This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/cpQeC7JdZ4rm3c5tEG-NcWy1tuA.roa File: cpQeC7JdZ4rm3c5tEG-NcWy1tuA.roa (raw, json) Hash identifier: LDog70jp5w8hqeHMrq0wKz92R22TE3D4I3nAqttcY8k= Subject key identifier: 72:94:1E:0B:B2:5D:67:8A:E6:DD:CE:6D:10:6F:8D:71:6C:B5:B6:E0 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C77ACA38CC1FE8D70929F5928233D3 Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/cpQeC7JdZ4rm3c5tEG-NcWy1tuA.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56373 IP address blocks: 82.177.12.0/23 maxlen: 24 82.177.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7a:ca:38:cc:1f:e8:d7:09:29:f5:92:82:33:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72941e0bb25d678ae6ddce6d106f8d716cb5b6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:56:9e:38:af:4f:46:98:5f:c9:ad:1a:cb:d3: 38:fc:69:50:02:61:d6:c7:f7:33:ba:d5:e2:a0:86: 74:f9:19:b9:91:75:bc:97:68:8e:ae:96:8c:d9:5c: 43:d3:70:7e:9c:6b:17:22:d5:3f:64:28:15:c2:34: bd:99:62:f2:f1:47:d8:3a:ce:bf:98:f3:f8:6c:8b: c7:6f:96:e8:95:57:f1:1d:83:6b:e1:00:77:82:d6: f8:7f:36:e3:18:4b:70:9e:77:a7:dc:81:a8:ab:22: 6f:7f:cb:7b:c7:de:2b:d6:fe:9c:8a:47:49:71:df: 63:8e:f3:67:2b:3b:21:ed:69:aa:68:71:62:ac:1a: ad:74:3f:5a:75:57:03:63:49:bf:14:46:e0:c6:32: 2a:07:b2:7b:f9:0b:50:d2:5e:d7:10:11:01:1b:4f: 28:43:8e:5d:ea:55:11:1b:21:22:78:56:07:b8:0d: 75:40:b4:70:56:6d:5a:d4:ca:00:2d:c7:4d:d1:28: da:ea:5f:b4:93:ad:4a:9f:8e:46:08:e5:25:ba:89: 41:76:c7:96:8e:40:08:50:2d:61:4f:15:08:3e:e9: ff:40:75:c0:47:03:b7:bf:ed:ef:67:7a:ac:9d:6f: 53:70:8c:f5:a1:83:e4:f0:71:90:98:3c:70:ab:22: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:94:1E:0B:B2:5D:67:8A:E6:DD:CE:6D:10:6F:8D:71:6C:B5:B6:E0 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/cpQeC7JdZ4rm3c5tEG-NcWy1tuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.177.12.0/23 Signature Algorithm: sha256WithRSAEncryption a0:b4:4e:ea:a4:02:d5:4c:80:08:47:72:77:27:f4:a9:8f:dd: eb:70:47:61:88:df:20:1c:e6:5c:77:c1:14:e4:cc:28:d7:5f: 55:c1:d3:ec:d5:49:2c:22:4b:c6:50:98:39:2e:7c:c1:ca:41: 6e:5d:5c:ef:74:04:6c:4d:64:fb:f2:ee:e5:f1:e7:97:1b:41: 94:22:45:a1:31:85:87:0c:d7:bc:59:a5:84:6d:d8:d9:9f:d4: da:b1:c4:55:a0:0a:c4:a8:d9:f6:d8:ff:73:dd:8e:dd:1d:ea: 36:a1:b0:77:52:ea:33:25:7f:f8:85:33:4b:e0:a5:5d:32:a1: e3:0f:9c:aa:81:bf:24:a9:e9:af:38:59:51:71:ef:1e:df:87: b4:c1:d7:15:dd:39:d9:e3:fe:e6:ea:36:0c:d1:f2:a7:e8:46: 6c:19:ce:d2:6b:83:13:24:9a:e9:01:77:68:8f:01:e7:40:8f: 16:82:55:a0:6b:91:36:4f:31:5e:16:0d:4c:8e:8b:22:c4:36: 9a:1a:8e:2b:22:bd:de:38:04:8e:0e:92:b1:43:87:60:87:31: c1:b4:16:21:e9:dd:3e:88:10:2f:1c:fd:0c:df:b3:10:25:b1: 8e:61:be:80:81:38:be:0d:6e:b5:f0:01:19:1a:1c:9a:f0:73: 06:b3:24:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3rKOMwf6NcJKfWSgjPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjk0MWUwYmIyNWQ2NzhhZTZkZGNlNmQxMDZmOGQ3MTZjYjViNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFaeOK9PRphfya0ay9M4/GlQAmHW x/czutXioIZ0+Rm5kXW8l2iOrpaM2VxD03B+nGsXItU/ZCgVwjS9mWLy8UfYOs6/ mPP4bIvHb5bolVfxHYNr4QB3gtb4fzbjGEtwnnen3IGoqyJvf8t7x94r1v6cikdJ cd9jjvNnKzsh7WmqaHFirBqtdD9adVcDY0m/FEbgxjIqB7J7+QtQ0l7XEBEBG08o Q45d6lURGyEieFYHuA11QLRwVm1a1MoALcdN0Sja6l+0k61Kn45GCOUluolBdseW jkAIUC1hTxUIPun/QHXARwO3v+3vZ3qsnW9TcIz1oYPk8HGQmDxwqyKQuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKUHguyXWeK5t3ObRBvjXFstbbgMB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvY3BRZUM3SmRaNHJtM2M1dEVHLU5jV3kxdHVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUrEMMA0G CSqGSIb3DQEBCwUAA4IBAQCgtE7qpALVTIAIR3J3J/Spj93rcEdhiN8gHOZcd8EU 5Mwo119VwdPs1UksIkvGUJg5LnzBykFuXVzvdARsTWT78u7l8eeXG0GUIkWhMYWH DNe8WaWEbdjZn9TascRVoArEqNn22P9z3Y7dHeo2obB3UuozJX/4hTNL4KVdMqHj D5yqgb8kqemvOFlRce8e34e0wdcV3TnZ4/7m6jYM0fKn6EZsGc7Sa4MTJJrpAXdo jwHnQI8WglWga5E2TzFeFg1MjosixDaaGo4rIr3eOASODpKxQ4dghzHBtBYh6d0+ iBAvHP0M37MQJbGOYb6AgTi+DW618AEZGhya8HMGsyRY -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:55 2026 by rpki-client