This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/CrGYIchI8IwBMeaWGahVoZEqk54.roa File: CrGYIchI8IwBMeaWGahVoZEqk54.roa (raw, json) Hash identifier: rZvxjkfTz0RWRMKrtuKeopQdQfgWWqYNcNjUqBs51x8= Subject key identifier: 0A:B1:98:21:C8:48:F0:8C:01:31:E6:96:19:A8:55:A1:91:2A:93:9E Certificate issuer: /CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc Certificate serial: 019B76EB24248E31D8CE0C7A2D6DB3A91A23 Authority key identifier: 51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/CrGYIchI8IwBMeaWGahVoZEqk54.roa Signing time: Thu 01 Jan 2026 00:18:00 +0000 ROA not before: Thu 01 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49709 IP address blocks: 185.172.180.0/22 maxlen: 24 185.193.0.0/22 maxlen: 24 2a0b:1d00::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.mft rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:24:24:8e:31:d8:ce:0c:7a:2d:6d:b3:a9:1a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=514c552bb9444c00f94f2f0594cba352fc2cbbbc Validity Not Before: Jan 1 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ab19821c848f08c0131e69619a855a1912a939e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:4c:5e:1f:39:e4:0e:39:a7:53:f9:cb:59: 38:6f:02:4c:c4:25:9b:b5:70:5a:4b:92:30:36:d3: c2:ac:eb:e6:bb:ff:64:f2:ef:87:2f:2f:3a:f4:82: 10:cc:8a:53:ac:56:3c:d1:8f:9b:c7:ce:a7:11:d2: 77:00:09:bf:fd:05:13:8e:b6:d2:ef:da:59:1a:52: 46:f8:d6:ab:fc:9f:09:0e:6f:f1:fb:51:7f:32:89: 75:40:19:d8:41:44:06:f8:21:66:e1:d0:5f:78:c4: cf:34:76:a3:cf:7b:ae:90:01:66:eb:99:c9:14:2a: 11:52:8a:88:64:e4:29:0e:1c:d1:b8:f0:aa:a6:d1: b3:f6:48:29:68:70:60:d5:84:69:b6:b4:4c:96:f6: d7:7c:6e:c8:81:54:b6:25:f1:ca:ad:a8:2d:cb:7f: 2b:b4:06:17:90:61:ba:7c:eb:eb:10:1d:d8:58:eb: 41:bc:ce:94:e7:0c:de:41:b5:a1:0f:db:60:9c:b2: 8d:8e:ac:83:45:5a:7e:a4:01:20:6a:a1:bc:2d:58: a1:fa:6a:a2:cc:48:e7:b0:c7:38:dd:34:2b:9a:54: 9a:31:84:b4:12:3c:a0:e2:51:3f:85:5c:e2:79:bc: 39:3a:b6:17:fc:6b:0f:36:1b:da:b2:de:13:1d:2d: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B1:98:21:C8:48:F0:8C:01:31:E6:96:19:A8:55:A1:91:2A:93:9E X509v3 Authority Key Identifier: keyid:51:4C:55:2B:B9:44:4C:00:F9:4F:2F:05:94:CB:A3:52:FC:2C:BB:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUxVK7lETAD5Ty8FlMujUvwsu7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/CrGYIchI8IwBMeaWGahVoZEqk54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/8b0b19-fbfa-4357-b290-9ea751d59ab7/1/UUxVK7lETAD5Ty8FlMujUvwsu7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.180.0/22 185.193.0.0/22 IPv6: 2a0b:1d00::/29 Signature Algorithm: sha256WithRSAEncryption 13:0e:0c:b7:b4:db:cc:86:ac:f8:43:24:88:99:60:b8:f7:ef: 76:45:e4:11:7a:18:f1:ef:90:f3:9d:95:50:18:90:c6:0e:fd: 3c:46:49:26:89:66:f0:60:68:ca:40:e5:08:2e:7e:da:1b:12: d9:19:06:32:d7:ca:7e:68:c3:bb:ba:18:82:a1:a6:67:fa:16: 00:e4:9b:af:e2:68:d9:84:7b:8c:8b:9a:b0:03:28:30:6c:0a: 51:3e:70:0e:44:bf:b4:d2:30:e5:a5:7c:40:ea:69:05:2e:21: a1:75:e6:ab:37:fb:f5:95:79:04:2e:f0:92:94:71:d4:c6:8d: 5c:f0:a5:3a:7e:3c:ec:b0:a6:bd:46:20:15:04:4c:d1:d2:2c: a7:6e:22:f6:5d:af:f2:14:2b:dd:11:ca:3d:3a:6c:8a:f1:3a: 26:37:63:ae:43:41:23:9d:af:cb:4f:af:0d:9d:7a:11:4a:26: d1:85:50:11:ed:4c:6f:e3:55:05:ae:d8:ef:c3:fb:a7:6f:d6: c8:46:15:4c:51:64:7a:61:44:f0:c3:3f:c5:97:f3:81:ad:81: e1:56:af:ea:40:3b:75:15:f5:17:30:e6:d8:9d:24:c1:74:ad: e3:df:81:3a:25:1d:21:f4:72:64:68:48:95:4b:fb:d9:b0:ea: ea:3b:ba:50 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26yQkjjHYzgx6LW2zqRojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxNGM1NTJiYjk0NDRjMDBmOTRmMmYwNTk0Y2JhMzUyZmMy Y2JiYmMwHhcNMjYwMTAxMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWIxOTgyMWM4NDhmMDhjMDEzMWU2OTYxOWE4NTVhMTkxMmE5MzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgBMXh855A45p1P5y1k4bwJMxCWb tXBaS5IwNtPCrOvmu/9k8u+HLy869IIQzIpTrFY80Y+bx86nEdJ3AAm//QUTjrbS 79pZGlJG+Nar/J8JDm/x+1F/Mol1QBnYQUQG+CFm4dBfeMTPNHajz3uukAFm65nJ FCoRUoqIZOQpDhzRuPCqptGz9kgpaHBg1YRptrRMlvbXfG7IgVS2JfHKragty38r tAYXkGG6fOvrEB3YWOtBvM6U5wzeQbWhD9tgnLKNjqyDRVp+pAEgaqG8LVih+mqi zEjnsMc43TQrmlSaMYS0Ejyg4lE/hVziebw5OrYX/GsPNhvast4THS0GwQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAqxmCHISPCMATHmlhmoVaGRKpOeMB8GA1UdIwQY MBaAFFFMVSu5REwA+U8vBZTLo1L8LLu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84YjBiMTktZmJmYS00MzU3LWIyOTAt OWVhNzUxZDU5YWI3LzEvQ3JHWUljaEk4SXdCTWVhV0dhaFZvWkVxazU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS84YjBiMTktZmJmYS00MzU3LWIyOTAtOWVhNzUxZDU5YWI3 LzEvVVV4Vks3bEVUQUQ1VHk4RmxNdWpVdndzdTd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuay0AwQC ucEAMA0EAgACMAcDBQMqCx0AMA0GCSqGSIb3DQEBCwUAA4IBAQATDgy3tNvMhqz4 QySImWC49+92ReQRehjx75DznZVQGJDGDv08RkkmiWbwYGjKQOUILn7aGxLZGQYy 18p+aMO7uhiCoaZn+hYA5Juv4mjZhHuMi5qwAygwbApRPnAORL+00jDlpXxA6mkF LiGhdearN/v1lXkELvCSlHHUxo1c8KU6fjzssKa9RiAVBEzR0iynbiL2Xa/yFCvd Eco9OmyK8TomN2OuQ0Ejna/LT68NnXoRSibRhVAR7Uxv41UFrtjvw/unb9bIRhVM UWR6YUTwwz/Fl/OBrYHhVq/qQDt1FfUXMObYnSTBdK3j34E6JR0h9HJkaEiVS/vZ sOrqO7pQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:43 2026 by rpki-client