This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/CdGW6i18Yr035U0dUT-j8WcoJNo.roa File: CdGW6i18Yr035U0dUT-j8WcoJNo.roa (raw, json) Hash identifier: Rxp+OcdpmAsKNqBYYDsjZgGcVdgHuz2oel8FBpzkdoE= Subject key identifier: 09:D1:96:EA:2D:7C:62:BD:37:E5:4D:1D:51:3F:A3:F1:67:28:24:DA Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4 Certificate serial: 019B7EA69813DA9731A804F927A25C9A4A51 Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/CdGW6i18Yr035U0dUT-j8WcoJNo.roa Signing time: Fri 02 Jan 2026 12:20:05 +0000 ROA not before: Fri 02 Jan 2026 12:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59666 IP address blocks: 185.51.208.0/22 maxlen: 22 185.51.208.0/24 maxlen: 24 185.51.209.0/24 maxlen: 24 185.51.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:98:13:da:97:31:a8:04:f9:27:a2:5c:9a:4a:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4 Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09d196ea2d7c62bd37e54d1d513fa3f1672824da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:04:e7:02:99:07:ed:52:7b:82:a6:fc:b2:b6: 24:7a:23:d2:2d:9c:e4:db:2e:cb:0b:b5:81:3e:71: 4b:d9:65:a6:22:10:83:b1:34:9f:06:52:df:3f:25: 45:14:58:d3:a3:07:26:d2:f3:76:09:ca:e0:16:64: 9c:c9:b9:91:80:4d:07:a6:14:bc:20:b9:29:cd:26: a3:01:e7:94:ea:2d:a7:89:0b:e7:9d:5e:dc:b1:73: a1:4d:aa:1b:cc:51:3e:60:d0:77:d2:7c:64:c6:e5: fb:61:a5:aa:c2:64:54:d8:40:f8:ff:8a:38:34:10: 72:ae:d4:da:5e:fc:67:cb:fb:8e:8e:8c:8a:3f:94: 02:2f:4b:48:95:d7:8d:87:1d:a3:c0:5b:ce:dd:57: 2e:33:79:f9:6e:57:fa:15:8a:48:a2:3a:3e:05:a2: 64:7f:17:23:26:cf:5d:d2:b7:3d:6c:a2:46:e2:55: f4:98:6e:ed:bb:fb:08:ca:c3:2c:89:de:8a:0b:7a: a9:9e:3b:14:d5:5b:47:5b:2e:a8:7d:6f:5b:aa:f3: 8b:cf:93:ed:d5:52:75:1e:36:c0:71:dc:73:8b:8e: bb:b0:48:81:4c:52:95:1b:ce:55:bd:16:8a:af:4a: 0b:4b:ce:d6:ad:1b:ab:81:e5:e7:6a:02:5a:9a:6a: 85:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D1:96:EA:2D:7C:62:BD:37:E5:4D:1D:51:3F:A3:F1:67:28:24:DA X509v3 Authority Key Identifier: keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/CdGW6i18Yr035U0dUT-j8WcoJNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.208.0/22 Signature Algorithm: sha256WithRSAEncryption 11:6d:5a:bf:e6:5d:8f:f8:e6:41:3b:46:a8:80:95:37:0b:35: 5d:fb:98:1f:c2:fa:a5:d0:3d:f8:f7:a6:f4:6a:c9:96:74:2a: fe:47:4f:78:b7:1f:94:b3:70:3b:7f:8c:18:af:0b:f2:62:a3: 49:03:43:55:1a:60:ce:b5:c7:b7:f7:0a:92:3e:16:2a:77:b8: ac:d5:02:9b:5f:b8:68:b0:3a:63:12:e7:9a:47:84:1b:5e:2b: d5:1b:cb:f6:79:c2:2c:15:72:b9:1e:5b:6d:b8:1a:a4:57:5f: 46:dc:79:17:e0:d4:60:d1:9d:9e:c6:b4:12:70:91:44:a7:77: b7:45:b5:ae:a1:0d:4d:43:ff:df:57:7c:b5:8e:36:18:6c:38: 4d:6a:9e:cd:7a:c9:bb:92:60:51:89:69:a2:9f:31:e8:0c:e1: 2a:38:cb:34:63:20:26:2d:c6:03:05:37:65:77:10:04:88:cd: ae:48:0a:35:c7:99:4f:61:a4:7f:d1:3b:b8:3b:a1:8e:da:8b: 33:bf:3c:4e:74:7f:e9:e4:8c:71:d6:0e:20:90:58:9a:86:46: 32:46:91:12:6e:5a:9d:27:d8:00:33:e6:b6:73:15:ff:eb:7e: 57:60:ee:3d:3e:68:5c:10:f8:ec:14:e0:76:5e:4c:80:8f:bc: 96:8c:ee:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppgT2pcxqAT5J6JcmkpRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi ODgzYzQwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWQxOTZlYTJkN2M2MmJkMzdlNTRkMWQ1MTNmYTNmMTY3MjgyNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwTnApkH7VJ7gqb8srYkeiPSLZzk 2y7LC7WBPnFL2WWmIhCDsTSfBlLfPyVFFFjTowcm0vN2CcrgFmScybmRgE0HphS8 ILkpzSajAeeU6i2niQvnnV7csXOhTaobzFE+YNB30nxkxuX7YaWqwmRU2ED4/4o4 NBByrtTaXvxny/uOjoyKP5QCL0tIldeNhx2jwFvO3VcuM3n5blf6FYpIojo+BaJk fxcjJs9d0rc9bKJG4lX0mG7tu/sIysMsid6KC3qpnjsU1VtHWy6ofW9bqvOLz5Pt 1VJ1HjbAcdxzi467sEiBTFKVG85VvRaKr0oLS87WrRurgeXnagJammqFuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAnRluotfGK9N+VNHVE/o/FnKCTaMB8GA1UdIwQY MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt OTdkY2JiMDA4NmUzLzEvQ2RHVzZpMThZcjAzNVUwZFVULWo4V2NvSk5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTPQMA0G CSqGSIb3DQEBCwUAA4IBAQARbVq/5l2P+OZBO0aogJU3CzVd+5gfwvql0D3496b0 asmWdCr+R094tx+Us3A7f4wYrwvyYqNJA0NVGmDOtce39wqSPhYqd7is1QKbX7ho sDpjEueaR4QbXivVG8v2ecIsFXK5HlttuBqkV19G3HkX4NRg0Z2exrQScJFEp3e3 RbWuoQ1NQ//fV3y1jjYYbDhNap7Nesm7kmBRiWminzHoDOEqOMs0YyAmLcYDBTdl dxAEiM2uSAo1x5lPYaR/0Tu4O6GO2oszvzxOdH/p5Ixx1g4gkFiahkYyRpESblqd J9gAM+a2cxX/635XYO49PmhcEPjsFOB2XkyAj7yWjO7w -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:37 2026 by rpki-client