This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa File: CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa (raw, json) Hash identifier: ReEo9rp4x3coc8Tyv/m0USlR6KR0jZ84qGX2CKHn4jw= Subject key identifier: 0A:09:CF:56:8C:FF:9D:2A:BF:DA:39:7C:AD:53:D7:85:4E:8D:45:14 Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Certificate serial: 019B79ED61BEAB8F0B2584244AB110CD84AA Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 93.93.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:61:be:ab:8f:0b:25:84:24:4a:b1:10:cd:84:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a09cf568cff9d2abfda397cad53d7854e8d4514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c6:16:a4:4c:71:6a:e8:8a:e2:49:52:12:6f: b8:36:d8:3e:21:9d:3a:17:e0:5b:a6:c2:40:4d:43: 57:32:37:a4:fd:c1:f3:31:81:3e:76:1c:af:4f:b4: 92:5e:dc:c9:a1:92:68:cc:e7:94:f9:0e:ee:65:a4: 0b:55:d0:5e:5c:7f:5e:d1:df:8f:50:f9:5e:79:75: 34:ea:89:2c:45:0c:64:18:ec:57:f4:32:9f:e2:75: 22:7d:77:e3:86:4e:02:db:08:90:28:f0:ca:85:15: 52:ec:ad:7a:cf:b6:02:83:ef:21:92:23:a8:9e:39: 21:f7:78:3b:8f:44:47:6e:e6:3d:9a:cf:67:f2:74: b0:5a:b0:96:99:4d:28:0e:5d:6a:e9:ad:94:1c:13: f6:fc:c1:38:3a:7c:c3:03:11:d1:c6:92:51:9c:f8: e0:f1:40:f3:66:1f:71:44:11:ee:8d:77:a6:8d:13: 80:5d:8f:9e:5c:87:2b:89:ce:85:8e:40:33:1a:c2: 34:4e:b9:c7:52:f2:2c:98:da:d4:fd:e8:d1:3c:0f: 83:7d:4c:ba:52:bc:2c:1d:5f:0a:81:4e:c5:3f:70: 48:e1:a5:70:c9:34:35:8b:93:0e:7e:e3:ab:ca:82: 5e:9e:7f:59:10:a1:69:4f:32:89:4e:77:7e:f3:cd: dc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:09:CF:56:8C:FF:9D:2A:BF:DA:39:7C:AD:53:D7:85:4E:8D:45:14 X509v3 Authority Key Identifier: keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.93.224.0/21 Signature Algorithm: sha256WithRSAEncryption 68:8f:21:f8:69:e3:92:42:a8:e6:91:a5:8a:3e:fd:aa:55:e8: 04:11:31:5b:a5:98:8c:8e:aa:e5:b8:fa:54:a0:58:ac:68:16: d9:97:5d:91:81:5e:aa:c9:34:5f:1d:5c:18:ac:75:03:30:bd: 38:0f:c1:9c:8f:62:bd:20:51:c6:0d:d8:b9:e3:23:b2:fd:dc: 0d:b2:cf:8c:1f:dd:e0:5f:98:b2:fe:aa:9c:ab:9a:2f:e3:fa: 02:33:22:f8:8f:44:0b:6c:82:c1:c3:ac:8f:31:11:d9:2f:71: 1f:ad:4d:1b:f3:27:4f:06:e4:98:53:cb:fd:d7:b7:6a:76:36: 06:5b:56:8b:29:3d:8d:56:b2:e3:fe:71:33:b2:70:21:1e:cc: c7:33:82:31:ef:dc:ff:78:03:48:1d:2f:49:37:c2:f1:74:01: d4:7c:ed:a1:59:99:d6:df:b6:b9:e7:0e:47:46:b8:81:75:9d: a7:e3:68:5f:54:22:22:d2:97:29:31:e5:ef:34:fc:d5:86:b8: 72:48:41:b1:bf:0f:ad:0c:5a:dc:2b:dd:f1:b3:17:50:d0:23: 15:9c:b5:cc:03:7a:6b:aa:a5:66:73:86:2b:17:44:08:2d:fb: e2:e8:1c:db:a5:5c:cb:45:38:0c:ba:b3:e5:c4:e8:34:f3:28: 8e:e7:ac:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WG+q48LJYQkSrEQzYSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh ZWYxZmYwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTA5Y2Y1NjhjZmY5ZDJhYmZkYTM5N2NhZDUzZDc4NTRlOGQ0NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsYWpExxauiK4klSEm+4Ntg+IZ06 F+BbpsJATUNXMjek/cHzMYE+dhyvT7SSXtzJoZJozOeU+Q7uZaQLVdBeXH9e0d+P UPleeXU06oksRQxkGOxX9DKf4nUifXfjhk4C2wiQKPDKhRVS7K16z7YCg+8hkiOo njkh93g7j0RHbuY9ms9n8nSwWrCWmU0oDl1q6a2UHBP2/ME4OnzDAxHRxpJRnPjg 8UDzZh9xRBHujXemjROAXY+eXIcric6FjkAzGsI0TrnHUvIsmNrU/ejRPA+DfUy6 UrwsHV8KgU7FP3BI4aVwyTQ1i5MOfuOryoJenn9ZEKFpTzKJTnd+883cYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAoJz1aM/50qv9o5fK1T14VOjUUUMB8GA1UdIwQY MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt M2ZiYzk3NTllYjZhLzEvQ2duUFZvel9uU3FfMmpsOHJWUFhoVTZOUlJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXV3gMA0G CSqGSIb3DQEBCwUAA4IBAQBojyH4aeOSQqjmkaWKPv2qVegEETFbpZiMjqrluPpU oFisaBbZl12RgV6qyTRfHVwYrHUDML04D8Gcj2K9IFHGDdi54yOy/dwNss+MH93g X5iy/qqcq5ov4/oCMyL4j0QLbILBw6yPMRHZL3EfrU0b8ydPBuSYU8v917dqdjYG W1aLKT2NVrLj/nEzsnAhHszHM4Ix79z/eANIHS9JN8LxdAHUfO2hWZnW37a55w5H RriBdZ2n42hfVCIi0pcpMeXvNPzVhrhySEGxvw+tDFrcK93xsxdQ0CMVnLXMA3pr qqVmc4YrF0QILfvi6BzbpVzLRTgMurPlxOg08yiO56yt -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:39 2026 by rpki-client