This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/cwRccrAENANpUtgyG-cs76t2uhQ.roa File: cwRccrAENANpUtgyG-cs76t2uhQ.roa (raw, json) Hash identifier: UiM4/U2KaMcgUdcESji12E4Ep2EXmuZnwMAQ53YQTaw= Subject key identifier: 73:04:5C:72:B0:04:34:03:69:52:D8:32:1B:E7:2C:EF:AB:76:BA:14 Certificate issuer: /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb Certificate serial: 019B79101A648C43FB080ACA4777F494662F Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/cwRccrAENANpUtgyG-cs76t2uhQ.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 147.189.18.0/24 maxlen: 24 147.189.19.0/24 maxlen: 24 147.189.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1a:64:8c:43:fb:08:0a:ca:47:77:f4:94:66:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73045c72b00434036952d8321be72cefab76ba14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d5:34:20:44:43:37:43:73:c4:54:c2:38:3b: 6f:18:21:6b:dc:42:ba:86:b7:ed:db:d5:42:f8:58: c8:3e:9b:6d:9c:19:02:b8:3e:58:de:9c:14:cf:20: 6f:7b:d8:b3:75:2b:19:bb:83:7e:88:51:6a:75:c7: 8e:9d:04:9c:85:be:c1:16:c8:d2:7d:56:5b:6e:79: 4a:80:0e:9b:96:20:7f:04:55:aa:9a:48:a8:2b:f3: 1d:7a:23:41:10:e1:a5:23:ae:47:d7:b5:06:37:1e: 02:cb:dc:ec:91:e8:7a:5f:d1:14:27:67:58:7f:5e: a8:33:ef:b9:94:80:a1:ea:82:a6:77:04:83:90:1b: fd:37:f6:31:bf:0a:d7:ef:b1:d8:2b:06:86:49:9c: 2c:4e:22:c8:35:2f:6c:ff:ce:95:73:06:46:ba:11: 82:9a:a6:71:f6:21:63:a7:7b:7b:f6:6d:f1:c5:39: 68:ab:22:bf:3d:07:c6:1a:6d:7d:5f:74:f9:0f:57: 69:11:22:9d:a2:92:2c:67:20:5b:43:27:1f:1b:97: a6:d1:f6:d5:88:b6:92:7b:05:95:77:34:6e:c4:a2: ca:41:41:b6:3b:c8:56:56:c1:2b:62:53:7c:f3:bd: 28:75:81:9f:42:a7:20:d8:ed:43:98:40:da:91:d3: a7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:04:5C:72:B0:04:34:03:69:52:D8:32:1B:E7:2C:EF:AB:76:BA:14 X509v3 Authority Key Identifier: keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/cwRccrAENANpUtgyG-cs76t2uhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.18.0-147.189.20.255 Signature Algorithm: sha256WithRSAEncryption 8c:aa:c8:dd:63:7c:e3:84:c0:ff:54:bd:58:44:bb:fd:a2:b2: bb:12:06:6b:d0:4d:28:3e:52:12:a9:85:12:81:3a:0f:85:be: 6f:e6:da:26:d9:1e:61:6c:31:ec:32:34:ad:73:25:ac:4f:6d: 45:ad:2b:c0:31:21:39:0c:99:b3:2f:3e:48:56:52:1e:85:6d: 19:c5:8f:69:9d:58:88:c2:39:0a:37:cf:1c:b2:76:de:92:5c: f2:11:5f:68:16:c2:b1:05:db:e4:1b:a5:33:7c:99:1b:62:d0: 51:74:7e:cc:63:ef:86:f2:89:95:1b:aa:55:b1:66:61:5e:da: 03:7e:86:1b:06:61:05:94:9a:b1:6e:12:f0:69:65:b5:8f:60: 10:3b:39:c5:b1:61:ce:b2:5c:55:f5:b3:9c:12:97:a9:dd:5d: 7f:e8:fd:8a:6e:27:63:e2:1e:23:24:56:72:37:85:a8:05:f7: d4:30:0c:c2:9e:81:c1:67:73:63:62:f0:9f:34:4b:3b:ff:bf: 1e:1b:5f:e7:06:fe:19:68:3b:72:61:01:62:d1:ac:93:1d:ae: 43:3f:8e:89:bf:31:a4:84:57:d4:7f:5a:a3:9b:f6:b4:2f:a6: a6:cd:31:68:2a:28:af:6f:2f:50:7c:80:ac:e8:3a:85:48:46: 65:57:a0:64 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5EBpkjEP7CArKR3f0lGYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYWQ4MGQ0MTFhY2I5MzY4NWY1NThhYTdlMTJmNDZiZDE3 MGE3ZmIwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzA0NWM3MmIwMDQzNDAzNjk1MmQ4MzIxYmU3MmNlZmFiNzZiYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NU0IERDN0NzxFTCODtvGCFr3EK6 hrft29VC+FjIPpttnBkCuD5Y3pwUzyBve9izdSsZu4N+iFFqdceOnQSchb7BFsjS fVZbbnlKgA6bliB/BFWqmkioK/MdeiNBEOGlI65H17UGNx4Cy9zskeh6X9EUJ2dY f16oM++5lICh6oKmdwSDkBv9N/YxvwrX77HYKwaGSZwsTiLINS9s/86VcwZGuhGC mqZx9iFjp3t79m3xxTloqyK/PQfGGm19X3T5D1dpESKdopIsZyBbQycfG5em0fbV iLaSewWVdzRuxKLKQUG2O8hWVsErYlN8870odYGfQqcg2O1DmEDakdOnTwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHMEXHKwBDQDaVLYMhvnLO+rdroUMB8GA1UdIwQY MBaAFDKtgNQRrLk2hfVYqn4S9GvRcKf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXEyQTFCR3N1VGFGOVZpcWZoTDBhOUZ3cF9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85YzI1MDgtZjY5Yi00NDRiLWI4NjAt ZGMwZTgxYTlkN2I0LzEvY3dSY2NyQUVOQU5wVXRneUctY3M3NnQydWhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS85YzI1MDgtZjY5Yi00NDRiLWI4NjAtZGMwZTgxYTlkN2I0 LzEvTXEyQTFCR3N1VGFGOVZpcWZoTDBhOUZ3cF9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGTvRID BACTvRQwDQYJKoZIhvcNAQELBQADggEBAIyqyN1jfOOEwP9UvVhEu/2isrsSBmvQ TSg+UhKphRKBOg+Fvm/m2ibZHmFsMewyNK1zJaxPbUWtK8AxITkMmbMvPkhWUh6F bRnFj2mdWIjCOQo3zxyydt6SXPIRX2gWwrEF2+QbpTN8mRti0FF0fsxj74byiZUb qlWxZmFe2gN+hhsGYQWUmrFuEvBpZbWPYBA7OcWxYc6yXFX1s5wSl6ndXX/o/Ypu J2PiHiMkVnI3hagF99QwDMKegcFnc2Ni8J80Szv/vx4bX+cG/hloO3JhAWLRrJMd rkM/jom/MaSEV9R/WqOb9rQvpqbNMWgqKK9vL1B8gKzoOoVIRmVXoGQ= -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:13 2026 by rpki-client