This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/cV-z3VBLUASMrIq4SMj8YmJTXjU.roa File: cV-z3VBLUASMrIq4SMj8YmJTXjU.roa (raw, json) Hash identifier: zZS+jPf5y7gr08V8zCZfQbJhX967ajmJFVAkbk/01Ew= Subject key identifier: 71:5F:B3:DD:50:4B:50:04:8C:AC:8A:B8:48:C8:FC:62:62:53:5E:35 Certificate issuer: /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd Certificate serial: 019B7AC91A7B148624778F89C76974BD9336 Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/cV-z3VBLUASMrIq4SMj8YmJTXjU.roa Signing time: Thu 01 Jan 2026 18:19:18 +0000 ROA not before: Thu 01 Jan 2026 18:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20546 IP address blocks: 213.189.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:1a:7b:14:86:24:77:8f:89:c7:69:74:bd:93:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd Validity Not Before: Jan 1 18:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=715fb3dd504b50048cac8ab848c8fc6262535e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:21:21:01:64:4c:9d:06:9e:34:86:7a:c3: 62:fd:bb:3a:c7:03:1b:dc:64:ad:37:ef:c9:7f:b8: d8:70:bc:d1:2f:31:58:7a:bd:6c:f9:38:ec:26:18: c7:7e:ee:70:9c:3f:43:a9:61:5f:9e:89:97:86:d0: 07:81:8c:dc:7d:ea:37:f6:48:eb:98:0c:c9:01:82: 7f:e8:42:90:42:74:f6:a3:70:b2:7d:a4:95:d0:52: c8:84:97:c3:40:db:ae:61:b8:73:71:f2:24:c6:4a: 89:6e:6f:31:43:2f:2a:df:4c:0f:5e:27:44:21:59: 7e:e7:0a:1a:c2:ca:cb:9b:01:a6:df:b6:1d:7f:64: ce:0e:3c:2b:67:bf:ae:32:2c:5f:e2:a6:cd:24:22: cd:ea:b4:9e:ec:b5:53:af:02:32:c7:fe:2b:fd:fc: 51:70:58:f3:99:b7:b5:3f:36:94:69:09:9c:5e:39: b1:94:a9:8e:5f:92:1e:e4:85:72:13:37:7b:44:e6: 9e:9f:f8:61:08:46:33:cc:73:7e:07:3d:2b:84:67: ae:c5:98:ba:16:a7:a0:88:c4:4b:97:a2:34:b9:44: 33:1a:65:c8:8f:f7:88:02:8c:fa:ba:f6:32:f8:7f: 57:e2:13:dc:cd:9e:d7:63:62:10:88:3b:5c:ae:30: 74:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:B3:DD:50:4B:50:04:8C:AC:8A:B8:48:C8:FC:62:62:53:5E:35 X509v3 Authority Key Identifier: keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/cV-z3VBLUASMrIq4SMj8YmJTXjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.189.147.0/24 Signature Algorithm: sha256WithRSAEncryption 06:cf:b5:78:b0:b5:38:f7:97:b3:65:2d:0a:a2:8c:a2:6a:e4: 89:8b:a0:8e:38:bc:3b:e1:af:37:77:e0:05:ff:1e:8d:e2:49: c3:17:2f:e1:14:49:73:2a:fb:b6:ee:80:dc:fa:08:63:62:74: d7:9d:c9:19:99:4a:ca:31:02:04:a4:fe:bc:8d:11:63:99:76: be:8a:c0:f5:2a:e4:db:be:c5:c0:4b:32:e0:d9:d5:28:83:ec: 8f:e9:17:22:b1:f5:b1:ff:fa:ee:6f:09:91:29:c0:22:0e:19: 3e:d6:01:33:e5:98:42:27:e2:9b:a1:d2:ac:b1:81:18:cf:af: 0c:f8:de:ec:83:30:92:e1:05:04:ef:fd:15:01:72:82:ae:b9: eb:89:e7:4f:1d:ed:93:27:75:f9:6f:c1:38:60:95:e3:1d:e8: 20:a9:83:f0:3f:3d:08:e8:71:09:ad:e1:55:cf:a5:fd:44:e9: 99:db:d2:5f:fa:6e:eb:aa:8b:64:b4:71:4a:c5:a6:41:2c:b3: de:cc:c8:5d:8a:b5:f4:42:52:09:22:b1:63:d0:1d:82:53:82: e4:8e:b5:6f:62:a3:51:42:f5:83:6c:55:d0:79:83:4b:2c:9c: 3e:35:0e:9c:a3:d3:d0:89:07:0a:3c:62:a6:7e:e9:59:02:2a: 49:bc:cd:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRp7FIYkd4+Jx2l0vZM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZjUxODBmOWI5M2FlNzU3M2MwOGE4OTRiZDQ1MmJkNzdj ZTU2Y2QwHhcNMjYwMTAxMTgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTVmYjNkZDUwNGI1MDA0OGNhYzhhYjg0OGM4ZmM2MjYyNTM1ZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PkhIQFkTJ0GnjSGesNi/bs6xwMb 3GStN+/Jf7jYcLzRLzFYer1s+TjsJhjHfu5wnD9DqWFfnomXhtAHgYzcfeo39kjr mAzJAYJ/6EKQQnT2o3CyfaSV0FLIhJfDQNuuYbhzcfIkxkqJbm8xQy8q30wPXidE IVl+5woawsrLmwGm37Ydf2TODjwrZ7+uMixf4qbNJCLN6rSe7LVTrwIyx/4r/fxR cFjzmbe1PzaUaQmcXjmxlKmOX5Ie5IVyEzd7ROaen/hhCEYzzHN+Bz0rhGeuxZi6 FqegiMRLl6I0uUQzGmXIj/eIAoz6uvYy+H9X4hPczZ7XY2IQiDtcrjB08wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHFfs91QS1AEjKyKuEjI/GJiU141MB8GA1UdIwQY MBaAFCf1GA+bk651c8CKiUvUUr13zlbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl9VWUQ1dVRyblZ6d0lxSlM5UlN2WGZPVnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lMWI4NGItMzlhNi00YWM4LWJlNjMt MzBmZWUyN2U4NGNiLzEvY1YtejNWQkxVQVNNcklxNFNNajhZbUpUWGpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lMWI4NGItMzlhNi00YWM4LWJlNjMtMzBmZWUyN2U4NGNi LzEvSl9VWUQ1dVRyblZ6d0lxSlM5UlN2WGZPVnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1b2TMA0G CSqGSIb3DQEBCwUAA4IBAQAGz7V4sLU495ezZS0KooyiauSJi6COOLw74a83d+AF /x6N4knDFy/hFElzKvu27oDc+ghjYnTXnckZmUrKMQIEpP68jRFjmXa+isD1KuTb vsXASzLg2dUog+yP6RcisfWx//rubwmRKcAiDhk+1gEz5ZhCJ+KbodKssYEYz68M +N7sgzCS4QUE7/0VAXKCrrnriedPHe2TJ3X5b8E4YJXjHeggqYPwPz0I6HEJreFV z6X9ROmZ29Jf+m7rqotktHFKxaZBLLPezMhdirX0QlIJIrFj0B2CU4LkjrVvYqNR QvWDbFXQeYNLLJw+NQ6co9PQiQcKPGKmfulZAipJvM33 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:13 2026 by rpki-client