This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CwP-zJog3zSvAVzJA3nY68zfqIg.roa File: CwP-zJog3zSvAVzJA3nY68zfqIg.roa (raw, json) Hash identifier: Xmr4qfHWJ2FL2xFGbV8598rTbU5bIiAI7u3fxu8sh2c= Subject key identifier: 0B:03:FE:CC:9A:20:DF:34:AF:01:5C:C9:03:79:D8:EB:CC:DF:A8:88 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2E8E0AFAB7C50585E8F18B122DF39 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CwP-zJog3zSvAVzJA3nY68zfqIg.roa Signing time: Thu 01 Jan 2026 08:18:20 +0000 ROA not before: Thu 01 Jan 2026 08:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 2.58.95.0/24 maxlen: 24 31.13.248.0/24 maxlen: 24 93.123.13.0/24 maxlen: 24 94.156.116.0/24 maxlen: 24 193.58.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e8:e0:af:ab:7c:50:58:5e:8f:18:b1:22:df:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b03fecc9a20df34af015cc90379d8ebccdfa888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:72:48:e0:56:66:ca:d6:fa:bb:21:f7:db: 9f:5f:99:03:49:1e:b3:f2:a2:56:9e:f6:3b:1f:4a: e9:a5:03:28:5f:d0:54:0d:8c:18:27:e4:15:99:4d: fd:17:86:b8:e8:44:c0:df:c6:99:af:5f:ca:08:0e: 7d:70:65:49:29:4a:3e:98:91:b7:aa:11:23:d4:0a: 3e:a5:ab:f4:ca:28:21:77:82:7e:b2:6d:02:fd:b2: 39:2f:bf:b7:00:2b:48:24:44:d6:df:3b:71:98:6c: b1:b1:50:f2:20:40:e0:bf:04:ea:5d:df:34:90:78: 74:76:14:03:5e:27:6d:44:4c:6a:fe:3f:a4:d5:ff: ca:23:37:95:84:ac:9c:ae:bc:fd:74:61:b4:95:08: 06:4c:34:1b:22:84:28:0c:4d:a5:10:1e:ba:1a:cd: 97:c4:c5:18:08:ed:2d:3b:7c:25:41:b5:89:60:2c: b1:5f:f8:d5:52:b1:1f:b9:9c:ac:bb:81:eb:e7:4c: 9d:3f:f7:b1:4f:9a:4c:1f:38:29:8b:d3:9d:66:e1: 71:3e:5e:2c:ff:b9:a5:58:a8:fd:cd:95:bc:b7:d8: f4:a7:42:f6:59:3c:d9:87:dc:02:96:71:d6:37:67: 5a:8d:a1:2c:08:39:5c:eb:86:a5:30:75:01:c1:29: c6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:03:FE:CC:9A:20:DF:34:AF:01:5C:C9:03:79:D8:EB:CC:DF:A8:88 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CwP-zJog3zSvAVzJA3nY68zfqIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.95.0/24 31.13.248.0/24 93.123.13.0/24 94.156.116.0/24 193.58.120.0/24 Signature Algorithm: sha256WithRSAEncryption 67:2b:10:7b:6c:82:3f:84:b8:73:ad:a7:ec:0b:69:de:4c:93: 2f:ed:08:d7:b7:0e:51:11:5a:12:e4:1c:3a:1d:39:4e:b9:bd: 65:ce:1c:fe:3d:9f:37:e6:54:38:06:c8:ae:6a:1a:e6:f6:1c: 3e:1e:9f:b4:a6:de:da:af:69:0d:4e:94:14:8c:93:34:c6:b3: 50:f6:97:ee:b3:8e:23:a6:9c:a6:f5:76:c1:06:71:a1:39:12: d4:e6:03:12:88:ca:53:e7:09:96:dd:3c:aa:7d:7b:8e:02:ac: 61:26:4e:d9:8a:3c:45:de:ba:58:a1:ae:54:34:14:c3:da:9b: cf:38:26:f7:70:1e:56:89:6c:b3:87:90:56:da:24:db:eb:12: d9:39:02:d4:6b:fb:65:ef:78:77:01:92:0c:d5:53:f9:cd:0b: 74:20:56:ab:da:60:c7:3b:0c:20:24:be:de:06:43:55:ca:c0: 8a:d5:ff:a9:5e:56:6f:ab:2a:19:0f:0d:b6:6f:f6:d0:80:f0: fe:76:86:bb:0a:39:64:1c:37:d6:8d:c4:8b:f7:39:0e:16:bc: 9a:43:b0:39:dd:dd:e4:a0:6b:34:52:e5:b2:d6:1a:7e:64:7b: f3:4a:9a:ba:de:8d:e5:32:66:8d:01:8e:43:dd:a3:30:56:8a: 60:e4:48:aa -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4oujgr6t8UFhejxixIt85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjAzZmVjYzlhMjBkZjM0YWYwMTVjYzkwMzc5ZDhlYmNjZGZhODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhdySOBWZsrW+rsh99ufX5kDSR6z 8qJWnvY7H0rppQMoX9BUDYwYJ+QVmU39F4a46ETA38aZr1/KCA59cGVJKUo+mJG3 qhEj1Ao+pav0yighd4J+sm0C/bI5L7+3ACtIJETW3ztxmGyxsVDyIEDgvwTqXd80 kHh0dhQDXidtRExq/j+k1f/KIzeVhKycrrz9dGG0lQgGTDQbIoQoDE2lEB66Gs2X xMUYCO0tO3wlQbWJYCyxX/jVUrEfuZysu4Hr50ydP/exT5pMHzgpi9OdZuFxPl4s /7mlWKj9zZW8t9j0p0L2WTzZh9wClnHWN2dajaEsCDlc64alMHUBwSnGfQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAsD/syaIN80rwFcyQN52OvM36iIMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQ3dQLXpKb2czelN2QVZ6SkEzblk2OHpmcUlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAAjpfAwQA Hw34AwQAXXsNAwQAXpx0AwQAwTp4MA0GCSqGSIb3DQEBCwUAA4IBAQBnKxB7bII/ hLhzrafsC2neTJMv7QjXtw5REVoS5Bw6HTlOub1lzhz+PZ835lQ4Bsiuahrm9hw+ Hp+0pt7ar2kNTpQUjJM0xrNQ9pfus44jppym9XbBBnGhORLU5gMSiMpT5wmW3Tyq fXuOAqxhJk7ZijxF3rpYoa5UNBTD2pvPOCb3cB5WiWyzh5BW2iTb6xLZOQLUa/tl 73h3AZIM1VP5zQt0IFar2mDHOwwgJL7eBkNVysCK1f+pXlZvqyoZDw22b/bQgPD+ doa7CjlkHDfWjcSL9zkOFryaQ7A53d3koGs0UuWy1hp+ZHvzSpq63o3lMmaNAY5D 3aMwVopg5Eiq -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:00 2026 by rpki-client