This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_cWyOZMspSyZKjt3aACASIni5Iw.roa File: _cWyOZMspSyZKjt3aACASIni5Iw.roa (raw, json) Hash identifier: Hq9iQb+Wc7iMpQJz3MjqtFd8mcjLy3GftmspjL6hsxA= Subject key identifier: FD:C5:B2:39:93:2C:A5:2C:99:2A:3B:77:68:00:80:48:89:E2:E4:8C Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB58FA80FDA8C7888A4537F7DACF19 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_cWyOZMspSyZKjt3aACASIni5Iw.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34047 IP address blocks: 146.19.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 10:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:58:fa:80:fd:a8:c7:88:8a:45:37:f7:da:cf:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdc5b239932ca52c992a3b776800804889e2e48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:d5:c3:77:02:ec:c5:bb:e6:7e:76:20:ba: 82:ef:de:28:3d:2d:f4:0d:90:23:fa:ed:d2:4c:18: a5:17:bc:cc:14:22:74:b5:7c:16:22:fa:27:4e:b9: 78:b8:98:1e:5e:90:c3:bf:c8:be:ab:06:34:30:5c: 8f:e4:37:68:42:b4:d7:00:8d:0e:b9:0b:9d:a1:4c: 62:4c:16:98:38:3c:77:cf:91:5b:f1:23:fc:56:f2: 75:c2:2e:9f:8a:7c:8b:72:54:29:48:c8:ea:b5:38: 24:43:da:51:c4:83:39:ac:f6:8b:1d:57:98:1f:66: 52:e9:c9:8c:31:91:1c:4b:d3:e6:42:c3:8b:40:4a: 55:5c:b8:fd:cc:31:16:5b:ae:1e:1f:af:a3:38:9a: 7d:ad:52:4d:3e:97:9e:f8:41:4e:bc:85:b5:d5:ab: b8:a6:90:23:ea:17:26:4c:fd:19:10:23:16:0f:e8: 04:9a:dc:fa:30:de:06:92:24:9c:47:5c:1f:3e:27: 47:3f:f2:60:88:f0:c1:72:da:e8:57:cb:cd:6f:64: d4:74:5a:d1:6a:47:fa:90:ac:55:15:55:25:3d:4a: ff:b4:fb:5d:9e:b4:c4:82:51:13:b0:10:96:f6:4e: 0f:f8:cb:12:9e:17:04:60:25:d0:14:f9:ff:35:a2: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C5:B2:39:93:2C:A5:2C:99:2A:3B:77:68:00:80:48:89:E2:E4:8C X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/_cWyOZMspSyZKjt3aACASIni5Iw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.113.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:ba:60:d7:cc:71:82:c5:28:78:96:92:0f:e9:86:35:c5:f8: 0a:03:fb:f1:be:11:95:e7:96:a2:51:03:8d:be:05:8d:4b:98: c1:e7:0e:09:45:4e:e1:ae:16:d4:86:90:12:39:25:04:6f:62: 76:4b:fc:61:5e:1d:0e:6f:40:93:95:a4:6b:9a:77:0a:ad:e3: b4:e4:23:5a:fa:4f:49:72:a6:24:21:bc:12:b1:ab:3c:bc:ea: 8c:8b:9f:c6:86:7b:84:80:32:96:a0:14:f8:fe:58:73:9e:f2: 56:80:5b:30:e7:24:fc:c8:b9:0c:9f:25:3e:72:8b:7e:df:d8: 7f:43:25:cd:72:1c:32:6b:16:27:f4:28:f8:7b:5e:5f:9e:1f: 13:de:3c:17:f0:f0:5c:4b:6a:b3:45:de:84:33:16:d0:56:09: 76:f1:b8:76:9c:79:af:b6:62:44:dd:9b:99:e3:bf:1d:ec:e4: 49:b3:d1:b1:3c:e0:7c:7c:49:a0:53:2f:8a:6e:c8:3e:70:a2: a8:d2:41:ff:e4:be:3f:69:27:b6:0d:f3:b1:30:31:c8:b5:93: f0:6e:cc:01:be:14:e4:69:9a:d6:8a:f5:d1:4c:9b:c4:10:68: 5c:6e:3e:5d:96:55:73:d3:cc:a3:00:21:d4:21:7f:78:7f:28: 6b:aa:bb:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1j6gP2ox4iKRTf32s8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGM1YjIzOTkzMmNhNTJjOTkyYTNiNzc2ODAwODA0ODg5ZTJlNDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv3Vw3cC7MW75n52ILqC794oPS30 DZAj+u3STBilF7zMFCJ0tXwWIvonTrl4uJgeXpDDv8i+qwY0MFyP5DdoQrTXAI0O uQudoUxiTBaYODx3z5Fb8SP8VvJ1wi6finyLclQpSMjqtTgkQ9pRxIM5rPaLHVeY H2ZS6cmMMZEcS9PmQsOLQEpVXLj9zDEWW64eH6+jOJp9rVJNPpee+EFOvIW11au4 ppAj6hcmTP0ZECMWD+gEmtz6MN4GkiScR1wfPidHP/JgiPDBctroV8vNb2TUdFrR akf6kKxVFVUlPUr/tPtdnrTEglETsBCW9k4P+MsSnhcEYCXQFPn/NaKo7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP3FsjmTLKUsmSo7d2gAgEiJ4uSMMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvX2NXeU9aTXNwU3laS2p0M2FBQ0FTSW5pNUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNxMA0G CSqGSIb3DQEBCwUAA4IBAQALumDXzHGCxSh4lpIP6YY1xfgKA/vxvhGV55aiUQON vgWNS5jB5w4JRU7hrhbUhpASOSUEb2J2S/xhXh0Ob0CTlaRrmncKreO05CNa+k9J cqYkIbwSsas8vOqMi5/GhnuEgDKWoBT4/lhznvJWgFsw5yT8yLkMnyU+cot+39h/ QyXNchwyaxYn9Cj4e15fnh8T3jwX8PBcS2qzRd6EMxbQVgl28bh2nHmvtmJE3ZuZ 478d7ORJs9GxPOB8fEmgUy+Kbsg+cKKo0kH/5L4/aSe2DfOxMDHItZPwbswBvhTk aZrWivXRTJvEEGhcbj5dllVz08yjACHUIX94fyhrqrsw -----END CERTIFICATE-----Generated at Thu Jan 15 16:59:57 2026 by rpki-client