This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa File: CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa (raw, json) Hash identifier: j/IQcIj8RO7TPRLNA/hKS2090AInnEPNtfaLrldabW0= Subject key identifier: 09:7C:8C:23:69:7C:88:42:FC:2F:CD:EC:8C:CF:5B:90:36:7C:85:2E Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f Certificate serial: 019B7C7F251023214568435CC0DB0CA59E5B Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa Signing time: Fri 02 Jan 2026 02:17:45 +0000 ROA not before: Fri 02 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 89.251.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:25:10:23:21:45:68:43:5c:c0:db:0c:a5:9e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f Validity Not Before: Jan 2 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=097c8c23697c8842fc2fcdec8ccf5b90367c852e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:4e:31:a3:91:15:08:7e:41:a7:f0:fd:ba: 9b:b1:6c:7d:51:d8:e6:6d:75:c5:ee:7b:20:6b:08: 12:56:9e:4b:ca:15:f4:a9:9d:8b:84:9e:4b:97:2d: 09:1e:00:5f:93:4a:80:ab:f5:4c:f5:06:13:3d:04: 91:1d:7d:50:b0:92:69:f7:6a:1c:47:65:c8:d9:27: 44:e3:0e:39:c7:ce:06:dc:b1:15:62:a6:e6:6c:4c: 16:80:be:50:89:fb:a5:ae:81:88:75:21:16:de:65: 04:00:9f:2a:71:4d:ed:e9:16:1e:56:83:40:f9:81: ad:81:28:98:9b:5b:61:6e:ee:3a:d8:17:3c:68:59: 72:1d:2a:be:b4:bd:27:85:43:02:3a:0d:56:95:0f: 94:61:4e:1d:59:b9:50:dc:bb:cd:14:83:13:a1:64: cb:2a:2e:de:f5:75:b5:da:ff:6c:db:22:64:6a:82: b2:8e:ef:c3:6e:cd:41:ab:35:cb:3a:00:8c:03:68: 2b:7d:55:ec:df:f7:05:01:ab:b9:b2:bd:52:77:79: 81:99:54:c6:a3:cb:a6:f7:ab:02:da:8f:07:9e:24: f2:a4:c5:c2:1b:7d:ef:af:10:43:ca:53:5c:d7:c7: 2d:40:5c:d6:ee:35:b4:d8:7c:7c:f5:7d:7b:89:0b: fe:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7C:8C:23:69:7C:88:42:FC:2F:CD:EC:8C:CF:5B:90:36:7C:85:2E X509v3 Authority Key Identifier: keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.12.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:6a:09:36:3c:c0:7b:23:f8:da:a2:e2:44:bd:9c:e0:ab:2e: fe:18:2e:69:17:f0:50:2b:fb:b1:7e:80:33:a0:dd:29:c6:cb: 89:92:69:69:e4:3d:e3:c1:eb:7d:37:8f:8c:52:83:6c:67:bd: ee:15:2f:96:d1:20:5d:19:26:9a:3c:ae:1d:ec:76:aa:04:ff: 93:e5:9b:d5:53:8e:e3:c3:f0:5f:f8:49:9a:b7:09:fd:dd:35: 2c:86:4c:a7:96:09:cf:ef:8b:0d:0d:11:57:cb:be:d5:12:05: 89:12:d1:ce:3e:dc:68:f3:17:73:79:34:d3:f1:98:64:92:54: 30:0c:a0:8d:06:52:1d:53:d7:1d:04:f1:c8:d8:8e:82:5a:25: 0c:fa:94:3e:16:14:b2:e8:23:a7:90:87:1d:2f:1f:6b:73:e5: 4e:67:67:f8:f1:23:d2:75:90:73:1c:e3:04:fe:e2:a5:79:25: a7:74:8b:96:5d:67:f0:70:9f:eb:4e:69:56:aa:7d:fd:41:24: 32:de:ce:21:fc:ee:58:78:aa:af:3f:5a:69:4d:09:fd:2f:5b: cc:8b:eb:a6:20:50:7b:1d:a6:20:21:b3:d2:97:fe:02:0c:0e: 3f:a6:0e:ff:45:55:79:fa:38:f1:df:3a:9e:3f:17:ed:31:d8: 86:e0:f6:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fyUQIyFFaENcwNsMpZ5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmN2NjYThhYTNmMTc4Yjk5OWE0NmU1ZmY0ZmE3ZGFmOWY5 ZjJlNmYwHhcNMjYwMTAyMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTdjOGMyMzY5N2M4ODQyZmMyZmNkZWM4Y2NmNWI5MDM2N2M4NTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEtOMaORFQh+Qafw/bqbsWx9Udjm bXXF7nsgawgSVp5LyhX0qZ2LhJ5Lly0JHgBfk0qAq/VM9QYTPQSRHX1QsJJp92oc R2XI2SdE4w45x84G3LEVYqbmbEwWgL5QifulroGIdSEW3mUEAJ8qcU3t6RYeVoNA +YGtgSiYm1thbu462Bc8aFlyHSq+tL0nhUMCOg1WlQ+UYU4dWblQ3LvNFIMToWTL Ki7e9XW12v9s2yJkaoKyju/Dbs1BqzXLOgCMA2grfVXs3/cFAau5sr1Sd3mBmVTG o8um96sC2o8HniTypMXCG33vrxBDylNc18ctQFzW7jW02Hx89X17iQv+BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAl8jCNpfIhC/C/N7IzPW5A2fIUuMB8GA1UdIwQY MBaAFO98yoqj8Xi5maRuX/T6fa+fny5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNmQ2NDItNTY0My00NTRmLWI1YzAt OTkwNzc3YzM1N2UzLzEvQ1h5TUkybDhpRUw4TDgzc2pNOWJrRFo4aFM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8zNmQ2NDItNTY0My00NTRmLWI1YzAtOTkwNzc3YzM1N2Uz LzEvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWfsMMA0G CSqGSIb3DQEBCwUAA4IBAQCNagk2PMB7I/jaouJEvZzgqy7+GC5pF/BQK/uxfoAz oN0pxsuJkmlp5D3jwet9N4+MUoNsZ73uFS+W0SBdGSaaPK4d7HaqBP+T5ZvVU47j w/Bf+Ematwn93TUshkynlgnP74sNDRFXy77VEgWJEtHOPtxo8xdzeTTT8ZhkklQw DKCNBlIdU9cdBPHI2I6CWiUM+pQ+FhSy6COnkIcdLx9rc+VOZ2f48SPSdZBzHOME /uKleSWndIuWXWfwcJ/rTmlWqn39QSQy3s4h/O5YeKqvP1ppTQn9L1vMi+umIFB7 HaYgIbPSl/4CDA4/pg7/RVV5+jjx3zqePxftMdiG4PaC -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:11 2026 by rpki-client