This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ci0ptYRrl3soT0-X9BF8_u2tuDM.roa File: ci0ptYRrl3soT0-X9BF8_u2tuDM.roa (raw, json) Hash identifier: JO6OUsm1lQx/mMSgHEn0FT4Fg0+OMrrpuHf6e9wSXno= Subject key identifier: 72:2D:29:B5:84:6B:97:7B:28:4F:4F:97:F4:11:7C:FE:ED:AD:B8:33 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F838A20F03CD1BCA4CA97F1DBE48000 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ci0ptYRrl3soT0-X9BF8_u2tuDM.roa Signing time: Fri 02 Jan 2026 16:21:25 +0000 ROA not before: Fri 02 Jan 2026 16:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206491 IP address blocks: 188.209.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:8a:20:f0:3c:d1:bc:a4:ca:97:f1:db:e4:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=722d29b5846b977b284f4f97f4117cfeedadb833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:59:8f:a1:99:88:3b:67:c2:cb:4e:a1:02: 29:1d:46:cc:4b:27:b5:64:af:c3:27:7b:94:c9:0a: aa:76:e2:52:ef:90:57:a8:f9:19:78:d0:4b:06:48: 8c:c8:9d:4b:cc:f1:54:bf:07:3f:35:b3:84:5e:e3: 97:55:93:3a:92:7a:90:99:db:8f:8d:15:2f:83:3b: 9c:f1:42:e0:63:b9:04:a4:66:63:04:55:5b:72:89: 91:a8:33:8e:8d:5e:f2:e4:5a:94:57:52:37:22:2f: 87:08:18:79:86:79:d7:bb:21:b2:60:ee:6f:6d:fe: b0:ba:3f:43:9c:d7:c5:db:f8:53:b3:56:49:17:df: a2:21:76:48:05:d2:d8:ae:f8:dd:0b:5d:88:84:33: 75:5f:6f:bd:02:aa:04:61:63:c3:3e:e1:84:17:47: 1e:46:51:29:8b:db:f9:32:7c:58:f9:ad:31:3e:2b: 79:3f:b0:ac:e8:1d:2a:13:dc:7d:d5:da:ea:4e:05: 90:b3:ad:df:a7:7b:b8:c0:61:8b:73:6b:62:a2:bf: cc:04:51:89:7b:c0:fe:12:cb:0e:f9:bb:cb:06:a7: bd:a5:fa:c4:84:f8:0d:82:ec:7d:4a:6b:64:04:88: 36:35:fc:20:6a:37:ff:d4:6b:39:0c:a2:c5:46:25: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2D:29:B5:84:6B:97:7B:28:4F:4F:97:F4:11:7C:FE:ED:AD:B8:33 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/ci0ptYRrl3soT0-X9BF8_u2tuDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.129.0/24 Signature Algorithm: sha256WithRSAEncryption 31:f5:40:d3:14:64:af:cd:7d:54:a7:5c:42:94:21:93:32:e0: 5b:67:71:db:69:b5:ca:d2:7b:86:bf:62:dc:a6:42:55:2f:ed: 36:e4:a0:29:16:3b:5a:b3:17:17:44:e9:15:e7:cb:ed:f2:73: 30:27:08:24:c8:f5:74:ce:46:64:84:ff:70:37:73:84:38:f1: 99:65:d6:d7:f6:f0:05:aa:d3:80:c8:ad:16:4c:3a:33:e2:68: 78:db:82:3b:75:b3:ce:4f:b1:58:a0:9b:b5:f6:31:c4:56:1b: 8a:69:a2:86:24:fa:92:90:92:3a:35:19:4c:e6:d3:6d:76:ec: 0e:e3:47:9f:f6:b2:46:06:76:94:82:40:fc:ea:3a:0f:32:33: 29:11:e4:13:7d:46:8b:da:89:5d:72:e8:3d:86:bd:75:5c:c1: 51:a8:a9:49:02:65:29:f7:14:3c:36:3c:a9:b4:f5:51:ac:8e: 25:bb:13:7d:9f:73:7e:96:3d:4a:42:be:a3:7b:4d:26:b3:9d: 60:a6:a2:b7:9f:3d:7d:52:69:ed:f3:a8:3b:08:4f:45:e4:42: c4:5c:aa:a2:8f:61:8c:a2:51:c1:95:30:7f:7f:cd:1a:56:6a: 6d:4a:a9:5d:31:7a:1b:d3:62:04:31:2a:46:4e:ba:e6:df:1f: 2f:60:36:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4og8DzRvKTKl/Hb5IAAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjJkMjliNTg0NmI5NzdiMjg0ZjRmOTdmNDExN2NmZWVkYWRiODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApetZj6GZiDtnwstOoQIpHUbMSye1 ZK/DJ3uUyQqqduJS75BXqPkZeNBLBkiMyJ1LzPFUvwc/NbOEXuOXVZM6knqQmduP jRUvgzuc8ULgY7kEpGZjBFVbcomRqDOOjV7y5FqUV1I3Ii+HCBh5hnnXuyGyYO5v bf6wuj9DnNfF2/hTs1ZJF9+iIXZIBdLYrvjdC12IhDN1X2+9AqoEYWPDPuGEF0ce RlEpi9v5MnxY+a0xPit5P7Cs6B0qE9x91drqTgWQs63fp3u4wGGLc2tior/MBFGJ e8D+EssO+bvLBqe9pfrEhPgNgux9SmtkBIg2Nfwgajf/1Gs5DKLFRiXN/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHItKbWEa5d7KE9Pl/QRfP7trbgzMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvY2kwcHRZUnJsM3NvVDAtWDlCRjhfdTJ0dURNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGBMA0G CSqGSIb3DQEBCwUAA4IBAQAx9UDTFGSvzX1Up1xClCGTMuBbZ3HbabXK0nuGv2Lc pkJVL+025KApFjtasxcXROkV58vt8nMwJwgkyPV0zkZkhP9wN3OEOPGZZdbX9vAF qtOAyK0WTDoz4mh424I7dbPOT7FYoJu19jHEVhuKaaKGJPqSkJI6NRlM5tNtduwO 40ef9rJGBnaUgkD86joPMjMpEeQTfUaL2oldcug9hr11XMFRqKlJAmUp9xQ8Njyp tPVRrI4luxN9n3N+lj1KQr6je00ms51gpqK3nz19Umnt86g7CE9F5ELEXKqij2GM olHBlTB/f80aVmptSqldMXob02IEMSpGTrrm3x8vYDZF -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:20 2026 by rpki-client