This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/CvwfM_6zHhuKo7Rj0K0qaHy79hM.roa File: CvwfM_6zHhuKo7Rj0K0qaHy79hM.roa (raw, json) Hash identifier: 7Qc+8Z4jv4GQPeDuRi9kM1/JRP0AKNTAWHU28w6X6pA= Subject key identifier: 0A:FC:1F:33:FE:B3:1E:1B:8A:A3:B4:63:D0:AD:2A:68:7C:BB:F6:13 Certificate issuer: /CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c Certificate serial: 019AD9C13A1E64937EEBC2ECCD588610C937 Authority key identifier: B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/CvwfM_6zHhuKo7Rj0K0qaHy79hM.roa Signing time: Mon 01 Dec 2025 11:51:50 +0000 ROA not before: Mon 01 Dec 2025 11:51:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12468 IP address blocks: 212.28.160.0/24 maxlen: 24 212.28.161.0/24 maxlen: 24 212.28.162.0/24 maxlen: 24 212.28.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.mft rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:c1:3a:1e:64:93:7e:eb:c2:ec:cd:58:86:10:c9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b88d0342cf3e714f9c155a4d0df75ff9fb3ff73c Validity Not Before: Dec 1 11:51:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0afc1f33feb31e1b8aa3b463d0ad2a687cbbf613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c3:88:ed:60:2a:cd:07:aa:a7:09:e0:5f:20: 97:d8:a9:e8:2e:e6:c5:d2:bb:a0:1b:14:02:25:20: 38:bd:92:c6:f7:bf:a0:58:09:c7:08:9b:46:a2:a9: b8:00:ec:67:bd:bc:ca:b0:f1:d1:ed:7e:91:d2:23: 12:d6:48:be:cb:0f:de:0c:48:9c:1c:91:ed:34:8a: fe:e1:4e:ab:b7:77:4f:78:cd:0e:90:99:53:27:54: ae:7a:32:ed:9a:cf:aa:c0:2d:13:7e:e9:8c:a6:e3: 5c:0a:91:8d:d2:69:19:85:71:ba:f5:05:88:a7:81: 2a:a9:1d:bf:5b:f9:b4:37:14:30:07:a1:68:99:cd: 68:98:15:4b:20:c7:5b:98:07:e7:5a:ea:23:4b:e3: fd:e0:7d:08:80:71:ed:d3:39:8b:06:61:84:ef:bb: f5:b3:9d:2b:ad:3b:04:6b:66:a7:02:97:0a:e5:58: a9:c2:ce:d0:38:c7:b3:f5:f2:5f:bb:9b:5e:8a:7a: 37:f9:d7:3b:8e:b8:a1:6b:e0:a4:4c:67:80:1a:7a: 20:03:61:bd:43:02:43:35:5f:67:27:7a:50:b4:a0: e0:91:63:24:04:79:5b:35:02:3c:af:22:73:b3:18: e7:5b:06:f7:fe:07:92:48:39:7c:04:7a:30:44:26: 73:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FC:1F:33:FE:B3:1E:1B:8A:A3:B4:63:D0:AD:2A:68:7C:BB:F6:13 X509v3 Authority Key Identifier: keyid:B8:8D:03:42:CF:3E:71:4F:9C:15:5A:4D:0D:F7:5F:F9:FB:3F:F7:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uI0DQs8-cU-cFVpNDfdf-fs_9zw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/CvwfM_6zHhuKo7Rj0K0qaHy79hM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/37d746-5ef9-4b74-bf6f-fe716271a2ad/1/uI0DQs8-cU-cFVpNDfdf-fs_9zw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.28.160.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:8f:70:81:dd:de:f3:b0:9d:13:89:2f:cf:c0:93:70:23:ec: 64:0b:5b:25:ed:99:1d:da:7a:77:1c:41:96:12:0b:63:75:9a: 58:c9:ce:0b:15:96:40:03:c7:43:e1:05:83:88:51:2b:14:ec: e9:fc:73:e6:49:25:23:9f:ef:af:36:64:44:c9:07:cd:a7:eb: 24:0e:9f:44:31:c6:a5:d1:ad:5e:97:99:8e:17:9c:05:4f:15: 2d:5a:e3:d8:48:99:ea:a6:99:e3:b3:11:48:50:e7:cd:18:fc: 2c:2e:93:a1:a8:16:8c:68:9c:3a:8e:fa:81:94:43:08:84:93: 95:b5:c9:9d:3c:0f:9c:c4:2f:55:a0:1d:c9:22:29:3b:40:45: 6f:e8:f5:3b:79:60:ff:76:a6:21:64:ee:d5:d5:91:db:71:c2: e1:11:76:bc:02:b2:65:d6:de:b8:35:fd:fc:91:c3:71:a3:aa: f2:a2:7d:b8:e4:0f:84:d8:fc:c1:29:b5:56:6a:a4:f4:e0:5c: 26:c1:2f:c5:87:dc:9b:d4:f6:e7:c6:12:dc:5f:0e:6c:37:7a: a0:40:7c:c7:4a:85:b9:4e:d8:d5:87:27:39:91:25:3c:ca:7f: 22:5a:5f:cf:cc:fe:0c:3c:00:67:05:82:a2:5c:8d:d5:e6:0a: f8:40:5b:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZwToeZJN+68LszViGEMk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4OGQwMzQyY2YzZTcxNGY5YzE1NWE0ZDBkZjc1ZmY5ZmIz ZmY3M2MwHhcNMjUxMjAxMTE1MTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWZjMWYzM2ZlYjMxZTFiOGFhM2I0NjNkMGFkMmE2ODdjYmJmNjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MOI7WAqzQeqpwngXyCX2KnoLubF 0rugGxQCJSA4vZLG97+gWAnHCJtGoqm4AOxnvbzKsPHR7X6R0iMS1ki+yw/eDEic HJHtNIr+4U6rt3dPeM0OkJlTJ1SuejLtms+qwC0TfumMpuNcCpGN0mkZhXG69QWI p4EqqR2/W/m0NxQwB6Fomc1omBVLIMdbmAfnWuojS+P94H0IgHHt0zmLBmGE77v1 s50rrTsEa2anApcK5Vipws7QOMez9fJfu5teino3+dc7jriha+CkTGeAGnogA2G9 QwJDNV9nJ3pQtKDgkWMkBHlbNQI8ryJzsxjnWwb3/geSSDl8BHowRCZzNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAr8HzP+sx4biqO0Y9CtKmh8u/YTMB8GA1UdIwQY MBaAFLiNA0LPPnFPnBVaTQ33X/n7P/c8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUkwRFFzOC1jVS1jRlZwTkRmZGYtZnNfOXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zN2Q3NDYtNWVmOS00Yjc0LWJmNmYt ZmU3MTYyNzFhMmFkLzEvQ3Z3Zk1fNnpIaHVLbzdSajBLMHFhSHk3OWhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8zN2Q3NDYtNWVmOS00Yjc0LWJmNmYtZmU3MTYyNzFhMmFk LzEvdUkwRFFzOC1jVS1jRlZwTkRmZGYtZnNfOXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1BygMA0G CSqGSIb3DQEBCwUAA4IBAQBKj3CB3d7zsJ0TiS/PwJNwI+xkC1sl7Zkd2np3HEGW EgtjdZpYyc4LFZZAA8dD4QWDiFErFOzp/HPmSSUjn++vNmREyQfNp+skDp9EMcal 0a1el5mOF5wFTxUtWuPYSJnqppnjsxFIUOfNGPwsLpOhqBaMaJw6jvqBlEMIhJOV tcmdPA+cxC9VoB3JIik7QEVv6PU7eWD/dqYhZO7V1ZHbccLhEXa8ArJl1t64Nf38 kcNxo6ryon245A+E2PzBKbVWaqT04FwmwS/Fh9yb1PbnxhLcXw5sN3qgQHzHSoW5 TtjVhyc5kSU8yn8iWl/PzP4MPABnBYKiXI3V5gr4QFs4 -----END CERTIFICATE-----Generated at Sat Dec 6 21:14:42 2025 by rpki-client