This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CYqAHaNWukk-ByTGpHKXz3QjQas.roa File: CYqAHaNWukk-ByTGpHKXz3QjQas.roa (raw, json) Hash identifier: wiU3rtjJU2K2wdSE2doiy1m3e5+T4eVxinx3u0FFHbQ= Subject key identifier: 09:8A:80:1D:A3:56:BA:49:3E:07:24:C6:A4:72:97:CF:74:23:41:AB Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA24D03B2AA314C19CD0436AD5FAFC Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CYqAHaNWukk-ByTGpHKXz3QjQas.roa Signing time: Fri 02 Jan 2026 08:19:18 +0000 ROA not before: Fri 02 Jan 2026 08:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29713 IP address blocks: 80.76.44.0/24 maxlen: 24 185.240.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:24:d0:3b:2a:a3:14:c1:9c:d0:43:6a:d5:fa:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=098a801da356ba493e0724c6a47297cf742341ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:bb:19:5d:fa:98:a1:e2:19:9a:48:0d:16: f6:73:c9:f9:51:7b:7f:b2:f9:fc:5e:2f:33:19:54: d8:cb:2b:4a:51:d3:f7:6a:fa:fc:28:5d:95:d2:4c: c4:f5:42:2f:48:71:22:f8:e4:cf:7d:e4:a1:5b:9c: 80:3f:bd:dc:29:0d:0b:a8:9b:a3:3e:3c:40:6b:ba: 57:81:cb:c9:bf:21:f5:45:51:b3:df:24:e9:33:c6: 7c:44:1a:91:b7:40:e4:9d:07:73:cf:89:1d:e0:31: da:6b:4e:91:cc:b5:a3:6e:d7:7a:95:80:62:b3:ec: 2f:0d:cb:ab:4c:34:bd:9d:3a:b4:ba:b7:8b:72:72: 56:82:63:ea:c9:50:37:bd:ce:94:b5:d3:d8:59:fc: 3f:24:8e:2d:36:86:f7:70:43:67:8b:64:cc:77:da: 99:34:b0:8a:83:ed:23:2d:a8:19:9d:06:32:70:96: f2:e0:6c:1b:dd:80:40:eb:de:95:cb:a1:42:36:38: fc:3d:7d:cb:6b:ee:0f:65:ba:38:39:75:63:5e:6f: 37:92:b4:1d:64:af:c9:02:91:e7:5a:60:22:f9:fa: af:ad:b8:29:3c:8d:41:96:06:1f:0d:d3:46:df:0f: bf:3f:68:6c:79:b7:86:4d:c5:4b:3a:81:ee:1d:bd: 10:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8A:80:1D:A3:56:BA:49:3E:07:24:C6:A4:72:97:CF:74:23:41:AB X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CYqAHaNWukk-ByTGpHKXz3QjQas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.44.0/24 185.240.87.0/24 Signature Algorithm: sha256WithRSAEncryption 86:e3:e1:8c:41:63:3e:81:1e:53:95:9c:aa:b6:59:98:de:f5: c5:96:16:ad:0f:ba:72:be:21:42:a4:19:24:02:c1:ef:e4:3e: 68:15:a4:ee:c9:7f:bc:8d:8c:4a:e6:d9:56:60:7d:40:0b:73: 9d:dc:b9:ca:99:13:db:9c:bb:5a:c9:07:78:11:7e:7e:13:25: d9:b1:80:12:0f:97:04:11:7d:93:92:01:8d:cb:a5:24:60:72: 13:83:b5:c6:db:c1:83:66:27:c5:36:0d:93:e8:36:9c:76:d1: d0:b2:a8:c9:db:ef:b6:dc:90:b3:0a:94:c8:e6:cc:6f:60:e8: 98:82:0b:3e:df:da:8e:b2:8a:31:57:d7:1b:40:02:ba:9a:0a: 37:9d:0a:d2:a9:9c:7d:34:f4:a8:bd:e8:64:ff:13:62:1f:63: 8f:0d:4d:eb:8a:2f:67:71:6b:ba:cf:6d:ab:4f:84:5b:ab:ed: 50:a3:33:b5:f4:07:ae:31:b9:c2:aa:98:8e:bb:c8:ae:f3:05: 2a:da:28:76:fa:17:3e:5f:15:e8:41:e1:95:a0:17:a4:56:45: c7:67:51:55:11:3a:76:cb:60:5b:05:0a:f1:2f:b5:58:69:a6: 6c:d3:7d:0d:87:d9:e1:e8:bc:9e:f8:5a:bd:cf:52:de:89:96: 9d:7a:89:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yiTQOyqjFMGc0ENq1fr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOThhODAxZGEzNTZiYTQ5M2UwNzI0YzZhNDcyOTdjZjc0MjM0MWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXq7GV36mKHiGZpIDRb2c8n5UXt/ svn8Xi8zGVTYyytKUdP3avr8KF2V0kzE9UIvSHEi+OTPfeShW5yAP73cKQ0LqJuj PjxAa7pXgcvJvyH1RVGz3yTpM8Z8RBqRt0DknQdzz4kd4DHaa06RzLWjbtd6lYBi s+wvDcurTDS9nTq0ureLcnJWgmPqyVA3vc6UtdPYWfw/JI4tNob3cENni2TMd9qZ NLCKg+0jLagZnQYycJby4Gwb3YBA696Vy6FCNjj8PX3La+4PZbo4OXVjXm83krQd ZK/JApHnWmAi+fqvrbgpPI1BlgYfDdNG3w+/P2hsebeGTcVLOoHuHb0Q7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAmKgB2jVrpJPgckxqRyl890I0GrMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvQ1lxQUhhTld1a2stQnlUR3BIS1h6M1FqUWFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEwsAwQA ufBXMA0GCSqGSIb3DQEBCwUAA4IBAQCG4+GMQWM+gR5TlZyqtlmY3vXFlhatD7py viFCpBkkAsHv5D5oFaTuyX+8jYxK5tlWYH1AC3Od3LnKmRPbnLtayQd4EX5+EyXZ sYASD5cEEX2TkgGNy6UkYHITg7XG28GDZifFNg2T6DacdtHQsqjJ2++23JCzCpTI 5sxvYOiYggs+39qOsooxV9cbQAK6mgo3nQrSqZx9NPSovehk/xNiH2OPDU3rii9n cWu6z22rT4Rbq+1QozO19AeuMbnCqpiOu8iu8wUq2ih2+hc+XxXoQeGVoBekVkXH Z1FVETp2y2BbBQrxL7VYaaZs030Nh9nh6Lye+Fq9z1LeiZadeokW -----END CERTIFICATE-----Generated at Mon Jan 19 18:05:58 2026 by rpki-client