This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/CuOUP7K5FFs9hp6Y2PT6u5JckCo.roa File: CuOUP7K5FFs9hp6Y2PT6u5JckCo.roa (raw, json) Hash identifier: ZsAGggLHZ5c9tfsaL3W8Tzgr18wNOwRPUVw/KIp0Zec= Subject key identifier: 0A:E3:94:3F:B2:B9:14:5B:3D:86:9E:98:D8:F4:FA:BB:92:5C:90:2A Certificate issuer: /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14 Certificate serial: 019B7DCA5E50FE8EE7023293629C3A8E1A69 Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/CuOUP7K5FFs9hp6Y2PT6u5JckCo.roa Signing time: Fri 02 Jan 2026 08:19:32 +0000 ROA not before: Fri 02 Jan 2026 08:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201971 IP address blocks: 185.57.188.0/22 maxlen: 24 185.57.188.0/23 maxlen: 23 185.57.190.0/24 maxlen: 24 185.57.191.0/24 maxlen: 24 2a04:de40::/29 maxlen: 64 2a04:de40:80::/42 maxlen: 42 2a04:de40:c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:5e:50:fe:8e:e7:02:32:93:62:9c:3a:8e:1a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14 Validity Not Before: Jan 2 08:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ae3943fb2b9145b3d869e98d8f4fabb925c902a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:c3:2b:9a:e1:22:67:e5:f8:04:05:ae:76: cb:b8:fb:ba:fe:81:88:ab:2d:9d:e4:b0:dd:67:33: 96:a1:5e:b7:5c:c7:8e:49:ca:6f:a4:e1:6f:2f:fc: 53:13:ad:27:8d:ca:c3:d6:32:37:58:0f:15:85:43: 12:a1:b3:ea:fd:a8:a9:49:1c:e5:e3:a1:c6:45:6b: 37:d7:0b:03:09:93:af:17:3b:f2:f1:09:2c:c3:35: e6:30:00:3b:af:05:1d:68:0f:f5:c7:47:9b:c9:09: 48:fc:b7:f7:03:e1:c5:4c:97:68:45:6e:a4:8d:38: 96:4b:f6:04:02:37:13:22:ac:be:01:ed:2f:70:5c: 52:c8:10:27:0b:02:4b:38:57:0a:0f:2f:c9:48:8a: c6:21:b2:3b:8c:3e:46:d7:82:e9:59:6e:37:3d:c7: ec:03:65:a1:92:58:07:8b:c2:d4:d9:fc:b9:6b:87: 8f:88:d6:a4:9a:7a:fe:97:fa:8d:a2:ba:86:68:43: 1a:70:e4:22:6b:d4:26:e5:e3:21:e4:c0:33:eb:8b: be:94:14:44:7b:41:6b:e1:d4:e1:82:02:89:e3:c9: 89:37:f4:64:77:e3:88:9d:18:d8:81:11:47:55:25: b5:3a:26:e5:b7:17:a6:e6:6a:5d:b4:aa:48:bd:9d: 0b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E3:94:3F:B2:B9:14:5B:3D:86:9E:98:D8:F4:FA:BB:92:5C:90:2A X509v3 Authority Key Identifier: keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/CuOUP7K5FFs9hp6Y2PT6u5JckCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.57.188.0/22 IPv6: 2a04:de40::/29 Signature Algorithm: sha256WithRSAEncryption 37:3f:21:cf:f1:42:b9:20:bd:a9:b8:b3:0c:a6:28:af:71:67: f3:5d:e4:36:14:dc:55:d3:68:a1:08:32:a1:62:96:52:d9:73: 20:6a:14:2f:be:75:03:49:34:e3:6a:84:ad:3a:20:e1:8f:1a: f1:1d:d4:4c:3f:ca:09:b4:95:f9:20:1b:8e:7e:e3:dc:33:89: f9:3f:7d:44:bd:af:81:8c:5e:9c:3e:46:a7:74:9e:78:0f:55: 56:5c:e2:38:41:7f:65:84:37:9c:69:98:bf:63:ae:05:63:68: de:29:18:35:2f:0a:84:a0:ba:1a:62:35:07:44:ae:67:c6:58: 49:7e:1e:0f:5e:20:c8:5c:9a:91:11:6d:47:6e:46:f8:cc:0d: 4d:7c:05:15:ec:f6:c9:7b:4f:bb:26:3a:0e:0c:f7:3d:cd:1d: d7:43:2a:04:2a:9c:cf:02:a1:3a:b5:17:12:8a:9f:75:21:54: 03:2f:32:a4:d6:6d:a0:9d:25:11:31:19:db:fb:f6:4f:cd:61: 64:a8:a5:2e:01:1e:99:5f:c1:be:70:a1:c8:b4:fc:e6:9b:2e: 48:c9:00:56:fa:59:8e:3d:a1:b4:4f:2b:8b:a4:75:33:6d:7d: 5f:77:ac:5d:6a:32:49:40:f1:1d:2a:a5:88:c6:e8:e2:93:4b: 1e:b8:14:a8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yl5Q/o7nAjKTYpw6jhppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZDA0OTVhY2Y5Yzc4YjkxODNiYmEwYzA1YjhhMjk5NzQz ODJiMTQwHhcNMjYwMTAyMDgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWUzOTQzZmIyYjkxNDViM2Q4NjllOThkOGY0ZmFiYjkyNWM5MDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnTDK5rhImfl+AQFrnbLuPu6/oGI qy2d5LDdZzOWoV63XMeOScpvpOFvL/xTE60njcrD1jI3WA8VhUMSobPq/aipSRzl 46HGRWs31wsDCZOvFzvy8QkswzXmMAA7rwUdaA/1x0ebyQlI/Lf3A+HFTJdoRW6k jTiWS/YEAjcTIqy+Ae0vcFxSyBAnCwJLOFcKDy/JSIrGIbI7jD5G14LpWW43Pcfs A2WhklgHi8LU2fy5a4ePiNakmnr+l/qNorqGaEMacOQia9Qm5eMh5MAz64u+lBRE e0Fr4dThggKJ48mJN/Rkd+OInRjYgRFHVSW1Oibltxem5mpdtKpIvZ0LPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFArjlD+yuRRbPYaemNj0+ruSXJAqMB8GA1UdIwQY MBaAFMDQSVrPnHi5GDu6DAW4opl0OCsUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd05CSldzLWNlTGtZTzdvTUJiaWltWFE0S3hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNjUzOTgtYThlYi00ZDE2LTljNGUt MzU4NGUyYWIxZjBkLzEvQ3VPVVA3SzVGRnM5aHA2WTJQVDZ1NUpja0NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jNjUzOTgtYThlYi00ZDE2LTljNGUtMzU4NGUyYWIxZjBk LzEvd05CSldzLWNlTGtZTzdvTUJiaWltWFE0S3hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTm8MA0E AgACMAcDBQMqBN5AMA0GCSqGSIb3DQEBCwUAA4IBAQA3PyHP8UK5IL2puLMMpiiv cWfzXeQ2FNxV02ihCDKhYpZS2XMgahQvvnUDSTTjaoStOiDhjxrxHdRMP8oJtJX5 IBuOfuPcM4n5P31Eva+BjF6cPkandJ54D1VWXOI4QX9lhDecaZi/Y64FY2jeKRg1 LwqEoLoaYjUHRK5nxlhJfh4PXiDIXJqREW1Hbkb4zA1NfAUV7PbJe0+7JjoODPc9 zR3XQyoEKpzPAqE6tRcSip91IVQDLzKk1m2gnSURMRnb+/ZPzWFkqKUuAR6ZX8G+ cKHItPzmmy5IyQBW+lmOPaG0TyuLpHUzbX1fd6xdajJJQPEdKqWIxujik0seuBSo -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:48 2026 by rpki-client