This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/cgx3Y5niHaURRA_j2XVnH5snZqE.roa File: cgx3Y5niHaURRA_j2XVnH5snZqE.roa (raw, json) Hash identifier: wvI3PVCUphqU2rq2ZXh+5+5Blo4y6rgwv7y5x6vRtSs= Subject key identifier: 72:0C:77:63:99:E2:1D:A5:11:44:0F:E3:D9:75:67:1F:9B:27:66:A1 Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774 Certificate serial: 019B79EBECFD2DF14A0FDFBCB0D18BBF05F3 Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/cgx3Y5niHaURRA_j2XVnH5snZqE.roa Signing time: Thu 01 Jan 2026 14:17:43 +0000 ROA not before: Thu 01 Jan 2026 14:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12757 IP address blocks: 194.0.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:ec:fd:2d:f1:4a:0f:df:bc:b0:d1:8b:bf:05:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774 Validity Not Before: Jan 1 14:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=720c776399e21da511440fe3d975671f9b2766a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:a6:19:c4:fd:51:75:cf:06:a1:61:31:b6: b4:2e:18:ca:70:4a:8c:78:4d:f6:a6:00:84:15:ee: db:0d:82:4a:03:c6:11:2b:19:b0:28:d6:dc:3a:00: 7f:34:65:66:c1:ba:e3:53:e6:b4:96:39:f2:20:9c: d1:ec:c1:6f:8e:52:aa:95:d3:69:0f:01:d2:ce:ad: c1:2b:85:29:6d:e3:6f:65:07:a9:ed:0b:6f:55:7a: 83:1f:ce:ab:ec:ed:17:7f:0a:8b:ad:ad:74:06:4b: ae:10:a1:4a:6c:57:19:29:5b:ee:2f:aa:de:19:c8: 03:cf:8e:c0:2b:9c:5d:55:92:42:7b:4a:bb:d3:59: a4:d0:c9:18:d4:9c:ca:df:c8:03:53:70:26:5d:8a: b7:16:cb:46:13:24:aa:aa:2e:10:92:a8:28:1d:4e: b1:ce:dd:24:32:16:03:53:51:56:76:6c:99:40:99: 85:21:b7:56:25:b2:bf:c2:a4:97:11:ba:f9:46:71: 47:85:86:f2:d3:bc:d8:1a:4e:d7:64:3e:4c:45:fa: 70:76:2c:53:7e:72:47:f5:88:43:37:11:f9:f2:37: ce:9c:35:d8:d9:c1:cc:6e:6b:c2:6f:10:2a:b2:d5: ae:db:79:e1:32:0e:55:41:ac:a3:53:5b:21:d1:e3: ce:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0C:77:63:99:E2:1D:A5:11:44:0F:E3:D9:75:67:1F:9B:27:66:A1 X509v3 Authority Key Identifier: keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/cgx3Y5niHaURRA_j2XVnH5snZqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.0.51.0/24 Signature Algorithm: sha256WithRSAEncryption 13:07:f2:12:96:e5:00:15:88:3a:e6:9c:74:99:08:c5:f9:9c: 1f:e8:a5:b9:f2:2a:0e:31:52:50:f4:f6:4d:99:ce:b1:93:7f: 7c:e0:92:4b:0a:f0:56:46:cb:40:bb:2a:f0:08:7d:e8:f6:9e: 80:a7:64:19:e4:8d:0d:8e:09:30:5d:21:0d:09:78:e1:87:db: 68:1b:62:d7:0d:ca:32:6f:cb:3b:d6:61:1f:92:a5:75:c3:c3: 78:3a:49:ff:cf:18:60:b9:40:60:d2:04:72:27:f8:97:d8:90: da:6f:ad:0a:b4:2f:ac:f4:1a:a3:9e:e8:12:45:f7:c9:f5:07: 8e:6d:6f:4c:4a:d0:e2:4d:0a:61:cc:67:23:a7:45:52:69:78: 3a:8e:0b:0d:26:92:c5:c3:c0:ab:d0:9b:fd:cc:69:8b:ad:67: 40:f6:5f:85:69:1c:0e:02:a6:b1:f0:43:86:bf:6e:c0:f1:45: 27:1c:f9:87:5b:76:9b:65:38:86:b8:d0:03:80:8c:79:43:37: e7:cb:e7:98:93:66:62:7d:08:d1:1d:ab:b5:b7:2c:96:7c:73: cf:33:31:d2:7b:d6:5b:57:cc:3f:86:84:cc:5c:89:88:5d:46: 1e:9a:34:18:33:b2:6c:61:c9:8d:7d:ee:42:dd:ef:ee:09:a3: 4a:c8:f5:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+z9LfFKD9+8sNGLvwXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTUxYmY1N2Y1MzE2YjJkZDVjZDhhM2Y3OTg1MjdlYWMx NGI3NzQwHhcNMjYwMTAxMTQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjBjNzc2Mzk5ZTIxZGE1MTE0NDBmZTNkOTc1NjcxZjliMjc2NmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrGmGcT9UXXPBqFhMba0LhjKcEqM eE32pgCEFe7bDYJKA8YRKxmwKNbcOgB/NGVmwbrjU+a0ljnyIJzR7MFvjlKqldNp DwHSzq3BK4UpbeNvZQep7QtvVXqDH86r7O0XfwqLra10BkuuEKFKbFcZKVvuL6re GcgDz47AK5xdVZJCe0q701mk0MkY1JzK38gDU3AmXYq3FstGEySqqi4QkqgoHU6x zt0kMhYDU1FWdmyZQJmFIbdWJbK/wqSXEbr5RnFHhYby07zYGk7XZD5MRfpwdixT fnJH9YhDNxH58jfOnDXY2cHMbmvCbxAqstWu23nhMg5VQayjU1sh0ePOkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHIMd2OZ4h2lEUQP49l1Zx+bJ2ahMB8GA1UdIwQY MBaAFBIVG/V/Uxay3VzYo/eYUn6sFLd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNTBkMGMtMzg4ZS00YzAwLWJlZjQt NGRjNmE0ZjRlZTU1LzEvY2d4M1k1bmlIYVVSUkFfajJYVm5INXNuWnFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9jNTBkMGMtMzg4ZS00YzAwLWJlZjQtNGRjNmE0ZjRlZTU1 LzEvRWhVYjlYOVRGckxkWE5pajk1aFNmcXdVdDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgAzMA0G CSqGSIb3DQEBCwUAA4IBAQATB/ISluUAFYg65px0mQjF+Zwf6KW58ioOMVJQ9PZN mc6xk3984JJLCvBWRstAuyrwCH3o9p6Ap2QZ5I0NjgkwXSENCXjhh9toG2LXDcoy b8s71mEfkqV1w8N4Okn/zxhguUBg0gRyJ/iX2JDab60KtC+s9BqjnugSRffJ9QeO bW9MStDiTQphzGcjp0VSaXg6jgsNJpLFw8Cr0Jv9zGmLrWdA9l+FaRwOAqax8EOG v27A8UUnHPmHW3abZTiGuNADgIx5Qzfny+eYk2ZifQjRHau1tyyWfHPPMzHSe9Zb V8w/hoTMXImIXUYemjQYM7JsYcmNfe5C3e/uCaNKyPUy -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:10 2026 by rpki-client