This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa File: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (raw, json) Hash identifier: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ= Subject key identifier: 09:5E:24:C8:4C:8F:32:BA:AC:FA:0C:3A:C3:EC:D3:BC:C8:C6:4F:94 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019B78A2E0DFFBA81C78D62E8565AB6D886E Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55410 IP address blocks: 80.94.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e0:df:fb:a8:1c:78:d6:2e:85:65:ab:6d:88:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=095e24c84c8f32baacfa0c3ac3ecd3bcc8c64f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:67:0a:14:3f:ec:10:9a:b7:a0:34:87:bf:6e: 34:5f:64:ab:05:61:06:95:56:49:0b:9d:7f:93:7a: 58:fb:eb:1a:a6:eb:32:4e:14:23:28:a5:b9:53:30: 10:37:7a:8e:a0:50:c6:e2:f4:8c:f0:f2:72:d0:bf: 65:9b:eb:b2:fd:50:e0:ca:27:86:d5:88:4e:80:15: 46:02:9f:7a:0c:da:d0:72:4a:c3:33:77:46:bd:8b: 0c:00:b3:1c:24:5d:43:64:fd:f3:27:4e:d4:34:80: 5b:fc:a3:93:bf:cf:ee:b3:1c:cf:6e:74:46:f2:57: e2:a7:6c:4e:28:60:fe:64:49:93:22:6b:b5:2e:a6: 9f:4e:04:4f:49:b8:c1:d7:20:d1:c8:e8:1a:ac:77: 4f:3d:84:9c:00:09:56:7c:c3:46:50:c5:33:3c:c7: 75:ae:95:1f:22:bb:95:fd:5d:73:2f:e6:32:4f:a4: d8:e2:4f:53:c3:56:76:89:b5:bc:67:98:17:7a:99: 9a:23:21:14:90:b0:f7:cf:06:36:f8:82:43:54:26: a4:5e:c0:11:7c:91:1c:c4:bb:0a:79:3a:13:ff:42: c2:ff:f5:fe:48:66:f6:f3:f7:83:3b:f5:88:4c:5a: f5:e8:df:2e:2b:8c:c0:7b:30:90:44:20:77:03:2d: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5E:24:C8:4C:8F:32:BA:AC:FA:0C:3A:C3:EC:D3:BC:C8:C6:4F:94 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.94.91.0/24 Signature Algorithm: sha256WithRSAEncryption d9:d3:79:65:60:72:b1:8a:e2:3c:96:50:07:7d:4b:29:99:7f: b0:e7:c7:40:3e:88:b0:36:e5:04:d3:16:2d:58:3e:3b:99:13: 99:99:02:36:a8:3a:02:80:c7:5d:a4:ba:7e:f3:76:0f:b7:c3: 72:5d:8f:72:f8:87:ba:29:ea:f3:35:22:74:a7:c3:88:96:af: a7:74:69:23:da:93:b4:4c:67:13:1a:f3:e3:13:bf:2d:56:9e: 03:8a:56:af:15:eb:e0:22:86:ce:f2:02:0b:16:ce:fe:ef:0e: c3:bd:aa:af:b6:e0:39:38:41:36:4c:1c:2d:7b:f1:1a:9c:15: ed:ce:32:b9:fc:24:7f:74:d5:ae:98:09:2e:21:ba:0f:0f:16: 09:f0:c3:fb:ea:d5:9e:fd:c9:f3:8b:43:98:bb:34:99:ea:a8: 4a:8c:69:64:c4:6f:cb:6c:d4:e9:fe:ff:fa:cf:83:a3:19:0a: ba:41:5c:9a:49:76:92:e8:58:c0:65:43:2f:92:7a:1b:e8:e7: 06:00:6e:2e:65:d0:21:49:7e:03:2f:d0:20:ec:ae:9d:8e:80: cb:ae:d7:77:6f:b6:e3:96:aa:c0:b4:61:c4:51:59:56:a9:2f: 2f:6c:44:b9:99:1b:3c:cc:ca:0c:e4:32:76:e6:58:2a:a8:90: a5:d7:c6:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouDf+6gceNYuhWWrbYhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTVlMjRjODRjOGYzMmJhYWNmYTBjM2FjM2VjZDNiY2M4YzY0Zjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82cKFD/sEJq3oDSHv240X2SrBWEG lVZJC51/k3pY++sapusyThQjKKW5UzAQN3qOoFDG4vSM8PJy0L9lm+uy/VDgyieG 1YhOgBVGAp96DNrQckrDM3dGvYsMALMcJF1DZP3zJ07UNIBb/KOTv8/usxzPbnRG 8lfip2xOKGD+ZEmTImu1LqafTgRPSbjB1yDRyOgarHdPPYScAAlWfMNGUMUzPMd1 rpUfIruV/V1zL+YyT6TY4k9Tw1Z2ibW8Z5gXepmaIyEUkLD3zwY2+IJDVCakXsAR fJEcxLsKeToT/0LC//X+SGb28/eDO/WITFr16N8uK4zAezCQRCB3Ay0oawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAleJMhMjzK6rPoMOsPs07zIxk+UMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvQ1Y0a3lFeVBNcnFzLWd3NnctelR2TWpHVDVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF5bMA0G CSqGSIb3DQEBCwUAA4IBAQDZ03llYHKxiuI8llAHfUspmX+w58dAPoiwNuUE0xYt WD47mROZmQI2qDoCgMddpLp+83YPt8NyXY9y+Ie6KerzNSJ0p8OIlq+ndGkj2pO0 TGcTGvPjE78tVp4DilavFevgIobO8gILFs7+7w7DvaqvtuA5OEE2TBwte/EanBXt zjK5/CR/dNWumAkuIboPDxYJ8MP76tWe/cnzi0OYuzSZ6qhKjGlkxG/LbNTp/v/6 z4OjGQq6QVyaSXaS6FjAZUMvknob6OcGAG4uZdAhSX4DL9Ag7K6djoDLrtd3b7bj lqrAtGHEUVlWqS8vbES5mRs8zMoM5DJ25lgqqJCl18Zc -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:28 2026 by rpki-client