This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/CVFC2AZT4zU7rxI78osYUeetX2c.roa File: CVFC2AZT4zU7rxI78osYUeetX2c.roa (raw, json) Hash identifier: ISGwaf6fRTl6b38lrffHUitVBZ3yWrYSjAcvo0Gl7Qs= Subject key identifier: 09:51:42:D8:06:53:E3:35:3B:AF:12:3B:F2:8B:18:51:E7:AD:5F:67 Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43 Certificate serial: 019B7EA506F78D5F7779381884B1CF681B1E Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/CVFC2AZT4zU7rxI78osYUeetX2c.roa Signing time: Fri 02 Jan 2026 12:18:22 +0000 ROA not before: Fri 02 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 185.131.204.0/24 maxlen: 24 2a12:bfc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.mft rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:06:f7:8d:5f:77:79:38:18:84:b1:cf:68:1b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43 Validity Not Before: Jan 2 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=095142d80653e3353baf123bf28b1851e7ad5f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:30:50:2b:54:8b:24:19:76:1b:e5:0e:75:61: 4d:c2:69:e5:19:ed:20:62:e9:14:b2:1c:ae:b8:a7: ba:77:d2:b9:f5:e1:7f:2d:c5:36:4c:be:26:ad:ef: 56:e1:75:70:34:ac:1c:9f:d4:d9:12:bb:44:cf:f3: 51:99:9c:c3:01:cc:84:9c:3d:02:bd:a4:6f:1d:9a: 06:ac:82:a1:c8:f4:0b:8b:5a:08:02:09:e0:97:ff: f5:8f:77:ee:8f:6b:f4:86:7f:4e:8b:a1:88:19:3e: e1:eb:36:f3:fc:ff:c6:42:95:87:33:41:3c:8b:de: 43:45:ef:7a:b2:17:cb:eb:19:98:7b:22:0e:43:87: 1a:13:64:69:82:b3:02:2d:66:48:97:80:04:f8:62: 60:5a:21:42:83:b4:2e:96:83:cf:b6:d7:73:96:1f: 7d:2f:b9:62:c9:a5:21:6b:25:4d:61:7e:88:71:17: 93:d4:39:09:4f:a0:06:ea:16:2b:e6:36:6a:ed:15: 02:a2:8b:78:9c:4b:11:54:95:c6:01:51:99:c1:06: 36:10:4e:bd:ca:ff:0d:bf:8e:92:87:ac:38:88:c1: f8:4b:d4:de:d1:95:05:5a:3f:94:1a:3c:8c:1d:b1: 77:74:c8:a4:4d:eb:3d:de:6e:d1:7b:ee:ce:ab:53: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:51:42:D8:06:53:E3:35:3B:AF:12:3B:F2:8B:18:51:E7:AD:5F:67 X509v3 Authority Key Identifier: keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/CVFC2AZT4zU7rxI78osYUeetX2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.204.0/24 IPv6: 2a12:bfc0::/48 Signature Algorithm: sha256WithRSAEncryption 76:36:a2:38:ff:94:82:8b:ae:1a:83:a8:a7:43:07:97:f7:70: 10:61:66:1d:db:d3:28:b5:fb:be:79:a0:11:85:4b:57:cf:72: 5f:9d:c6:82:d7:31:d3:53:7b:6a:1c:40:54:02:05:f3:a9:0e: 84:75:59:11:44:f4:f3:10:71:79:d6:b8:71:6f:cb:a6:7c:07: 9d:36:ee:26:95:94:82:b8:20:9f:11:62:22:28:1c:c3:04:0c: 52:7f:8c:c8:6f:b2:fe:f3:b9:b7:1f:8f:56:5e:1b:ed:34:e2: f0:c6:b3:b9:d2:72:f7:85:bd:fd:f6:95:e2:71:48:af:17:db: 54:43:2e:2e:c2:7b:b0:27:53:91:a0:a5:ce:c6:c8:13:a1:5d: 81:ec:f6:b3:fe:83:76:ba:55:0e:88:c9:02:84:97:77:e6:de: a7:cd:a4:1e:84:02:90:dd:f6:3d:51:a2:a2:98:d2:c6:d9:cb: c3:b3:b4:7b:f6:2a:ff:f8:4d:83:2b:d7:90:e4:48:02:59:3b: a1:5a:45:d1:81:db:47:54:b5:7a:d8:65:a6:20:6e:e2:ac:23: 67:52:34:f1:e7:7b:14:3b:77:02:f7:8a:ee:f0:e2:2b:06:f6: ba:ee:90:bf:6b:46:08:e9:7d:12:e0:c2:b1:40:37:5e:5b:bb: d9:41:da:5c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pQb3jV93eTgYhLHPaBseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmIyNmM1NTI1NjMwMDYyMTNjZmU0ODE0YTlkYzJhMGZj MTZmNDMwHhcNMjYwMTAyMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTUxNDJkODA2NTNlMzM1M2JhZjEyM2JmMjhiMTg1MWU3YWQ1ZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTBQK1SLJBl2G+UOdWFNwmnlGe0g YukUshyuuKe6d9K59eF/LcU2TL4mre9W4XVwNKwcn9TZErtEz/NRmZzDAcyEnD0C vaRvHZoGrIKhyPQLi1oIAgngl//1j3fuj2v0hn9Oi6GIGT7h6zbz/P/GQpWHM0E8 i95DRe96shfL6xmYeyIOQ4caE2RpgrMCLWZIl4AE+GJgWiFCg7QuloPPttdzlh99 L7liyaUhayVNYX6IcReT1DkJT6AG6hYr5jZq7RUCoot4nEsRVJXGAVGZwQY2EE69 yv8Nv46Sh6w4iMH4S9Te0ZUFWj+UGjyMHbF3dMikTes93m7Re+7Oq1MOGwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAlRQtgGU+M1O68SO/KLGFHnrV9nMB8GA1UdIwQY MBaAFC8rJsVSVjAGITz+SBSp3CoPwW9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjkt MWMzNWI4MzkzNzliLzEvQ1ZGQzJBWlQ0elU3cnhJNzhvc1lVZWV0WDJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80Y2MxMTUtYWY2NS00OTEzLTlkNjktMWMzNWI4MzkzNzli LzEvTHlzbXhWSldNQVloUFA1SUZLbmNLZ19CYjBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuYPMMA8E AgACMAkDBwAqEr/AAAAwDQYJKoZIhvcNAQELBQADggEBAHY2ojj/lIKLrhqDqKdD B5f3cBBhZh3b0yi1+755oBGFS1fPcl+dxoLXMdNTe2ocQFQCBfOpDoR1WRFE9PMQ cXnWuHFvy6Z8B5027iaVlIK4IJ8RYiIoHMMEDFJ/jMhvsv7zubcfj1ZeG+004vDG s7nScveFvf32leJxSK8X21RDLi7Ce7AnU5Ggpc7GyBOhXYHs9rP+g3a6VQ6IyQKE l3fm3qfNpB6EApDd9j1RoqKY0sbZy8OztHv2Kv/4TYMr15DkSAJZO6FaRdGB20dU tXrYZaYgbuKsI2dSNPHnexQ7dwL3iu7w4isG9rrukL9rRgjpfRLgwrFAN15bu9lB 2lw= -----END CERTIFICATE-----Generated at Mon Jan 26 05:06:08 2026 by rpki-client