This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/Ccbi6HrRjYv5g2_oCb7PGuZTGkQ.roa File: Ccbi6HrRjYv5g2_oCb7PGuZTGkQ.roa (raw, json) Hash identifier: juQkDFo0AIVz1+RSIS9ayHrDC2gpBK7MmNeN9tyG2go= Subject key identifier: 09:C6:E2:E8:7A:D1:8D:8B:F9:83:6F:E8:09:BE:CF:1A:E6:53:1A:44 Certificate issuer: /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d Certificate serial: 019B77C6BA4341ABE6F8F3E91638B7B44146 Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/Ccbi6HrRjYv5g2_oCb7PGuZTGkQ.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25459 IP address blocks: 94.124.120.0/21 maxlen: 21 2a02:9e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ba:43:41:ab:e6:f8:f3:e9:16:38:b7:b4:41:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09c6e2e87ad18d8bf9836fe809becf1ae6531a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2a:07:6c:7d:55:92:00:2b:61:39:ea:aa:a6: 1c:4a:bd:f6:53:d9:74:4c:6d:e7:89:12:72:b2:de: 32:7f:86:ed:e8:9d:95:26:2b:68:ab:ab:f6:f3:20: f5:1e:02:62:96:e7:6e:1b:df:59:93:63:e6:54:cd: 5e:bf:fc:5e:94:73:5d:fd:71:a4:b0:f0:d5:9b:6d: 79:f6:ab:98:83:a1:f6:67:fc:df:78:f1:61:79:e5: d8:eb:ca:c9:18:bc:07:e7:0c:06:ba:d8:4b:4f:3b: 72:75:ea:df:c3:0e:2d:08:80:2c:5f:4f:7c:a6:e0: d4:c7:8a:0a:4d:3c:27:bf:7b:4c:67:36:48:4d:05: 58:e2:e4:80:53:a6:52:17:41:37:49:8d:23:43:f3: 3a:5b:06:94:05:c3:48:5f:8b:48:e8:89:fe:c0:8a: 6a:dc:ec:a0:4f:85:96:ca:cb:73:7a:ff:85:64:e5: d4:04:b9:8b:f8:6d:1d:69:48:11:24:1b:9f:3b:17: df:6c:96:0b:6f:43:13:5f:08:5a:a8:7b:ba:47:1a: 62:22:74:3e:d8:2e:45:f8:25:4b:5b:be:d1:55:89: e4:ea:34:a0:f8:86:42:8f:d6:42:c2:b8:83:d6:59: c3:06:da:d0:14:72:f6:a1:1a:88:85:f9:9e:04:c6: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C6:E2:E8:7A:D1:8D:8B:F9:83:6F:E8:09:BE:CF:1A:E6:53:1A:44 X509v3 Authority Key Identifier: keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/Ccbi6HrRjYv5g2_oCb7PGuZTGkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.124.120.0/21 IPv6: 2a02:9e0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:65:24:02:3c:50:5d:1a:01:eb:bc:ef:72:30:da:82:7f:af: f9:30:a5:ac:95:f8:00:53:12:a7:50:50:f1:ac:83:d7:05:41: 97:1d:a1:b2:3b:06:3e:73:72:95:43:f0:3d:4b:f6:39:ab:24: 14:6c:c5:80:08:15:80:ba:97:25:ab:5b:15:f3:e0:1f:89:e4: 4f:b9:01:bb:05:c3:9c:9b:2f:80:16:ca:e0:83:e2:24:39:67: 83:1e:30:7d:9b:ea:80:5f:62:83:9e:8d:05:d6:55:35:94:16: 77:15:d8:68:94:8f:49:08:15:c8:db:62:01:b2:cf:35:35:3e: 0a:67:3e:0d:b4:d5:cf:fb:53:e5:3f:2b:12:0b:aa:0f:00:b4: f5:e4:5c:b6:b8:0b:11:4f:56:b3:97:09:8b:61:9f:73:95:2f: c7:9d:7d:12:c9:a7:33:35:15:05:e5:f1:26:9c:d8:ce:b0:c0: b2:6e:41:58:93:7e:0e:1b:e0:5e:09:48:76:82:38:6d:b9:fd: 9a:ba:d2:09:3a:88:a3:f5:6a:ba:44:8a:4b:d9:cb:e1:ac:cc: 3b:f4:35:fe:72:b2:76:66:ed:b7:eb:14:43:3d:8b:b0:4e:1c: f7:de:78:9f:95:26:bb:b0:86:68:21:b9:a5:d6:82:40:56:13: a5:41:45:96 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xrpDQavm+PPpFji3tEFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNWNhMmY2ODZkNGU0ODRhNzdjMzRjMTczNDc2YmY2OWQy MzdiN2QwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWM2ZTJlODdhZDE4ZDhiZjk4MzZmZTgwOWJlY2YxYWU2NTMxYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvioHbH1VkgArYTnqqqYcSr32U9l0 TG3niRJyst4yf4bt6J2VJitoq6v28yD1HgJiluduG99Zk2PmVM1ev/xelHNd/XGk sPDVm2159quYg6H2Z/zfePFheeXY68rJGLwH5wwGuthLTztyderfww4tCIAsX098 puDUx4oKTTwnv3tMZzZITQVY4uSAU6ZSF0E3SY0jQ/M6WwaUBcNIX4tI6In+wIpq 3OygT4WWystzev+FZOXUBLmL+G0daUgRJBufOxffbJYLb0MTXwhaqHu6RxpiInQ+ 2C5F+CVLW77RVYnk6jSg+IZCj9ZCwriD1lnDBtrQFHL2oRqIhfmeBMZwIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAnG4uh60Y2L+YNv6Am+zxrmUxpEMB8GA1UdIwQY MBaAFLFcovaG1OSEp3w0wXNHa/adI3t9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2Qt Mzg1ZjNmNTJhOTZiLzEvQ2NiaTZIclJqWXY1ZzJfb0NiN1BHdVpUR2tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xOGRhN2UtZDJmMC00NTk3LTliM2QtMzg1ZjNmNTJhOTZi LzEvc1Z5aTlvYlU1SVNuZkRUQmMwZHI5cDBqZTMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXnx4MA0E AgACMAcDBQAqAgngMA0GCSqGSIb3DQEBCwUAA4IBAQBbZSQCPFBdGgHrvO9yMNqC f6/5MKWslfgAUxKnUFDxrIPXBUGXHaGyOwY+c3KVQ/A9S/Y5qyQUbMWACBWAupcl q1sV8+AfieRPuQG7BcOcmy+AFsrgg+IkOWeDHjB9m+qAX2KDno0F1lU1lBZ3Fdho lI9JCBXI22IBss81NT4KZz4NtNXP+1PlPysSC6oPALT15Fy2uAsRT1azlwmLYZ9z lS/HnX0SyaczNRUF5fEmnNjOsMCybkFYk34OG+BeCUh2gjhtuf2autIJOoij9Wq6 RIpL2cvhrMw79DX+crJ2Zu236xRDPYuwThz33niflSa7sIZoIbml1oJAVhOlQUWW -----END CERTIFICATE-----Generated at Mon Jan 26 20:25:58 2026 by rpki-client