This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa File: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (raw, json) Hash identifier: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc= Subject key identifier: 09:A4:99:F7:17:3B:01:2A:53:C0:26:0A:CB:67:74:26:7E:C6:1C:51 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C773E27F55DF878AADFE8B21E18295 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21859 IP address blocks: 94.103.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:73:e2:7f:55:df:87:8a:ad:fe:8b:21:e1:82:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09a499f7173b012a53c0260acb6774267ec61c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:de:84:c7:1c:6a:70:43:f0:00:22:f7:30: 4a:6a:37:29:8d:63:7e:75:87:90:9d:17:91:eb:ed: d6:06:f0:67:04:89:26:ab:cc:36:4b:7f:22:8f:ad: a3:52:52:56:86:a1:04:2b:18:cc:c9:90:38:c7:38: 9e:30:5c:b2:85:80:95:5e:97:9e:f0:27:97:f5:54: b7:5c:c5:c3:26:3c:7d:96:38:b3:66:96:dd:40:41: 93:a2:a1:9f:92:f9:44:3b:7a:d7:20:f4:5b:6f:ff: e1:4e:7d:85:99:79:9a:71:6f:c4:8b:fa:c4:43:3f: d0:97:af:4a:5e:e7:0a:88:94:f8:87:ec:e3:bc:cf: 8a:b5:f2:a1:07:e4:b3:04:f6:8d:a0:a3:8e:ad:40: fa:ec:b3:1f:6f:47:4c:44:57:00:0f:61:4a:12:2f: dd:bc:ff:cb:a3:66:5d:4f:7e:9f:b6:88:95:40:96: d2:9e:67:79:f4:4d:63:12:3d:e6:04:4a:e2:9c:6f: b7:ad:f1:4d:1b:12:a9:d4:59:ff:15:c7:88:68:fb: a6:f1:44:e2:01:36:76:7f:12:9e:f5:25:c7:fb:ab: 7b:5e:25:1a:c0:ac:14:6d:e8:ba:2a:3e:3d:db:45: 58:2d:bb:ac:1c:37:b6:8f:15:1f:14:8c:83:a3:f5: 48:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A4:99:F7:17:3B:01:2A:53:C0:26:0A:CB:67:74:26:7E:C6:1C:51 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.103.56.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:21:e1:79:86:25:d7:b6:1b:ab:16:00:af:fb:99:76:6f:d4: e6:1d:8b:77:12:84:a7:7c:bf:cc:88:ab:87:3f:49:b6:8c:5f: 76:7c:e9:52:6d:d2:b4:0a:21:ae:fb:e6:66:5f:03:9a:dc:04: 38:d1:fc:1f:14:7f:fb:d2:39:4a:f5:1c:75:37:8b:5b:d1:31: 9b:d0:6b:5f:d1:a4:3e:7e:ec:5b:85:b7:97:9f:21:3b:bf:78: 77:8e:c1:26:5a:81:57:a1:2b:2b:b1:d0:b7:99:80:0c:6c:50: 9a:fc:9b:79:7f:e6:bc:ce:9b:ce:e8:e7:9b:5c:cb:bd:55:2c: de:a2:6c:15:8f:18:12:27:97:7b:c9:6f:66:d7:f3:70:21:29: 74:fc:fe:2d:41:93:c7:2b:cb:16:8f:9f:60:10:97:cc:cf:5c: 4c:e3:29:d7:a9:43:02:20:51:06:3d:14:ff:98:85:a2:83:8d: 5a:9d:91:1a:69:10:c4:cc:81:fd:d1:3b:a3:87:2e:e4:4f:78: 38:d0:e5:96:d4:52:87:79:89:37:69:b2:95:83:ea:00:e2:d7: 63:ed:49:1d:24:bc:dd:b0:d2:6a:e8:f4:f1:30:88:92:dd:45: b3:78:5e:ab:a3:16:c0:93:19:ae:4c:c3:76:da:3d:e2:69:2f: 0b:47:da:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3Pif1Xfh4qt/osh4YKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWE0OTlmNzE3M2IwMTJhNTNjMDI2MGFjYjY3NzQyNjdlYzYxYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNbehMccanBD8AAi9zBKajcpjWN+ dYeQnReR6+3WBvBnBIkmq8w2S38ij62jUlJWhqEEKxjMyZA4xzieMFyyhYCVXpee 8CeX9VS3XMXDJjx9ljizZpbdQEGToqGfkvlEO3rXIPRbb//hTn2FmXmacW/Ei/rE Qz/Ql69KXucKiJT4h+zjvM+KtfKhB+SzBPaNoKOOrUD67LMfb0dMRFcAD2FKEi/d vP/Lo2ZdT36ftoiVQJbSnmd59E1jEj3mBErinG+3rfFNGxKp1Fn/FceIaPum8UTi ATZ2fxKe9SXH+6t7XiUawKwUbei6Kj4920VYLbusHDe2jxUfFIyDo/VIDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmkmfcXOwEqU8AmCstndCZ+xhxRMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvQ2FTWjl4YzdBU3BUd0NZS3kyZDBKbjdHSEZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXmc4MA0G CSqGSIb3DQEBCwUAA4IBAQBfIeF5hiXXthurFgCv+5l2b9TmHYt3EoSnfL/MiKuH P0m2jF92fOlSbdK0CiGu++ZmXwOa3AQ40fwfFH/70jlK9Rx1N4tb0TGb0Gtf0aQ+ fuxbhbeXnyE7v3h3jsEmWoFXoSsrsdC3mYAMbFCa/Jt5f+a8zpvO6OebXMu9VSze omwVjxgSJ5d7yW9m1/NwISl0/P4tQZPHK8sWj59gEJfMz1xM4ynXqUMCIFEGPRT/ mIWig41anZEaaRDEzIH90Tujhy7kT3g40OWW1FKHeYk3abKVg+oA4tdj7UkdJLzd sNJq6PTxMIiS3UWzeF6roxbAkxmuTMN22j3iaS8LR9ot -----END CERTIFICATE-----Generated at Thu Jan 8 17:25:08 2026 by rpki-client