This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/CBnGBeMmfjtC-_l50Apa-rnM7ro.roa File: CBnGBeMmfjtC-_l50Apa-rnM7ro.roa (raw, json) Hash identifier: tqc1bO+aiQg/sSJgPer6VgbSztJvGQrMbPiX8vaUTEc= Subject key identifier: 08:19:C6:05:E3:26:7E:3B:42:FB:F9:79:D0:0A:5A:FA:B9:CC:EE:BA Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c Certificate serial: 019B77C76F1A1269FF08C75314D0756D6203 Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/CBnGBeMmfjtC-_l50Apa-rnM7ro.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41887 IP address blocks: 185.152.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6f:1a:12:69:ff:08:c7:53:14:d0:75:6d:62:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d43689a7638ff737591ff3b251918862349695c Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0819c605e3267e3b42fbf979d00a5afab9cceeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:8b:78:14:97:b7:54:6d:8d:cf:bf:29:59: 9f:6d:f8:87:75:3b:a2:68:f0:64:02:13:61:8c:7b: e2:01:c2:f4:b4:11:82:fd:fa:a9:fa:8d:a5:f9:b7: 09:a4:bb:28:14:36:22:95:86:54:fe:25:88:44:4c: 6a:af:86:1d:38:da:71:74:22:a8:66:30:2d:67:3b: 0b:12:de:f6:be:bf:02:18:6b:7a:61:69:5f:4b:e6: 26:65:c5:f4:e9:d4:a6:db:f8:e8:23:8c:17:67:fc: b7:3a:24:2b:d0:17:9f:e5:03:51:c0:6e:74:08:b4: aa:13:12:73:21:cf:49:32:92:09:fc:51:84:3e:00: 5c:c9:1c:67:2a:75:b1:cb:2d:d1:82:b2:98:c1:c9: b1:82:02:06:6f:d5:f6:b5:ba:0c:60:ad:c1:1d:9d: dd:ee:1c:ec:2e:b4:dd:47:c8:62:8c:f6:3d:6d:cf: fd:a5:15:23:ac:45:a9:d1:3f:b1:93:0d:a3:fd:25: a3:b6:ec:8a:1e:f8:0f:a9:7f:3c:08:60:dc:d9:37: e5:87:0a:28:2d:43:88:c5:fc:63:e9:36:52:aa:a1: 4a:bb:1d:97:86:f1:ee:46:7d:05:1e:76:39:ad:e8: a9:05:25:a7:8b:ad:61:78:ba:26:65:cd:e9:14:08: 3d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:19:C6:05:E3:26:7E:3B:42:FB:F9:79:D0:0A:5A:FA:B9:CC:EE:BA X509v3 Authority Key Identifier: keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/CBnGBeMmfjtC-_l50Apa-rnM7ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.215.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:1e:f7:b7:80:d6:a6:ee:93:3c:9f:36:30:58:f9:03:70:3b: d7:ee:25:06:05:98:91:a9:40:57:33:ae:c3:b1:b8:76:2b:2b: f2:85:25:22:6d:10:d1:9c:79:94:a4:41:3e:31:fe:f9:1d:dd: 91:12:8c:da:0b:9f:1a:6a:72:3a:24:6b:6e:e5:2f:5f:58:67: 6c:c4:53:d0:b6:cc:7f:59:9f:de:12:d6:98:22:ba:f6:51:52: b9:89:62:63:e4:63:8a:32:95:52:79:5a:39:e1:fd:91:ff:78: 5e:68:fe:6b:26:3e:38:89:a1:35:fc:44:93:29:8d:53:1c:84: c4:c0:15:38:78:ec:6b:24:b3:f4:9d:ae:16:e9:3d:e7:06:a5: 1e:58:25:a0:79:fc:54:db:23:15:8d:c5:32:62:65:d2:8d:ef: 65:1f:e0:89:10:19:62:e0:71:e3:a1:d5:17:e3:4b:74:64:2c: 24:89:39:1d:08:07:b6:8c:15:74:2c:31:40:b6:8c:0e:f9:91: 66:02:0e:c7:18:ea:80:07:cb:6b:69:69:56:98:81:05:36:b0: 77:4d:e6:bc:10:8f:ab:1e:eb:de:48:ae:42:ef:79:c4:a3:36: 2a:d2:0e:06:14:55:a3:36:39:2c:3f:2a:5a:f6:da:cd:6c:5b: 40:f2:18:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x28aEmn/CMdTFNB1bWIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkNDM2ODlhNzYzOGZmNzM3NTkxZmYzYjI1MTkxODg2MjM0 OTY5NWMwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODE5YzYwNWUzMjY3ZTNiNDJmYmY5NzlkMDBhNWFmYWI5Y2NlZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb2LeBSXt1Rtjc+/KVmfbfiHdTui aPBkAhNhjHviAcL0tBGC/fqp+o2l+bcJpLsoFDYilYZU/iWIRExqr4YdONpxdCKo ZjAtZzsLEt72vr8CGGt6YWlfS+YmZcX06dSm2/joI4wXZ/y3OiQr0Bef5QNRwG50 CLSqExJzIc9JMpIJ/FGEPgBcyRxnKnWxyy3RgrKYwcmxggIGb9X2tboMYK3BHZ3d 7hzsLrTdR8hijPY9bc/9pRUjrEWp0T+xkw2j/SWjtuyKHvgPqX88CGDc2Tflhwoo LUOIxfxj6TZSqqFKux2XhvHuRn0FHnY5reipBSWni61heLomZc3pFAg90QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgZxgXjJn47Qvv5edAKWvq5zO66MB8GA1UdIwQY MBaAFC1DaJp2OP9zdZH/OyUZGIYjSWlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMt M2EzMDM0YTM5ZWE1LzEvQ0JuR0JlTW1manRDLV9sNTBBcGEtcm5NN3JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMtM2EzMDM0YTM5ZWE1 LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZjXMA0G CSqGSIb3DQEBCwUAA4IBAQCeHve3gNam7pM8nzYwWPkDcDvX7iUGBZiRqUBXM67D sbh2KyvyhSUibRDRnHmUpEE+Mf75Hd2REozaC58aanI6JGtu5S9fWGdsxFPQtsx/ WZ/eEtaYIrr2UVK5iWJj5GOKMpVSeVo54f2R/3heaP5rJj44iaE1/ESTKY1THITE wBU4eOxrJLP0na4W6T3nBqUeWCWgefxU2yMVjcUyYmXSje9lH+CJEBli4HHjodUX 40t0ZCwkiTkdCAe2jBV0LDFAtowO+ZFmAg7HGOqAB8traWlWmIEFNrB3Tea8EI+r HuveSK5C73nEozYq0g4GFFWjNjksPypa9trNbFtA8hi5 -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:27 2026 by rpki-client