This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/CgyZP30Hoidin7RaMq9Ursvee0Q.roa File: CgyZP30Hoidin7RaMq9Ursvee0Q.roa (raw, json) Hash identifier: MC1SeEHr1WVf3jRPY6r6ltykkJQUHZHDG/G5RN8vUls= Subject key identifier: 0A:0C:99:3F:7D:07:A2:27:62:9F:B4:5A:32:AF:54:AE:CB:DE:7B:44 Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322 Certificate serial: 019B7D5C9B92968AA9FB6DB1977E8CC4E0A8 Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/CgyZP30Hoidin7RaMq9Ursvee0Q.roa Signing time: Fri 02 Jan 2026 06:19:39 +0000 ROA not before: Fri 02 Jan 2026 06:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211392 IP address blocks: 91.192.106.0/23 maxlen: 23 91.192.106.0/24 maxlen: 24 91.192.107.0/24 maxlen: 24 91.193.58.0/23 maxlen: 23 91.193.58.0/24 maxlen: 24 91.193.59.0/24 maxlen: 24 193.106.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9b:92:96:8a:a9:fb:6d:b1:97:7e:8c:c4:e0:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a0c993f7d07a227629fb45a32af54aecbde7b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:58:65:65:3d:d2:b0:b9:6c:0a:bb:83:e3: 5a:5d:f3:50:29:db:36:54:71:d4:8b:59:eb:87:f8: ed:54:df:c0:11:13:6d:65:2c:06:99:84:45:f1:b8: e8:24:62:51:49:90:d8:c0:ed:8b:b4:cf:7c:34:4a: 2c:88:9f:44:a7:56:e7:c4:aa:28:cf:bb:d7:76:14: 48:2a:e8:9b:f7:89:33:20:a2:b6:c7:aa:ff:40:09: 3d:6c:f9:5e:f6:53:da:b2:7f:f8:0b:05:88:f9:be: 4e:df:f4:74:7c:6f:22:d2:41:b0:62:c5:d3:6a:23: ee:64:eb:5a:fb:92:4b:3f:00:1a:42:b7:58:0d:f4: d3:6e:f0:94:59:15:ec:05:ee:0e:a4:42:ad:4c:56: 29:a8:f8:87:b5:88:4e:b2:8c:2f:fb:ad:3d:ef:47: 60:d2:16:78:af:77:64:81:ab:20:c6:07:51:fa:8a: 58:af:00:d7:aa:d0:b6:fc:99:6c:84:e5:71:92:b2: 7c:1f:c7:60:51:9d:b2:2b:32:6b:df:9a:b6:a7:14: 5a:fb:36:ad:75:2f:a2:6c:1e:5f:4d:77:d4:19:13: 7c:e0:64:15:98:42:51:d2:55:1f:9a:bf:11:f8:3d: 75:f2:7d:36:ff:a4:02:68:af:f3:14:6a:bd:39:44: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0C:99:3F:7D:07:A2:27:62:9F:B4:5A:32:AF:54:AE:CB:DE:7B:44 X509v3 Authority Key Identifier: keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/CgyZP30Hoidin7RaMq9Ursvee0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.106.0/23 91.193.58.0/23 193.106.189.0/24 Signature Algorithm: sha256WithRSAEncryption 11:4a:f9:90:b7:33:71:01:67:4b:41:01:72:56:90:d2:a5:d9: 66:7d:58:7f:a7:7d:a9:0b:64:b5:b1:0a:84:3b:51:dd:29:7b: 88:7b:e9:0f:8a:a7:99:1e:ab:ec:de:13:d2:53:b9:4b:bf:82: 05:19:72:da:ea:87:e4:8f:2b:66:b0:c5:95:38:1b:4c:e6:9e: e5:eb:e6:72:51:6f:60:16:91:49:81:35:71:fd:94:e9:54:c1: d9:14:e6:1f:f6:11:46:62:72:91:30:55:0f:de:3f:c5:8b:87: 45:c8:f2:90:59:d5:3a:fb:93:92:52:0a:8e:1c:e3:ea:7d:90: 02:7a:79:dc:31:ca:ff:1c:60:b7:b8:76:84:3f:17:66:0d:7e: 02:e9:e9:c5:fa:e7:7f:29:aa:3c:6b:bb:be:83:7c:71:34:4e: 56:7e:51:f8:0e:b2:46:9e:46:93:88:50:12:05:6e:9c:cc:d9: c7:a0:86:16:d7:b4:7f:64:da:81:d0:eb:0a:2e:f9:2b:aa:e7: 83:27:fb:98:9c:ef:f4:93:4b:e7:b2:b2:90:eb:2b:f0:df:c6: d8:f6:0e:d7:b6:a7:25:eb:80:91:18:5f:3b:44:35:0e:dd:2f: e4:5c:6c:37:2d:f9:4d:8e:c4:43:23:ac:ac:48:28:23:88:d8: 6a:94:a1:48 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XJuSloqp+22xl36MxOCoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0 M2IzMjIwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTBjOTkzZjdkMDdhMjI3NjI5ZmI0NWEzMmFmNTRhZWNiZGU3YjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0RYZWU90rC5bAq7g+NaXfNQKds2 VHHUi1nrh/jtVN/AERNtZSwGmYRF8bjoJGJRSZDYwO2LtM98NEosiJ9Ep1bnxKoo z7vXdhRIKuib94kzIKK2x6r/QAk9bPle9lPasn/4CwWI+b5O3/R0fG8i0kGwYsXT aiPuZOta+5JLPwAaQrdYDfTTbvCUWRXsBe4OpEKtTFYpqPiHtYhOsowv+60970dg 0hZ4r3dkgasgxgdR+opYrwDXqtC2/JlshOVxkrJ8H8dgUZ2yKzJr35q2pxRa+zat dS+ibB5fTXfUGRN84GQVmEJR0lUfmr8R+D118n02/6QCaK/zFGq9OUSBwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAoMmT99B6InYp+0WjKvVK7L3ntEMB8GA1UdIwQY MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct ODIwMmE0NjdkNzUzLzEvQ2d5WlAzMEhvaWRpbjdSYU1xOVVyc3ZlZTBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW8BqAwQB W8E6AwQAwWq9MA0GCSqGSIb3DQEBCwUAA4IBAQARSvmQtzNxAWdLQQFyVpDSpdlm fVh/p32pC2S1sQqEO1HdKXuIe+kPiqeZHqvs3hPSU7lLv4IFGXLa6ofkjytmsMWV OBtM5p7l6+ZyUW9gFpFJgTVx/ZTpVMHZFOYf9hFGYnKRMFUP3j/Fi4dFyPKQWdU6 +5OSUgqOHOPqfZACenncMcr/HGC3uHaEPxdmDX4C6enF+ud/Kao8a7u+g3xxNE5W flH4DrJGnkaTiFASBW6czNnHoIYW17R/ZNqB0OsKLvkrqueDJ/uYnO/0k0vnsrKQ 6yvw38bY9g7Xtqcl64CRGF87RDUO3S/kXGw3LflNjsRDI6ysSCgjiNhqlKFI -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:37 2026 by rpki-client