This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/CPUhEOExF0ziNZD9XMn51a1QJ3c.roa File: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (raw, json) Hash identifier: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw= Subject key identifier: 08:F5:21:10:E1:31:17:4C:E2:35:90:FD:5C:C9:F9:D5:AD:50:27:77 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019B7A5B526358D6F47939FE064FCE6FBC28 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/CPUhEOExF0ziNZD9XMn51a1QJ3c.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58010 IP address blocks: 185.60.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:52:63:58:d6:f4:79:39:fe:06:4f:ce:6f:bc:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08f52110e131174ce23590fd5cc9f9d5ad502777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:1f:16:ed:05:93:ec:8c:4a:45:5f:b7:93: ce:9d:c2:ba:b8:36:0a:ec:80:64:b9:6e:eb:90:cc: 1e:8f:a9:be:a1:bf:88:78:e9:ee:08:18:88:a8:8a: 80:c5:6f:29:9d:15:78:0a:3a:45:fa:70:f0:b1:e7: 3b:4b:7b:b8:f4:c6:8e:cb:06:b2:41:21:29:eb:8c: 4d:4b:4b:b5:b6:f6:64:22:88:85:9b:f1:16:36:f6: 6b:06:a5:7c:d9:a3:e6:dd:44:0f:24:31:7d:b8:e1: db:0b:74:82:fa:e6:76:bc:75:60:a0:f4:7c:b9:91: 0f:d0:23:c5:63:1f:f5:7b:5c:b2:13:17:cd:77:97: d0:a8:54:b1:3d:48:e2:4f:13:7f:e1:2c:45:1e:37: ec:d1:e6:42:18:72:a9:00:22:71:f5:a1:be:d1:c0: a2:ea:05:f1:5f:ab:07:fa:18:f5:bf:71:02:34:4d: 27:4e:7b:34:c1:d0:a3:ce:ec:f7:3b:90:b5:b0:51: c7:6b:b3:ed:68:b3:ce:86:7f:91:ef:3e:52:e5:ef: 76:8d:96:9c:41:e9:96:c0:72:12:4c:1e:f4:31:0f: 10:ff:31:f6:79:6a:0e:4c:86:b3:d5:e1:6a:3b:4b: d4:10:77:f2:e4:cb:ff:3a:ee:fd:0a:90:7f:dc:78: 5c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F5:21:10:E1:31:17:4C:E2:35:90:FD:5C:C9:F9:D5:AD:50:27:77 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/CPUhEOExF0ziNZD9XMn51a1QJ3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.20.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:97:c7:a0:57:13:20:41:55:b4:7a:d1:29:fd:cb:d5:b5:04: 88:5c:16:ff:a2:b4:ae:b0:21:21:d9:ff:e8:ac:83:02:4d:dd: 48:95:1c:eb:52:03:39:66:ae:85:22:23:b2:63:53:79:74:63: d3:0d:cc:5d:b6:91:18:27:26:61:cb:e0:e8:03:20:6a:96:40: f6:4e:81:73:81:3f:05:cc:7c:2e:20:bf:04:e9:17:89:49:59: e8:07:67:09:48:41:41:17:e2:61:21:6f:39:9b:f6:6a:bc:16: 2b:96:b8:27:61:83:62:d3:9c:55:07:f9:82:e5:df:4b:31:63: e6:53:51:88:88:72:e4:6b:cc:7d:86:14:58:bf:66:16:87:b7: a9:67:7a:1e:44:f5:aa:1e:30:06:39:ef:01:f9:2e:6a:00:46: c2:a7:09:1a:9e:85:4e:d5:5a:e3:84:79:da:77:85:73:62:7e: 00:b4:2c:2e:f2:c2:ed:be:e7:9e:52:1b:69:59:aa:06:fa:74: 63:99:a5:21:ef:79:30:86:02:06:41:e1:e7:d5:51:9f:99:ae: 19:79:8a:4c:b2:94:52:0f:c7:64:74:86:4e:bc:50:d0:2c:f9: 9d:3e:2f:69:f8:ba:05:3b:ed:1d:8e:44:5d:c6:eb:85:eb:4e: 1c:cc:9a:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W1JjWNb0eTn+Bk/Ob7woMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGY1MjExMGUxMzExNzRjZTIzNTkwZmQ1Y2M5ZjlkNWFkNTAyNzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bEfFu0Fk+yMSkVft5POncK6uDYK 7IBkuW7rkMwej6m+ob+IeOnuCBiIqIqAxW8pnRV4CjpF+nDwsec7S3u49MaOyway QSEp64xNS0u1tvZkIoiFm/EWNvZrBqV82aPm3UQPJDF9uOHbC3SC+uZ2vHVgoPR8 uZEP0CPFYx/1e1yyExfNd5fQqFSxPUjiTxN/4SxFHjfs0eZCGHKpACJx9aG+0cCi 6gXxX6sH+hj1v3ECNE0nTns0wdCjzuz3O5C1sFHHa7PtaLPOhn+R7z5S5e92jZac QemWwHISTB70MQ8Q/zH2eWoOTIaz1eFqO0vUEHfy5Mv/Ou79CpB/3HhczQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAj1IRDhMRdM4jWQ/VzJ+dWtUCd3MB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQ1BVaEVPRXhGMHppTlpEOVhNbjUxYTFRSjNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTwUMA0G CSqGSIb3DQEBCwUAA4IBAQCMl8egVxMgQVW0etEp/cvVtQSIXBb/orSusCEh2f/o rIMCTd1IlRzrUgM5Zq6FIiOyY1N5dGPTDcxdtpEYJyZhy+DoAyBqlkD2ToFzgT8F zHwuIL8E6ReJSVnoB2cJSEFBF+JhIW85m/ZqvBYrlrgnYYNi05xVB/mC5d9LMWPm U1GIiHLka8x9hhRYv2YWh7epZ3oeRPWqHjAGOe8B+S5qAEbCpwkanoVO1VrjhHna d4VzYn4AtCwu8sLtvueeUhtpWaoG+nRjmaUh73kwhgIGQeHn1VGfma4ZeYpMspRS D8dkdIZOvFDQLPmdPi9p+LoFO+0djkRdxuuF604czJr+ -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:19 2026 by rpki-client