This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CGwZoF5Fp9sEzK7uytIlETda1-Y.roa File: CGwZoF5Fp9sEzK7uytIlETda1-Y.roa (raw, json) Hash identifier: EbJeRK5d9/osCLcEni4xyXIGC0NC5HxHIqMXmwJPhuw= Subject key identifier: 08:6C:19:A0:5E:45:A7:DB:04:CC:AE:EE:CA:D2:25:11:37:5A:D7:E6 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791056E37A961DEB5D6B605BB705F640 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CGwZoF5Fp9sEzK7uytIlETda1-Y.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200075 IP address blocks: 188.132.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:56:e3:7a:96:1d:eb:5d:6b:60:5b:b7:05:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=086c19a05e45a7db04ccaeeecad22511375ad7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:4a:f1:bc:60:b1:01:c6:b1:da:5d:fb:4b: 8a:f5:65:86:12:ec:87:72:4a:fb:df:24:5a:c3:6d: e9:f3:a4:b8:a6:9b:47:33:83:25:a8:33:8e:cb:9b: 76:ce:8c:94:6a:62:19:62:dc:4b:7e:86:58:44:77: 45:e2:8d:e7:df:d7:ed:e1:59:c4:03:1f:b6:69:79: 82:b6:90:3b:92:38:ca:6f:e0:ca:75:ef:6d:6e:15: 3e:53:33:63:78:e2:29:d8:3b:5e:29:3e:33:e3:1d: d1:98:2b:a6:e3:d3:ca:4d:40:5a:6c:da:aa:87:11: f5:81:03:11:12:5e:67:ab:96:73:c6:be:2a:5a:95: 06:32:46:2d:1a:85:3b:d8:2f:07:45:eb:75:3b:45: 60:fb:26:47:0a:bf:fc:eb:5c:6e:22:91:c9:fb:07: da:cf:c6:74:fd:84:ad:d3:64:19:19:35:fd:dd:6b: c7:95:bf:75:82:42:66:bb:bf:c9:fa:6c:db:32:7f: 1d:03:a0:6d:d7:41:a8:1e:a9:51:59:ef:08:9a:dd: b1:6b:9e:e2:e3:0c:03:31:b4:cb:b6:31:c7:19:60: fc:da:2e:4b:65:c6:a1:8a:65:c5:6d:8e:2c:5d:28: 38:68:11:17:a2:42:92:03:28:90:e7:57:1b:e5:14: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6C:19:A0:5E:45:A7:DB:04:CC:AE:EE:CA:D2:25:11:37:5A:D7:E6 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CGwZoF5Fp9sEzK7uytIlETda1-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.155.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:ab:00:b6:d4:85:4f:d5:75:7e:6d:7b:97:ae:5f:a3:88:3f: 31:6e:05:95:b0:32:96:a0:9d:d6:9b:4a:70:16:80:ef:c1:34: ca:2f:f8:16:d7:6e:4c:12:55:5c:e9:a0:e8:be:74:a9:af:b6: 50:f8:80:87:fd:d7:22:c2:0b:6b:c3:f6:28:9c:d3:8d:5d:1b: 03:13:2c:b8:6e:b0:fd:e0:c5:b8:5e:35:88:35:85:e7:80:4c: 65:ec:bd:29:55:11:27:74:88:10:ea:6c:18:90:ae:4d:a5:1a: d2:50:d9:24:e3:c9:2b:4d:78:35:ee:4d:79:92:11:5a:09:29: c1:c2:1b:70:96:f8:80:e9:dd:e4:ff:25:df:ab:95:5e:fe:d4: 84:38:99:bf:cc:23:5b:a9:c9:d3:0c:6c:d0:73:30:7a:17:61: 3f:da:e7:cc:46:ec:20:af:44:6a:a4:2e:51:24:a7:fa:9d:8c: 9d:9a:5c:e2:f6:6f:20:f9:ea:29:35:99:3a:f3:f0:b3:8c:b6: 19:bb:fe:83:3f:ae:2f:5d:ee:0c:1b:33:27:02:2e:20:38:ae: dc:4f:56:dc:e8:6c:2a:bc:0d:60:b1:60:94:84:0d:42:e7:b0: 2b:b9:c2:d4:20:84:1c:76:d2:3d:a1:39:0b:59:43:94:d8:55: f1:93:99:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFbjepYd611rYFu3BfZAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODZjMTlhMDVlNDVhN2RiMDRjY2FlZWVjYWQyMjUxMTM3NWFkN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE1K8bxgsQHGsdpd+0uK9WWGEuyH ckr73yRaw23p86S4pptHM4MlqDOOy5t2zoyUamIZYtxLfoZYRHdF4o3n39ft4VnE Ax+2aXmCtpA7kjjKb+DKde9tbhU+UzNjeOIp2DteKT4z4x3RmCum49PKTUBabNqq hxH1gQMREl5nq5Zzxr4qWpUGMkYtGoU72C8HRet1O0Vg+yZHCr/861xuIpHJ+wfa z8Z0/YSt02QZGTX93WvHlb91gkJmu7/J+mzbMn8dA6Bt10GoHqlRWe8Imt2xa57i 4wwDMbTLtjHHGWD82i5LZcahimXFbY4sXSg4aBEXokKSAyiQ51cb5RQ19QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAhsGaBeRafbBMyu7srSJRE3WtfmMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvQ0d3Wm9GNUZwOXNFeks3dXl0SWxFVGRhMS1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISbMA0G CSqGSIb3DQEBCwUAA4IBAQBuqwC21IVP1XV+bXuXrl+jiD8xbgWVsDKWoJ3Wm0pw FoDvwTTKL/gW125MElVc6aDovnSpr7ZQ+ICH/dciwgtrw/YonNONXRsDEyy4brD9 4MW4XjWINYXngExl7L0pVREndIgQ6mwYkK5NpRrSUNkk48krTXg17k15khFaCSnB whtwlviA6d3k/yXfq5Ve/tSEOJm/zCNbqcnTDGzQczB6F2E/2ufMRuwgr0RqpC5R JKf6nYydmlzi9m8g+eopNZk68/CzjLYZu/6DP64vXe4MGzMnAi4gOK7cT1bc6Gwq vA1gsWCUhA1C57ArucLUIIQcdtI9oTkLWUOU2FXxk5np -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:54 2026 by rpki-client