This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/CSaWGPAuSxGyvK0vYNlwHF6hyLk.roa File: CSaWGPAuSxGyvK0vYNlwHF6hyLk.roa (raw, json) Hash identifier: /XZl1WB2nbiNcL9b2RlvpS4iBe26ZsfShmWMbksslmc= Subject key identifier: 09:26:96:18:F0:2E:4B:11:B2:BC:AD:2F:60:D9:70:1C:5E:A1:C8:B9 Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41 Certificate serial: 019B7E38553C0847DA086FE39DC1104CC6D1 Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/CSaWGPAuSxGyvK0vYNlwHF6hyLk.roa Signing time: Fri 02 Jan 2026 10:19:39 +0000 ROA not before: Fri 02 Jan 2026 10:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.36.216.0/22 maxlen: 24 194.247.26.0/23 maxlen: 24 2001:67c:2024::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.mft rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:55:3c:08:47:da:08:6f:e3:9d:c1:10:4c:c6:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41 Validity Not Before: Jan 2 10:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09269618f02e4b11b2bcad2f60d9701c5ea1c8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:64:38:cd:a6:33:7a:12:ae:46:67:6a:8d: 7a:56:69:c1:b6:1b:7f:2f:15:e2:ff:13:e7:b8:b1: ce:6c:46:12:f1:00:2a:4f:1d:8b:d0:47:13:b9:96: 47:9d:10:c3:c8:e1:e2:7b:0c:f8:ac:58:2b:d1:65: 2e:27:ab:cc:46:90:35:c2:59:73:aa:6c:ea:86:84: 4a:a4:b1:aa:6d:fd:a3:05:db:8d:6d:03:55:d0:c6: a8:fc:76:11:1a:5b:3c:33:bb:1d:66:d9:fd:da:f6: df:3c:86:e9:a8:fc:e4:1e:a6:df:70:5d:0f:38:55: 2b:0e:c5:d2:1e:e5:c8:31:86:17:d6:67:0c:d0:7e: 7e:39:2e:96:d6:a8:13:14:f0:fc:63:80:21:d1:fe: 21:cb:d9:94:99:6c:fa:de:4a:4c:49:90:e1:70:9b: b7:8b:f8:ff:91:d4:68:fc:fc:e8:5b:bc:bc:b9:33: 7a:ee:e3:cd:6d:60:fb:4c:89:e8:6f:75:f1:91:1c: f6:8d:66:ad:41:79:33:59:53:37:1b:84:23:34:2c: 09:d1:cf:d6:91:84:af:5a:bd:8f:38:e4:81:c4:ba: 65:6a:08:a7:d9:f0:71:48:18:a6:80:85:bc:28:88: 8f:eb:7d:27:be:bb:fe:be:10:a5:be:ab:e8:6a:40: f6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:26:96:18:F0:2E:4B:11:B2:BC:AD:2F:60:D9:70:1C:5E:A1:C8:B9 X509v3 Authority Key Identifier: keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/CSaWGPAuSxGyvK0vYNlwHF6hyLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.216.0/22 194.247.26.0/23 IPv6: 2001:67c:2024::/48 Signature Algorithm: sha256WithRSAEncryption 88:ed:c4:c3:89:4f:61:27:3f:9b:44:3f:bd:ea:2d:96:00:5b: 4a:ba:ef:57:9c:97:6e:fa:91:44:f4:bc:01:8a:08:33:ca:b7: 69:e6:30:4d:98:44:4d:8e:10:91:ea:d8:a5:c7:b5:45:eb:d6: b7:19:d2:76:eb:fd:74:8b:b7:1b:f3:d6:23:8c:f2:90:bd:a6: 98:77:80:89:c1:7b:ed:6e:d8:f3:06:e0:ac:79:e7:f1:73:77: 70:27:b9:1a:8c:dd:5d:8d:d2:01:19:95:14:39:f1:a0:b4:6a: a8:26:a8:90:d3:cf:cb:f9:c5:6f:b7:08:b4:22:58:bc:00:2a: 28:85:3f:37:fc:4e:ce:3d:51:b7:4d:65:71:d7:eb:3b:e2:39: 3f:32:d1:f4:2f:2d:79:71:df:08:8d:19:6c:a4:f8:f6:2f:e9: 14:b0:fc:9a:c8:c4:5a:f4:b2:a4:3b:bf:41:92:aa:31:ae:5b: 83:b8:ac:c3:5e:90:e7:ae:b4:3b:d2:d8:11:14:31:59:c4:55: da:65:93:a8:c2:44:a8:c3:bd:54:dc:f7:16:b6:c4:51:9f:c0: 1d:e3:86:07:03:99:75:af:b5:e1:bc:1b:6e:7f:94:cc:67:76: 77:fc:0d:74:3a:81:7f:f6:d9:61:2b:b1:09:ec:85:c8:f8:6c: 3f:7e:1b:5a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+OFU8CEfaCG/jncEQTMbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5NDcwYWU0MThlZWRkZDZiMzlkYWU5ZTdhMTc3YTE5Yzc3 OTljNDEwHhcNMjYwMTAyMTAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTI2OTYxOGYwMmU0YjExYjJiY2FkMmY2MGQ5NzAxYzVlYTFjOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbVkOM2mM3oSrkZnao16VmnBtht/ LxXi/xPnuLHObEYS8QAqTx2L0EcTuZZHnRDDyOHiewz4rFgr0WUuJ6vMRpA1wllz qmzqhoRKpLGqbf2jBduNbQNV0Mao/HYRGls8M7sdZtn92vbfPIbpqPzkHqbfcF0P OFUrDsXSHuXIMYYX1mcM0H5+OS6W1qgTFPD8Y4Ah0f4hy9mUmWz63kpMSZDhcJu3 i/j/kdRo/PzoW7y8uTN67uPNbWD7TInob3XxkRz2jWatQXkzWVM3G4QjNCwJ0c/W kYSvWr2POOSBxLplagin2fBxSBimgIW8KIiP630nvrv+vhClvqvoakD2pwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFAkmlhjwLksRsrytL2DZcBxeoci5MB8GA1UdIwQY MBaAFMlHCuQY7t3Ws52unnoXehnHeZxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMt YjA5MTIxNWQ1ZTRkLzEvQ1NhV0dQQXVTeEd5dkswdllObHdIRjZoeUxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMtYjA5MTIxNWQ1ZTRk LzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuSTYAwQB wvcaMA8EAgACMAkDBwAgAQZ8ICQwDQYJKoZIhvcNAQELBQADggEBAIjtxMOJT2En P5tEP73qLZYAW0q671ecl276kUT0vAGKCDPKt2nmME2YRE2OEJHq2KXHtUXr1rcZ 0nbr/XSLtxvz1iOM8pC9pph3gInBe+1u2PMG4Kx55/Fzd3AnuRqM3V2N0gEZlRQ5 8aC0aqgmqJDTz8v5xW+3CLQiWLwAKiiFPzf8Ts49UbdNZXHX6zviOT8y0fQvLXlx 3wiNGWyk+PYv6RSw/JrIxFr0sqQ7v0GSqjGuW4O4rMNekOeutDvS2BEUMVnEVdpl k6jCRKjDvVTc9xa2xFGfwB3jhgcDmXWvteG8G25/lMxndnf8DXQ6gX/22WErsQns hcj4bD9+G1o= -----END CERTIFICATE-----Generated at Sat Jan 17 08:22:32 2026 by rpki-client