This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/CUgXXLRkY_OPPhqlPwxMef9F3ZU.roa File: CUgXXLRkY_OPPhqlPwxMef9F3ZU.roa (raw, json) Hash identifier: sUArbLzYcuvG5FBs2ID3n/zxNGpyxo+ig96W4IzY0EE= Subject key identifier: 09:48:17:5C:B4:64:63:F3:8F:3E:1A:A5:3F:0C:4C:79:FF:45:DD:95 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE095A2E55E4EB2F0171B827C2B005 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/CUgXXLRkY_OPPhqlPwxMef9F3ZU.roa Signing time: Fri 02 Jan 2026 04:18:53 +0000 ROA not before: Fri 02 Jan 2026 04:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 81.29.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:09:5a:2e:55:e4:eb:2f:01:71:b8:27:c2:b0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0948175cb46463f38f3e1aa53f0c4c79ff45dd95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:0d:e3:fb:44:9f:8c:65:d2:a1:8c:58:3b: 96:3a:98:88:73:3d:2a:af:60:1d:4c:01:b3:83:ef: 7c:9b:1c:51:6f:ef:f7:62:1a:2f:d4:65:8d:e1:af: 72:f6:34:ab:32:69:f0:85:55:00:13:f2:ed:ce:54: da:8d:c9:1b:12:2b:fd:2e:02:50:6e:25:66:c6:8c: e5:61:bf:8d:8e:3a:04:24:05:fe:02:e6:4a:25:cc: 47:45:25:0c:8b:38:0b:65:f0:35:8d:a0:d3:02:dc: 90:25:dc:ef:f2:d4:1d:8e:f6:92:8e:2a:a7:62:b4: a1:d6:be:be:5c:36:fb:71:d8:0f:49:31:1c:a6:d0: 75:b0:c6:08:fb:fc:3c:8c:4a:a0:79:7d:f5:3d:1f: e9:92:b2:7f:34:79:f8:fa:d5:61:00:9c:b9:a3:40: d6:d5:59:4d:21:da:17:66:26:01:79:35:13:c1:d7: b0:8e:25:7d:88:e9:f5:59:39:e8:84:a4:d2:e0:99: c5:c3:ed:6e:1e:4c:35:25:14:b1:b0:15:c3:17:42: 94:09:99:9e:8b:33:93:89:6a:7a:29:6f:8f:b3:f1: ee:a7:b7:b2:27:30:83:4a:61:af:a2:51:08:4a:1d: cf:a6:91:a5:c8:55:94:8d:56:87:f2:2e:fc:0b:c7: 78:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:48:17:5C:B4:64:63:F3:8F:3E:1A:A5:3F:0C:4C:79:FF:45:DD:95 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/CUgXXLRkY_OPPhqlPwxMef9F3ZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.144.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:b6:15:5f:31:30:3e:e4:ac:89:0b:14:b2:d7:4b:ff:ec:73: 05:b1:da:8e:b4:e2:43:6d:a2:e6:ee:b5:b8:16:4f:1c:a1:f5: e8:bf:c3:a5:94:a8:ee:ab:cb:7e:4c:21:3a:1f:a3:62:55:29: c9:d4:68:7b:75:84:2a:02:70:73:25:b0:38:20:1e:31:b5:77: d9:64:f3:43:1b:c5:60:c7:54:78:c5:fa:8b:53:3b:d7:6c:93: 20:2f:08:d9:58:a1:8e:90:66:63:c9:0b:c8:f2:6f:07:25:ed: a0:9d:eb:10:ae:43:b4:ff:37:c8:1a:c1:84:bd:d4:19:11:cd: 94:44:e9:3d:f7:ef:e7:60:02:57:06:0a:8b:f8:40:18:16:65: 18:4d:51:4a:b1:e3:bb:97:6d:43:ab:ad:1a:3c:12:7c:5a:4e: 9b:21:69:e6:20:51:82:89:d8:25:37:dc:83:09:9f:77:97:96: 18:0c:3a:1d:01:1b:55:0a:69:8c:40:48:23:5e:3f:c9:d2:2f: 1d:11:fd:8c:7a:1e:99:cc:a7:05:5a:bd:55:98:39:1f:95:5e: 09:e5:74:cf:29:28:e6:09:d2:48:57:4f:f1:4b:5f:f5:f5:a2: 7b:84:a4:9d:a6:76:32:09:78:b4:78:d5:eb:47:c4:86:b7:d0: 76:0d:64:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87glaLlXk6y8BcbgnwrAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTQ4MTc1Y2I0NjQ2M2YzOGYzZTFhYTUzZjBjNGM3OWZmNDVkZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbkN4/tEn4xl0qGMWDuWOpiIcz0q r2AdTAGzg+98mxxRb+/3Yhov1GWN4a9y9jSrMmnwhVUAE/LtzlTajckbEiv9LgJQ biVmxozlYb+NjjoEJAX+AuZKJcxHRSUMizgLZfA1jaDTAtyQJdzv8tQdjvaSjiqn YrSh1r6+XDb7cdgPSTEcptB1sMYI+/w8jEqgeX31PR/pkrJ/NHn4+tVhAJy5o0DW 1VlNIdoXZiYBeTUTwdewjiV9iOn1WTnohKTS4JnFw+1uHkw1JRSxsBXDF0KUCZme izOTiWp6KW+Ps/Hup7eyJzCDSmGvolEISh3PppGlyFWUjVaH8i78C8d4ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAlIF1y0ZGPzjz4apT8MTHn/Rd2VMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvQ1VnWFhMUmtZX09QUGhxbFB3eE1lZjlGM1pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2QMA0G CSqGSIb3DQEBCwUAA4IBAQCfthVfMTA+5KyJCxSy10v/7HMFsdqOtOJDbaLm7rW4 Fk8cofXov8OllKjuq8t+TCE6H6NiVSnJ1Gh7dYQqAnBzJbA4IB4xtXfZZPNDG8Vg x1R4xfqLUzvXbJMgLwjZWKGOkGZjyQvI8m8HJe2gnesQrkO0/zfIGsGEvdQZEc2U ROk99+/nYAJXBgqL+EAYFmUYTVFKseO7l21Dq60aPBJ8Wk6bIWnmIFGCidglN9yD CZ93l5YYDDodARtVCmmMQEgjXj/J0i8dEf2Meh6ZzKcFWr1VmDkflV4J5XTPKSjm CdJIV0/xS1/19aJ7hKSdpnYyCXi0eNXrR8SGt9B2DWQj -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:08 2026 by rpki-client