This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa File: Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa (raw, json) Hash identifier: pbSs2ZVDWPwNAeaOknwdNSMSjKf4eYnx2xPq9854z3Y= Subject key identifier: 09:C7:3D:CD:7F:B2:2D:E4:02:E9:8E:79:48:6E:6C:C3:C3:6B:A3:04 Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c Certificate serial: 019C4226EBC475C99EB18735ED3C118745A2 Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa Signing time: Mon 09 Feb 2026 11:26:12 +0000 ROA not before: Mon 09 Feb 2026 11:26:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209853 IP address blocks: 194.110.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:26:eb:c4:75:c9:9e:b1:87:35:ed:3c:11:87:45:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c Validity Not Before: Feb 9 11:26:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09c73dcd7fb22de402e98e79486e6cc3c36ba304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:fe:b2:48:f2:09:4c:2e:be:06:1c:94:f5: 21:d3:6c:1d:25:e6:7a:4e:3c:c3:96:3b:5c:83:e4: de:63:db:e9:3c:95:65:8a:b6:6c:61:aa:03:be:41: 78:3c:4a:b5:a9:6f:29:94:ce:65:35:ea:2a:59:a2: 82:a0:74:10:60:42:f5:05:b5:21:6b:e0:73:f3:29: 73:e4:f3:32:4b:d2:32:ce:a5:19:30:71:58:64:3f: d8:aa:73:dc:54:ba:71:00:ec:79:20:c6:65:77:55: 9f:ea:e3:77:31:90:9d:70:67:27:df:59:d1:e0:5f: ec:c0:9d:04:d4:c2:de:f3:2d:6a:b1:6a:44:47:1c: f9:9c:08:f6:2e:eb:7f:34:b3:92:34:23:78:de:12: 57:8f:be:d0:20:f0:b7:a2:17:3b:f3:f6:31:28:35: 4c:2d:23:03:ab:12:52:71:79:e4:4a:95:91:1e:27: 08:b7:48:f1:7c:ed:72:f2:9c:0d:cb:d6:b6:c2:33: 00:37:70:c2:33:e0:72:65:e9:dd:6b:5b:4f:9e:33: d0:b3:37:d0:73:44:06:9e:9d:24:00:79:72:3a:45: 10:4b:59:ca:1e:79:0c:2c:44:fb:4c:0a:07:dd:fc: 4e:fc:de:b7:e1:ab:12:6a:24:36:b0:29:4a:db:56: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C7:3D:CD:7F:B2:2D:E4:02:E9:8E:79:48:6E:6C:C3:C3:6B:A3:04 X509v3 Authority Key Identifier: keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/Ccc9zX-yLeQC6Y55SG5sw8NrowQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.168.0/24 Signature Algorithm: sha256WithRSAEncryption 30:67:0f:fa:8d:47:7c:c1:f8:d4:ba:32:1e:d6:33:ec:8a:38: 97:d3:de:d5:d1:bb:07:5e:1c:13:7b:60:e8:83:84:94:aa:fc: bd:19:55:91:9e:d0:a0:2a:8b:a1:a4:cf:6b:4a:28:88:21:36: af:4e:75:71:2a:60:79:c6:26:d6:2f:39:9b:f1:e9:0e:bd:71: 23:bf:69:c2:f4:0f:7b:fe:bb:cc:94:ec:2e:c6:15:66:72:52: 42:62:6d:22:f4:e5:31:1a:37:c7:81:31:f8:a0:05:16:ec:f9: e0:a5:5e:51:47:c0:25:29:b0:fb:5e:7e:5b:60:a0:8c:7e:5d: 80:2e:53:2f:20:59:bf:e4:4f:1b:2f:d8:0a:11:e1:97:d1:3c: 1d:d8:83:bd:fd:5e:89:bc:6f:5c:e0:96:80:1d:3b:0c:50:70: 63:61:2d:e8:e7:70:c7:fe:0b:19:14:5e:a6:78:30:6a:3b:0d: e9:ed:a4:2c:c5:83:5e:b6:0f:50:38:3f:71:59:fc:ae:e2:82: e7:0f:23:ea:f3:99:af:6c:35:b2:52:bc:c4:27:7b:be:fc:c7: 70:62:91:f7:c3:ae:a8:12:dc:1d:83:7b:5b:f9:fe:af:0d:b4: 3f:a0:ed:af:9f:c3:18:da:5d:e1:41:5f:9a:53:9e:97:7d:a6: 97:4c:52:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZxCJuvEdcmesYc17TwRh0WiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw MTRiN2MwHhcNMjYwMjA5MTEyNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWM3M2RjZDdmYjIyZGU0MDJlOThlNzk0ODZlNmNjM2MzNmJhMzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/b+skjyCUwuvgYclPUh02wdJeZ6 TjzDljtcg+TeY9vpPJVlirZsYaoDvkF4PEq1qW8plM5lNeoqWaKCoHQQYEL1BbUh a+Bz8ylz5PMyS9IyzqUZMHFYZD/YqnPcVLpxAOx5IMZld1Wf6uN3MZCdcGcn31nR 4F/swJ0E1MLe8y1qsWpERxz5nAj2Lut/NLOSNCN43hJXj77QIPC3ohc78/YxKDVM LSMDqxJScXnkSpWRHicIt0jxfO1y8pwNy9a2wjMAN3DCM+ByZenda1tPnjPQszfQ c0QGnp0kAHlyOkUQS1nKHnkMLET7TAoH3fxO/N634asSaiQ2sClK21ZzZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAnHPc1/si3kAumOeUhubMPDa6MEMB8GA1UdIwQY MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt MTE0YWQ0MWNmMzMxLzEvQ2NjOXpYLXlMZVFDNlk1NVNHNXN3OE5yb3dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm6oMA0G CSqGSIb3DQEBCwUAA4IBAQAwZw/6jUd8wfjUujIe1jPsijiX097V0bsHXhwTe2Do g4SUqvy9GVWRntCgKouhpM9rSiiIITavTnVxKmB5xibWLzmb8ekOvXEjv2nC9A97 /rvMlOwuxhVmclJCYm0i9OUxGjfHgTH4oAUW7PngpV5RR8AlKbD7Xn5bYKCMfl2A LlMvIFm/5E8bL9gKEeGX0Twd2IO9/V6JvG9c4JaAHTsMUHBjYS3o53DH/gsZFF6m eDBqOw3p7aQsxYNetg9QOD9xWfyu4oLnDyPq85mvbDWyUrzEJ3u+/MdwYpH3w66o Etwdg3tb+f6vDbQ/oO2vn8MY2l3hQV+aU56XfaaXTFLA -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:40 2026 by rpki-client