This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Crc7AYcXWJ7ItVfLUgdRckcJ75s.roa File: Crc7AYcXWJ7ItVfLUgdRckcJ75s.roa (raw, json) Hash identifier: ePYvQ6mvCuKfgtRAcaFIu25dKrmBB14TuOH8Y2nUFKY= Subject key identifier: 0A:B7:3B:01:87:17:58:9E:C8:B5:57:CB:52:07:51:72:47:09:EF:9B Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB6F22827F0350A60C0D530FBD9F03 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Crc7AYcXWJ7ItVfLUgdRckcJ75s.roa Signing time: Fri 02 Jan 2026 08:20:42 +0000 ROA not before: Fri 02 Jan 2026 08:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57884 IP address blocks: 146.19.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:6f:22:82:7f:03:50:a6:0c:0d:53:0f:bd:9f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ab73b018717589ec8b557cb520751724709ef9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d2:4c:6b:3f:03:63:16:cb:da:ba:cd:1f:50: 3f:8b:86:88:4c:03:6e:ae:58:86:bc:9e:6d:37:e7: 6d:e9:f1:48:bf:c9:2c:fb:55:c7:fc:f2:c4:f6:38: 86:d3:1a:eb:47:0c:34:9b:64:1b:c4:e1:d4:05:e1: c7:47:a6:c4:19:cf:77:84:1c:54:6f:85:ab:3a:bc: fe:85:2e:70:4f:08:2f:35:b9:b7:b9:37:e2:91:2a: 66:03:bb:b0:b7:1a:b4:60:d8:ad:24:1a:18:fc:c5: f0:bd:4c:2e:48:1b:c3:fd:06:e2:44:05:e1:14:a8: 13:be:bb:f5:c3:31:a9:41:a1:bd:32:ff:30:8e:dd: f4:1b:c1:14:fa:72:6a:e4:bb:19:b6:e2:fe:67:a2: b1:4b:76:0e:ea:34:bd:45:fe:e0:f4:10:ef:e8:c1: aa:35:16:f0:c4:32:84:48:a3:2e:32:5e:86:2a:38: 44:b5:92:59:73:45:32:3d:84:76:5d:57:7f:b8:f5: f7:91:11:46:5a:dd:2d:bd:9c:73:e5:c9:20:92:15: 79:b7:22:00:01:75:3b:40:67:c2:61:08:0b:e1:30: 3d:cf:e3:eb:61:d0:62:99:35:0d:35:5f:d2:62:b8: 7e:14:39:3c:d1:3a:e3:97:5a:ae:47:89:a6:2b:59: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B7:3B:01:87:17:58:9E:C8:B5:57:CB:52:07:51:72:47:09:EF:9B X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/Crc7AYcXWJ7ItVfLUgdRckcJ75s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.218.0/24 Signature Algorithm: sha256WithRSAEncryption a0:c5:8c:16:47:e1:c3:9b:41:6b:a8:6c:67:58:0e:a8:95:26: 04:99:9b:8f:e6:a1:c6:8d:03:f5:ec:c9:02:3f:1a:19:93:8f: 20:48:03:f0:0e:b1:10:4e:ea:78:62:49:83:2d:63:45:f9:ff: 5e:e7:82:cd:5f:fb:a6:ca:c6:02:d9:c3:8c:d5:06:da:39:05: 08:59:90:1c:61:b5:13:3e:15:db:45:31:c2:f4:fd:de:ba:9e: 40:6d:29:94:5d:c9:85:25:21:d6:be:e2:71:9e:b2:f0:a5:47: 47:0f:03:93:96:3c:0d:ef:94:59:1a:5d:0b:a9:31:3a:3a:3f: a7:87:07:4c:24:ee:b2:6c:cd:b6:4d:82:0f:9d:78:71:dd:8a: 17:6e:4d:a6:85:f0:5d:e7:64:48:57:6e:9b:02:15:65:d9:6b: a6:cd:63:43:a4:7a:d9:ee:5a:26:6a:d5:28:66:f9:cf:05:93: e6:33:63:7c:8f:27:be:50:ee:67:4d:2f:b8:ae:e1:f9:8b:0a: b4:4a:ce:dd:76:cd:4a:fa:56:d6:24:9e:5e:9a:f2:3c:0f:e4: 45:ef:6a:38:d8:54:e5:47:97:c8:c2:67:98:37:c8:5a:78:3e: 2f:aa:1d:1b:fd:27:38:ed:d3:f9:53:90:37:0c:c6:7e:dc:fd: 8d:17:ea:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y28ign8DUKYMDVMPvZ8DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWI3M2IwMTg3MTc1ODllYzhiNTU3Y2I1MjA3NTE3MjQ3MDllZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotJMaz8DYxbL2rrNH1A/i4aITANu rliGvJ5tN+dt6fFIv8ks+1XH/PLE9jiG0xrrRww0m2QbxOHUBeHHR6bEGc93hBxU b4WrOrz+hS5wTwgvNbm3uTfikSpmA7uwtxq0YNitJBoY/MXwvUwuSBvD/QbiRAXh FKgTvrv1wzGpQaG9Mv8wjt30G8EU+nJq5LsZtuL+Z6KxS3YO6jS9Rf7g9BDv6MGq NRbwxDKESKMuMl6GKjhEtZJZc0UyPYR2XVd/uPX3kRFGWt0tvZxz5ckgkhV5tyIA AXU7QGfCYQgL4TA9z+PrYdBimTUNNV/SYrh+FDk80Trjl1quR4mmK1n30QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAq3OwGHF1ieyLVXy1IHUXJHCe+bMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvQ3JjN0FZY1hXSjdJdFZmTFVnZFJja2NKNzVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPaMA0G CSqGSIb3DQEBCwUAA4IBAQCgxYwWR+HDm0FrqGxnWA6olSYEmZuP5qHGjQP17MkC PxoZk48gSAPwDrEQTup4YkmDLWNF+f9e54LNX/umysYC2cOM1QbaOQUIWZAcYbUT PhXbRTHC9P3eup5AbSmUXcmFJSHWvuJxnrLwpUdHDwOTljwN75RZGl0LqTE6Oj+n hwdMJO6ybM22TYIPnXhx3YoXbk2mhfBd52RIV26bAhVl2WumzWNDpHrZ7lomatUo ZvnPBZPmM2N8jye+UO5nTS+4ruH5iwq0Ss7dds1K+lbWJJ5emvI8D+RF72o42FTl R5fIwmeYN8haeD4vqh0b/Sc47dP5U5A3DMZ+3P2NF+qi -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:55 2026 by rpki-client