This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n_CrWYChw6bbp4fUtmCqZcTTly4.roa File: n_CrWYChw6bbp4fUtmCqZcTTly4.roa (raw, json) Hash identifier: CvSPZrlzIPffgWOgrD93Laq1Loze8MNomLaIZG7Snfg= Subject key identifier: 9F:F0:AB:59:80:A1:C3:A6:DB:A7:87:D4:B6:60:AA:65:C4:D3:97:2E Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DF91EDA61CF7ABD0ACB820BB3E041 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n_CrWYChw6bbp4fUtmCqZcTTly4.roa Signing time: Thu 01 Jan 2026 12:17:37 +0000 ROA not before: Thu 01 Jan 2026 12:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206097 IP address blocks: 45.88.12.0/24 maxlen: 24 89.125.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f9:1e:da:61:cf:7a:bd:0a:cb:82:0b:b3:e0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ff0ab5980a1c3a6dba787d4b660aa65c4d3972e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4e:18:a6:a2:61:9d:e8:29:4f:39:d1:fd:14: d4:fe:47:eb:fd:cc:49:3b:74:af:f0:a6:fb:47:a4: d2:43:30:26:6b:2f:d6:5f:17:f7:8d:f5:df:c0:c3: 85:9b:55:78:b4:96:e1:61:76:97:c6:dc:ff:99:b0: ea:4b:70:0a:20:ce:e5:49:34:e0:81:92:bb:e8:42: 80:8b:a1:88:ca:a7:f9:bc:65:e0:f3:c6:3c:6c:da: 72:6c:2a:34:61:e3:2e:37:6b:34:86:01:58:f9:e7: 0f:ae:b8:9e:13:e7:41:d5:11:0b:1a:c0:9e:53:74: 3f:58:73:22:0c:63:19:0b:ff:a7:a6:e8:1e:da:25: fa:9d:aa:16:a9:d9:a4:0a:41:9f:38:6a:70:b7:b5: 63:fa:90:a9:03:3c:2d:90:e7:51:4c:10:f1:8e:e1: 49:1c:2b:e3:2b:a5:68:be:55:ea:d5:a3:bc:c8:67: 68:f4:2f:21:47:89:0c:b5:c8:99:94:dd:a6:72:df: 5d:36:c3:ca:04:d3:ca:4f:c3:1e:2c:65:bd:f1:10: 36:ec:c1:8e:ee:57:89:f4:51:fb:72:04:2c:91:73: 7c:25:61:23:5a:f7:2f:52:f0:83:95:f2:29:6d:58: 9a:bc:ec:f0:43:a1:0f:1f:34:87:94:76:8d:c7:bf: 1f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F0:AB:59:80:A1:C3:A6:DB:A7:87:D4:B6:60:AA:65:C4:D3:97:2E X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/n_CrWYChw6bbp4fUtmCqZcTTly4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.12.0/24 89.125.125.0/24 Signature Algorithm: sha256WithRSAEncryption 05:4e:94:23:22:a8:63:39:17:b7:1e:6e:75:93:49:3c:28:f8: 82:43:88:10:10:de:a4:11:a7:d4:56:bb:0a:70:11:76:7a:3f: bc:a9:cb:01:c7:fc:a0:90:a1:4b:e6:6d:84:3c:91:05:5e:f1: 5f:16:71:76:d7:af:57:76:b6:92:c9:8e:1c:d5:12:08:ec:9c: 69:64:c3:e7:7e:91:f8:01:a6:4e:ee:e4:5c:a1:1b:55:e4:10: ce:ac:6c:39:20:c7:c0:72:4d:a1:dc:a6:fe:b8:f7:0c:f4:61: e9:89:10:2c:bb:6b:8e:af:1f:00:5d:fc:86:68:65:0c:da:94: 79:6b:34:3b:42:06:f3:d6:c3:ff:99:18:3a:5f:0b:e2:cd:fd: 36:5d:7e:15:c8:52:5a:a0:61:4d:9f:dd:e6:2d:b2:d9:d1:f4: 13:d4:5e:e8:59:35:f0:27:d9:22:9b:0b:e5:a2:cb:b2:a4:41: 54:10:e0:9b:fd:19:66:4e:be:68:1f:85:ae:de:95:a0:c7:8d: 1d:62:11:4b:66:5f:c5:b6:79:79:84:14:74:3f:9c:76:69:65: 5c:37:46:4f:f6:e4:81:60:d4:1f:e2:67:ae:55:b0:e1:06:b1: 57:06:60:22:01:9a:aa:c1:e0:6b:e8:68:f0:96:3e:1d:1b:91: 4b:e5:24:42 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ffke2mHPer0Ky4ILs+BBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmYwYWI1OTgwYTFjM2E2ZGJhNzg3ZDRiNjYwYWE2NWM0ZDM5NzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7k4YpqJhnegpTznR/RTU/kfr/cxJ O3Sv8Kb7R6TSQzAmay/WXxf3jfXfwMOFm1V4tJbhYXaXxtz/mbDqS3AKIM7lSTTg gZK76EKAi6GIyqf5vGXg88Y8bNpybCo0YeMuN2s0hgFY+ecPrrieE+dB1RELGsCe U3Q/WHMiDGMZC/+npuge2iX6naoWqdmkCkGfOGpwt7Vj+pCpAzwtkOdRTBDxjuFJ HCvjK6VovlXq1aO8yGdo9C8hR4kMtciZlN2mct9dNsPKBNPKT8MeLGW98RA27MGO 7leJ9FH7cgQskXN8JWEjWvcvUvCDlfIpbViavOzwQ6EPHzSHlHaNx78f/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ/wq1mAocOm26eH1LZgqmXE05cuMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvbl9DcldZQ2h3NmJicDRmVXRtQ3FaY1RUbHk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVgMAwQA WX19MA0GCSqGSIb3DQEBCwUAA4IBAQAFTpQjIqhjORe3Hm51k0k8KPiCQ4gQEN6k EafUVrsKcBF2ej+8qcsBx/ygkKFL5m2EPJEFXvFfFnF2169XdraSyY4c1RII7Jxp ZMPnfpH4AaZO7uRcoRtV5BDOrGw5IMfAck2h3Kb+uPcM9GHpiRAsu2uOrx8AXfyG aGUM2pR5azQ7Qgbz1sP/mRg6Xwvizf02XX4VyFJaoGFNn93mLbLZ0fQT1F7oWTXw J9kimwvlosuypEFUEOCb/RlmTr5oH4Wu3pWgx40dYhFLZl/Ftnl5hBR0P5x2aWVc N0ZP9uSBYNQf4meuVbDhBrFXBmAiAZqqweBr6Gjwlj4dG5FL5SRC -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:56 2026 by rpki-client