This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/C-lPB06CaSnIQLM7dG2SIQzydOo.roa File: C-lPB06CaSnIQLM7dG2SIQzydOo.roa (raw, json) Hash identifier: JAzHn3LSqut+6PMDBDXsGscuPwUn47JxFlbyXLyVD2Y= Subject key identifier: 0B:E9:4F:07:4E:82:69:29:C8:40:B3:3B:74:6D:92:21:0C:F2:74:EA Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E381D411BDCD7B055FA073193970EF1 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/C-lPB06CaSnIQLM7dG2SIQzydOo.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39556 IP address blocks: 185.232.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1d:41:1b:dc:d7:b0:55:fa:07:31:93:97:0e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0be94f074e826929c840b33b746d92210cf274ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e4:a2:40:a4:96:25:f5:44:7c:85:a9:51:40: 71:b1:46:09:53:2d:27:6b:c9:33:7e:b0:26:b8:16: d5:50:9b:8d:37:5c:af:92:77:1d:66:2b:df:81:20: 9e:f3:83:6e:3b:2a:6e:c6:36:7d:b0:2e:3c:f9:21: 1b:5b:75:76:25:2a:28:da:00:40:98:a8:d9:34:c9: c3:d7:96:00:94:f4:35:3d:ce:13:f8:ad:a4:12:13: 53:50:f3:e2:cc:2d:4a:5d:57:d9:07:98:33:92:9c: ce:e4:30:11:11:9a:88:98:fa:5c:35:d0:11:c7:8a: df:47:8f:38:7b:9d:e3:19:2e:a4:2e:cb:32:eb:d8: ae:7e:cb:98:55:28:61:c1:a1:c7:bd:e3:3f:f9:51: 08:43:ff:07:15:8e:a8:8b:90:7f:75:d8:3a:ab:33: bb:cd:6e:61:b9:6a:4c:fb:56:3b:8d:bd:ae:72:5b: a9:c3:e4:85:c2:94:13:18:64:95:ef:3c:d9:89:a3: f6:00:6e:4d:8d:2f:31:2a:75:f0:3a:0a:0e:f9:d4: 1f:4e:9a:f4:8f:a2:b7:c6:f8:dd:3b:5f:78:dd:3f: cf:3e:a1:84:78:1f:e0:2c:3a:0e:4b:56:b5:a3:fd: c0:b8:e0:01:c6:fd:e5:1e:60:30:d6:63:a2:50:39: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E9:4F:07:4E:82:69:29:C8:40:B3:3B:74:6D:92:21:0C:F2:74:EA X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/C-lPB06CaSnIQLM7dG2SIQzydOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.28.0/22 Signature Algorithm: sha256WithRSAEncryption 39:67:69:a9:df:13:ce:89:46:dc:40:a5:4c:29:29:97:69:18: 64:c1:7e:ae:9c:2c:04:08:a2:c9:d7:78:76:1f:3b:47:61:f4: 19:37:99:95:c0:da:42:41:69:18:ff:0a:31:b1:04:dd:60:3e: a5:19:92:9c:b6:8e:94:54:a5:5e:f2:e0:87:d4:32:49:5f:8e: 30:8a:64:92:e4:c1:68:04:04:82:98:ef:ae:7a:55:27:c2:20: 43:b8:eb:53:cb:da:cc:a0:76:9b:e0:e2:91:d3:f4:d3:cc:67: 4b:df:cb:20:76:c5:ef:00:3e:45:69:2b:99:43:6c:eb:d0:fe: e7:10:4d:8b:21:02:fb:1a:d9:fd:cf:d5:81:7c:88:02:ad:16: d4:1a:b0:de:03:47:d4:ed:e2:12:65:5c:29:72:60:73:cf:5c: 5c:cd:38:84:c2:cf:e2:e9:3b:77:4e:c6:54:a3:90:ce:8e:c3: ee:17:69:62:ef:5e:11:8d:8e:f8:89:58:b6:40:7b:fd:30:7e: d4:49:a2:5a:41:fb:43:90:b2:2e:2d:41:58:88:b1:93:4f:88: af:ac:96:b2:a6:ec:60:bd:c4:08:69:2b:fe:01:c9:1e:7f:1b: d1:a6:02:73:e2:a3:6e:01:54:2d:84:af:31:0e:b7:94:9a:b6: 56:f6:78:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OB1BG9zXsFX6BzGTlw7xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmU5NGYwNzRlODI2OTI5Yzg0MGIzM2I3NDZkOTIyMTBjZjI3NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOSiQKSWJfVEfIWpUUBxsUYJUy0n a8kzfrAmuBbVUJuNN1yvkncdZivfgSCe84NuOypuxjZ9sC48+SEbW3V2JSoo2gBA mKjZNMnD15YAlPQ1Pc4T+K2kEhNTUPPizC1KXVfZB5gzkpzO5DAREZqImPpcNdAR x4rfR484e53jGS6kLssy69iufsuYVShhwaHHveM/+VEIQ/8HFY6oi5B/ddg6qzO7 zW5huWpM+1Y7jb2uclupw+SFwpQTGGSV7zzZiaP2AG5NjS8xKnXwOgoO+dQfTpr0 j6K3xvjdO1943T/PPqGEeB/gLDoOS1a1o/3AuOABxv3lHmAw1mOiUDkICwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAvpTwdOgmkpyECzO3RtkiEM8nTqMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvQy1sUEIwNkNhU25JUUxNN2RHMlNJUXp5ZE9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuegcMA0G CSqGSIb3DQEBCwUAA4IBAQA5Z2mp3xPOiUbcQKVMKSmXaRhkwX6unCwECKLJ13h2 HztHYfQZN5mVwNpCQWkY/woxsQTdYD6lGZKcto6UVKVe8uCH1DJJX44wimSS5MFo BASCmO+uelUnwiBDuOtTy9rMoHab4OKR0/TTzGdL38sgdsXvAD5FaSuZQ2zr0P7n EE2LIQL7Gtn9z9WBfIgCrRbUGrDeA0fU7eISZVwpcmBzz1xczTiEws/i6Tt3TsZU o5DOjsPuF2li714RjY74iVi2QHv9MH7USaJaQftDkLIuLUFYiLGTT4ivrJaypuxg vcQIaSv+AckefxvRpgJz4qNuAVQthK8xDreUmrZW9nhN -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:48 2026 by rpki-client