This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/CuUCOVoBNa4lfloeWs6XIVB_B4Y.roa File: CuUCOVoBNa4lfloeWs6XIVB_B4Y.roa (raw, json) Hash identifier: TuLZ7u/Cx0w1+WEAiUv8OozNkGlySiKUJnI2uVfgxus= Subject key identifier: 0A:E5:02:39:5A:01:35:AE:25:7E:5A:1E:5A:CE:97:21:50:7F:07:86 Certificate issuer: /CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326 Certificate serial: 019B7A5B5C18B89296468ACF1EACD0E59B23 Authority key identifier: BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/CuUCOVoBNa4lfloeWs6XIVB_B4Y.roa Signing time: Thu 01 Jan 2026 16:19:26 +0000 ROA not before: Thu 01 Jan 2026 16:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 91.209.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.mft rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:5c:18:b8:92:96:46:8a:cf:1e:ac:d0:e5:9b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb2cf1ed105c5c1dc527bcd0f149fe9449ebd326 Validity Not Before: Jan 1 16:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ae502395a0135ae257e5a1e5ace9721507f0786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:c2:09:15:c3:83:c5:c8:39:51:4d:3b:4d: 50:b1:2e:16:73:fe:54:0a:e4:83:d6:d6:75:a3:1d: 8a:6a:a5:52:6e:64:fa:2e:02:27:24:d5:d5:08:0b: b7:24:84:ce:36:da:90:70:10:74:ce:b3:f7:ee:e2: 3c:e1:b7:e1:51:73:45:7a:00:b5:9a:30:cc:27:3e: e9:c0:25:30:3e:09:3b:ea:e6:2a:b6:5f:69:b8:23: a9:f9:5b:eb:b1:c8:95:92:4a:2f:d4:35:15:a6:02: d9:80:d0:07:ee:4f:28:45:37:62:af:e5:d4:2b:9f: 48:63:dc:8b:0a:20:e1:b9:5e:1f:bf:07:82:11:c0: 02:0e:9b:17:3d:89:da:d5:f4:63:30:bc:12:fc:b5: 6c:17:16:46:33:0f:ab:95:26:9b:0f:b8:5f:29:2c: fc:2a:cd:d6:e5:b3:ac:9f:9e:d8:a2:81:dc:6a:f7: ab:16:72:93:78:e0:b3:21:4f:fe:14:d0:55:72:2e: ce:fa:f3:da:99:b8:a6:4b:0f:57:34:a8:03:d4:ce: 01:a1:03:94:1a:35:ea:97:71:e4:4d:6a:d2:a9:2d: 1f:ed:c1:b7:5a:cf:8a:83:0c:6a:a0:91:5f:c1:db: 30:eb:21:18:83:f1:cf:c6:18:56:c2:52:55:f0:51: 2d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E5:02:39:5A:01:35:AE:25:7E:5A:1E:5A:CE:97:21:50:7F:07:86 X509v3 Authority Key Identifier: keyid:BB:2C:F1:ED:10:5C:5C:1D:C5:27:BC:D0:F1:49:FE:94:49:EB:D3:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/CuUCOVoBNa4lfloeWs6XIVB_B4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/241b4b-fed6-45e9-b6ec-751c74e67d38/1/uyzx7RBcXB3FJ7zQ8Un-lEnr0yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.158.0/24 Signature Algorithm: sha256WithRSAEncryption 14:f7:da:b9:30:a9:45:88:cb:37:4d:aa:64:12:ea:36:4a:11: 3e:c2:bb:10:78:b4:ba:94:74:ac:0f:0a:b5:9d:36:97:48:fd: d1:21:30:dc:44:48:cd:b1:f4:88:02:bb:ae:de:60:4f:2a:a6: 61:32:97:ad:a5:50:91:72:f7:10:c3:c4:ae:01:2f:0d:ef:38: f4:f1:84:23:31:a7:21:4d:e1:a1:04:3c:28:a3:80:a6:47:79: 39:69:8d:7c:57:60:9c:a9:3c:5f:89:04:0f:d6:93:ff:76:ff: b8:b7:97:b8:f4:1d:fc:a9:99:20:91:f1:8f:25:77:9f:22:65: 8f:ce:58:cb:cd:29:42:b6:50:41:4c:ad:1a:61:9e:9d:79:c3: 2e:2e:b7:21:77:d9:7c:5e:7e:5f:21:2a:3d:86:23:89:9a:67: 5d:e0:73:17:a0:0d:16:89:af:a2:a2:ea:33:48:45:32:16:d7: 29:3c:f4:42:bf:e6:08:8e:b0:63:fb:17:d9:81:9c:44:3c:6f: 78:92:e5:42:b5:ec:3c:aa:76:98:7d:12:f7:77:a8:ac:49:2d: f1:32:c8:3c:89:d5:51:9e:03:af:77:8e:58:91:d8:89:f2:17: 59:da:b4:c5:ae:0f:6c:8e:e9:32:ce:01:9c:5a:09:3c:22:5e: d3:f7:1c:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1wYuJKWRorPHqzQ5ZsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiMmNmMWVkMTA1YzVjMWRjNTI3YmNkMGYxNDlmZTk0NDll YmQzMjYwHhcNMjYwMTAxMTYxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWU1MDIzOTVhMDEzNWFlMjU3ZTVhMWU1YWNlOTcyMTUwN2YwNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC/CCRXDg8XIOVFNO01QsS4Wc/5U CuSD1tZ1ox2KaqVSbmT6LgInJNXVCAu3JITONtqQcBB0zrP37uI84bfhUXNFegC1 mjDMJz7pwCUwPgk76uYqtl9puCOp+VvrsciVkkov1DUVpgLZgNAH7k8oRTdir+XU K59IY9yLCiDhuV4fvweCEcACDpsXPYna1fRjMLwS/LVsFxZGMw+rlSabD7hfKSz8 Ks3W5bOsn57YooHcaverFnKTeOCzIU/+FNBVci7O+vPambimSw9XNKgD1M4BoQOU GjXql3HkTWrSqS0f7cG3Ws+KgwxqoJFfwdsw6yEYg/HPxhhWwlJV8FEtCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFArlAjlaATWuJX5aHlrOlyFQfweGMB8GA1UdIwQY MBaAFLss8e0QXFwdxSe80PFJ/pRJ69MmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8yNDFiNGItZmVkNi00NWU5LWI2ZWMt NzUxYzc0ZTY3ZDM4LzEvQ3VVQ09Wb0JOYTRsZmxvZVdzNlhJVkJfQjRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8yNDFiNGItZmVkNi00NWU5LWI2ZWMtNzUxYzc0ZTY3ZDM4 LzEvdXl6eDdSQmNYQjNGSjd6UThVbi1sRW5yMHlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9GeMA0G CSqGSIb3DQEBCwUAA4IBAQAU99q5MKlFiMs3TapkEuo2ShE+wrsQeLS6lHSsDwq1 nTaXSP3RITDcREjNsfSIAruu3mBPKqZhMpetpVCRcvcQw8SuAS8N7zj08YQjMach TeGhBDwoo4CmR3k5aY18V2CcqTxfiQQP1pP/dv+4t5e49B38qZkgkfGPJXefImWP zljLzSlCtlBBTK0aYZ6decMuLrchd9l8Xn5fISo9hiOJmmdd4HMXoA0Wia+iouoz SEUyFtcpPPRCv+YIjrBj+xfZgZxEPG94kuVCtew8qnaYfRL3d6isSS3xMsg8idVR ngOvd45YkdiJ8hdZ2rTFrg9sjukyzgGcWgk8Il7T9xzp -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:29 2026 by rpki-client