This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/Cb3GNV7sEZagImQ0z2CzEtPQStc.roa File: Cb3GNV7sEZagImQ0z2CzEtPQStc.roa (raw, json) Hash identifier: WKt5YxPaUYaqlF+1A2ePA/t2PiJgruaRiTwSTzv9PKY= Subject key identifier: 09:BD:C6:35:5E:EC:11:96:A0:22:64:34:CF:60:B3:12:D3:D0:4A:D7 Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25 Certificate serial: 019B791012C52E858268AD327F6FAA8DCAEA Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/Cb3GNV7sEZagImQ0z2CzEtPQStc.roa Signing time: Thu 01 Jan 2026 10:17:34 +0000 ROA not before: Thu 01 Jan 2026 10:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50156 IP address blocks: 195.200.224.0/23 maxlen: 23 195.200.225.0/24 maxlen: 24 2001:67c:344::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:12:c5:2e:85:82:68:ad:32:7f:6f:aa:8d:ca:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25 Validity Not Before: Jan 1 10:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09bdc6355eec1196a0226434cf60b312d3d04ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:15:98:4e:95:8c:33:73:ae:61:0c:e2:67:00: 95:4a:2b:06:e4:6b:4e:94:70:4e:95:f2:70:a2:69: 3c:8d:e6:cd:e2:cc:5b:1a:10:51:ee:c7:89:7e:4b: b2:bc:0b:33:51:ec:40:38:12:0e:80:74:7c:03:8f: 5c:5c:d8:8b:a8:dd:af:b0:bc:f9:47:27:2c:04:30: 7c:31:8b:03:30:86:b0:18:0e:90:2a:33:a3:8b:75: 4e:bf:e0:21:da:ac:f7:aa:b6:c6:72:cf:cf:32:c5: c4:dc:84:e0:ad:77:08:71:9b:30:51:89:6a:11:d4: fb:ca:3a:df:dc:0a:02:fb:fa:c8:2a:38:32:77:f2: 12:83:35:7f:3b:ad:c0:74:b4:53:4c:df:0c:53:90: 5d:8a:f9:1d:05:54:02:a0:26:75:b7:33:6d:17:a8: 41:54:cd:a9:06:aa:c9:79:80:f3:6a:28:40:25:8f: 98:59:a2:69:8e:85:22:1e:66:38:18:a9:41:22:53: c7:0b:1f:34:31:93:72:81:20:b9:27:8f:85:b2:10: ae:62:f5:04:68:87:b4:16:f1:af:ca:15:37:b3:b7: 42:64:b8:3e:10:29:1a:d8:ca:e5:39:a0:f1:6c:ea: 8e:e9:15:f5:ac:20:22:27:50:7f:77:d1:f6:40:d1: 0f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BD:C6:35:5E:EC:11:96:A0:22:64:34:CF:60:B3:12:D3:D0:4A:D7 X509v3 Authority Key Identifier: keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/Cb3GNV7sEZagImQ0z2CzEtPQStc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.200.224.0/23 IPv6: 2001:67c:344::/48 Signature Algorithm: sha256WithRSAEncryption 22:06:a2:73:1d:e8:ce:98:4d:7c:1f:27:fd:dc:3c:95:95:15: 95:5e:9f:fa:7d:bd:c6:ea:f7:ed:ef:de:5a:79:39:3c:8f:c9: 84:42:a1:62:be:d1:be:a8:8c:04:6a:cc:67:41:80:fa:30:35: 4f:06:df:64:20:95:60:2c:6a:cf:83:b4:cc:9e:85:d5:2d:ea: 3a:95:4b:a4:ef:49:ab:c3:b6:61:cc:76:40:64:92:a9:d8:6f: 4c:bc:0b:2f:bc:65:c7:67:b1:9b:b6:c1:8f:24:bb:95:42:1d: fb:38:48:8e:6d:b3:a1:1f:b3:bc:40:83:a7:e6:18:a0:a4:4d: 1d:7d:39:13:57:59:9f:56:76:cc:1c:4c:f9:81:29:06:d3:a5: e3:f2:0e:a9:2e:ef:de:04:27:36:f4:cc:d9:18:54:6f:3a:e6: c9:09:37:d9:e3:ba:46:e2:61:a5:4c:99:61:0b:84:f6:82:68: 62:e3:0c:bc:2c:79:1d:9a:dd:cc:7a:ed:d6:8a:5e:06:38:27: bb:ca:d7:ee:47:da:ee:58:54:55:c8:50:fe:e1:f8:f0:44:d7: b8:2d:57:14:4a:5b:db:77:aa:8a:1f:6c:be:06:fd:85:4c:30: 29:bc:76:d1:c1:1a:e4:aa:20:39:a0:07:7d:a0:71:8e:39:c7: d7:4b:90:b9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EBLFLoWCaK0yf2+qjcrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Njc5YTIyZDBkYmM5ODBkNWQ1OWIzMzM2NzlmOTM5Yjlh ZTNmMjUwHhcNMjYwMTAxMTAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWJkYzYzNTVlZWMxMTk2YTAyMjY0MzRjZjYwYjMxMmQzZDA0YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xWYTpWMM3OuYQziZwCVSisG5GtO lHBOlfJwomk8jebN4sxbGhBR7seJfkuyvAszUexAOBIOgHR8A49cXNiLqN2vsLz5 RycsBDB8MYsDMIawGA6QKjOji3VOv+Ah2qz3qrbGcs/PMsXE3ITgrXcIcZswUYlq EdT7yjrf3AoC+/rIKjgyd/ISgzV/O63AdLRTTN8MU5BdivkdBVQCoCZ1tzNtF6hB VM2pBqrJeYDzaihAJY+YWaJpjoUiHmY4GKlBIlPHCx80MZNygSC5J4+FshCuYvUE aIe0FvGvyhU3s7dCZLg+ECka2MrlOaDxbOqO6RX1rCAiJ1B/d9H2QNEPPwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAm9xjVe7BGWoCJkNM9gsxLT0ErXMB8GA1UdIwQY MBaAFEhnmiLQ28mA1dWbMzZ5+Tm5rj8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dlYUl0RGJ5WURWMVpzek5ubjVPYm11UHlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZGZhMDQtN2MyYy00YWMzLWE2NmIt MGMxODBhMDg0MWFiLzEvQ2IzR05WN3NFWmFnSW1RMHoyQ3pFdFBRU3RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83ZGZhMDQtN2MyYy00YWMzLWE2NmItMGMxODBhMDg0MWFi LzEvU0dlYUl0RGJ5WURWMVpzek5ubjVPYm11UHlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw8jgMA8E AgACMAkDBwAgAQZ8A0QwDQYJKoZIhvcNAQELBQADggEBACIGonMd6M6YTXwfJ/3c PJWVFZVen/p9vcbq9+3v3lp5OTyPyYRCoWK+0b6ojARqzGdBgPowNU8G32QglWAs as+DtMyehdUt6jqVS6TvSavDtmHMdkBkkqnYb0y8Cy+8ZcdnsZu2wY8ku5VCHfs4 SI5ts6Efs7xAg6fmGKCkTR19ORNXWZ9WdswcTPmBKQbTpePyDqku794EJzb0zNkY VG865skJN9njukbiYaVMmWELhPaCaGLjDLwseR2a3cx67daKXgY4J7vK1+5H2u5Y VFXIUP7h+PBE17gtVxRKW9t3qoofbL4G/YVMMCm8dtHBGuSqIDmgB32gcY45x9dL kLk= -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:00 2026 by rpki-client