This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/CBU14gZu_1qsi75R7hrvSmuj54o.roa File: CBU14gZu_1qsi75R7hrvSmuj54o.roa (raw, json) Hash identifier: 9hAgFc1Ht8EZP3iYR8ynDcxgH4YhjqI6F0AQHVc/49w= Subject key identifier: 08:15:35:E2:06:6E:FF:5A:AC:8B:BE:51:EE:1A:EF:4A:6B:A3:E7:8A Certificate issuer: /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3 Certificate serial: 019B7A5B6EF3DC1673BC709F5935CF87E8DA Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/CBU14gZu_1qsi75R7hrvSmuj54o.roa Signing time: Thu 01 Jan 2026 16:19:31 +0000 ROA not before: Thu 01 Jan 2026 16:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47283 IP address blocks: 194.12.64.0/19 maxlen: 19 194.12.64.0/20 maxlen: 20 194.12.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6e:f3:dc:16:73:bc:70:9f:59:35:cf:87:e8:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=081535e2066eff5aac8bbe51ee1aef4a6ba3e78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:37:31:98:cc:b1:59:59:89:cc:31:37:e1: 9c:f0:37:c2:5d:d4:e8:9a:a1:c5:25:5e:33:56:81: 5a:eb:d6:32:11:1b:c1:b0:5c:03:4a:8d:26:40:7f: 71:b5:6b:96:b9:8e:b5:35:4d:0e:29:f9:2d:a9:f3: 98:43:29:40:11:cc:e2:aa:ff:70:bc:5a:ff:91:50: 0d:7b:e5:df:57:f7:3d:c1:e5:63:83:77:75:ce:3d: ae:7b:8b:7c:73:3e:d7:f2:8c:69:d7:dd:aa:8f:e2: 24:b3:80:13:5b:38:a4:fe:ce:86:37:2b:77:6f:b9: a9:50:fb:78:f5:db:13:8d:21:ab:c3:ec:f9:3b:17: e7:a5:11:08:26:cc:10:e9:82:2c:0a:55:d6:18:76: 91:6c:67:c3:17:bb:e2:e7:2b:a8:07:66:f7:29:a9: 57:5e:b1:c6:37:f1:d5:af:34:33:7e:a9:5b:e3:64: fe:77:4c:3e:ee:df:27:0b:16:74:0e:17:8e:9d:c1: 5e:9a:87:d1:36:98:5a:ea:cb:fc:9a:b6:fa:cf:77: 65:96:76:d7:f7:01:14:03:b2:92:cf:94:a9:8e:c6: 5f:da:20:79:21:79:15:a7:c2:17:ff:99:eb:9c:fc: b7:bf:f3:dc:f1:1f:0a:d0:9e:cf:ab:31:52:3d:ee: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:15:35:E2:06:6E:FF:5A:AC:8B:BE:51:EE:1A:EF:4A:6B:A3:E7:8A X509v3 Authority Key Identifier: keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/CBU14gZu_1qsi75R7hrvSmuj54o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.12.64.0/19 Signature Algorithm: sha256WithRSAEncryption 11:10:36:5b:86:6c:05:1d:a6:d5:51:19:06:1c:21:18:5c:f9: f4:33:0a:20:47:7d:59:41:a7:11:f8:7e:b0:e9:b1:f9:ba:8e: 9f:08:62:45:d9:91:9a:c2:2c:4c:7f:c3:43:51:05:a9:ca:44: a6:ec:7c:1b:41:04:3a:97:21:1c:46:d0:9b:60:a5:73:e5:65: 99:af:23:d4:2f:40:1f:d7:19:2e:fe:b2:00:53:46:90:45:d3: c0:45:97:4e:d8:1f:4d:84:05:b8:91:26:28:cc:38:d5:f2:4a: 2e:d3:b2:89:a6:48:78:ae:c5:4a:52:96:87:0c:f2:5b:2a:9d: ed:d4:aa:2c:d6:00:cb:de:98:d8:74:84:c0:b3:23:24:79:08: 7e:42:35:63:0f:5e:e2:a0:c8:69:57:a1:a8:a1:7b:84:9a:5e: 0a:3b:d8:f2:89:55:73:98:6d:0d:2c:b4:0b:11:de:44:97:2b: 8d:80:c9:27:65:45:af:b5:5e:5d:71:8d:10:a8:ea:d8:67:2b: 7b:19:2c:91:5b:1c:2b:75:15:ee:61:29:03:cf:64:04:70:51: c7:be:d3:29:ea:5b:4d:25:03:69:83:67:cf:1a:a4:9e:2d:7c: fc:90:38:90:2a:78:9c:68:d5:94:9e:51:9d:ce:fe:97:b0:df: 0e:4b:e8:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W27z3BZzvHCfWTXPh+jaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNjU5ZTFkZDE0MDc5YjUyMWQ5MmIxZjUyY2JjNGZkMzIz ZTE4ZDMwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODE1MzVlMjA2NmVmZjVhYWM4YmJlNTFlZTFhZWY0YTZiYTNlNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26Y3MZjMsVlZicwxN+Gc8DfCXdTo mqHFJV4zVoFa69YyERvBsFwDSo0mQH9xtWuWuY61NU0OKfktqfOYQylAEcziqv9w vFr/kVANe+XfV/c9weVjg3d1zj2ue4t8cz7X8oxp192qj+Iks4ATWzik/s6GNyt3 b7mpUPt49dsTjSGrw+z5OxfnpREIJswQ6YIsClXWGHaRbGfDF7vi5yuoB2b3KalX XrHGN/HVrzQzfqlb42T+d0w+7t8nCxZ0DheOncFemofRNpha6sv8mrb6z3dllnbX 9wEUA7KSz5SpjsZf2iB5IXkVp8IX/5nrnPy3v/Pc8R8K0J7PqzFSPe7o5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgVNeIGbv9arIu+Ue4a70pro+eKMB8GA1UdIwQY MBaAFMBlnh3RQHm1IdkrH1LLxP0yPhjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0dXZUhkRkFlYlVoMlNzZlVzdkVfVEktR05NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84YjIwNDAtOGQzZi00MTRiLThkZTgt MTQ2NGI0ZjkxNjcyLzEvQ0JVMTRnWnVfMXFzaTc1UjdocnZTbXVqNTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84YjIwNDAtOGQzZi00MTRiLThkZTgtMTQ2NGI0ZjkxNjcy LzEvd0dXZUhkRkFlYlVoMlNzZlVzdkVfVEktR05NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwgxAMA0G CSqGSIb3DQEBCwUAA4IBAQAREDZbhmwFHabVURkGHCEYXPn0MwogR31ZQacR+H6w 6bH5uo6fCGJF2ZGawixMf8NDUQWpykSm7HwbQQQ6lyEcRtCbYKVz5WWZryPUL0Af 1xku/rIAU0aQRdPARZdO2B9NhAW4kSYozDjV8kou07KJpkh4rsVKUpaHDPJbKp3t 1Kos1gDL3pjYdITAsyMkeQh+QjVjD17ioMhpV6GooXuEml4KO9jyiVVzmG0NLLQL Ed5ElyuNgMknZUWvtV5dcY0QqOrYZyt7GSyRWxwrdRXuYSkDz2QEcFHHvtMp6ltN JQNpg2fPGqSeLXz8kDiQKnicaNWUnlGdzv6XsN8OS+g1 -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:22 2026 by rpki-client