This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/cp19veFqJ88SBhBp4tNLZVRp77k.roa File: cp19veFqJ88SBhBp4tNLZVRp77k.roa (raw, json) Hash identifier: HI5bMRDZI8iWggu7qJa5j4vXWXU/42PJ1I9xbp6XIl0= Subject key identifier: 72:9D:7D:BD:E1:6A:27:CF:12:06:10:69:E2:D3:4B:65:54:69:EF:B9 Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019B7F1435DB1E2556CA473FDFCD0F288793 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/cp19veFqJ88SBhBp4tNLZVRp77k.roa Signing time: Fri 02 Jan 2026 14:19:49 +0000 ROA not before: Fri 02 Jan 2026 14:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207043 IP address blocks: 91.92.34.0/24 maxlen: 24 94.26.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:35:db:1e:25:56:ca:47:3f:df:cd:0f:28:87:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jan 2 14:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=729d7dbde16a27cf12061069e2d34b655469efb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6a:cc:26:8c:10:08:4a:5f:6b:c6:5f:07:b6: 43:03:ec:1e:bd:01:eb:fb:c9:34:0c:ad:cc:15:d0: 70:58:3d:1d:6f:68:4d:a3:ff:1b:f6:5b:db:46:46: 59:6d:52:88:7e:57:fb:16:75:63:d6:66:e3:f8:dc: d2:71:41:eb:cb:af:26:e9:64:53:02:dc:cf:4e:1d: 2f:68:24:b3:d4:80:46:2b:01:df:4d:1f:ea:7a:26: 1b:5f:a2:cb:cd:13:d2:c2:96:59:78:01:82:65:a7: cc:02:c0:f4:22:f0:f2:06:b0:00:e8:1d:b4:77:ff: 87:7e:17:1a:33:92:e1:22:9d:7a:64:97:71:a6:fc: f5:2e:1e:31:66:6f:90:5b:49:85:65:77:74:1d:62: e6:1b:38:03:78:0a:7f:a3:65:bd:29:91:76:69:52: 06:6f:94:ff:27:c0:34:e2:91:b2:fc:9e:55:20:02: 4c:43:3b:5c:27:49:27:e7:db:ed:02:01:48:46:34: ed:61:b0:0d:68:02:87:8f:18:eb:40:ed:40:ae:a2: f5:d6:62:63:98:d5:72:52:67:0d:7a:06:a7:60:62: 4a:34:b7:c5:da:c1:9f:8e:aa:1d:5a:2b:88:9a:9d: a0:07:e0:2d:7a:bc:0c:4b:3a:eb:79:92:2c:d1:fc: 26:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9D:7D:BD:E1:6A:27:CF:12:06:10:69:E2:D3:4B:65:54:69:EF:B9 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/cp19veFqJ88SBhBp4tNLZVRp77k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.92.34.0/24 94.26.90.0/24 Signature Algorithm: sha256WithRSAEncryption 58:5a:ab:b9:d5:a6:ac:c8:7d:28:10:9a:ee:6d:bf:61:e9:6f: e7:80:69:90:d3:1f:e3:1b:4e:4c:77:66:10:7e:01:05:fa:2a: 65:bb:1a:c2:e8:8b:b1:aa:4e:1e:96:19:d0:0f:32:04:22:d5: 6e:85:c9:db:35:d6:7a:2b:f4:92:df:e5:88:f2:24:ee:e4:5d: a0:eb:12:86:05:1c:6b:9d:00:92:6b:24:e0:44:99:5b:bf:76: 67:fc:64:f5:1b:90:3f:aa:e7:0e:e9:8d:57:9b:b1:de:70:e6: 60:74:4f:07:29:20:5d:5c:4d:5c:c0:3b:74:79:fd:b0:2d:ea: 51:7b:61:bd:6b:39:9d:a0:46:6f:94:45:b1:0c:15:5a:2a:4e: 39:db:1a:c1:13:18:e1:d8:56:3a:66:48:9b:02:47:b9:f1:1a: bb:ed:a2:ff:a6:c9:a5:bb:5f:39:99:a4:24:8f:53:e4:ea:0c: 5a:ef:94:56:6a:a8:a7:4a:c8:ef:c3:bf:91:ca:a3:02:da:aa: 7a:0d:62:37:6d:12:cb:6b:ef:68:13:b3:f3:0c:51:a4:3a:49: b5:d5:21:de:c0:a9:d9:e1:f3:b2:20:2f:b0:85:c6:8b:31:ab: f6:8d:cf:f3:a0:ef:0b:aa:5b:b9:16:71:7b:50:bb:ef:7e:ab: 81:17:04:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FDXbHiVWykc/380PKIeTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwMTAyMTQxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjlkN2RiZGUxNmEyN2NmMTIwNjEwNjllMmQzNGI2NTU0NjllZmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mrMJowQCEpfa8ZfB7ZDA+wevQHr +8k0DK3MFdBwWD0db2hNo/8b9lvbRkZZbVKIflf7FnVj1mbj+NzScUHry68m6WRT AtzPTh0vaCSz1IBGKwHfTR/qeiYbX6LLzRPSwpZZeAGCZafMAsD0IvDyBrAA6B20 d/+HfhcaM5LhIp16ZJdxpvz1Lh4xZm+QW0mFZXd0HWLmGzgDeAp/o2W9KZF2aVIG b5T/J8A04pGy/J5VIAJMQztcJ0kn59vtAgFIRjTtYbANaAKHjxjrQO1ArqL11mJj mNVyUmcNeganYGJKNLfF2sGfjqodWiuImp2gB+AterwMSzrreZIs0fwm5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHKdfb3haifPEgYQaeLTS2VUae+5MB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvY3AxOXZlRnFKODhTQmhCcDR0TkxaVlJwNzdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1wiAwQA XhpaMA0GCSqGSIb3DQEBCwUAA4IBAQBYWqu51aasyH0oEJrubb9h6W/ngGmQ0x/j G05Md2YQfgEF+ipluxrC6Iuxqk4elhnQDzIEItVuhcnbNdZ6K/SS3+WI8iTu5F2g 6xKGBRxrnQCSayTgRJlbv3Zn/GT1G5A/qucO6Y1Xm7HecOZgdE8HKSBdXE1cwDt0 ef2wLepRe2G9azmdoEZvlEWxDBVaKk452xrBExjh2FY6ZkibAke58Rq77aL/psml u185maQkj1Pk6gxa75RWaqinSsjvw7+RyqMC2qp6DWI3bRLLa+9oE7PzDFGkOkm1 1SHewKnZ4fOyIC+whcaLMav2jc/zoO8Lqlu5FnF7ULvvfquBFwTl -----END CERTIFICATE-----Generated at Fri Jan 23 09:24:21 2026 by rpki-client