This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/csloCIt3CTSVgebL58dJpxOdtC0.roa File: csloCIt3CTSVgebL58dJpxOdtC0.roa (raw, json) Hash identifier: esH7P1ArdXIQnwu6qXLQUiXFhHbcU/4jPuyvpFcE9cc= Subject key identifier: 72:C9:68:08:8B:77:09:34:95:81:E6:CB:E7:C7:49:A7:13:9D:B4:2D Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268 Certificate serial: 019B79EBCEC3030EC47E0BA217F371721E00 Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/csloCIt3CTSVgebL58dJpxOdtC0.roa Signing time: Thu 01 Jan 2026 14:17:35 +0000 ROA not before: Thu 01 Jan 2026 14:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43298 IP address blocks: 185.71.64.0/24 maxlen: 24 185.71.65.0/24 maxlen: 24 185.71.66.0/24 maxlen: 24 185.71.67.0/24 maxlen: 24 193.84.78.0/24 maxlen: 24 193.84.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.mft rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ce:c3:03:0e:c4:7e:0b:a2:17:f3:71:72:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268 Validity Not Before: Jan 1 14:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72c968088b7709349581e6cbe7c749a7139db42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:be:6e:f0:92:7b:39:c7:c8:41:95:63:b1: 87:a0:0a:47:78:f2:9b:c4:b3:71:cc:26:6e:a2:a8: 1e:f8:d2:38:97:dc:b2:f5:8d:36:51:6a:04:e0:eb: bf:de:86:27:66:14:b1:3f:6b:b3:9f:f8:80:0a:d3: 1a:11:ef:cb:bc:86:6e:73:f6:ab:40:43:91:bf:c1: c3:02:3c:95:56:a2:aa:70:17:b4:61:cc:7a:a2:e0: 1f:16:61:b8:e8:ae:aa:13:1d:8e:de:d8:0b:cf:24: ac:be:25:8d:ed:b2:fd:d0:98:28:2c:a3:0b:a2:5a: 0a:9b:e5:da:47:3a:66:de:d9:6d:63:63:86:47:91: 10:ec:70:04:db:a9:56:dd:ca:72:64:c3:dd:de:4f: 66:cc:03:bf:4d:3a:72:c4:ac:0a:1a:e5:b1:78:e3: 69:80:c9:cc:dc:1e:54:98:ee:f2:26:28:af:f4:15: 2a:b4:e9:fe:d8:46:95:d8:0b:4a:15:18:1c:1b:d7: 22:4b:63:34:5f:ed:4f:cb:28:e0:41:0f:8c:66:05: 67:54:24:8c:b8:68:28:b8:59:bc:f7:25:50:0a:83: a1:1a:45:e3:ed:9c:ad:3c:a9:b4:d8:91:77:1f:3c: 47:38:08:d1:69:7f:3d:cd:c7:f2:96:cc:aa:3e:15: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C9:68:08:8B:77:09:34:95:81:E6:CB:E7:C7:49:A7:13:9D:B4:2D X509v3 Authority Key Identifier: keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/csloCIt3CTSVgebL58dJpxOdtC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.64.0/22 193.84.78.0/24 193.84.90.0/24 Signature Algorithm: sha256WithRSAEncryption 19:7b:c8:b8:4d:c0:49:a4:33:db:65:54:e6:3a:85:8b:8a:f6: f7:dc:e8:d1:e1:50:0e:de:7a:3b:f3:d4:eb:d4:c1:aa:0b:fa: 2a:e1:8a:14:eb:6d:1c:e4:a3:05:78:b1:9a:4f:f5:1b:43:f7: a1:14:71:df:f1:5b:9e:9c:29:fc:42:51:16:1a:75:2a:7e:23: 01:9d:20:a1:25:22:a2:be:0f:40:f2:78:8f:db:71:bf:8a:b7: 51:13:4b:e7:b9:4f:50:30:07:26:8c:ea:72:92:7f:cd:a1:09: 07:2e:31:c8:bc:9d:1e:c2:b5:62:9e:22:85:1b:49:ae:c5:40: b6:b1:89:83:65:56:57:65:20:96:08:32:16:12:63:f4:72:3e: 66:d4:c7:82:9a:3e:94:2d:96:a7:98:78:a5:dd:c8:37:5a:23: 96:34:1a:4b:e4:aa:6e:61:39:9f:63:a5:48:86:0b:62:bf:65: ee:c9:39:13:d3:d1:48:14:35:f1:d7:9e:3c:e9:88:86:44:f5: 53:7a:e5:8b:37:9e:e3:41:a4:3e:46:3e:07:82:ee:ed:d2:26: e9:a2:8f:e2:2c:56:d9:08:29:e3:95:bc:e8:7b:d0:ad:0f:39: 96:f2:37:af:0f:96:c1:b1:e1:19:a5:0e:13:a5:a9:b0:c8:7b: 7d:b7:bc:e4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5687DAw7EfguiF/Nxch4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3 M2UyNjgwHhcNMjYwMTAxMTQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmM5NjgwODhiNzcwOTM0OTU4MWU2Y2JlN2M3NDlhNzEzOWRiNDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrq+bvCSeznHyEGVY7GHoApHePKb xLNxzCZuoqge+NI4l9yy9Y02UWoE4Ou/3oYnZhSxP2uzn/iACtMaEe/LvIZuc/ar QEORv8HDAjyVVqKqcBe0Ycx6ouAfFmG46K6qEx2O3tgLzySsviWN7bL90JgoLKML oloKm+XaRzpm3tltY2OGR5EQ7HAE26lW3cpyZMPd3k9mzAO/TTpyxKwKGuWxeONp gMnM3B5UmO7yJiiv9BUqtOn+2EaV2AtKFRgcG9ciS2M0X+1PyyjgQQ+MZgVnVCSM uGgouFm89yVQCoOhGkXj7ZytPKm02JF3HzxHOAjRaX89zcfylsyqPhXGBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHLJaAiLdwk0lYHmy+fHSacTnbQtMB8GA1UdIwQY MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt Njg2ZjBhMDYxNmNjLzEvY3Nsb0NJdDNDVFNWZ2ViTDU4ZEpweE9kdEMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuUdAAwQA wVROAwQAwVRaMA0GCSqGSIb3DQEBCwUAA4IBAQAZe8i4TcBJpDPbZVTmOoWLivb3 3OjR4VAO3no789Tr1MGqC/oq4YoU620c5KMFeLGaT/UbQ/ehFHHf8VuenCn8QlEW GnUqfiMBnSChJSKivg9A8niP23G/irdRE0vnuU9QMAcmjOpykn/NoQkHLjHIvJ0e wrViniKFG0muxUC2sYmDZVZXZSCWCDIWEmP0cj5m1MeCmj6ULZanmHil3cg3WiOW NBpL5KpuYTmfY6VIhgtiv2XuyTkT09FIFDXx15486YiGRPVTeuWLN57jQaQ+Rj4H gu7t0ibpoo/iLFbZCCnjlbzoe9CtDzmW8jevD5bBseEZpQ4TpamwyHt9t7zk -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:53 2026 by rpki-client