This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/CMpz6Z0ZjbzrsumthPk2h0kU714.roa File: CMpz6Z0ZjbzrsumthPk2h0kU714.roa (raw, json) Hash identifier: A3lBqvLRLb63Z2zkD/QiutUnKW5oZQPl9laeX3xcP64= Subject key identifier: 08:CA:73:E9:9D:19:8D:BC:EB:B2:E9:AD:84:F9:36:87:49:14:EF:5E Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9 Certificate serial: 019B7834D5D87A96C20BA6813A25ECACC57B Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/CMpz6Z0ZjbzrsumthPk2h0kU714.roa Signing time: Thu 01 Jan 2026 06:18:07 +0000 ROA not before: Thu 01 Jan 2026 06:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31727 IP address blocks: 185.113.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.mft rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d5:d8:7a:96:c2:0b:a6:81:3a:25:ec:ac:c5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9 Validity Not Before: Jan 1 06:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08ca73e99d198dbcebb2e9ad84f936874914ef5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:c0:33:3c:8a:5e:d6:3d:1d:15:61:74:e3: 8b:40:16:57:73:7e:09:ec:5c:de:0b:f8:1d:7f:a7: cd:11:d9:91:41:29:ef:7b:0a:e0:c1:4d:51:7a:65: 50:10:31:2a:11:ce:71:c7:af:26:b3:46:02:ae:01: df:0d:5b:5b:9c:5b:bf:de:6f:94:bf:4d:7e:91:b8: 03:8c:db:bd:61:e0:e4:fe:cc:11:1a:a0:35:c4:b7: b9:69:fe:02:bd:50:d2:fb:ab:20:dc:36:95:a2:75: f5:06:68:42:90:31:82:79:ca:1f:50:c9:91:5d:21: 0a:64:6d:d4:57:68:2c:9c:98:46:85:24:9e:b7:2d: a2:6b:09:a8:8d:96:7c:82:00:11:b2:4d:34:bd:d0: ab:49:77:1a:98:df:f5:de:9e:eb:74:18:e7:52:83: 1e:37:6d:b4:ee:ca:be:e4:42:00:31:fa:41:f4:8a: 22:70:c5:7b:b4:ce:44:d8:1e:41:8c:18:ba:26:12: ad:ed:0d:43:4b:62:4d:80:ce:43:81:93:ca:e6:42: 6d:86:9a:cf:ab:f4:94:9b:37:0d:36:9b:83:16:19: 67:6f:10:2b:22:75:c5:65:b1:46:af:14:08:14:c4: e3:53:94:b1:ef:99:21:69:b0:95:38:16:d1:a9:bb: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CA:73:E9:9D:19:8D:BC:EB:B2:E9:AD:84:F9:36:87:49:14:EF:5E X509v3 Authority Key Identifier: keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/CMpz6Z0ZjbzrsumthPk2h0kU714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.113.188.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:41:65:e6:82:26:6a:76:c9:a6:99:a8:3f:dc:95:83:9e:f6: 28:b3:ab:94:95:d2:e5:1e:06:a3:27:71:f8:eb:e6:7d:cb:64: 38:34:13:5a:f1:7a:88:53:d5:76:42:7a:a4:c2:ba:5b:8e:13: f0:ee:f4:9f:34:4f:21:38:6f:09:83:2a:b8:27:b7:58:f1:7c: 3c:75:92:eb:53:77:88:7a:d6:96:6b:72:bc:bb:22:bc:c9:7c: f2:52:85:e8:c8:e3:b9:85:e1:7b:86:f9:10:dc:5b:8a:a1:ad: 93:30:70:86:78:5e:cd:d6:9f:da:14:e0:19:de:ac:51:c9:e5: af:32:1e:37:e4:a4:33:ee:f7:43:5f:68:eb:80:6a:7e:9e:c6: f8:45:7f:36:b0:04:94:13:26:63:73:57:d6:c1:e9:b1:f1:a7: ff:f0:14:ec:d0:27:a3:dd:1c:41:f2:ee:72:1c:25:08:a5:98: 2f:95:82:18:6c:2b:05:0b:4d:d8:59:7b:b1:8b:e0:49:c4:b9: 91:22:ae:68:bc:2c:4c:0d:c9:2d:10:29:b5:ed:cf:19:7a:d0: 5f:f2:ce:b6:88:d2:5a:47:83:3c:41:20:81:48:f9:26:7a:a6: 26:62:35:98:a1:5a:1a:37:f1:ae:33:67:05:42:2f:6a:b7:cb: 65:48:f9:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNXYepbCC6aBOiXsrMV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjOGZhODUzM2RjYzgyMGJhMWFkNmZiMmIyZjAxNjEwMTA1 MzFkYjkwHhcNMjYwMTAxMDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGNhNzNlOTlkMTk4ZGJjZWJiMmU5YWQ4NGY5MzY4NzQ5MTRlZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd/AMzyKXtY9HRVhdOOLQBZXc34J 7FzeC/gdf6fNEdmRQSnvewrgwU1RemVQEDEqEc5xx68ms0YCrgHfDVtbnFu/3m+U v01+kbgDjNu9YeDk/swRGqA1xLe5af4CvVDS+6sg3DaVonX1BmhCkDGCecofUMmR XSEKZG3UV2gsnJhGhSSety2iawmojZZ8ggARsk00vdCrSXcamN/13p7rdBjnUoMe N2207sq+5EIAMfpB9IoicMV7tM5E2B5BjBi6JhKt7Q1DS2JNgM5DgZPK5kJthprP q/SUmzcNNpuDFhlnbxArInXFZbFGrxQIFMTjU5Sx75khabCVOBbRqbuXPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjKc+mdGY2867LprYT5NodJFO9eMB8GA1UdIwQY MBaAFCyPqFM9zIILoa1vsrLwFhAQUx25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2Et OWU5NmFmNmQ2YThmLzEvQ01wejZaMFpqYnpyc3VtdGhQazJoMGtVNzE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9lN2QzZGUtMTg0NS00MWYzLTkwN2EtOWU5NmFmNmQ2YThm LzEvTEktb1V6M01nZ3VoclcteXN2QVdFQkJUSGJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXG8MA0G CSqGSIb3DQEBCwUAA4IBAQALQWXmgiZqdsmmmag/3JWDnvYos6uUldLlHgajJ3H4 6+Z9y2Q4NBNa8XqIU9V2QnqkwrpbjhPw7vSfNE8hOG8Jgyq4J7dY8Xw8dZLrU3eI etaWa3K8uyK8yXzyUoXoyOO5heF7hvkQ3FuKoa2TMHCGeF7N1p/aFOAZ3qxRyeWv Mh435KQz7vdDX2jrgGp+nsb4RX82sASUEyZjc1fWwemx8af/8BTs0Cej3RxB8u5y HCUIpZgvlYIYbCsFC03YWXuxi+BJxLmRIq5ovCxMDcktECm17c8ZetBf8s62iNJa R4M8QSCBSPkmeqYmYjWYoVoaN/GuM2cFQi9qt8tlSPlP -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:28 2026 by rpki-client