This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/CzsMQj5sg88v5FUQiKZYYsrqsE0.roa File: CzsMQj5sg88v5FUQiKZYYsrqsE0.roa (raw, json) Hash identifier: +awAZgjfywIkqGRPMYbi+i2mtCk2x0sklLnTnsikieU= Subject key identifier: 0B:3B:0C:42:3E:6C:83:CF:2F:E4:55:10:88:A6:58:62:CA:EA:B0:4D Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019BE09B441D904003279F1D60B3DCD15CDA Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/CzsMQj5sg88v5FUQiKZYYsrqsE0.roa Signing time: Wed 21 Jan 2026 12:50:30 +0000 ROA not before: Wed 21 Jan 2026 12:50:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209944 IP address blocks: 94.26.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:9b:44:1d:90:40:03:27:9f:1d:60:b3:dc:d1:5c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Jan 21 12:50:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b3b0c423e6c83cf2fe4551088a65862caeab04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ab:5c:b3:65:8b:a2:54:17:7b:1f:6e:0d:85: 2e:f0:e7:db:05:dc:9a:75:44:9c:e3:a2:d8:67:2c: 62:3f:ef:72:74:89:d1:00:f3:16:8d:91:fb:0e:09: 60:60:a0:62:a1:b4:5c:a8:a1:a7:6c:d4:5d:41:e6: d8:02:03:35:da:88:d9:37:f4:fb:84:00:69:43:b0: 84:9e:8c:c1:99:e1:7d:30:86:80:94:4a:45:a0:7d: dc:fa:b1:ce:a8:69:b0:91:31:3e:fd:6a:21:f1:38: e9:76:35:5e:8b:a7:89:f1:c0:ef:49:92:9c:18:8c: 11:f1:85:8c:df:97:bb:fb:5c:23:1c:55:a7:03:d3: 19:a2:46:d3:0c:e6:aa:fa:9b:3c:23:ed:fc:83:43: 4c:68:16:8f:1b:4c:b7:dd:13:ce:26:bb:51:3f:cc: d3:fe:45:88:82:fa:2f:26:40:f6:ee:41:d6:bc:4a: 6f:64:2e:43:cf:c4:7d:5a:36:4d:81:f8:12:b9:45: 58:bf:d2:90:12:77:c4:4d:df:1d:f3:4d:04:52:e9: be:c7:c0:2b:e5:8f:11:18:79:c8:f6:44:4e:31:95: de:e0:4f:71:34:76:9f:8a:fa:8b:e5:e8:d5:b3:9b: 9e:41:de:a8:06:25:0a:52:73:14:99:47:c2:4c:1b: be:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3B:0C:42:3E:6C:83:CF:2F:E4:55:10:88:A6:58:62:CA:EA:B0:4D X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/CzsMQj5sg88v5FUQiKZYYsrqsE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.1.0/24 Signature Algorithm: sha256WithRSAEncryption 32:16:47:64:e5:40:36:a6:e7:45:c6:af:8a:74:44:79:40:25: 54:e8:26:23:a6:55:b2:36:d7:18:a7:38:2d:c8:01:47:26:6f: 9a:fb:c6:93:9d:6a:91:2a:1e:88:db:9a:2b:2b:6e:11:c5:f4: f3:52:b9:3b:f7:4f:8c:c8:69:bc:ec:b5:00:af:fd:e5:a8:10: 86:b4:d5:4d:e8:e8:15:b1:e5:aa:ca:80:c9:fe:e4:52:a7:9e: 08:76:ee:96:20:39:de:ac:bf:2f:5e:ed:96:4e:28:7e:3c:87: 84:07:90:45:d8:7a:9b:83:e9:e4:6f:af:5e:7e:a5:31:de:98: 23:51:52:2a:e8:11:d8:b3:1b:f5:f2:39:63:85:ca:2d:87:86: cc:9e:2f:4a:63:d7:ab:cf:b5:ac:b0:18:d5:2d:09:9a:68:b5: 12:dc:af:11:52:9d:a1:96:83:73:cf:3f:c8:73:30:9c:d6:e9: f9:19:29:0b:86:18:f8:be:5c:b2:c8:6e:f8:0a:ff:95:8b:84: 8a:93:d2:78:46:30:a7:82:cb:86:f7:84:cb:1e:f0:d0:f9:5f: ab:c2:3e:26:22:a1:93:fc:f8:21:ae:ef:d0:b7:e1:3c:cc:83: 45:03:b3:bd:6c:c4:8f:fd:20:8f:75:6f:92:85:5e:67:4a:f2: e5:83:01:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvgm0QdkEADJ58dYLPc0VzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjYwMTIxMTI1MDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjNiMGM0MjNlNmM4M2NmMmZlNDU1MTA4OGE2NTg2MmNhZWFiMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsatcs2WLolQXex9uDYUu8OfbBdya dUSc46LYZyxiP+9ydInRAPMWjZH7DglgYKBiobRcqKGnbNRdQebYAgM12ojZN/T7 hABpQ7CEnozBmeF9MIaAlEpFoH3c+rHOqGmwkTE+/Woh8TjpdjVei6eJ8cDvSZKc GIwR8YWM35e7+1wjHFWnA9MZokbTDOaq+ps8I+38g0NMaBaPG0y33RPOJrtRP8zT /kWIgvovJkD27kHWvEpvZC5Dz8R9WjZNgfgSuUVYv9KQEnfETd8d800EUum+x8Ar 5Y8RGHnI9kROMZXe4E9xNHafivqL5ejVs5ueQd6oBiUKUnMUmUfCTBu+3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAs7DEI+bIPPL+RVEIimWGLK6rBNMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvQ3pzTVFqNXNnODh2NUZVUWlLWllZc3Jxc0UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXhoBMA0G CSqGSIb3DQEBCwUAA4IBAQAyFkdk5UA2pudFxq+KdER5QCVU6CYjplWyNtcYpzgt yAFHJm+a+8aTnWqRKh6I25orK24RxfTzUrk790+MyGm87LUAr/3lqBCGtNVN6OgV seWqyoDJ/uRSp54Idu6WIDnerL8vXu2WTih+PIeEB5BF2Hqbg+nkb69efqUx3pgj UVIq6BHYsxv18jljhcoth4bMni9KY9erz7WssBjVLQmaaLUS3K8RUp2hloNzzz/I czCc1un5GSkLhhj4vlyyyG74Cv+Vi4SKk9J4RjCngsuG94TLHvDQ+V+rwj4mIqGT /Pghru/Qt+E8zINFA7O9bMSP/SCPdW+ShV5nSvLlgwES -----END CERTIFICATE-----Generated at Fri Jan 23 15:14:21 2026 by rpki-client