This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/CL2GMWv6pCXR2_356vc3PKuWXvs.roa File: CL2GMWv6pCXR2_356vc3PKuWXvs.roa (raw, json) Hash identifier: y/dr783gs6j/tPotjhEDFZBriQQscWgnNMDkVNhcMXA= Subject key identifier: 08:BD:86:31:6B:FA:A4:25:D1:DB:FD:F9:EA:F7:37:3C:AB:96:5E:FB Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448 Certificate serial: 019B7758867201DD5C89B0D5CFE438A2C2F5 Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/CL2GMWv6pCXR2_356vc3PKuWXvs.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2199 IP address blocks: 193.54.136.0/24 maxlen: 24 194.57.170.0/24 maxlen: 24 194.199.12.0/24 maxlen: 24 194.199.74.0/24 maxlen: 24 194.199.95.0/24 maxlen: 24 194.199.97.0/24 maxlen: 24 194.199.98.0/24 maxlen: 24 194.254.97.0/24 maxlen: 24 195.83.190.0/24 maxlen: 24 195.83.214.0/24 maxlen: 24 195.83.254.0/24 maxlen: 24 195.83.255.0/24 maxlen: 24 2001:661:2000::/35 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:86:72:01:dd:5c:89:b0:d5:cf:e4:38:a2:c2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08bd86316bfaa425d1dbfdf9eaf7373cab965efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:62:12:ce:52:16:e0:a9:86:05:7a:29:b8:88: c9:89:35:ea:df:ff:9a:eb:d5:e7:d2:02:ed:3b:9f: a3:cb:57:c3:e8:26:c4:b5:28:65:a8:be:f5:c6:4c: d1:d5:77:cd:e2:e3:c9:14:70:46:67:c8:9d:0b:60: 84:6f:01:58:6c:f2:30:15:fa:40:03:b1:08:d8:52: c8:b2:2c:ed:db:d8:9e:10:c5:13:91:74:f3:9c:82: 3d:38:e7:8b:8a:c8:16:8e:cf:05:52:a8:90:84:93: 00:ca:73:0f:9f:13:d4:e8:26:0b:8a:30:84:e0:69: 44:a4:af:67:e0:d1:93:30:42:7c:60:6a:e9:8e:bf: ce:08:95:a4:19:66:b0:9e:fa:a2:32:b0:71:58:8e: c4:ff:38:25:4d:8e:ab:4d:ba:e0:54:8a:52:40:68: c2:1d:09:16:56:e7:df:f4:ef:37:0b:ed:00:99:e3: 8b:1b:c6:58:f0:e7:f6:88:f2:9a:22:01:45:2e:af: 8c:db:8c:2e:a0:86:42:25:5e:7d:47:04:58:02:94: 69:63:43:05:7a:e3:df:a2:eb:4a:3f:69:00:b2:50: dc:bc:c6:b8:9c:c1:e4:72:17:4b:c2:85:43:de:2d: 86:19:20:87:e2:0c:55:29:df:00:c1:48:17:0f:e4: 33:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BD:86:31:6B:FA:A4:25:D1:DB:FD:F9:EA:F7:37:3C:AB:96:5E:FB X509v3 Authority Key Identifier: keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/CL2GMWv6pCXR2_356vc3PKuWXvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.54.136.0/24 194.57.170.0/24 194.199.12.0/24 194.199.74.0/24 194.199.95.0/24 194.199.97.0-194.199.98.255 194.254.97.0/24 195.83.190.0/24 195.83.214.0/24 195.83.254.0/23 IPv6: 2001:661:2000::/35 Signature Algorithm: sha256WithRSAEncryption 7b:df:8e:2a:e7:0c:c5:1f:bb:ea:6b:05:3e:60:bb:74:50:78: ed:33:65:a0:41:82:55:66:88:2e:f1:eb:53:2b:14:07:0a:93: 2e:cf:bb:d3:97:65:a7:36:51:71:00:ee:29:f7:1a:7e:a9:86: 26:66:49:76:ea:fc:36:36:03:d4:d6:1c:d0:12:29:87:67:d6: 28:72:8e:17:16:7e:fa:6a:ed:e9:19:9c:35:7f:6c:99:60:93: b4:17:ce:e5:b5:ae:b8:a9:ac:e1:5a:13:8c:32:bc:99:e5:27: cf:8d:53:53:a2:b8:83:89:23:63:63:67:1b:48:3f:25:86:83: 0c:79:28:f8:70:67:c3:3f:e0:8a:33:88:a9:ba:f2:ac:de:f9: f9:71:b8:6f:5e:c6:82:98:b5:c1:0f:65:86:62:9d:3f:a5:e8: 3d:70:bc:8f:90:63:6b:d4:cd:a0:9f:f3:59:26:73:0a:ed:6d: a0:29:69:17:fa:b2:a0:77:36:61:b6:86:2a:05:75:89:20:2a: 92:13:a0:05:7a:20:27:f5:16:4d:04:e3:26:ae:f8:da:78:34: 4b:5c:eb:aa:ed:61:e3:da:e8:ed:1c:0a:a4:eb:f2:2d:a9:1d: 3b:b9:aa:52:69:94:76:0c:46:84:38:ff:fb:66:7e:26:8b:94: 88:b2:0f:a8 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt3WIZyAd1cibDVz+Q4osL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh ODE0NDgwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGJkODYzMTZiZmFhNDI1ZDFkYmZkZjllYWY3MzczY2FiOTY1ZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GISzlIW4KmGBXopuIjJiTXq3/+a 69Xn0gLtO5+jy1fD6CbEtShlqL71xkzR1XfN4uPJFHBGZ8idC2CEbwFYbPIwFfpA A7EI2FLIsizt29ieEMUTkXTznII9OOeLisgWjs8FUqiQhJMAynMPnxPU6CYLijCE 4GlEpK9n4NGTMEJ8YGrpjr/OCJWkGWawnvqiMrBxWI7E/zglTY6rTbrgVIpSQGjC HQkWVuff9O83C+0AmeOLG8ZY8Of2iPKaIgFFLq+M24wuoIZCJV59RwRYApRpY0MF euPfoutKP2kAslDcvMa4nMHkchdLwoVD3i2GGSCH4gxVKd8AwUgXD+Qz3wIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFAi9hjFr+qQl0dv9+er3Nzyrll77MB8GA1UdIwQY MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt MDRhMjdjNGQ1NDUzLzEvQ0wyR01XdjZwQ1hSMl8zNTZ2YzNQS3VXWHZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBKBAIAATBEAwQAwTaIAwQA wjmqAwQAwscMAwQAwsdKAwQAwsdfMAwDBADCx2EDBADCx2IDBADC/mEDBADDU74D BADDU9YDBAHDU/4wDgQCAAIwCAMGBSABBmEgMA0GCSqGSIb3DQEBCwUAA4IBAQB7 344q5wzFH7vqawU+YLt0UHjtM2WgQYJVZogu8etTKxQHCpMuz7vTl2WnNlFxAO4p 9xp+qYYmZkl26vw2NgPU1hzQEimHZ9Yoco4XFn76au3pGZw1f2yZYJO0F87lta64 qazhWhOMMryZ5SfPjVNToriDiSNjY2cbSD8lhoMMeSj4cGfDP+CKM4ipuvKs3vn5 cbhvXsaCmLXBD2WGYp0/peg9cLyPkGNr1M2gn/NZJnMK7W2gKWkX+rKgdzZhtoYq BXWJICqSE6AFeiAn9RZNBOMmrvjaeDRLXOuq7WHj2ujtHAqk6/ItqR07uapSaZR2 DEaEOP/7Zn4mi5SIsg+o -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:22 2026 by rpki-client