This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/CZFrmS7OK82FHDO74YLfgO-iIlg.roa File: CZFrmS7OK82FHDO74YLfgO-iIlg.roa (raw, json) Hash identifier: JybF1Ge4abfRKAmvsEXm7iMoOTvGMrH+sTC79u98R8M= Subject key identifier: 09:91:6B:99:2E:CE:2B:CD:85:1C:33:BB:E1:82:DF:80:EF:A2:22:58 Certificate issuer: /CN=0acd4e2c04c39edb242a67051b8b581263436e79 Certificate serial: 019B7A5A88A9E484A9AEB715E577395C15AC Authority key identifier: 0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/CZFrmS7OK82FHDO74YLfgO-iIlg.roa Signing time: Thu 01 Jan 2026 16:18:32 +0000 ROA not before: Thu 01 Jan 2026 16:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60593 IP address blocks: 185.196.134.0/23 maxlen: 24 2a09:a5c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.mft rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:88:a9:e4:84:a9:ae:b7:15:e5:77:39:5c:15:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0acd4e2c04c39edb242a67051b8b581263436e79 Validity Not Before: Jan 1 16:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09916b992ece2bcd851c33bbe182df80efa22258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:36:61:0c:b8:6e:08:1f:3b:87:c8:43:a1: a4:d8:38:40:84:ec:3f:0c:ad:ee:1b:73:5b:dd:c1: f6:4a:78:01:9a:ef:68:79:d1:86:7e:c9:33:72:22: 7f:17:ae:f4:ac:c8:d1:21:a8:58:a1:03:68:c9:dc: 0c:0d:58:40:ae:21:c0:bb:27:24:63:c3:55:45:14: 9e:8b:86:b7:7f:64:af:c6:1c:94:61:f2:cc:65:08: 76:a4:23:36:48:91:9c:7d:fb:8b:1e:c5:08:c2:c9: 02:e4:c1:0f:78:c3:8a:8f:56:bc:73:53:b6:88:8c: 5d:63:65:4f:90:cc:84:c0:ec:01:de:29:65:35:ab: f2:47:ea:9b:2b:34:0e:66:5e:ad:08:29:39:fc:fc: 02:09:98:44:5d:04:ef:c2:01:8b:ca:4f:65:77:1c: db:c4:8c:e4:dc:02:35:e3:99:c4:19:8b:82:8e:26: 79:7b:99:3d:85:58:20:ac:b1:60:b8:b2:ad:aa:8c: 73:27:d6:cd:11:13:7b:f6:50:b0:23:26:27:87:81: d1:32:cd:72:1a:7c:cf:7c:49:b1:9b:36:55:3e:f9: ad:15:9f:f4:a4:73:f8:1a:5f:89:4e:79:7f:da:c6: 9e:ed:8f:dd:68:0f:42:85:07:59:57:48:6e:97:d3: cd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:91:6B:99:2E:CE:2B:CD:85:1C:33:BB:E1:82:DF:80:EF:A2:22:58 X509v3 Authority Key Identifier: keyid:0A:CD:4E:2C:04:C3:9E:DB:24:2A:67:05:1B:8B:58:12:63:43:6E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs1OLATDntskKmcFG4tYEmNDbnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/CZFrmS7OK82FHDO74YLfgO-iIlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/26d6f6-11ee-4a86-bfb9-ddc276acb910/1/Cs1OLATDntskKmcFG4tYEmNDbnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.134.0/23 IPv6: 2a09:a5c0::/29 Signature Algorithm: sha256WithRSAEncryption 2c:01:69:a5:e3:1d:4c:2d:b4:39:1f:cc:e6:c3:ab:f0:6b:d5: 2d:3c:4b:40:71:8f:6f:f2:de:2c:b7:93:9b:f8:ab:70:e1:45: 6a:c9:c6:77:07:ce:2d:05:9d:e3:98:ea:ca:27:ca:31:e8:a6: 0c:55:81:19:83:55:44:c1:8d:f1:fc:9f:c2:40:b0:7c:cf:e9: 1a:4c:c5:3a:4d:42:7f:ab:54:dd:e8:3b:e9:2e:10:4b:71:3e: 6c:b0:57:4b:a8:01:50:49:fb:20:bf:75:bd:46:ec:1c:52:af: 73:41:08:20:4e:0a:59:21:9a:3f:15:49:29:82:79:e6:4f:43: 22:6c:3f:83:81:49:09:ba:41:7b:03:c3:b4:09:63:94:f8:02: 02:be:0e:4f:ec:84:a5:b6:b5:55:53:e0:77:32:e0:d6:d7:db: 35:4a:e5:43:ba:dc:09:c5:7c:62:33:03:53:3f:c9:2b:31:70: 46:21:8d:52:25:bd:e7:0c:41:a1:80:78:9e:9a:5b:ec:c5:68: 52:22:8f:da:7d:62:b1:76:04:1b:c7:33:c5:03:e4:93:7f:3c: fe:3d:96:01:63:13:c1:90:98:bd:7c:5d:a1:05:d6:87:30:51: b0:6c:3b:fa:cb:0f:e9:51:7a:24:54:1c:b1:2c:e8:99:62:98: db:23:30:fe -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6Woip5ISprrcV5Xc5XBWsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhY2Q0ZTJjMDRjMzllZGIyNDJhNjcwNTFiOGI1ODEyNjM0 MzZlNzkwHhcNMjYwMTAxMTYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTkxNmI5OTJlY2UyYmNkODUxYzMzYmJlMTgyZGY4MGVmYTIyMjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLw2YQy4bggfO4fIQ6Gk2DhAhOw/ DK3uG3Nb3cH2SngBmu9oedGGfskzciJ/F670rMjRIahYoQNoydwMDVhAriHAuyck Y8NVRRSei4a3f2SvxhyUYfLMZQh2pCM2SJGcffuLHsUIwskC5MEPeMOKj1a8c1O2 iIxdY2VPkMyEwOwB3illNavyR+qbKzQOZl6tCCk5/PwCCZhEXQTvwgGLyk9ldxzb xIzk3AI145nEGYuCjiZ5e5k9hVggrLFguLKtqoxzJ9bNERN79lCwIyYnh4HRMs1y GnzPfEmxmzZVPvmtFZ/0pHP4Gl+JTnl/2sae7Y/daA9ChQdZV0hul9PNEwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAmRa5kuzivNhRwzu+GC34DvoiJYMB8GA1UdIwQY MBaAFArNTiwEw57bJCpnBRuLWBJjQ255MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3MxT0xBVERudHNrS21jRkc0dFlFbU5EYm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8yNmQ2ZjYtMTFlZS00YTg2LWJmYjkt ZGRjMjc2YWNiOTEwLzEvQ1pGcm1TN09LODJGSERPNzRZTGZnTy1pSWxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi8yNmQ2ZjYtMTFlZS00YTg2LWJmYjktZGRjMjc2YWNiOTEw LzEvQ3MxT0xBVERudHNrS21jRkc0dFlFbU5EYm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBucSGMA0E AgACMAcDBQMqCaXAMA0GCSqGSIb3DQEBCwUAA4IBAQAsAWml4x1MLbQ5H8zmw6vw a9UtPEtAcY9v8t4st5Ob+Ktw4UVqycZ3B84tBZ3jmOrKJ8ox6KYMVYEZg1VEwY3x /J/CQLB8z+kaTMU6TUJ/q1Td6DvpLhBLcT5ssFdLqAFQSfsgv3W9RuwcUq9zQQgg TgpZIZo/FUkpgnnmT0MibD+DgUkJukF7A8O0CWOU+AICvg5P7ISltrVVU+B3MuDW 19s1SuVDutwJxXxiMwNTP8krMXBGIY1SJb3nDEGhgHiemlvsxWhSIo/afWKxdgQb xzPFA+STfzz+PZYBYxPBkJi9fF2hBdaHMFGwbDv6yw/pUXokVByxLOiZYpjbIzD+ -----END CERTIFICATE-----Generated at Mon Feb 9 18:37:54 2026 by rpki-client