This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/CUZDkD-NcFvyMKKqxpqKTImWldI.roa File: CUZDkD-NcFvyMKKqxpqKTImWldI.roa (raw, json) Hash identifier: BjgaQINh/o8BqluKWpCRQpHRBGijPayFIzTWLEZZ+ZQ= Subject key identifier: 09:46:43:90:3F:8D:70:5B:F2:30:A2:AA:C6:9A:8A:4C:89:96:95:D2 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B7A5B91F03D226946688E022E637B582A Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/CUZDkD-NcFvyMKKqxpqKTImWldI.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212293 IP address blocks: 213.202.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:91:f0:3d:22:69:46:68:8e:02:2e:63:7b:58:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=094643903f8d705bf230a2aac69a8a4c899695d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:a8:03:04:67:06:86:53:4b:06:6a:43:dd: 90:04:8d:7d:d8:09:ee:9f:d1:e5:e9:ae:97:11:65: 85:1d:03:8a:86:f1:61:f7:69:b3:76:55:f9:47:f8: 4f:a7:54:80:5c:de:5f:35:90:08:4e:09:72:7e:77: 59:31:d3:9d:f9:ce:ac:6a:5a:81:b0:a3:39:ea:0f: 42:1e:f4:30:a1:96:8b:e3:43:47:6d:9a:4c:4a:62: fe:39:6a:bf:66:fa:80:bb:10:7a:e6:da:88:6a:62: 20:4b:ca:34:33:c7:cd:47:53:a7:36:fc:32:16:72: 85:45:b7:cc:f4:dc:98:a5:fe:22:84:45:e6:55:21: 58:b6:d6:58:f1:e7:ef:b6:47:65:c9:34:f7:0d:d6: 32:27:d3:44:77:c5:87:f9:c3:8f:60:a9:ef:0b:b4: bd:bb:fc:82:6f:13:7f:de:e8:dc:ce:b8:e7:e8:69: f6:d0:7d:a5:20:d1:56:18:9c:91:ad:72:f6:8f:07: 71:b0:8f:5c:91:90:fc:14:4c:b7:07:6a:60:f4:6a: 87:90:2b:a7:00:28:72:67:48:8f:af:53:93:b0:e9: 30:f7:f6:c7:02:c8:b2:70:3c:4a:b7:0d:87:d2:a7: d6:50:12:ad:06:8f:fa:3c:a6:d0:f9:80:f4:f5:d0: 0c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:46:43:90:3F:8D:70:5B:F2:30:A2:AA:C6:9A:8A:4C:89:96:95:D2 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/CUZDkD-NcFvyMKKqxpqKTImWldI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.202.85.0/24 Signature Algorithm: sha256WithRSAEncryption 11:bb:db:c2:75:3a:6e:b0:91:d7:21:35:03:66:aa:f7:a9:57: ec:47:f4:2a:60:55:9d:60:de:3b:33:44:4c:de:0e:95:1e:a7: 36:df:9b:13:00:50:5f:61:65:22:9d:70:95:9f:dd:08:42:e9: 4a:b7:c3:2e:e3:69:93:95:db:e1:ff:67:ae:4e:2a:b3:10:14: 47:1e:00:37:1b:da:b4:92:96:9f:c7:cb:cb:92:d9:0c:57:c7: 80:5f:8a:4b:82:15:29:7f:f6:93:6d:27:4d:77:8d:49:55:cb: 97:70:2b:e2:fa:e3:b4:6b:cc:45:ea:ab:84:13:21:b9:a6:8b: 5c:ce:4c:4f:67:3a:41:3d:82:ee:8e:b2:81:eb:99:e6:f9:3f: ad:ab:5d:34:6f:f3:13:67:08:a6:95:a4:21:fc:34:a0:cc:ac: 8a:3e:e1:0a:5e:47:03:ae:b1:85:76:98:4b:b8:f5:34:3e:3f: 6f:7e:1c:e9:28:57:35:8a:43:ca:41:db:94:a8:0d:0b:42:29: c6:14:72:f3:95:97:fb:e3:58:66:21:c4:7e:c2:84:fb:57:b5: f2:35:16:13:5c:d6:3d:7b:80:90:36:9b:81:17:37:c1:cf:e9: 03:ad:5d:79:82:70:7e:a2:b2:8b:11:39:8e:b5:42:ea:74:db: 20:08:53:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5HwPSJpRmiOAi5je1gqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTQ2NDM5MDNmOGQ3MDViZjIzMGEyYWFjNjlhOGE0Yzg5OTY5NWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh+oAwRnBoZTSwZqQ92QBI192Anu n9Hl6a6XEWWFHQOKhvFh92mzdlX5R/hPp1SAXN5fNZAITglyfndZMdOd+c6salqB sKM56g9CHvQwoZaL40NHbZpMSmL+OWq/ZvqAuxB65tqIamIgS8o0M8fNR1OnNvwy FnKFRbfM9NyYpf4ihEXmVSFYttZY8efvtkdlyTT3DdYyJ9NEd8WH+cOPYKnvC7S9 u/yCbxN/3ujczrjn6Gn20H2lINFWGJyRrXL2jwdxsI9ckZD8FEy3B2pg9GqHkCun AChyZ0iPr1OTsOkw9/bHAsiycDxKtw2H0qfWUBKtBo/6PKbQ+YD09dAMjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAlGQ5A/jXBb8jCiqsaaikyJlpXSMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvQ1VaRGtELU5jRnZ5TUtLcXhwcUtUSW1XbGRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cpVMA0G CSqGSIb3DQEBCwUAA4IBAQARu9vCdTpusJHXITUDZqr3qVfsR/QqYFWdYN47M0RM 3g6VHqc235sTAFBfYWUinXCVn90IQulKt8Mu42mTldvh/2euTiqzEBRHHgA3G9q0 kpafx8vLktkMV8eAX4pLghUpf/aTbSdNd41JVcuXcCvi+uO0a8xF6quEEyG5potc zkxPZzpBPYLujrKB65nm+T+tq100b/MTZwimlaQh/DSgzKyKPuEKXkcDrrGFdphL uPU0Pj9vfhzpKFc1ikPKQduUqA0LQinGFHLzlZf741hmIcR+woT7V7XyNRYTXNY9 e4CQNpuBFzfBz+kDrV15gnB+orKLETmOtULqdNsgCFM6 -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:43 2026 by rpki-client