This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Cz2yVdjp5DRO8ih5d3Ce_Jbmi74.roa File: Cz2yVdjp5DRO8ih5d3Ce_Jbmi74.roa (raw, json) Hash identifier: URqhYB9RU+WD04liPvFITxylYbI2rDkvoQhc6utwRRI= Subject key identifier: 0B:3D:B2:55:D8:E9:E4:34:4E:F2:28:79:77:70:9E:FC:96:E6:8B:BE Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B7D5C975F41FC82026970B613E01159DC Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Cz2yVdjp5DRO8ih5d3Ce_Jbmi74.roa Signing time: Fri 02 Jan 2026 06:19:38 +0000 ROA not before: Fri 02 Jan 2026 06:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41108 IP address blocks: 91.228.52.0/23 maxlen: 24 91.228.104.0/22 maxlen: 24 91.229.229.0/24 maxlen: 24 193.25.100.0/23 maxlen: 24 195.88.44.0/23 maxlen: 24 195.110.20.0/23 maxlen: 24 195.110.20.0/24 maxlen: 24 2001:67c:12a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:97:5f:41:fc:82:02:69:70:b6:13:e0:11:59:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 2 06:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b3db255d8e9e4344ef2287977709efc96e68bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:3c:a6:a0:41:6c:2a:46:b4:35:18:a4:5a: 7a:e5:d6:41:23:0d:36:59:19:56:82:c5:2e:f0:6f: ee:2c:d5:b8:46:24:02:bf:25:55:a1:25:10:7c:87: fa:91:29:1d:2d:6e:6b:17:cf:3f:af:e7:28:37:77: 5e:4b:6d:91:51:c0:85:64:23:0f:5a:58:d1:0f:50: 2d:76:a8:2d:75:65:62:7e:f6:51:1b:e1:0d:fe:31: 5d:2f:f9:e6:5b:1f:e1:1c:27:1d:de:38:ab:8d:9e: 46:37:0f:a7:db:ea:95:99:5a:00:6d:0d:ab:00:84: 70:98:18:94:88:d9:f8:52:59:f7:69:f4:f4:e2:ff: 3b:16:63:10:9f:f8:b2:d3:8c:dc:d5:2b:76:93:e6: 46:3d:07:36:29:2f:08:95:d0:54:89:be:80:40:f7: 17:d7:2f:75:b1:4b:f8:b8:b0:2a:57:a2:77:49:9d: b5:e0:f6:51:b0:6f:ee:b1:71:17:f1:3f:49:14:16: 0e:e9:35:1e:63:53:61:17:74:fe:30:ce:a2:ea:db: 9b:03:31:59:24:81:df:44:37:92:42:fd:2d:5c:9e: e9:eb:48:90:66:9d:32:ae:58:27:b8:e9:61:d1:a4: 68:56:b9:e3:18:b7:2c:44:30:63:e3:0c:88:6a:85: 13:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3D:B2:55:D8:E9:E4:34:4E:F2:28:79:77:70:9E:FC:96:E6:8B:BE X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/Cz2yVdjp5DRO8ih5d3Ce_Jbmi74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.52.0/23 91.228.104.0/22 91.229.229.0/24 193.25.100.0/23 195.88.44.0/23 195.110.20.0/23 IPv6: 2001:67c:12a0::/48 Signature Algorithm: sha256WithRSAEncryption 30:8a:13:bd:67:81:b7:5c:35:3f:98:d4:71:3e:20:06:09:53: 1c:0d:6b:a4:5a:a6:1c:23:9d:e4:28:b2:6b:1b:64:2b:a4:76: 01:ae:c9:c0:20:40:ae:3b:77:1d:13:05:54:ef:c9:82:39:aa: cd:27:dc:a6:14:9d:03:22:3a:d1:7e:9e:c0:97:c2:eb:8f:d2: a2:5f:7e:de:8c:52:69:bd:e1:78:a3:39:b3:88:99:7e:89:98: 81:66:a6:26:db:26:a0:3c:c5:b9:f5:bb:32:52:f7:8b:3a:c8: 10:ff:3f:05:8f:64:7d:2a:24:f5:c9:61:b7:5f:3d:d7:bc:33: 14:8d:d6:f9:98:9e:f8:6a:4c:64:fc:23:1c:d5:eb:57:39:78: 99:0c:55:b3:00:45:89:98:84:a1:e1:38:4b:dd:0a:a5:13:e9: e3:1e:58:11:fb:ec:98:ac:f1:ac:b4:8e:5c:16:6f:df:c7:f8: 6c:df:26:99:d0:bc:3c:42:a8:cd:1f:83:3d:0a:0a:63:55:ca: 7b:ae:85:b6:56:46:44:d9:9f:dc:a4:99:d5:e0:51:cc:3b:c8: 63:26:7a:94:2f:ec:e7:cf:7d:c6:85:69:0b:cc:d8:d6:32:c9: 7b:80:76:b0:d6:f3:f6:34:be:c8:c8:5e:ca:da:92:32:a3:6e: fa:70:4d:dd -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt9XJdfQfyCAmlwthPgEVncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTAyMDYxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjNkYjI1NWQ4ZTllNDM0NGVmMjI4Nzk3NzcwOWVmYzk2ZTY4YmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXo8pqBBbCpGtDUYpFp65dZBIw02 WRlWgsUu8G/uLNW4RiQCvyVVoSUQfIf6kSkdLW5rF88/r+coN3deS22RUcCFZCMP WljRD1AtdqgtdWVifvZRG+EN/jFdL/nmWx/hHCcd3jirjZ5GNw+n2+qVmVoAbQ2r AIRwmBiUiNn4Uln3afT04v87FmMQn/iy04zc1St2k+ZGPQc2KS8IldBUib6AQPcX 1y91sUv4uLAqV6J3SZ214PZRsG/usXEX8T9JFBYO6TUeY1NhF3T+MM6i6tubAzFZ JIHfRDeSQv0tXJ7p60iQZp0yrlgnuOlh0aRoVrnjGLcsRDBj4wyIaoUTjwIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFAs9slXY6eQ0TvIoeXdwnvyW5ou+MB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQ3oyeVZkanA1RFJPOGloNWQzQ2VfSmJtaTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAqBAIAATAkAwQBW+Q0AwQC W+RoAwQAW+XlAwQBwRlkAwQBw1gsAwQBw24UMA8EAgACMAkDBwAgAQZ8EqAwDQYJ KoZIhvcNAQELBQADggEBADCKE71ngbdcNT+Y1HE+IAYJUxwNa6RaphwjneQosmsb ZCukdgGuycAgQK47dx0TBVTvyYI5qs0n3KYUnQMiOtF+nsCXwuuP0qJfft6MUmm9 4XijObOImX6JmIFmpibbJqA8xbn1uzJS94s6yBD/PwWPZH0qJPXJYbdfPde8MxSN 1vmYnvhqTGT8IxzV61c5eJkMVbMARYmYhKHhOEvdCqUT6eMeWBH77Jis8ay0jlwW b9/H+GzfJpnQvDxCqM0fgz0KCmNVynuuhbZWRkTZn9ykmdXgUcw7yGMmepQv7OfP fcaFaQvM2NYyyXuAdrDW8/Y0vsjIXsrakjKjbvpwTd0= -----END CERTIFICATE-----Generated at Mon Jan 19 18:00:18 2026 by rpki-client