This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa File: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (raw, json) Hash identifier: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM= Subject key identifier: 71:2C:BF:0E:85:4F:B9:86:80:D9:60:B3:27:F8:1F:C0:C7:8A:AD:C8 Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Certificate serial: 019B79ED55FFC28A7CDD8ED79C17119601E1 Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50226 IP address blocks: 89.16.192.0/19 maxlen: 24 185.56.124.0/22 maxlen: 22 185.228.40.0/22 maxlen: 22 2a00:17e8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:55:ff:c2:8a:7c:dd:8e:d7:9c:17:11:96:01:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=712cbf0e854fb98680d960b327f81fc0c78aadc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:0e:96:66:0f:6e:fa:5d:0f:16:22:18:28: 4e:a8:7c:6b:ec:3d:6a:93:44:f4:5c:81:06:4d:25: e2:1c:9b:20:80:ff:52:26:b6:6a:c3:2d:df:ad:2f: 0e:11:8b:80:37:1a:60:74:bd:dc:17:78:8b:55:3c: df:f4:8a:db:05:5e:d4:61:d3:9e:c6:14:83:98:c9: c8:81:6c:b1:6d:13:24:cb:3a:82:a5:3b:48:d1:c6: cf:e1:bc:a7:c5:ea:28:4d:d4:2c:c4:0b:77:5d:e3: d8:18:4d:42:36:7c:ef:1a:75:bc:c8:df:31:c9:c8: 74:46:2c:d3:01:39:a2:32:40:27:81:bb:6e:58:c1: 07:f2:8c:f3:ce:1f:39:1e:e3:e0:82:77:13:95:ed: 7b:b5:e6:af:11:f5:7c:f8:b3:cc:7f:04:b3:28:38: 57:52:b5:19:69:3e:3b:c2:05:66:07:3c:c2:e2:94: a3:be:eb:24:63:a7:08:a6:3f:4e:1b:39:26:1a:86: 96:51:b9:d8:5d:45:b5:a9:c3:88:e6:ae:c3:81:15: 2b:e7:56:31:ac:3c:00:54:8c:6e:55:3a:70:cb:b2: 31:bc:b0:28:14:5f:56:7d:63:3f:7b:03:c9:b9:73: f2:89:81:86:bf:77:2e:9f:b6:0c:37:f6:12:35:e3: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2C:BF:0E:85:4F:B9:86:80:D9:60:B3:27:F8:1F:C0:C7:8A:AD:C8 X509v3 Authority Key Identifier: keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.16.192.0/19 185.56.124.0/22 185.228.40.0/22 IPv6: 2a00:17e8::/29 Signature Algorithm: sha256WithRSAEncryption 95:cc:d6:fc:1a:7c:a9:78:a1:54:e1:63:41:1a:32:1c:9f:8a: e0:aa:cc:98:d3:15:61:7d:c5:1f:8e:41:bb:50:cf:51:87:fa: c6:64:28:ad:07:68:0b:8f:30:40:62:15:ca:a5:da:7d:da:58: c0:bf:57:42:01:67:31:16:db:0e:0f:6c:a0:f3:29:23:25:08: d5:17:eb:f9:d2:43:1c:15:86:a7:f6:7e:da:d1:db:09:72:c3: 47:14:22:d1:40:52:0c:23:55:b6:c9:90:f8:b1:39:15:79:ae: a2:1b:b9:ee:a4:0f:8f:28:16:ca:4f:c8:64:2e:03:69:d8:dc: b7:37:99:85:ff:9a:65:a3:b3:49:73:51:ac:35:42:ce:8f:c6: 3c:53:24:28:9b:c9:6b:5c:93:e0:99:f8:b0:54:1a:13:82:52: fc:b6:8e:f7:d3:c5:37:67:96:2f:0f:18:88:7a:32:e9:f8:ea: 76:14:e0:2e:1d:e8:40:a0:c6:49:61:81:6c:00:f7:45:8e:f5: 66:c4:00:c2:36:67:eb:81:da:4d:09:c7:d3:bd:31:ba:e6:c9: 29:a0:fc:7c:06:20:d2:ec:79:c7:2c:6e:f6:a1:cd:ce:12:48: ab:1c:a2:f6:3c:74:b5:1d:9e:80:56:fc:a8:33:1d:02:4f:3a: a5:3f:52:c9 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57VX/wop83Y7XnBcRlgHhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYmE0YjI4NjdkYWQzOGI3M2E0NjkxODI0MWVmYzcyYTIx MjYyZjcwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJjYmYwZTg1NGZiOTg2ODBkOTYwYjMyN2Y4MWZjMGM3OGFhZGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GIOlmYPbvpdDxYiGChOqHxr7D1q k0T0XIEGTSXiHJsggP9SJrZqwy3frS8OEYuANxpgdL3cF3iLVTzf9IrbBV7UYdOe xhSDmMnIgWyxbRMkyzqCpTtI0cbP4bynxeooTdQsxAt3XePYGE1CNnzvGnW8yN8x ych0RizTATmiMkAngbtuWMEH8ozzzh85HuPggncTle17teavEfV8+LPMfwSzKDhX UrUZaT47wgVmBzzC4pSjvuskY6cIpj9OGzkmGoaWUbnYXUW1qcOI5q7DgRUr51Yx rDwAVIxuVTpwy7IxvLAoFF9WfWM/ewPJuXPyiYGGv3cun7YMN/YSNeOrjwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHEsvw6FT7mGgNlgsyf4H8DHiq3IMB8GA1UdIwQY MBaAFOG6Syhn2tOLc6RpGCQe/HKiEmL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2Et ZGM2NGFlNzI1NzhlLzEvY1N5X0RvVlB1WWFBMldDekpfZ2Z3TWVLcmNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82ODkxMDktMTcyMy00YmYxLWI2M2EtZGM2NGFlNzI1Nzhl LzEvNGJwTEtHZmEwNHR6cEdrWUpCNzhjcUlTWXZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFWRDAAwQC uTh8AwQCueQoMA0EAgACMAcDBQMqABfoMA0GCSqGSIb3DQEBCwUAA4IBAQCVzNb8 GnypeKFU4WNBGjIcn4rgqsyY0xVhfcUfjkG7UM9Rh/rGZCitB2gLjzBAYhXKpdp9 2ljAv1dCAWcxFtsOD2yg8ykjJQjVF+v50kMcFYan9n7a0dsJcsNHFCLRQFIMI1W2 yZD4sTkVea6iG7nupA+PKBbKT8hkLgNp2Ny3N5mF/5plo7NJc1GsNULOj8Y8UyQo m8lrXJPgmfiwVBoTglL8to7308U3Z5YvDxiIejLp+Op2FOAuHehAoMZJYYFsAPdF jvVmxADCNmfrgdpNCcfTvTG65skpoPx8BiDS7HnHLG72oc3OEkirHKL2PHS1HZ6A VvyoMx0CTzqlP1LJ -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:16 2026 by rpki-client