This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/CZ1LSUniiHGNKwvHak6fSDmBxdc.roa File: CZ1LSUniiHGNKwvHak6fSDmBxdc.roa (raw, json) Hash identifier: Mosbvu2i3W9lRSEMHDa5n4kbGcSkA8mN4bx3wDReYfc= Subject key identifier: 09:9D:4B:49:49:E2:88:71:8D:2B:0B:C7:6A:4E:9F:48:39:81:C5:D7 Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Certificate serial: 019C4205F68C54534CF6F26479EA8EF4E3C3 Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/CZ1LSUniiHGNKwvHak6fSDmBxdc.roa Signing time: Mon 09 Feb 2026 10:50:12 +0000 ROA not before: Mon 09 Feb 2026 10:50:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212655 IP address blocks: 88.97.192.0/18 maxlen: 18 88.97.192.0/21 maxlen: 21 88.97.200.0/21 maxlen: 21 88.97.200.0/23 maxlen: 23 88.97.202.0/23 maxlen: 23 88.97.204.0/23 maxlen: 23 88.97.206.0/23 maxlen: 23 88.97.208.0/21 maxlen: 21 88.97.216.0/21 maxlen: 21 88.97.216.0/23 maxlen: 23 88.97.218.0/23 maxlen: 23 88.97.220.0/23 maxlen: 23 88.97.222.0/23 maxlen: 23 88.97.224.0/21 maxlen: 21 88.97.232.0/21 maxlen: 21 88.97.240.0/23 maxlen: 23 88.97.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:05:f6:8c:54:53:4c:f6:f2:64:79:ea:8e:f4:e3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Validity Not Before: Feb 9 10:50:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=099d4b4949e288718d2b0bc76a4e9f483981c5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:3c:92:cd:a7:8b:3c:33:e5:cf:e3:e8:15: 51:73:6f:51:7e:84:de:0b:a9:ba:7b:3d:d4:c1:47: ac:e8:71:5e:fd:12:b9:1b:37:b4:8e:7b:0c:08:25: ac:07:75:0a:a3:2b:fd:c4:28:ce:ea:14:a1:9b:a3: ec:f9:2e:00:ea:e2:b0:e8:06:71:ad:b8:d6:3b:ee: 74:6f:77:01:94:e6:8c:fd:37:fe:40:58:92:1b:d3: f9:6a:29:c4:5a:f2:2b:e3:fd:16:9d:25:68:94:0a: 98:24:78:d6:06:87:23:28:be:f6:bd:eb:be:5d:8c: dd:bb:7f:bf:cd:d6:79:6b:f2:ea:aa:b0:e7:0a:90: 05:b4:e3:e6:d2:46:df:6e:98:2e:cc:e0:e8:fe:d0: 10:0c:00:51:82:d4:40:fe:bc:c6:2b:05:3c:db:20: 5b:00:b3:88:93:d2:f1:1b:79:0d:e5:6c:3b:6d:16: b8:be:1f:5e:3f:7f:54:88:b0:a7:2c:cd:d4:03:a0: bd:a0:7d:c8:e1:09:a6:e7:ea:d6:86:f1:a7:5d:a9: 1f:2b:d1:48:f1:7a:a6:aa:ff:ac:f2:c2:ac:8b:ef: 17:97:31:3e:1b:4f:91:2f:25:6a:2e:70:ee:be:6b: d7:cb:fd:1a:be:91:9a:7e:d4:17:9d:2a:7d:7c:24: bb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9D:4B:49:49:E2:88:71:8D:2B:0B:C7:6A:4E:9F:48:39:81:C5:D7 X509v3 Authority Key Identifier: keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/CZ1LSUniiHGNKwvHak6fSDmBxdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.97.192.0/18 Signature Algorithm: sha256WithRSAEncryption 10:1b:88:65:fe:a4:ae:0b:76:2b:b4:c3:9b:43:9c:2f:91:89: 13:1c:4c:a0:b6:e5:fb:b5:2d:4b:f2:fb:17:5a:09:f9:8b:a2: 0e:a2:94:ab:c1:74:1f:ce:58:56:c2:b9:6f:bd:ba:d6:32:30: 91:2b:08:3a:ec:fd:a0:40:c0:4e:3e:79:5a:4b:10:ce:0b:fe: ce:ab:c6:2a:ed:13:18:cc:ab:bb:1e:9b:a9:81:e8:a1:17:1f: b7:89:cc:89:78:db:64:34:8b:d1:91:e0:ce:2b:59:cb:70:e4: 4d:57:a2:26:1b:77:67:16:50:db:46:34:a7:7f:78:03:06:9e: 63:63:21:cd:14:86:f4:bd:7b:97:c1:2c:28:1a:7d:ab:cc:3a: 42:e7:8c:23:32:72:d6:8b:da:f2:9d:7f:e6:a1:dc:55:f2:d1: 1a:4f:1f:88:13:61:42:ad:65:7b:25:4d:d3:39:b4:60:26:31: ab:95:a9:63:10:2b:e4:0d:61:3c:be:ff:2c:be:82:18:67:cc: 2d:ec:1e:74:ae:e3:74:6b:b2:19:14:4e:78:fa:9c:15:b2:f1: 43:a5:87:84:4c:7b:f6:1c:df:9f:b7:12:2c:76:38:ad:3d:11: 06:b8:a4:1e:cd:04:ed:f7:3c:66:1d:a7:b7:01:06:57:e0:ed: 8b:8d:06:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZxCBfaMVFNM9vJkeeqO9OPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm OTM2OTUwHhcNMjYwMjA5MTA1MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTlkNGI0OTQ5ZTI4ODcxOGQyYjBiYzc2YTRlOWY0ODM5ODFjNWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPw8ks2nizwz5c/j6BVRc29RfoTe C6m6ez3UwUes6HFe/RK5Gze0jnsMCCWsB3UKoyv9xCjO6hShm6Ps+S4A6uKw6AZx rbjWO+50b3cBlOaM/Tf+QFiSG9P5ainEWvIr4/0WnSVolAqYJHjWBocjKL72veu+ XYzdu3+/zdZ5a/LqqrDnCpAFtOPm0kbfbpguzODo/tAQDABRgtRA/rzGKwU82yBb ALOIk9LxG3kN5Ww7bRa4vh9eP39UiLCnLM3UA6C9oH3I4Qmm5+rWhvGnXakfK9FI 8Xqmqv+s8sKsi+8XlzE+G0+RLyVqLnDuvmvXy/0avpGaftQXnSp9fCS7SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmdS0lJ4ohxjSsLx2pOn0g5gcXXMB8GA1UdIwQY MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt NjBjZjlhYjFiMTNlLzEvQ1oxTFNVbmlpSEdOS3d2SGFrNmZTRG1CeGRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGWGHAMA0G CSqGSIb3DQEBCwUAA4IBAQAQG4hl/qSuC3YrtMObQ5wvkYkTHEygtuX7tS1L8vsX Wgn5i6IOopSrwXQfzlhWwrlvvbrWMjCRKwg67P2gQMBOPnlaSxDOC/7Oq8Yq7RMY zKu7HpupgeihFx+3icyJeNtkNIvRkeDOK1nLcORNV6ImG3dnFlDbRjSnf3gDBp5j YyHNFIb0vXuXwSwoGn2rzDpC54wjMnLWi9rynX/modxV8tEaTx+IE2FCrWV7JU3T ObRgJjGrlaljECvkDWE8vv8svoIYZ8wt7B50ruN0a7IZFE54+pwVsvFDpYeETHv2 HN+ftxIsdjitPREGuKQezQTt9zxmHae3AQZX4O2LjQZn -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:27 2026 by rpki-client