFj/V9pC1G7XHcNeJ/Nd2N3ilWki97DPyRjqqbn9 WaZQ4o2X7F9CHHDDPxeJ/kwX+LM05LsGydYolw4EmSNm9jgK+/EK7stHTMU05zTR SIVALUz73fTsLPh6oU5VyckDiQhLrp2GkP5H2Q/kQeUtk+LaxLTH0X17u8Kgiy1W 9TThTK3TDQk3f+BoChZd1XVUBqLuHFIwusEovlFEgY2eohhPLfe27kBd8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHHVT+FTEE14Ngk/OslVgMqZOtp0MB8GA1UdIwQY MBaAFFy+nkMCTsxpLDNTmLstlnEWqsLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5Zjct MjhhNTZlYTVjZjBiLzEvY2RWUDRWTVFUWGcyQ1Q4NnlWV0F5cGs2Mm5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5ZjctMjhhNTZlYTVjZjBi LzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW/f4AwQD 1WyIMA0GCSqGSIb3DQEBCwUAA4IBAQADYPhjV9eZNnxKme6K+aMbsVqrQgCqZhK4 F3JCy2GHkwnqL8AVwJMXG9/fOLco/1hKiw46dFnly+D4Ha20frJc6uP6FfDxpq9v bOYeELhndH6yemyVLdr5pf2MeduvhxDU31XuEHidFbyg4xUU3VzfQkRM+yXV/lYA blHQQwAlbPVZykQAc4A5oXOTUme789KAYxKkmQbRwwamoDqxmFcth2N9eIdMSK/G fJQvcxAubiX1JZKWffvH88g6DG+wi0ULKUGBMefdk+NU84DZ2S/GAx7oRQmmpbEX LV0R9Tt0OUkC2fkTGVNl9GOmKgHZOdNUktiEBEFs7UPYu8XuM5iU -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:31 2026 by rpki-client