This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/CuLXTApTY665Qqw5qFqzkskM4Y4.roa File: CuLXTApTY665Qqw5qFqzkskM4Y4.roa (raw, json) Hash identifier: 7Izzut+1ogoYvoMfOGiIDjD5ckHSQdRcpDniAQU0kyc= Subject key identifier: 0A:E2:D7:4C:0A:53:63:AE:B9:42:AC:39:A8:5A:B3:92:C9:0C:E1:8E Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae Certificate serial: 019B7B3686C7CF5ECDC79D8217D100B24AEB Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/CuLXTApTY665Qqw5qFqzkskM4Y4.roa Signing time: Thu 01 Jan 2026 20:18:49 +0000 ROA not before: Thu 01 Jan 2026 20:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57903 IP address blocks: 91.236.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:86:c7:cf:5e:cd:c7:9d:82:17:d1:00:b2:4a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae Validity Not Before: Jan 1 20:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ae2d74c0a5363aeb942ac39a85ab392c90ce18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2b:12:d4:43:7d:f3:4f:e5:af:5b:7c:a4:82: ba:c7:eb:38:60:a8:3c:64:c9:b7:e4:9d:a9:bb:fe: 66:14:2d:ab:8b:01:55:e3:8d:52:25:5c:d6:08:54: a5:57:fb:b5:6d:31:a2:66:35:de:c1:e9:a4:df:d7: 1f:ba:f7:a6:14:88:b9:f2:1e:df:5e:86:fc:01:40: 50:d5:7d:cd:5e:8c:42:54:84:1a:1c:11:fc:37:6e: 55:9c:a7:67:1f:21:86:3d:b9:5a:41:d9:a8:47:2a: 1e:d0:bb:27:6a:a5:4e:63:3e:74:ff:dc:ba:47:2a: 9b:81:4e:8f:6b:9b:9f:22:a4:5c:00:d5:25:66:35: b2:f4:26:07:0d:18:ce:22:e1:76:77:fc:8a:92:ec: fa:9c:7c:33:d7:3e:54:a4:79:64:e6:93:9d:63:eb: 4a:ea:b6:26:02:72:c6:37:4b:f9:b5:16:e0:a9:dd: af:5d:b2:4f:f9:10:f1:86:45:3c:e0:41:de:1b:31: b1:6d:2e:b0:51:fb:17:68:7c:69:1e:10:cc:48:89: 7a:fe:18:b2:49:12:e0:31:98:81:64:ec:0f:a4:a6: 5d:36:99:6a:db:72:5c:9e:62:14:98:9d:88:24:38: 0c:d0:62:7b:a5:7e:51:90:28:06:1d:a2:d5:5d:64: cc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E2:D7:4C:0A:53:63:AE:B9:42:AC:39:A8:5A:B3:92:C9:0C:E1:8E X509v3 Authority Key Identifier: keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/CuLXTApTY665Qqw5qFqzkskM4Y4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.236.114.0/24 Signature Algorithm: sha256WithRSAEncryption 65:65:b9:cb:c3:05:98:f1:28:52:60:cb:da:d2:76:00:3f:4b: 1e:a4:af:f1:50:5a:8f:f3:6b:91:e9:f2:98:75:bc:a7:2f:50: 5b:98:69:42:46:c5:88:75:ad:26:c0:c6:7b:f5:1b:df:f5:30: 86:88:e2:fe:d3:87:2f:4b:25:49:27:45:da:c8:17:84:87:ba: f0:1f:72:a9:5e:89:aa:d9:3f:58:0b:10:11:cf:85:95:2a:5b: 97:5d:a6:c1:7b:8a:91:66:de:2f:0e:51:cc:06:17:25:17:8c: 6d:7d:66:75:ac:bd:2e:62:bd:61:d2:ea:0f:68:7d:1a:f8:02: ff:ea:7e:14:5b:b9:76:e6:19:4f:14:16:98:f5:08:a9:d7:3c: 88:16:f5:86:a8:66:c3:1d:9d:f6:17:be:15:ff:62:c6:98:21: f9:a3:a9:d2:e8:53:2b:d6:27:35:d7:94:3a:3f:51:aa:c2:ec: 7f:01:7a:c7:85:93:a6:10:07:b2:08:50:d9:68:75:2a:b7:7a: 52:a6:b5:aa:53:fd:0e:66:8d:f5:c7:b3:e3:b1:bc:e0:3e:38: 9d:43:5f:1b:da:2a:91:9f:3b:98:39:bc:bb:5f:5e:15:5c:c2: c2:13:7b:89:ba:05:2f:05:eb:e8:f0:cb:5c:d0:12:50:c7:f9: d4:34:d3:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NobHz17Nx52CF9EAskrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZDUxOTI0NzQwMmJjZmJkZjBlY2U5MDIwYWQ2NDYyMmU5 ZDNiYWUwHhcNMjYwMTAxMjAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWUyZDc0YzBhNTM2M2FlYjk0MmFjMzlhODVhYjM5MmM5MGNlMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqysS1EN980/lr1t8pIK6x+s4YKg8 ZMm35J2pu/5mFC2riwFV441SJVzWCFSlV/u1bTGiZjXewemk39cfuvemFIi58h7f Xob8AUBQ1X3NXoxCVIQaHBH8N25VnKdnHyGGPblaQdmoRyoe0LsnaqVOYz50/9y6 RyqbgU6Pa5ufIqRcANUlZjWy9CYHDRjOIuF2d/yKkuz6nHwz1z5UpHlk5pOdY+tK 6rYmAnLGN0v5tRbgqd2vXbJP+RDxhkU84EHeGzGxbS6wUfsXaHxpHhDMSIl6/hiy SRLgMZiBZOwPpKZdNplq23JcnmIUmJ2IJDgM0GJ7pX5RkCgGHaLVXWTM2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAri10wKU2OuuUKsOahas5LJDOGOMB8GA1UdIwQY MBaAFDTVGSR0Arz73w7OkCCtZGIunTuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQt ZmJkMzk5YTQ0NzVlLzEvQ3VMWFRBcFRZNjY1UXF3NXFGcXprc2tNNFk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQtZmJkMzk5YTQ0NzVl LzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+xyMA0G CSqGSIb3DQEBCwUAA4IBAQBlZbnLwwWY8ShSYMva0nYAP0sepK/xUFqP82uR6fKY dbynL1BbmGlCRsWIda0mwMZ79Rvf9TCGiOL+04cvSyVJJ0XayBeEh7rwH3KpXomq 2T9YCxARz4WVKluXXabBe4qRZt4vDlHMBhclF4xtfWZ1rL0uYr1h0uoPaH0a+AL/ 6n4UW7l25hlPFBaY9Qip1zyIFvWGqGbDHZ32F74V/2LGmCH5o6nS6FMr1ic115Q6 P1Gqwux/AXrHhZOmEAeyCFDZaHUqt3pSprWqU/0OZo31x7PjsbzgPjidQ18b2iqR nzuYOby7X14VXMLCE3uJugUvBevo8Mtc0BJQx/nUNNPc -----END CERTIFICATE-----Generated at Sat Jan 3 02:50:33 2026 by rpki-client