This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/CuEyheF-29dttpD6VLLaExCFGAA.roa File: CuEyheF-29dttpD6VLLaExCFGAA.roa (raw, json) Hash identifier: R6vjhi7yIbFl0joD76O7Kh49JYPbEdB6dMSlf59XV7s= Subject key identifier: 0A:E1:32:85:E1:7E:DB:D7:6D:B6:90:FA:54:B2:DA:13:10:85:18:00 Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Certificate serial: 019B7EA53F63A46D6A7D41958A1E5F643879 Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/CuEyheF-29dttpD6VLLaExCFGAA.roa Signing time: Fri 02 Jan 2026 12:18:37 +0000 ROA not before: Fri 02 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60893 IP address blocks: 195.234.156.0/24 maxlen: 24 195.234.159.0/24 maxlen: 24 195.234.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:3f:63:a4:6d:6a:7d:41:95:8a:1e:5f:64:38:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2 Validity Not Before: Jan 2 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ae13285e17edbd76db690fa54b2da1310851800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:bc:3d:90:59:99:8e:41:63:11:0e:5b:91: a7:ce:34:d8:bc:9d:dc:ec:67:0c:8a:2e:cd:8d:0b: 2c:0c:b0:2b:cb:04:75:40:09:d8:4a:b7:fd:91:8a: 2e:13:4c:6c:c1:e7:6c:e2:5a:1f:5e:29:09:a2:26: a8:90:ef:85:f6:88:b6:b3:65:df:28:58:c5:29:91: e3:a4:77:46:a5:1e:45:3c:ce:a8:d7:65:64:71:5d: a0:6e:b3:5b:83:5e:9d:71:f7:e7:6d:f8:25:92:c0: f2:8a:f5:12:63:0d:ab:ee:65:92:56:74:f3:97:c9: 2c:85:db:2f:28:51:c5:3c:f9:d9:0b:5a:a0:52:1e: 85:ad:dc:84:1a:ba:fc:af:89:b6:bf:d1:a1:39:9c: 6a:04:8d:82:ed:6c:a3:1c:26:1b:c0:38:31:0c:93: 91:b1:aa:db:46:67:01:72:ac:b8:91:60:aa:04:1e: b3:21:af:a6:2a:f4:58:ec:ae:7b:da:4a:53:5d:ad: 0b:6e:5d:b8:76:ce:a4:9c:8f:e7:18:e1:64:e3:7e: a9:53:9e:8a:61:5f:5d:91:25:fa:d3:fe:aa:b6:01: f9:9a:6a:2e:83:a8:d6:de:cd:9f:43:63:fe:30:5e: 3a:3e:e5:dd:91:bd:67:c0:e6:c7:cb:18:65:db:25: d5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E1:32:85:E1:7E:DB:D7:6D:B6:90:FA:54:B2:DA:13:10:85:18:00 X509v3 Authority Key Identifier: keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/CuEyheF-29dttpD6VLLaExCFGAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.156.0/24 195.234.159.0/24 195.234.161.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:c6:2d:c9:85:49:95:73:5e:9c:72:f8:f1:38:ab:78:2e:af: 46:0c:e4:74:60:b9:f8:94:4d:60:20:f8:89:63:ad:ba:46:b1: f0:c1:64:26:63:13:ac:a3:ae:76:94:64:16:c4:c3:67:a2:19: fd:4c:aa:2c:0a:48:19:a1:26:17:1e:1e:2a:67:af:d0:b2:87: 7f:22:7c:04:02:2b:eb:bf:76:df:ce:5b:b1:34:be:7a:3f:42: b1:33:dc:bd:9a:6b:8c:7d:6f:36:be:6b:ab:6c:ff:d9:d8:76: bc:9f:3c:c5:52:1b:45:62:93:34:27:f7:c3:5a:c7:0b:7e:40: 05:e8:2e:97:85:d7:09:ea:1a:be:d4:56:28:77:27:2a:c7:3f: d5:0e:2b:b1:f1:46:2d:c8:6f:4d:b0:37:30:2f:ff:87:83:b5: b1:24:26:fc:7a:15:dd:94:78:f4:05:34:47:54:e7:a0:9b:17: b4:76:49:81:a3:e9:54:f0:5b:5c:34:9b:86:4e:b8:26:aa:72: f8:ff:e8:8b:83:d7:1d:33:63:fd:a7:d9:0d:f3:b5:4f:12:45: cb:be:51:25:84:65:56:26:eb:c6:46:95:2e:a7:c7:47:82:db: d3:b5:00:7d:11:e7:3b:94:aa:df:bf:34:3b:39:3e:6d:26:45: 7c:2f:f4:fa -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pT9jpG1qfUGVih5fZDh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3 M2NhZjIwHhcNMjYwMTAyMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWUxMzI4NWUxN2VkYmQ3NmRiNjkwZmE1NGIyZGExMzEwODUxODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqta8PZBZmY5BYxEOW5GnzjTYvJ3c 7GcMii7NjQssDLArywR1QAnYSrf9kYouE0xsweds4lofXikJoiaokO+F9oi2s2Xf KFjFKZHjpHdGpR5FPM6o12VkcV2gbrNbg16dcffnbfglksDyivUSYw2r7mWSVnTz l8kshdsvKFHFPPnZC1qgUh6FrdyEGrr8r4m2v9GhOZxqBI2C7WyjHCYbwDgxDJOR sarbRmcBcqy4kWCqBB6zIa+mKvRY7K572kpTXa0Lbl24ds6knI/nGOFk436pU56K YV9dkSX60/6qtgH5mmoug6jW3s2fQ2P+MF46PuXdkb1nwObHyxhl2yXVswIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFArhMoXhftvXbbaQ+lSy2hMQhRgAMB8GA1UdIwQY MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt NjQ4MjA0MWE4MjQ2LzEvQ3VFeWhlRi0yOWR0dHBENlZMTGFFeENGR0FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2 LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAw+qcAwQA w+qfAwQAw+qhMA0GCSqGSIb3DQEBCwUAA4IBAQArxi3JhUmVc16ccvjxOKt4Lq9G DOR0YLn4lE1gIPiJY626RrHwwWQmYxOso652lGQWxMNnohn9TKosCkgZoSYXHh4q Z6/Qsod/InwEAivrv3bfzluxNL56P0KxM9y9mmuMfW82vmurbP/Z2Ha8nzzFUhtF YpM0J/fDWscLfkAF6C6XhdcJ6hq+1FYodycqxz/VDiux8UYtyG9NsDcwL/+Hg7Wx JCb8ehXdlHj0BTRHVOegmxe0dkmBo+lU8FtcNJuGTrgmqnL4/+iLg9cdM2P9p9kN 87VPEkXLvlElhGVWJuvGRpUup8dHgtvTtQB9Eec7lKrfvzQ7OT5tJkV8L/T6 -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:29 2026 by rpki-client