This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/209WTz4Iyf5mBbhRaw9rNSf_IWM.roa File: 209WTz4Iyf5mBbhRaw9rNSf_IWM.roa (raw, json) Hash identifier: XbgVIWscTO3gpnz3WAJ8jpEdO+EMP4cUN9LESvxcf1Q= Subject key identifier: DB:4F:56:4F:3E:08:C9:FE:66:05:B8:51:6B:0F:6B:35:27:FF:21:63 Certificate issuer: /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Certificate serial: 019B7759289491DE540AAE9DE245BE41DD07 Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/209WTz4Iyf5mBbhRaw9rNSf_IWM.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12941 IP address blocks: 192.109.53.0/24 maxlen: 24 193.141.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:28:94:91:de:54:0a:ae:9d:e2:45:be:41:dd:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392 Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db4f564f3e08c9fe6605b8516b0f6b3527ff2163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b8:35:55:92:f7:ec:6f:46:f1:71:e2:db:24: d2:1a:e0:83:61:59:19:43:c0:22:10:38:1b:52:b2: ca:d0:d6:56:3f:4f:e1:6d:e9:78:5d:02:7a:66:7c: 49:c3:5d:16:1f:ae:22:e4:4f:cd:0e:6e:ae:2a:9f: 51:2b:8c:10:96:5a:46:4f:f8:04:88:39:37:5c:24: e7:f1:9d:0a:43:2c:d7:e9:11:4c:dd:2e:ef:65:a5: bd:e3:e5:f5:b6:b0:f8:9a:78:3c:cb:0a:34:cd:fe: 54:f4:f1:51:d0:1f:6f:2a:91:c6:3d:c4:5a:aa:c5: b3:79:8f:5f:30:35:33:ba:28:e5:81:a7:a6:c0:8b: 35:19:35:9c:9f:e6:76:8a:13:e8:3d:78:34:9f:e2: dd:7c:63:a2:60:bb:82:d1:b1:8c:71:19:0b:1b:8b: 9a:33:b4:c3:d7:d9:48:a2:30:14:f6:4b:6e:85:18: c1:a9:d2:2d:94:6f:66:26:aa:de:1e:33:01:ad:b6: 7e:fa:ac:b6:1a:3a:10:18:a7:91:7d:b5:b9:00:f4: 5c:99:99:91:7b:c8:ca:ba:9d:68:8b:05:1f:3d:4d: d5:69:5a:7b:81:94:50:06:7d:7d:3d:08:ea:f7:72: 38:28:5d:38:de:b0:9a:3e:f6:73:b5:98:34:63:01: 1f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4F:56:4F:3E:08:C9:FE:66:05:B8:51:6B:0F:6B:35:27:FF:21:63 X509v3 Authority Key Identifier: keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/209WTz4Iyf5mBbhRaw9rNSf_IWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.53.0/24 193.141.107.0/24 Signature Algorithm: sha256WithRSAEncryption ae:b6:d9:ee:e1:4a:eb:0b:e8:d1:31:38:a3:54:b3:5e:c7:ce: 39:1c:05:2a:91:1a:a1:4d:e9:43:43:87:57:63:fc:c0:e3:96: a9:96:e4:7f:f9:df:8b:0b:f3:fd:1a:80:70:1e:3f:04:0f:e7: a7:5a:3c:d2:af:19:0b:da:60:87:ed:73:5c:1e:2f:dd:01:c3: 41:ef:13:34:d7:9f:2f:c7:76:ba:ad:35:9e:ad:86:07:77:f8: 5f:7d:b1:f7:c5:ad:33:ad:8e:90:d3:43:f7:06:fd:87:0b:1f: 2e:7d:5a:0a:db:ee:07:e0:13:8e:6b:17:47:8e:3e:2a:0c:45: 43:e7:fb:dd:22:86:46:87:d0:24:d3:b8:36:8f:aa:b3:0e:5a: 62:ae:6e:25:45:a3:bc:9e:14:7c:16:d7:1e:13:9a:7a:41:12: ea:59:a5:62:8a:a8:20:95:04:67:16:9e:58:4d:20:9c:b3:4d: c1:1c:7e:8c:87:3e:c6:53:f8:e9:6a:85:41:3e:26:6e:e3:27: 9e:1c:b3:f6:57:9c:03:51:23:c8:cd:67:e8:89:c0:8b:d1:ad: 1d:60:b2:36:0b:6e:d0:0f:26:16:64:b1:c3:55:90:aa:cb:e3: b1:c1:65:45:e7:d3:d1:17:47:be:f3:b7:3a:17:47:2c:ef:c3: 5f:70:72:04 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WSiUkd5UCq6d4kW+Qd0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTQ5YWIzZjE4ZWMzZWQzNmZmMmE4MWQ0ODlhZjEwNjk5 Y2IzOTIwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjRmNTY0ZjNlMDhjOWZlNjYwNWI4NTE2YjBmNmIzNTI3ZmYyMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97g1VZL37G9G8XHi2yTSGuCDYVkZ Q8AiEDgbUrLK0NZWP0/hbel4XQJ6ZnxJw10WH64i5E/NDm6uKp9RK4wQllpGT/gE iDk3XCTn8Z0KQyzX6RFM3S7vZaW94+X1trD4mng8ywo0zf5U9PFR0B9vKpHGPcRa qsWzeY9fMDUzuijlgaemwIs1GTWcn+Z2ihPoPXg0n+LdfGOiYLuC0bGMcRkLG4ua M7TD19lIojAU9ktuhRjBqdItlG9mJqreHjMBrbZ++qy2GjoQGKeRfbW5APRcmZmR e8jKup1oiwUfPU3VaVp7gZRQBn19PQjq93I4KF043rCaPvZztZg0YwEf5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNtPVk8+CMn+ZgW4UWsPazUn/yFjMB8GA1UdIwQY MBaAFAgUmrPxjsPtNv8qgdSJrxBpnLOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMt ZDg3MTEyY2E5OWFlLzEvMjA5V1R6NEl5ZjVtQmJoUmF3OXJOU2ZfSVdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMtZDg3MTEyY2E5OWFl LzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwG01AwQA wY1rMA0GCSqGSIb3DQEBCwUAA4IBAQCuttnu4UrrC+jRMTijVLNex845HAUqkRqh TelDQ4dXY/zA45apluR/+d+LC/P9GoBwHj8ED+enWjzSrxkL2mCH7XNcHi/dAcNB 7xM0158vx3a6rTWerYYHd/hffbH3xa0zrY6Q00P3Bv2HCx8ufVoK2+4H4BOOaxdH jj4qDEVD5/vdIoZGh9Ak07g2j6qzDlpirm4lRaO8nhR8FtceE5p6QRLqWaViiqgg lQRnFp5YTSCcs03BHH6Mhz7GU/jpaoVBPiZu4yeeHLP2V5wDUSPIzWfoicCL0a0d YLI2C27QDyYWZLHDVZCqy+OxwWVF59PRF0e+87c6F0cs78NfcHIE -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:17 2026 by rpki-client