This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/CZyTJuOlnq-ky9dbEConr41Bm38.roa File: CZyTJuOlnq-ky9dbEConr41Bm38.roa (raw, json) Hash identifier: 5rtJlpCqmLKREoblfIHZUZwHo3e3ekq4hHO8j58CnBY= Subject key identifier: 09:9C:93:26:E3:A5:9E:AF:A4:CB:D7:5B:10:2A:27:AF:8D:41:9B:7F Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3 Certificate serial: 019B7C7F6042BDBAC00FC76C6412216AADE0 Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/CZyTJuOlnq-ky9dbEConr41Bm38.roa Signing time: Fri 02 Jan 2026 02:18:01 +0000 ROA not before: Fri 02 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51026 IP address blocks: 185.3.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:60:42:bd:ba:c0:0f:c7:6c:64:12:21:6a:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3 Validity Not Before: Jan 2 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=099c9326e3a59eafa4cbd75b102a27af8d419b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:df:1f:02:60:b5:4d:1f:95:51:d9:ce:33: 4e:65:0f:89:7a:27:b4:7e:8d:7e:9a:04:58:8a:e9: c5:b6:fd:ac:4d:d1:27:8e:0a:53:ba:19:95:52:4e: 8a:b1:f1:1c:c9:46:75:7e:06:a3:b4:ce:53:a1:2e: 28:03:75:57:8f:17:67:13:c9:c6:9a:38:08:3f:b7: fc:b6:2b:71:19:c9:c6:e8:91:19:97:bb:3c:c7:0f: 33:2f:f5:22:3c:b2:41:05:63:bd:c8:66:82:10:d5: ac:83:28:52:7a:18:68:d8:44:be:f5:78:85:b3:46: cd:48:96:36:c2:5e:c9:77:a1:e7:37:51:82:08:39: 9c:d0:dc:23:62:f8:71:1b:c3:95:f8:34:c9:e9:3c: 02:65:e9:02:fe:2e:2d:96:1b:e9:18:1f:68:08:8f: 75:12:1c:f5:57:ab:4b:5b:70:94:b1:b0:8e:bc:a6: ed:fb:d6:bc:f6:8f:cd:b9:6d:f1:2d:c1:2d:58:02: 88:45:81:36:01:a3:b5:51:31:fe:2d:a2:df:56:77: b8:97:04:90:9d:f2:c6:f4:f4:f6:a1:73:8a:7e:f2: ac:0e:69:15:f2:b1:e2:70:1a:dd:98:a4:cd:d9:67: b8:c2:e6:0c:d3:47:57:61:a1:c9:8c:9d:e9:b4:d4: fc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9C:93:26:E3:A5:9E:AF:A4:CB:D7:5B:10:2A:27:AF:8D:41:9B:7F X509v3 Authority Key Identifier: keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/CZyTJuOlnq-ky9dbEConr41Bm38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.3.124.0/24 Signature Algorithm: sha256WithRSAEncryption 05:77:ca:47:14:7a:d0:c6:70:c0:9b:92:a4:18:7a:0f:81:b5: 3f:21:ca:b7:60:f5:ad:b9:b9:27:f7:3a:9b:1e:27:4e:0f:c7: 0b:dd:94:54:bd:36:10:7a:9c:cd:8b:fe:46:1a:b1:65:46:24: 47:6a:c9:2f:a4:17:9f:14:79:68:47:a5:9b:46:71:1a:0b:2d: 74:50:19:8e:53:47:18:77:33:a5:77:99:06:2e:fd:80:21:55: 91:e9:5d:7f:87:7e:57:d2:24:51:cc:6f:e2:d9:61:97:f8:0d: 4a:5c:9a:72:86:ab:55:94:e1:27:3d:49:cf:f6:48:a3:9d:6e: f0:58:b1:19:85:50:f3:39:74:32:94:df:4f:26:74:d9:86:59: d1:2a:bd:7c:18:fb:6b:12:1c:eb:34:0c:f9:0b:e4:c7:8b:8b: 2e:b1:b6:59:8c:14:3f:de:b2:7b:10:92:1c:a4:85:c8:ba:44: b4:71:a9:7d:b8:18:d9:63:2b:fb:4e:23:ff:dc:90:50:5d:74: 7a:ba:b8:3c:e2:87:1d:3f:b2:e2:cb:cb:a3:fb:78:e6:80:e2: 95:4e:d4:dc:0d:38:3d:25:8e:89:30:7f:18:20:ce:84:3f:39: c0:56:ea:57:24:62:a8:da:a0:12:5b:eb:8d:28:90:a5:a2:b2: d8:b7:e0:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f2BCvbrAD8dsZBIhaq3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NWM1ZjNiYjgxMTkxNzIwYzBkZGY4YjNjZjM0ZDkxZGFi NGUxZDMwHhcNMjYwMTAyMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTljOTMyNmUzYTU5ZWFmYTRjYmQ3NWIxMDJhMjdhZjhkNDE5YjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZrfHwJgtU0flVHZzjNOZQ+Jeie0 fo1+mgRYiunFtv2sTdEnjgpTuhmVUk6KsfEcyUZ1fgajtM5ToS4oA3VXjxdnE8nG mjgIP7f8titxGcnG6JEZl7s8xw8zL/UiPLJBBWO9yGaCENWsgyhSehho2ES+9XiF s0bNSJY2wl7Jd6HnN1GCCDmc0NwjYvhxG8OV+DTJ6TwCZekC/i4tlhvpGB9oCI91 Ehz1V6tLW3CUsbCOvKbt+9a89o/NuW3xLcEtWAKIRYE2AaO1UTH+LaLfVne4lwSQ nfLG9PT2oXOKfvKsDmkV8rHicBrdmKTN2We4wuYM00dXYaHJjJ3ptNT8jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmckybjpZ6vpMvXWxAqJ6+NQZt/MB8GA1UdIwQY MBaAFARcXzu4EZFyDA3fizzzTZHatOHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2Mt ZmJiODA4NTNjMWJlLzEvQ1p5VEp1T2xucS1reTlkYkVDb25yNDFCbTM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2MtZmJiODA4NTNjMWJl LzEvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQN8MA0G CSqGSIb3DQEBCwUAA4IBAQAFd8pHFHrQxnDAm5KkGHoPgbU/Icq3YPWtubkn9zqb HidOD8cL3ZRUvTYQepzNi/5GGrFlRiRHaskvpBefFHloR6WbRnEaCy10UBmOU0cY dzOld5kGLv2AIVWR6V1/h35X0iRRzG/i2WGX+A1KXJpyhqtVlOEnPUnP9kijnW7w WLEZhVDzOXQylN9PJnTZhlnRKr18GPtrEhzrNAz5C+THi4susbZZjBQ/3rJ7EJIc pIXIukS0cal9uBjZYyv7TiP/3JBQXXR6urg84ocdP7Liy8uj+3jmgOKVTtTcDTg9 JY6JMH8YIM6EPznAVupXJGKo2qASW+uNKJClorLYt+A/ -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:25 2026 by rpki-client