This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/csbbsPh9KC49mBnhTppZksDsY40.roa File: csbbsPh9KC49mBnhTppZksDsY40.roa (raw, json) Hash identifier: mPaBJJIoQKQRRnr2VJcXQT7Jq69TiXABx2jiGwRlgYY= Subject key identifier: 72:C6:DB:B0:F8:7D:28:2E:3D:98:19:E1:4E:9A:59:92:C0:EC:63:8D Certificate issuer: /CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589 Certificate serial: 019B78A21CDC0F9D43D6D4325D4E13CC89A8 Authority key identifier: 31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/csbbsPh9KC49mBnhTppZksDsY40.roa Signing time: Thu 01 Jan 2026 08:17:28 +0000 ROA not before: Thu 01 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204978 IP address blocks: 185.233.96.0/22 maxlen: 22 185.233.97.0/24 maxlen: 24 185.233.98.0/24 maxlen: 24 185.233.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.mft rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:1c:dc:0f:9d:43:d6:d4:32:5d:4e:13:cc:89:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31e6591d1a04d6afe1ed5f4ed01d394ae5148589 Validity Not Before: Jan 1 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72c6dbb0f87d282e3d9819e14e9a5992c0ec638d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:4b:05:44:88:15:f6:1a:ff:bc:9a:3b:3d: b8:17:81:d8:61:67:60:d5:77:46:2c:9e:e2:a6:2c: d4:d8:ed:7e:a3:15:57:00:e5:4a:e4:dd:ad:f4:c8: da:bb:a1:d2:05:5b:43:b2:f9:07:cb:9e:a8:54:00: 6c:6b:1e:20:7a:d9:38:34:21:f1:bd:7a:7d:39:63: 76:d8:ca:86:37:10:c0:6f:40:9f:60:b0:ae:6b:64: de:e3:03:3e:d6:5f:78:09:45:33:3a:f0:f1:55:7f: 08:3e:42:f6:0f:86:92:4a:a0:0f:7e:43:ca:7c:b7: 83:20:7a:e2:98:9f:d9:27:ff:2e:5b:58:c0:a6:7c: 36:3d:e4:53:a3:b7:c5:4b:8e:d0:a3:32:18:5f:49: 69:6f:ab:77:56:30:1c:12:78:6a:69:21:3a:1f:27: 58:dd:c4:42:b3:3f:61:e5:4c:71:31:d6:59:d9:b5: 97:a8:79:0a:b6:91:0b:30:19:f8:ea:fa:92:c4:6d: 68:f0:79:03:94:47:f1:d2:b4:a9:8a:bc:08:85:8f: 5e:8b:46:03:3c:6f:41:8a:aa:d3:c9:1f:80:2a:5a: 26:57:0a:84:97:3e:2c:52:73:47:4d:f3:a5:58:c9: 41:00:ed:6d:58:97:ac:6f:9d:6b:2e:ca:5a:5e:0d: ae:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C6:DB:B0:F8:7D:28:2E:3D:98:19:E1:4E:9A:59:92:C0:EC:63:8D X509v3 Authority Key Identifier: keyid:31:E6:59:1D:1A:04:D6:AF:E1:ED:5F:4E:D0:1D:39:4A:E5:14:85:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MeZZHRoE1q_h7V9O0B05SuUUhYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/csbbsPh9KC49mBnhTppZksDsY40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/84a85e-ad49-4c63-ab59-ab7b0aa1c3d4/1/MeZZHRoE1q_h7V9O0B05SuUUhYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.96.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:12:91:1b:de:44:25:8f:30:7d:dc:29:ed:72:59:2b:58:fa: 85:e9:4b:2b:9d:a4:fa:a3:a5:06:03:16:41:3a:6b:03:94:80: ce:87:5d:d5:6c:57:3e:dd:88:44:ea:60:b6:7d:65:ef:34:4a: 57:bf:11:57:0a:6a:5c:40:a6:3d:0d:6a:75:80:82:44:60:e8: 84:34:78:e0:f0:15:97:e7:11:cd:83:43:1e:d7:13:a1:3b:66: 32:af:cc:31:14:d2:f0:8d:d1:8b:32:20:b7:49:b6:2d:49:c9: 2b:ab:0f:a1:c3:1b:74:34:41:e1:7b:ef:ef:a8:aa:e1:b0:4a: fa:2f:c9:58:11:26:39:34:32:f7:8c:d4:43:f9:44:63:a5:1d: 14:07:15:c8:5e:76:4b:49:e3:0a:fd:b0:1a:2a:6a:4e:c0:0c: 4a:99:23:4e:28:af:63:6d:df:19:9d:4c:84:9e:44:21:5c:7a: 94:1a:f5:1e:82:2e:6b:22:f4:24:eb:c3:cc:2f:bc:13:97:4b: da:e2:ca:4d:5d:1b:2a:02:07:83:eb:b7:24:0e:49:37:68:ac: a9:e4:5f:42:2d:45:8c:c9:87:01:2c:c7:b6:2a:51:f1:99:e6: e2:1b:6e:b8:b5:b9:1e:3e:11:48:e3:e3:9a:c0:ba:53:19:49: a8:ce:83:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ohzcD51D1tQyXU4TzImoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZTY1OTFkMWEwNGQ2YWZlMWVkNWY0ZWQwMWQzOTRhZTUx NDg1ODkwHhcNMjYwMTAxMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmM2ZGJiMGY4N2QyODJlM2Q5ODE5ZTE0ZTlhNTk5MmMwZWM2MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO1LBUSIFfYa/7yaOz24F4HYYWdg 1XdGLJ7ipizU2O1+oxVXAOVK5N2t9Mjau6HSBVtDsvkHy56oVABsax4getk4NCHx vXp9OWN22MqGNxDAb0CfYLCua2Te4wM+1l94CUUzOvDxVX8IPkL2D4aSSqAPfkPK fLeDIHrimJ/ZJ/8uW1jApnw2PeRTo7fFS47QozIYX0lpb6t3VjAcEnhqaSE6HydY 3cRCsz9h5UxxMdZZ2bWXqHkKtpELMBn46vqSxG1o8HkDlEfx0rSpirwIhY9ei0YD PG9BiqrTyR+AKlomVwqElz4sUnNHTfOlWMlBAO1tWJesb51rLspaXg2upwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHLG27D4fSguPZgZ4U6aWZLA7GONMB8GA1UdIwQY MBaAFDHmWR0aBNav4e1fTtAdOUrlFIWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWVaWkhSb0UxcV9oN1Y5TzBCMDVTdVVVaFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NGE4NWUtYWQ0OS00YzYzLWFiNTkt YWI3YjBhYTFjM2Q0LzEvY3NiYnNQaDlLQzQ5bUJuaFRwcFprc0RzWTQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NGE4NWUtYWQ0OS00YzYzLWFiNTktYWI3YjBhYTFjM2Q0 LzEvTWVaWkhSb0UxcV9oN1Y5TzBCMDVTdVVVaFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuelgMA0G CSqGSIb3DQEBCwUAA4IBAQCcEpEb3kQljzB93CntclkrWPqF6UsrnaT6o6UGAxZB OmsDlIDOh13VbFc+3YhE6mC2fWXvNEpXvxFXCmpcQKY9DWp1gIJEYOiENHjg8BWX 5xHNg0Me1xOhO2Yyr8wxFNLwjdGLMiC3SbYtSckrqw+hwxt0NEHhe+/vqKrhsEr6 L8lYESY5NDL3jNRD+URjpR0UBxXIXnZLSeMK/bAaKmpOwAxKmSNOKK9jbd8ZnUyE nkQhXHqUGvUegi5rIvQk68PML7wTl0va4spNXRsqAgeD67ckDkk3aKyp5F9CLUWM yYcBLMe2KlHxmebiG264tbkePhFI4+OawLpTGUmozoO5 -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:24 2026 by rpki-client