This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/CBWD_Gg6jndH-l0lM7DiQCVG12k.roa File: CBWD_Gg6jndH-l0lM7DiQCVG12k.roa (raw, json) Hash identifier: bubSKRJET0AOhipZBjbkVYrFDX2PKN6HdmciWmyFV4U= Subject key identifier: 08:15:83:FC:68:3A:8E:77:47:FA:5D:25:33:B0:E2:40:25:46:D7:69 Certificate issuer: /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c Certificate serial: 019B78354EF63F406BD18657C24C4446E9B3 Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/CBWD_Gg6jndH-l0lM7DiQCVG12k.roa Signing time: Thu 01 Jan 2026 06:18:38 +0000 ROA not before: Thu 01 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200678 IP address blocks: 193.104.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4e:f6:3f:40:6b:d1:86:57:c2:4c:44:46:e9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c Validity Not Before: Jan 1 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=081583fc683a8e7747fa5d2533b0e2402546d769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8c:34:20:7d:54:a9:93:08:bc:a1:db:da:39: 83:43:b5:1c:a7:54:4f:37:87:9b:87:70:24:2e:41: cd:55:05:34:ea:e7:66:61:24:1b:06:94:af:12:66: 7b:a4:2e:d6:bb:f2:22:4a:04:4d:70:b6:5b:98:e0: 76:dd:95:70:a3:93:58:22:84:5b:b0:00:0b:e3:61: d3:4a:a2:51:ed:b8:72:0c:f2:e9:97:84:14:75:f8: 97:83:19:9c:b2:be:e1:05:fc:f9:3a:07:63:49:fe: 56:66:3b:a8:6a:c2:0d:8e:17:79:ad:af:92:fe:c2: e1:2e:0d:b3:78:f0:09:11:65:64:53:40:a0:7a:a0: cd:4d:8e:da:b0:0c:63:25:a3:d0:57:90:52:de:56: a1:94:2c:bd:bb:a2:a8:2e:ed:8d:cd:bf:a6:82:59: 42:42:29:f8:6a:42:8f:2f:94:5c:62:48:09:92:10: 67:9c:41:ce:65:67:8b:a2:7b:2e:cb:ce:84:0f:dc: a3:a3:0a:ed:89:19:fe:d2:9a:af:a4:14:3e:18:6b: 73:34:00:86:bb:36:17:ff:0a:d7:af:b8:94:a9:a9: ba:13:ea:80:0c:ac:62:4f:ed:cd:1c:63:7c:ff:44: 3c:d4:26:31:e8:7d:12:3e:88:b4:3d:76:ae:2a:1d: ee:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:15:83:FC:68:3A:8E:77:47:FA:5D:25:33:B0:E2:40:25:46:D7:69 X509v3 Authority Key Identifier: keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/CBWD_Gg6jndH-l0lM7DiQCVG12k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.172.0/24 Signature Algorithm: sha256WithRSAEncryption 62:f8:08:8f:bc:61:4a:14:68:9b:a5:e4:63:ef:d9:8d:be:73: f9:f9:ba:39:af:6f:1c:b0:00:0b:d5:0a:89:a0:ff:ea:a2:11: f7:51:1b:85:60:92:c0:b8:89:78:34:36:ba:81:a0:b8:f7:ac: eb:f5:7b:ae:32:f4:76:47:2c:d4:59:25:49:54:8e:c4:78:41: fb:ff:cd:20:35:e6:00:82:ee:d2:b7:05:64:65:48:6e:f9:01: 64:ae:1b:0c:f3:34:f7:99:18:17:fd:76:e6:34:ba:80:25:f2: 05:a2:cc:ea:4e:f5:7e:66:b6:9f:b5:dd:b3:39:6d:bb:a7:f6: 10:63:29:40:c1:94:7a:7f:79:c6:0e:94:a1:0a:9d:b7:75:b3: 80:67:d8:3c:41:df:22:56:4d:43:d3:44:4e:85:49:40:47:d5: 0f:f2:9f:b4:c0:67:62:df:f4:d5:ab:64:34:2b:69:07:c0:5d: b2:6a:85:00:f5:cd:97:a7:2f:62:37:3b:cd:27:cb:62:55:48: 08:d4:4d:4f:16:29:6a:4a:77:8d:d4:9c:34:64:83:0e:0e:4d: 79:19:5f:2c:09:3f:4e:93:2b:07:a1:35:76:75:f7:54:67:66: 59:0c:55:fe:7d:46:8e:50:00:e2:ca:6f:b5:8f:75:12:4e:a8: a8:ea:59:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NU72P0Br0YZXwkxERumzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ZWIxMWFmOTM1NWRhOWEyYjVkZjczZWNkZDdmZDA5Njdh NGI1OGMwHhcNMjYwMTAxMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODE1ODNmYzY4M2E4ZTc3NDdmYTVkMjUzM2IwZTI0MDI1NDZkNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIw0IH1UqZMIvKHb2jmDQ7Ucp1RP N4ebh3AkLkHNVQU06udmYSQbBpSvEmZ7pC7Wu/IiSgRNcLZbmOB23ZVwo5NYIoRb sAAL42HTSqJR7bhyDPLpl4QUdfiXgxmcsr7hBfz5OgdjSf5WZjuoasINjhd5ra+S /sLhLg2zePAJEWVkU0CgeqDNTY7asAxjJaPQV5BS3lahlCy9u6KoLu2Nzb+mgllC Qin4akKPL5RcYkgJkhBnnEHOZWeLonsuy86ED9yjowrtiRn+0pqvpBQ+GGtzNACG uzYX/wrXr7iUqam6E+qADKxiT+3NHGN8/0Q81CYx6H0SPoi0PXauKh3utwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgVg/xoOo53R/pdJTOw4kAlRtdpMB8GA1UdIwQY MBaAFEbrEa+TVdqaK133Ps3X/QlnpLWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xYTQzZjAtYzAyNy00ZmRjLTg1MTUt NDVmNDk2ZjJmZTc1LzEvQ0JXRF9HZzZqbmRILWwwbE03RGlRQ1ZHMTJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS8xYTQzZjAtYzAyNy00ZmRjLTg1MTUtNDVmNDk2ZjJmZTc1 LzEvUnVzUnI1TlYycG9yWGZjLXpkZjlDV2VrdFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWisMA0G CSqGSIb3DQEBCwUAA4IBAQBi+AiPvGFKFGibpeRj79mNvnP5+bo5r28csAAL1QqJ oP/qohH3URuFYJLAuIl4NDa6gaC496zr9XuuMvR2RyzUWSVJVI7EeEH7/80gNeYA gu7StwVkZUhu+QFkrhsM8zT3mRgX/XbmNLqAJfIFoszqTvV+Zraftd2zOW27p/YQ YylAwZR6f3nGDpShCp23dbOAZ9g8Qd8iVk1D00ROhUlAR9UP8p+0wGdi3/TVq2Q0 K2kHwF2yaoUA9c2Xpy9iNzvNJ8tiVUgI1E1PFilqSneN1Jw0ZIMODk15GV8sCT9O kysHoTV2dfdUZ2ZZDFX+fUaOUADiym+1j3USTqio6llD -----END CERTIFICATE-----Generated at Mon Jan 26 19:34:16 2026 by rpki-client