This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/C2fyG3tZV5Q9pGBX2FxcYZQqHj4.roa File: C2fyG3tZV5Q9pGBX2FxcYZQqHj4.roa (raw, json) Hash identifier: ZhqyZmNA9iQcNhoCQ6x8kkN7BM3V+N2/GZSaK5ZPujo= Subject key identifier: 0B:67:F2:1B:7B:59:57:94:3D:A4:60:57:D8:5C:5C:61:94:2A:1E:3E Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E3D91B653F49C0BEE3DB055E6B232 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/C2fyG3tZV5Q9pGBX2FxcYZQqHj4.roa Signing time: Thu 01 Jan 2026 12:17:55 +0000 ROA not before: Thu 01 Jan 2026 12:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210349 IP address blocks: 185.238.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3d:91:b6:53:f4:9c:0b:ee:3d:b0:55:e6:b2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b67f21b7b5957943da46057d85c5c61942a1e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:5b:9d:05:a3:89:21:b6:04:99:fa:3c:60: a0:57:dc:d0:49:a2:b5:80:ee:b9:68:78:d9:5b:cc: ef:a9:e1:62:54:f3:55:79:cb:f0:bf:69:ed:82:23: f3:84:16:1a:57:f4:37:64:30:35:8f:5f:be:54:1b: 53:ca:11:e0:87:a7:69:78:f5:45:27:89:07:92:b8: 95:53:bf:9a:9c:ff:cd:f4:0b:00:06:26:4a:77:6d: 29:11:a4:c3:8e:dd:b7:86:bd:c7:5e:38:3f:ac:24: 0e:46:95:5b:bc:a6:93:19:f9:1c:85:cc:7c:70:73: 0c:94:2b:66:4d:67:20:63:61:f9:2d:9c:ef:90:06: c8:c8:18:51:d3:0e:17:d2:fe:c0:58:8c:99:66:5e: 46:95:6c:d6:9d:6d:70:a4:10:2a:3e:f4:8c:fb:ff: 61:e9:af:7e:de:81:76:5d:8e:01:ac:08:31:47:4c: f2:8b:ec:1b:92:06:a6:2b:27:67:3a:55:17:ab:69: 93:bd:af:b1:83:6a:fc:2a:c3:cc:92:e3:e7:a1:33: 83:24:82:7d:d3:e7:8b:e0:c5:6c:a6:4e:8a:5e:54: d4:da:db:97:26:26:ed:71:d0:0d:e2:2a:32:62:11: ae:fc:d1:ec:be:cb:42:67:47:b3:25:8c:8e:f9:36: 23:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:67:F2:1B:7B:59:57:94:3D:A4:60:57:D8:5C:5C:61:94:2A:1E:3E X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/C2fyG3tZV5Q9pGBX2FxcYZQqHj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.242.0/24 Signature Algorithm: sha256WithRSAEncryption 15:c7:71:10:92:ee:62:31:24:c4:55:8d:e5:5d:0f:2f:6e:f0: b7:83:81:e5:15:cf:29:ca:d5:ab:f8:48:72:97:2b:f0:8d:f4: 97:0d:35:27:c0:5e:ae:ff:cc:0f:80:77:0a:2b:4f:f9:d4:f8: b0:7f:f3:a7:98:52:dc:b8:2d:fd:c5:0c:24:97:3d:97:92:e6: 1c:6e:a0:33:52:e1:d1:08:2f:b3:46:00:71:16:b8:73:98:ca: 10:3a:9e:d9:b0:e8:ef:0a:e4:b5:e2:93:aa:e5:e1:c6:f8:09: 79:bb:66:91:ef:91:9a:44:77:53:c0:8d:57:5e:e9:9b:a2:0f: 22:70:1f:3b:bf:ab:6b:05:06:c5:1d:20:26:90:b3:75:ce:cd: c3:ce:b5:77:33:f7:1f:64:c3:f1:79:8c:85:5e:62:bf:c2:12: 82:75:f4:03:6e:f1:0e:cd:d5:94:39:2d:01:54:b5:a3:ec:98: aa:f6:98:16:3a:f2:76:c5:ea:a1:c1:4e:4c:d0:10:86:5c:4e: 79:26:35:90:11:53:d2:9f:7e:77:30:40:ee:d6:63:2f:53:24: 2d:e4:78:ca:69:a6:b9:50:60:24:43:96:e6:45:28:26:26:33: da:28:11:e2:90:5b:40:4b:d7:48:36:72:19:1f:34:94:c3:09: af:97:33:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fj2RtlP0nAvuPbBV5rIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjY3ZjIxYjdiNTk1Nzk0M2RhNDYwNTdkODVjNWM2MTk0MmExZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcRbnQWjiSG2BJn6PGCgV9zQSaK1 gO65aHjZW8zvqeFiVPNVecvwv2ntgiPzhBYaV/Q3ZDA1j1++VBtTyhHgh6dpePVF J4kHkriVU7+anP/N9AsABiZKd20pEaTDjt23hr3HXjg/rCQORpVbvKaTGfkchcx8 cHMMlCtmTWcgY2H5LZzvkAbIyBhR0w4X0v7AWIyZZl5GlWzWnW1wpBAqPvSM+/9h 6a9+3oF2XY4BrAgxR0zyi+wbkgamKydnOlUXq2mTva+xg2r8KsPMkuPnoTODJIJ9 0+eL4MVspk6KXlTU2tuXJibtcdAN4ioyYhGu/NHsvstCZ0ezJYyO+TYj1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAtn8ht7WVeUPaRgV9hcXGGUKh4+MB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvQzJmeUczdFpWNVE5cEdCWDJGeGNZWlFxSGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue7yMA0G CSqGSIb3DQEBCwUAA4IBAQAVx3EQku5iMSTEVY3lXQ8vbvC3g4HlFc8pytWr+Ehy lyvwjfSXDTUnwF6u/8wPgHcKK0/51Piwf/OnmFLcuC39xQwklz2XkuYcbqAzUuHR CC+zRgBxFrhzmMoQOp7ZsOjvCuS14pOq5eHG+Al5u2aR75GaRHdTwI1XXumbog8i cB87v6trBQbFHSAmkLN1zs3DzrV3M/cfZMPxeYyFXmK/whKCdfQDbvEOzdWUOS0B VLWj7Jiq9pgWOvJ2xeqhwU5M0BCGXE55JjWQEVPSn353MEDu1mMvUyQt5HjKaaa5 UGAkQ5bmRSgmJjPaKBHikFtAS9dINnIZHzSUwwmvlzM+ -----END CERTIFICATE-----Generated at Mon Jan 19 20:28:21 2026 by rpki-client