This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/cGIbIuyd_-GcZFAPYp_iRhjY8Fs.roa File: cGIbIuyd_-GcZFAPYp_iRhjY8Fs.roa (raw, json) Hash identifier: 4l9uaitU/oM93/Oha9XHLDc9sPtfot6T5F/wqRyQOyk= Subject key identifier: 70:62:1B:22:EC:9D:FF:E1:9C:64:50:0F:62:9F:E2:46:18:D8:F0:5B Certificate issuer: /CN=9708724593b4753175b214812cf6891a645f84c5 Certificate serial: 019B7DCAEA7921595B45EA4949AAD119AC48 Authority key identifier: 97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/cGIbIuyd_-GcZFAPYp_iRhjY8Fs.roa Signing time: Fri 02 Jan 2026 08:20:08 +0000 ROA not before: Fri 02 Jan 2026 08:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21056 IP address blocks: 185.97.216.0/24 maxlen: 24 185.97.217.0/24 maxlen: 24 185.97.218.0/24 maxlen: 24 185.97.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.mft rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ea:79:21:59:5b:45:ea:49:49:aa:d1:19:ac:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9708724593b4753175b214812cf6891a645f84c5 Validity Not Before: Jan 2 08:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70621b22ec9dffe19c64500f629fe24618d8f05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:9d:53:51:f2:78:7c:a1:b2:04:22:15:d6: e7:3e:d1:a8:74:ba:f4:d6:d6:f1:9b:d1:22:2c:f2: 09:7a:6f:f8:8d:67:de:7c:40:74:63:2e:1f:82:7a: 3c:79:4c:b3:67:fb:f4:38:ee:0b:7a:ce:a9:19:4d: eb:a4:08:21:69:c4:9d:c6:ea:fe:4e:fa:6d:84:4d: 95:2d:17:83:25:f2:73:4e:02:46:23:08:e5:a6:4c: c3:63:06:74:15:48:8f:27:f3:ae:43:b1:96:f1:3d: 52:47:5e:1e:5f:9a:90:4d:cb:2a:16:d3:71:45:55: e9:b7:71:87:f5:e5:fa:f8:54:a3:56:6f:07:1b:bd: 9f:af:eb:09:c8:48:62:cb:c2:d9:96:ff:e1:bf:54: 4b:be:e5:80:74:6c:e2:d2:ef:04:e8:a4:ed:eb:0e: e6:73:3a:96:45:f2:23:30:df:2b:0e:a6:19:44:cb: 69:6e:41:04:6b:ef:fe:cd:91:10:85:a1:56:9b:a8: 6c:75:6c:13:98:fb:e7:bf:a4:3e:85:f3:33:fa:13: e7:81:7d:b8:46:55:92:72:02:27:25:fb:d8:71:f6: af:d7:c8:40:f6:ce:97:69:49:20:14:b2:ab:e8:06: 03:8b:89:36:1b:f9:ed:46:79:55:63:48:cd:fb:b5: 6b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:62:1B:22:EC:9D:FF:E1:9C:64:50:0F:62:9F:E2:46:18:D8:F0:5B X509v3 Authority Key Identifier: keyid:97:08:72:45:93:B4:75:31:75:B2:14:81:2C:F6:89:1A:64:5F:84:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lwhyRZO0dTF1shSBLPaJGmRfhMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/cGIbIuyd_-GcZFAPYp_iRhjY8Fs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ae8c35-f9d7-437b-8996-32a4278e5bc5/1/lwhyRZO0dTF1shSBLPaJGmRfhMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.216.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:c1:fc:d9:50:65:57:e6:85:4a:08:f3:6d:7d:45:2e:da:53: c1:71:2b:67:4b:4e:47:8d:cb:be:fc:47:32:b1:de:4e:de:40: 63:b6:d8:c9:97:94:9d:59:06:2f:85:b1:95:00:3f:6e:27:94: 9c:26:bf:1e:24:6a:3b:74:f8:8b:94:48:41:5f:bc:eb:a5:88: 72:14:d6:fd:7e:b0:04:cb:65:70:70:1e:b7:e0:19:c6:c1:44: 05:6e:0d:1a:60:96:e5:d9:b5:19:b9:49:b5:79:d8:11:3a:a1: 5d:75:58:1c:b2:b4:40:00:32:e6:9f:a8:8b:18:3a:0e:d5:fb: 9a:39:b2:3c:9e:06:7a:ce:a2:17:44:fd:35:1b:d9:37:d8:f0: 07:17:b7:be:70:12:18:30:ec:bf:a5:33:9b:6b:1e:63:38:f4: 8a:1b:71:4f:8f:bf:c2:ca:e6:f2:81:4a:88:7d:c4:c1:2f:4d: 42:f7:e2:dd:88:af:29:4b:93:1b:c0:46:7f:90:11:2f:9f:1c: a2:d0:c1:d7:17:25:2d:f8:97:0f:a6:ef:3c:9f:ab:24:d3:54: ab:24:e8:67:d0:75:3a:4b:5e:2e:df:f0:4d:f8:27:5a:bc:22: 76:b1:41:bd:58:cd:1d:a4:0c:b4:b6:83:37:51:b1:0a:57:22: d9:ed:aa:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yup5IVlbRepJSarRGaxIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3MDg3MjQ1OTNiNDc1MzE3NWIyMTQ4MTJjZjY4OTFhNjQ1 Zjg0YzUwHhcNMjYwMTAyMDgyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDYyMWIyMmVjOWRmZmUxOWM2NDUwMGY2MjlmZTI0NjE4ZDhmMDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42edU1HyeHyhsgQiFdbnPtGodLr0 1tbxm9EiLPIJem/4jWfefEB0Yy4fgno8eUyzZ/v0OO4Les6pGU3rpAghacSdxur+ TvpthE2VLReDJfJzTgJGIwjlpkzDYwZ0FUiPJ/OuQ7GW8T1SR14eX5qQTcsqFtNx RVXpt3GH9eX6+FSjVm8HG72fr+sJyEhiy8LZlv/hv1RLvuWAdGzi0u8E6KTt6w7m czqWRfIjMN8rDqYZRMtpbkEEa+/+zZEQhaFWm6hsdWwTmPvnv6Q+hfMz+hPngX24 RlWScgInJfvYcfav18hA9s6XaUkgFLKr6AYDi4k2G/ntRnlVY0jN+7VrlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBiGyLsnf/hnGRQD2Kf4kYY2PBbMB8GA1UdIwQY MBaAFJcIckWTtHUxdbIUgSz2iRpkX4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYt MzJhNDI3OGU1YmM1LzEvY0dJYkl1eWRfLUdjWkZBUFlwX2lSaGpZOEZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hZThjMzUtZjlkNy00MzdiLTg5OTYtMzJhNDI3OGU1YmM1 LzEvbHdoeVJaTzBkVEYxc2hTQkxQYUpHbVJmaE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWHYMA0G CSqGSIb3DQEBCwUAA4IBAQAfwfzZUGVX5oVKCPNtfUUu2lPBcStnS05Hjcu+/Ecy sd5O3kBjttjJl5SdWQYvhbGVAD9uJ5ScJr8eJGo7dPiLlEhBX7zrpYhyFNb9frAE y2VwcB634BnGwUQFbg0aYJbl2bUZuUm1edgROqFddVgcsrRAADLmn6iLGDoO1fua ObI8ngZ6zqIXRP01G9k32PAHF7e+cBIYMOy/pTObax5jOPSKG3FPj7/CyubygUqI fcTBL01C9+LdiK8pS5MbwEZ/kBEvnxyi0MHXFyUt+JcPpu88n6sk01SrJOhn0HU6 S14u3/BN+CdavCJ2sUG9WM0dpAy0toM3UbEKVyLZ7aoU -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:42 2026 by rpki-client