This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/cXOHYWy0-7WUBhjTzP2yi-7Q4SU.roa File: cXOHYWy0-7WUBhjTzP2yi-7Q4SU.roa (raw, json) Hash identifier: p+uHzH3gdQcuGHFOcwVTN/fHDrzadai+XLOUDXJnLlE= Subject key identifier: 71:73:87:61:6C:B4:FB:B5:94:06:18:D3:CC:FD:B2:8B:EE:D0:E1:25 Certificate issuer: /CN=830555f011be5e241eb0b425de5fd86cc6834a54 Certificate serial: 019B7CED8055389CB2C3EE744D3BA8BDBB8C Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/cXOHYWy0-7WUBhjTzP2yi-7Q4SU.roa Signing time: Fri 02 Jan 2026 04:18:18 +0000 ROA not before: Fri 02 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199803 IP address blocks: 188.92.40.0/24 maxlen: 24 188.92.41.0/24 maxlen: 24 188.92.42.0/24 maxlen: 24 188.92.43.0/24 maxlen: 24 188.92.44.0/24 maxlen: 24 188.92.45.0/24 maxlen: 24 188.92.46.0/24 maxlen: 24 188.92.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:80:55:38:9c:b2:c3:ee:74:4d:3b:a8:bd:bb:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54 Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=717387616cb4fbb5940618d3ccfdb28beed0e125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:9c:17:16:b7:fe:ff:27:53:4d:34:a1:a9: a3:29:e9:61:f7:54:4e:e2:a7:ee:4d:bf:16:25:31: c7:79:0e:f4:eb:9c:d9:1b:17:46:cb:48:50:46:56: 84:e8:b0:d8:f9:ac:59:38:39:69:84:d9:4d:a1:2f: 23:91:62:5a:d2:39:44:f0:61:45:9a:9f:6c:ef:14: b6:75:35:c5:15:73:89:66:b8:08:11:f5:69:41:39: 27:00:d8:f7:1b:e8:0e:78:ac:f4:09:3a:10:6e:56: 75:cc:c9:05:f2:25:a8:28:88:fe:4b:93:4c:13:83: 6a:fd:0e:0e:20:b5:ca:89:51:60:bd:46:84:8f:e8: f9:7f:23:78:6d:b5:18:fd:fa:b7:fe:8c:5f:e0:23: 70:10:88:41:0d:c7:22:c2:60:4b:33:74:48:6d:65: f8:02:82:38:92:6d:ef:c2:30:d5:24:9f:31:9b:94: 4b:70:b2:85:77:f3:07:58:83:5c:56:0f:c8:ee:b9: 08:82:6d:48:33:98:c0:9a:a3:5a:a8:1a:fb:e7:1e: 3f:aa:1d:cd:4f:93:02:ac:43:ce:e4:06:e9:31:a9: a8:3e:fd:cb:fc:b0:aa:f7:e6:3a:02:53:00:30:a3: 60:87:62:67:b5:88:f3:d6:c0:6f:c7:01:3e:77:29: d1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:73:87:61:6C:B4:FB:B5:94:06:18:D3:CC:FD:B2:8B:EE:D0:E1:25 X509v3 Authority Key Identifier: keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/cXOHYWy0-7WUBhjTzP2yi-7Q4SU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.92.40.0/21 Signature Algorithm: sha256WithRSAEncryption 10:d3:2e:de:7d:8e:6d:5a:8e:34:01:d5:25:70:57:d7:54:31: 13:74:fd:62:a6:a5:16:5f:07:3a:d8:88:e2:e3:ee:3c:3c:21: 1d:c0:88:37:49:7c:cc:09:b3:7d:94:e9:6f:68:1f:d2:03:65: af:d8:d6:49:ef:88:f7:33:47:db:5c:0a:18:41:1f:f1:56:30: 70:06:db:80:b0:c7:70:96:17:3f:a1:64:70:0d:bd:1c:a1:06: 3a:d5:2a:d4:6d:3c:8a:82:ed:f6:1c:63:86:52:0f:a7:a2:ab: 92:08:53:51:61:a0:e4:75:d9:32:a7:c9:86:57:be:a5:d5:98: 5f:2b:cf:50:73:77:e4:58:24:86:26:06:bd:78:08:71:74:ba: 32:27:e0:cd:1a:e3:f2:f4:fb:af:10:58:9c:9f:c9:a8:5b:44: 73:29:0b:78:e7:3c:4e:93:92:fa:e4:26:d0:72:5d:bf:cf:6d: a1:27:bf:5f:c0:5c:6d:fc:cf:fc:7b:08:e9:88:32:29:b7:72: c0:84:e6:20:77:07:e8:ff:ce:0a:c6:ae:34:bf:ef:e1:03:b5: 39:e2:95:b6:1a:3c:02:6c:50:52:1d:69:55:87:b0:56:89:59: 09:62:43:0d:6f:13:8a:33:9e:43:24:d2:4a:a8:7a:b5:ec:f5: e5:a7:39:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87YBVOJyyw+50TTuovbuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMDU1NWYwMTFiZTVlMjQxZWIwYjQyNWRlNWZkODZjYzY4 MzRhNTQwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTczODc2MTZjYjRmYmI1OTQwNjE4ZDNjY2ZkYjI4YmVlZDBlMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PycFxa3/v8nU000oamjKelh91RO 4qfuTb8WJTHHeQ7065zZGxdGy0hQRlaE6LDY+axZODlphNlNoS8jkWJa0jlE8GFF mp9s7xS2dTXFFXOJZrgIEfVpQTknANj3G+gOeKz0CToQblZ1zMkF8iWoKIj+S5NM E4Nq/Q4OILXKiVFgvUaEj+j5fyN4bbUY/fq3/oxf4CNwEIhBDcciwmBLM3RIbWX4 AoI4km3vwjDVJJ8xm5RLcLKFd/MHWINcVg/I7rkIgm1IM5jAmqNaqBr75x4/qh3N T5MCrEPO5AbpMamoPv3L/LCq9+Y6AlMAMKNgh2JntYjz1sBvxwE+dynRmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHFzh2FstPu1lAYY08z9sovu0OElMB8GA1UdIwQY MBaAFIMFVfARvl4kHrC0Jd5f2GzGg0pUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEt ZDY5OWRkYzlkMDljLzEvY1hPSFlXeTAtN1dVQmhqVHpQMnlpLTdRNFNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iZjAxNjItZmNiYS00MDg1LWI0ZjEtZDY5OWRkYzlkMDlj LzEvZ3dWVjhCRy1YaVFlc0xRbDNsX1liTWFEU2xRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvFwoMA0G CSqGSIb3DQEBCwUAA4IBAQAQ0y7efY5tWo40AdUlcFfXVDETdP1ipqUWXwc62Iji 4+48PCEdwIg3SXzMCbN9lOlvaB/SA2Wv2NZJ74j3M0fbXAoYQR/xVjBwBtuAsMdw lhc/oWRwDb0coQY61SrUbTyKgu32HGOGUg+noquSCFNRYaDkddkyp8mGV76l1Zhf K89Qc3fkWCSGJga9eAhxdLoyJ+DNGuPy9PuvEFicn8moW0RzKQt45zxOk5L65CbQ cl2/z22hJ79fwFxt/M/8ewjpiDIpt3LAhOYgdwfo/84Kxq40v+/hA7U54pW2GjwC bFBSHWlVh7BWiVkJYkMNbxOKM55DJNJKqHq17PXlpzkZ -----END CERTIFICATE-----Generated at Mon Feb 9 21:13:38 2026 by rpki-client