This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/cSXyyfA6_zsS0PiMH69SwZbp9ME.roa File: cSXyyfA6_zsS0PiMH69SwZbp9ME.roa (raw, json) Hash identifier: D+4Go2Xz/19aRLius06pP/nGAWymB6+N6vYoTfkCj9U= Subject key identifier: 71:25:F2:C9:F0:3A:FF:3B:12:D0:F8:8C:1F:AF:52:C1:96:E9:F4:C1 Certificate issuer: /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749 Certificate serial: 019B79ED658A8FB1C68489A0927B664195FC Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/cSXyyfA6_zsS0PiMH69SwZbp9ME.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57306 IP address blocks: 195.114.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:65:8a:8f:b1:c6:84:89:a0:92:7b:66:41:95:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7125f2c9f03aff3b12d0f88c1faf52c196e9f4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:88:15:b5:81:3d:68:39:53:12:e6:99:9e: 6b:65:a8:22:89:f8:59:7a:51:f3:a7:ac:9e:74:ac: 28:11:4c:34:89:da:60:7c:1e:80:f1:0f:25:20:76: ad:eb:18:ff:18:33:ec:83:15:e3:04:b5:91:a0:1f: 34:c6:45:ef:a5:39:4b:6e:62:a9:6e:09:8c:5a:e7: 33:fc:c1:d0:0d:ee:a4:a1:da:ee:3a:c6:a2:53:b0: 90:8a:15:03:df:13:e5:82:06:66:2f:81:1f:25:52: 30:dd:c7:48:65:31:ae:11:00:39:f9:2a:a0:41:aa: 5d:db:d6:44:0f:7a:12:41:03:4b:e2:3d:a3:1b:54: 2f:cb:3b:8a:0f:09:02:4e:06:13:12:13:b5:5a:d3: 18:cc:cd:5d:4b:b9:2f:97:ea:02:1b:a2:d9:e9:dd: b9:e8:58:dc:93:fa:b2:68:6b:e1:eb:9d:8e:2e:ba: 68:e1:bd:46:f1:92:8a:3c:9d:36:46:77:42:75:9a: 04:8c:77:26:38:bd:69:b2:90:7d:84:66:28:d8:4e: 2e:c0:27:3f:47:82:55:95:c9:38:a4:7f:92:ef:38: 48:59:c0:84:6e:01:d4:cd:bd:1d:ac:ee:53:46:dd: f5:3e:06:aa:34:cb:ae:e0:4f:22:7c:37:86:c9:2e: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:25:F2:C9:F0:3A:FF:3B:12:D0:F8:8C:1F:AF:52:C1:96:E9:F4:C1 X509v3 Authority Key Identifier: keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/cSXyyfA6_zsS0PiMH69SwZbp9ME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.114.104.0/23 Signature Algorithm: sha256WithRSAEncryption 03:0a:ea:d0:3d:7c:ea:64:54:0a:8b:20:32:56:fb:60:26:c5: 2d:9f:b9:2a:ac:fc:09:17:c0:c9:6e:e9:0f:f9:8f:b5:d2:ac: e7:66:74:63:37:e5:e3:17:a2:94:b7:09:c5:4d:d8:1c:48:3a: 96:51:3f:d4:dd:74:53:e7:1f:da:58:7c:31:73:32:aa:7c:88: e0:cd:74:d8:c9:0e:e5:eb:55:33:81:21:f0:8c:c4:7f:94:15: f9:7e:c0:2f:e4:6e:a9:76:9c:bc:70:2c:83:c4:4c:dc:7f:61: a7:46:1b:d4:6a:ca:77:4b:33:c1:f1:25:25:e5:15:eb:02:ba: 14:8c:d2:0c:f1:4a:17:66:a0:35:76:90:e7:33:4c:0b:b8:67: 0e:93:da:00:da:fc:19:37:7c:6e:61:73:9d:05:a8:71:49:a8: e8:81:5b:55:32:45:6c:42:a2:5f:69:41:49:6f:e7:b1:fb:e0: 7f:9d:be:56:e3:69:13:d4:85:d0:87:61:fc:29:f3:be:7c:e0: 22:be:09:46:84:48:1d:16:9e:7a:9a:ff:d3:b3:b9:97:68:88: 73:2d:dd:0b:27:2b:ee:77:d6:59:06:08:b3:0e:a3:62:e9:c1: 5a:04:b7:ae:ff:74:34:fb:00:78:83:74:a0:64:58:08:24:79: 5d:ce:5d:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57WWKj7HGhImgkntmQZX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhN2I5YThjZDgxOWY0YTkyMDMzNGQ3ZTcyZWMyMzQwODcw ZDc3NDkwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTI1ZjJjOWYwM2FmZjNiMTJkMGY4OGMxZmFmNTJjMTk2ZTlmNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCSIFbWBPWg5UxLmmZ5rZagiifhZ elHzp6yedKwoEUw0idpgfB6A8Q8lIHat6xj/GDPsgxXjBLWRoB80xkXvpTlLbmKp bgmMWucz/MHQDe6kodruOsaiU7CQihUD3xPlggZmL4EfJVIw3cdIZTGuEQA5+Sqg Qapd29ZED3oSQQNL4j2jG1QvyzuKDwkCTgYTEhO1WtMYzM1dS7kvl+oCG6LZ6d25 6Fjck/qyaGvh652OLrpo4b1G8ZKKPJ02RndCdZoEjHcmOL1pspB9hGYo2E4uwCc/ R4JVlck4pH+S7zhIWcCEbgHUzb0drO5TRt31PgaqNMuu4E8ifDeGyS5LBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEl8snwOv87EtD4jB+vUsGW6fTBMB8GA1UdIwQY MBaAFJp7mozYGfSpIDNNfnLsI0CHDXdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYt MjFmYWYxNDRjYjYyLzEvY1NYeXlmQTZfenNTMFBpTUg2OVN3WmJwOU1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83ZTBlYmItNDY4Ni00MDZlLWI5OWYtMjFmYWYxNDRjYjYy LzEvbW51YWpOZ1o5S2tnTTAxLWN1d2pRSWNOZDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw3JoMA0G CSqGSIb3DQEBCwUAA4IBAQADCurQPXzqZFQKiyAyVvtgJsUtn7kqrPwJF8DJbukP +Y+10qznZnRjN+XjF6KUtwnFTdgcSDqWUT/U3XRT5x/aWHwxczKqfIjgzXTYyQ7l 61UzgSHwjMR/lBX5fsAv5G6pdpy8cCyDxEzcf2GnRhvUasp3SzPB8SUl5RXrAroU jNIM8UoXZqA1dpDnM0wLuGcOk9oA2vwZN3xuYXOdBahxSajogVtVMkVsQqJfaUFJ b+ex++B/nb5W42kT1IXQh2H8KfO+fOAivglGhEgdFp56mv/Ts7mXaIhzLd0LJyvu d9ZZBgizDqNi6cFaBLeu/3Q0+wB4g3SgZFgIJHldzl0A -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:10 2026 by rpki-client