This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CdnQWSA_tXO1KBeBgyneWTuWfmc.roa File: CdnQWSA_tXO1KBeBgyneWTuWfmc.roa (raw, json) Hash identifier: r5+AqD3vctLk0VEp65VA6m9lsRAW4EttWeJPHj2ncb4= Subject key identifier: 09:D9:D0:59:20:3F:B5:73:B5:28:17:81:83:29:DE:59:3B:96:7E:67 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019BCDFF9AC3E3DAD8F4B1C8821AD815F5AB Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CdnQWSA_tXO1KBeBgyneWTuWfmc.roa Signing time: Sat 17 Jan 2026 22:07:19 +0000 ROA not before: Sat 17 Jan 2026 22:07:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42216 IP address blocks: 31.210.47.0/24 maxlen: 24 77.92.142.0/24 maxlen: 24 77.92.152.0/24 maxlen: 24 77.92.153.0/24 maxlen: 24 78.135.67.0/24 maxlen: 24 78.135.74.0/24 maxlen: 24 78.135.86.0/24 maxlen: 24 78.135.89.0/24 maxlen: 24 78.135.98.0/24 maxlen: 24 185.17.136.0/24 maxlen: 24 188.132.214.0/24 maxlen: 24 188.132.228.0/24 maxlen: 24 2a10:9440::/48 maxlen: 48 2a10:9440:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cd:ff:9a:c3:e3:da:d8:f4:b1:c8:82:1a:d8:15:f5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 17 22:07:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09d9d059203fb573b52817818329de593b967e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:11:06:4d:80:56:32:5c:e9:6d:26:66:06:b2: 07:f3:22:f4:ce:61:b2:35:35:1a:26:3a:74:8e:88: 0d:62:8e:ee:d8:b0:49:cb:01:b8:ce:c3:90:fa:c5: 92:a1:77:64:77:3d:75:4e:79:5b:58:86:16:26:4c: d3:d5:18:52:0f:72:3d:d5:c8:03:df:65:65:3d:dc: 25:d8:0c:b2:7d:91:54:5b:a8:64:51:79:b8:db:db: e5:f3:e3:e8:06:d1:d5:cd:49:c2:d7:a2:cd:d8:7c: 44:34:71:cd:20:49:85:39:46:43:ff:87:39:97:ac: 9b:14:97:89:c1:ff:34:bd:2a:20:c4:7e:dd:99:01: 91:a3:d7:32:df:84:3c:f2:d7:40:0d:36:a5:1a:20: 91:56:d7:d2:37:55:bb:bd:b6:b5:99:a2:08:c0:19: a8:7a:cd:a4:92:8f:ad:11:2a:0b:92:cd:63:6d:78: b1:5a:fd:4d:98:80:2e:82:7f:17:5d:c8:80:aa:c3: bc:e9:c0:8d:83:4d:a6:06:08:a2:72:55:5e:ee:1a: 76:58:09:60:b9:42:1b:a6:7e:54:75:79:fb:0a:56: 7a:42:4d:0d:e4:dd:74:e9:8f:44:48:8a:d8:d6:32: 35:56:d8:5d:f0:2c:9e:45:67:27:37:1b:db:12:cc: f7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D9:D0:59:20:3F:B5:73:B5:28:17:81:83:29:DE:59:3B:96:7E:67 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/CdnQWSA_tXO1KBeBgyneWTuWfmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.47.0/24 77.92.142.0/24 77.92.152.0/23 78.135.67.0/24 78.135.74.0/24 78.135.86.0/24 78.135.89.0/24 78.135.98.0/24 185.17.136.0/24 188.132.214.0/24 188.132.228.0/24 IPv6: 2a10:9440::/47 Signature Algorithm: sha256WithRSAEncryption 13:e6:44:cb:50:d4:16:db:62:e3:b5:3b:14:4d:ae:d9:ec:09: f1:e5:20:3c:89:1e:17:7b:cf:4c:63:f5:19:09:39:2e:66:5b: e8:cf:17:40:a6:4d:0a:1c:cd:3e:c1:9b:5d:34:74:e9:a9:89: af:d0:a1:50:c7:79:87:be:ec:f1:fe:15:b9:7d:f5:f0:61:8a: 2a:00:ec:7c:d1:3b:ad:18:d4:1e:e7:e1:97:8c:76:61:dd:95: 11:ca:5c:62:82:ee:62:8d:a1:38:26:07:a4:40:97:81:63:46: ff:19:1e:10:59:80:6d:86:d9:55:7d:23:06:24:a5:97:c7:f9: 65:c0:ae:1c:bd:30:88:5d:35:33:7d:04:94:bb:28:d7:08:c9: ee:94:2a:bd:1f:a7:1d:d7:99:9d:73:fc:b5:fb:35:61:34:7e: 16:ec:7a:79:5f:cb:29:7a:a1:24:a5:6e:a4:13:28:59:e5:f6: 31:d6:66:06:df:46:44:5c:c4:2d:97:87:8d:06:7c:22:26:d2: 0a:6c:2f:91:c0:ff:38:7a:47:a9:4f:55:27:ed:d3:38:f7:8e: 60:7d:7a:0a:63:1d:5d:19:60:1c:a0:df:0e:cc:c9:b6:e1:58: 63:6a:74:d7:06:90:37:ea:62:eb:e4:3f:63:ab:95:cd:26:0a: ef:d6:9d:3c -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZvN/5rD49rY9LHIghrYFfWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTE3MjIwNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWQ5ZDA1OTIwM2ZiNTczYjUyODE3ODE4MzI5ZGU1OTNiOTY3ZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphEGTYBWMlzpbSZmBrIH8yL0zmGy NTUaJjp0jogNYo7u2LBJywG4zsOQ+sWSoXdkdz11TnlbWIYWJkzT1RhSD3I91cgD 32VlPdwl2AyyfZFUW6hkUXm429vl8+PoBtHVzUnC16LN2HxENHHNIEmFOUZD/4c5 l6ybFJeJwf80vSogxH7dmQGRo9cy34Q88tdADTalGiCRVtfSN1W7vba1maIIwBmo es2kko+tESoLks1jbXixWv1NmIAugn8XXciAqsO86cCNg02mBgiiclVe7hp2WAlg uUIbpn5UdXn7ClZ6Qk0N5N106Y9ESIrY1jI1Vthd8CyeRWcnNxvbEsz38wIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFAnZ0FkgP7VztSgXgYMp3lk7ln5nMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvQ2RuUVdTQV90WE8xS0JlQmd5bmVXVHVXZm1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBIBAIAATBCAwQAH9IvAwQA TVyOAwQBTVyYAwQATodDAwQATodKAwQATodWAwQATodZAwQATodiAwQAuRGIAwQA vITWAwQAvITkMA8EAgACMAkDBwEqEJRAAAAwDQYJKoZIhvcNAQELBQADggEBABPm RMtQ1BbbYuO1OxRNrtnsCfHlIDyJHhd7z0xj9RkJOS5mW+jPF0CmTQoczT7Bm100 dOmpia/QoVDHeYe+7PH+Fbl99fBhiioA7HzRO60Y1B7n4ZeMdmHdlRHKXGKC7mKN oTgmB6RAl4FjRv8ZHhBZgG2G2VV9IwYkpZfH+WXArhy9MIhdNTN9BJS7KNcIye6U Kr0fpx3XmZ1z/LX7NWE0fhbsenlfyyl6oSSlbqQTKFnl9jHWZgbfRkRcxC2Xh40G fCIm0gpsL5HA/zh6R6lPVSft0zj3jmB9egpjHV0ZYByg3w7MybbhWGNqdNcGkDfq YuvkP2Orlc0mCu/WnTw= -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:57 2026 by rpki-client