This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/CYB5NwO37zuvRkWMcW3-BtkYVGo.roa File: CYB5NwO37zuvRkWMcW3-BtkYVGo.roa (raw, json) Hash identifier: LInHSGK/8qAq0sJn+JLYwieGEDcam0azNXlnsLsToP8= Subject key identifier: 09:80:79:37:03:B7:EF:3B:AF:46:45:8C:71:6D:FE:06:D9:18:54:6A Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e Certificate serial: 019B7E3752DD2ECE10314741EFDA4F2E2907 Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/CYB5NwO37zuvRkWMcW3-BtkYVGo.roa Signing time: Fri 02 Jan 2026 10:18:33 +0000 ROA not before: Fri 02 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8578 IP address blocks: 83.136.76.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:52:dd:2e:ce:10:31:47:41:ef:da:4f:2e:29:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7059e03a08e17416f66546307988349991b84a2e Validity Not Before: Jan 2 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0980793703b7ef3baf46458c716dfe06d918546a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:20:f9:3e:7f:ef:45:6c:58:35:fd:f0:0d:d9: 93:f0:81:15:5d:3d:9d:44:95:77:d4:58:b9:c1:11: e0:77:4c:c0:99:8b:80:31:7b:84:60:7e:49:c1:f2: c4:c3:40:74:58:9b:e5:1a:38:dd:56:ea:a0:91:e6: a0:01:75:ef:2f:d8:61:a3:01:43:cd:05:de:8b:8a: 67:1f:03:c1:1f:a9:13:60:5d:80:9f:22:a9:47:62: bf:20:11:8c:97:43:a7:94:be:ea:b6:80:32:9d:fc: af:cb:3a:5c:27:9c:b3:5f:5c:d4:f7:da:11:ad:08: 9e:0a:fa:53:a2:20:e0:1c:38:ac:9b:52:cc:17:96: 7c:2c:ee:d4:6f:01:90:3d:b6:10:6e:b8:cd:d2:7a: 48:dd:41:8d:ee:d5:c2:b0:d9:55:1a:24:9e:a2:88: 36:39:13:dd:98:54:e0:1f:c2:23:1f:39:5c:3e:a4: a3:dc:cc:10:dc:f3:01:99:2a:6a:ac:4d:25:16:6b: 22:d4:52:2f:f7:ba:d3:e4:b0:99:06:2d:72:65:71: 21:ce:01:1c:c0:11:91:52:82:90:06:f0:a1:8d:45: 5f:fb:58:aa:85:53:d3:81:47:48:c7:b5:8d:e6:42: 90:68:e0:e7:1e:47:0b:ed:5a:43:a1:08:d4:4c:89: 60:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:80:79:37:03:B7:EF:3B:AF:46:45:8C:71:6D:FE:06:D9:18:54:6A X509v3 Authority Key Identifier: keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/CYB5NwO37zuvRkWMcW3-BtkYVGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.76.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:90:f4:eb:48:28:18:33:9e:a5:c5:57:bb:10:6f:b2:b0:1d: 90:e1:ad:1d:8d:df:b7:eb:3e:7d:6c:0b:06:44:a7:c5:50:21: 69:09:d4:16:33:13:11:6a:81:a7:15:a8:81:44:21:d3:84:16: be:cd:c3:dd:f0:ab:dc:8a:6b:b1:bf:89:4e:80:52:c6:0f:02: a3:0f:d5:64:ba:93:0c:26:e2:41:75:20:75:39:14:ef:c0:f3: af:20:b6:21:86:c8:c6:d4:13:1f:86:1c:1f:fb:d0:a5:5e:5b: 4a:57:ac:43:bc:f8:73:7e:bf:55:c7:01:89:84:a1:31:2f:df: a6:d0:8f:6e:e0:22:ee:8c:19:8d:51:22:14:93:ba:8c:04:3b: d5:0f:0a:33:56:de:2e:5d:44:2e:cd:f3:96:41:ad:0e:8a:0f: 3c:02:21:88:88:60:57:0b:f1:14:75:9b:b1:59:60:a5:6d:13: 27:cd:b2:3b:1c:6d:dd:9d:19:2b:e7:85:fb:a9:3d:ec:8c:dc: c8:71:51:38:11:03:03:5f:db:22:2c:ec:69:a2:f1:ac:81:34: d6:97:54:8e:22:2b:92:e9:b6:07:ce:90:9e:c9:89:f2:92:fe: 81:bf:83:89:26:71:3b:f5:34:19:81:f8:02:6e:8c:b0:78:20: b2:78:7b:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N1LdLs4QMUdB79pPLikHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNTllMDNhMDhlMTc0MTZmNjY1NDYzMDc5ODgzNDk5OTFi ODRhMmUwHhcNMjYwMTAyMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTgwNzkzNzAzYjdlZjNiYWY0NjQ1OGM3MTZkZmUwNmQ5MTg1NDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCD5Pn/vRWxYNf3wDdmT8IEVXT2d RJV31Fi5wRHgd0zAmYuAMXuEYH5JwfLEw0B0WJvlGjjdVuqgkeagAXXvL9hhowFD zQXei4pnHwPBH6kTYF2AnyKpR2K/IBGMl0OnlL7qtoAynfyvyzpcJ5yzX1zU99oR rQieCvpToiDgHDism1LMF5Z8LO7UbwGQPbYQbrjN0npI3UGN7tXCsNlVGiSeoog2 ORPdmFTgH8IjHzlcPqSj3MwQ3PMBmSpqrE0lFmsi1FIv97rT5LCZBi1yZXEhzgEc wBGRUoKQBvChjUVf+1iqhVPTgUdIx7WN5kKQaODnHkcL7VpDoQjUTIlgIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmAeTcDt+87r0ZFjHFt/gbZGFRqMB8GA1UdIwQY MBaAFHBZ4DoI4XQW9mVGMHmINJmRuEouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAt OTE3NWM4NDA4ZTVlLzEvQ1lCNU53TzM3enV2UmtXTWNXMy1CdGtZVkdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAtOTE3NWM4NDA4ZTVl LzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU4hMMA0G CSqGSIb3DQEBCwUAA4IBAQAukPTrSCgYM56lxVe7EG+ysB2Q4a0djd+36z59bAsG RKfFUCFpCdQWMxMRaoGnFaiBRCHThBa+zcPd8Kvcimuxv4lOgFLGDwKjD9VkupMM JuJBdSB1ORTvwPOvILYhhsjG1BMfhhwf+9ClXltKV6xDvPhzfr9VxwGJhKExL9+m 0I9u4CLujBmNUSIUk7qMBDvVDwozVt4uXUQuzfOWQa0Oig88AiGIiGBXC/EUdZux WWClbRMnzbI7HG3dnRkr54X7qT3sjNzIcVE4EQMDX9siLOxpovGsgTTWl1SOIiuS 6bYHzpCeyYnykv6Bv4OJJnE79TQZgfgCboyweCCyeHvo -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:17 2026 by rpki-client