This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CWDXTkMR5AtBnS90cOYuzc34Z-I.roa File: CWDXTkMR5AtBnS90cOYuzc34Z-I.roa (raw, json) Hash identifier: dN1fYKhJNfP37bwVbr88rsY//Az3V8r3GOiQ5C9qrR4= Subject key identifier: 09:60:D7:4E:43:11:E4:0B:41:9D:2F:74:70:E6:2E:CD:CD:F8:67:E2 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E44B451886D5BCF995CE3A603624D Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CWDXTkMR5AtBnS90cOYuzc34Z-I.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216438 IP address blocks: 185.146.193.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:44:b4:51:88:6d:5b:cf:99:5c:e3:a6:03:62:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0960d74e4311e40b419d2f7470e62ecdcdf867e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:08:19:17:2a:5f:71:43:f0:4b:6a:49:b9:7a: 7c:7d:ed:9f:4d:dd:54:b4:76:dd:c1:9f:d6:bf:f9: 47:47:db:ad:71:3d:27:eb:ae:5b:c3:c4:c9:75:80: f7:21:f1:c0:7d:b9:f2:38:47:16:3b:42:50:02:e2: b3:ec:b1:59:97:d1:b7:28:2e:a6:41:01:33:5c:7f: 7d:17:be:28:a8:41:5a:77:05:ef:42:df:ce:e9:8d: 42:ff:61:a8:5c:87:72:47:91:ca:fe:b6:eb:c8:c2: bb:be:1a:5b:d4:38:1e:e0:d1:99:34:fc:14:a5:38: ec:db:fd:52:53:39:3b:45:33:27:81:ab:36:48:b3: 5c:18:fe:c2:39:7f:02:4f:c1:cf:39:46:23:2b:75: 1a:df:8f:7a:1a:a3:e5:50:dd:2e:f3:62:79:95:3c: 7e:eb:67:fa:01:cd:83:05:81:ca:6e:23:7d:82:e1: 2f:04:82:08:9a:bd:d5:9e:80:44:6e:3d:a6:a2:3b: 72:33:d7:95:91:ed:26:92:16:13:38:0c:e8:82:d1: e8:6c:8d:e5:26:a9:4a:8d:c6:da:8d:b0:9b:fe:38: 03:b1:40:c0:d3:b8:86:30:a4:6c:6d:b4:57:27:3d: 53:f6:31:d8:fb:54:8a:c6:ab:2b:96:05:df:2d:a2: fe:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:60:D7:4E:43:11:E4:0B:41:9D:2F:74:70:E6:2E:CD:CD:F8:67:E2 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/CWDXTkMR5AtBnS90cOYuzc34Z-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.146.193.0/24 Signature Algorithm: sha256WithRSAEncryption 76:08:70:f8:ab:a3:6f:19:cf:14:62:1b:58:57:b2:53:41:8e: ba:4b:70:06:58:56:93:cf:b3:7a:40:81:d7:77:4f:8c:38:93: e5:38:0d:26:c0:d8:2f:88:ab:c8:28:9d:5a:ac:fb:38:50:b2: be:0c:27:fd:f5:cf:eb:87:0c:15:2d:4b:e1:db:a7:6b:94:17: 6f:9e:40:d6:a3:76:76:64:bf:5b:f4:a5:6e:42:83:55:d8:d9: 31:ce:a6:25:c7:d7:cb:f3:48:85:27:52:3d:d0:b2:44:cb:b4: 75:ed:62:eb:cb:69:8c:73:b7:1b:06:51:3d:65:df:1d:40:16: d0:c9:0e:65:7a:b2:f8:ea:0d:d6:51:7c:cd:c9:d1:be:fe:2f: b0:50:89:5b:47:ff:1a:29:57:c2:12:4c:2b:3f:61:3c:f0:68: 42:62:ae:1a:cd:9b:5a:ca:c0:0b:69:2b:ff:75:a7:df:5b:34: d3:92:12:6f:20:ab:17:21:67:fd:57:a1:e7:e4:70:fa:df:ce: d1:9f:d3:e4:44:a5:51:53:e0:42:44:54:94:34:5a:3c:07:1d: f6:5a:01:00:b0:41:d5:10:ef:34:bb:a7:77:f8:4d:3b:68:59: d3:a9:07:46:24:fd:0c:27:c8:80:dc:df:c1:d1:5c:5b:dd:ec: f3:45:05:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkS0UYhtW8+ZXOOmA2JNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTYwZDc0ZTQzMTFlNDBiNDE5ZDJmNzQ3MGU2MmVjZGNkZjg2N2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wgZFypfcUPwS2pJuXp8fe2fTd1U tHbdwZ/Wv/lHR9utcT0n665bw8TJdYD3IfHAfbnyOEcWO0JQAuKz7LFZl9G3KC6m QQEzXH99F74oqEFadwXvQt/O6Y1C/2GoXIdyR5HK/rbryMK7vhpb1Dge4NGZNPwU pTjs2/1SUzk7RTMngas2SLNcGP7COX8CT8HPOUYjK3Ua3496GqPlUN0u82J5lTx+ 62f6Ac2DBYHKbiN9guEvBIIImr3VnoBEbj2mojtyM9eVke0mkhYTOAzogtHobI3l JqlKjcbajbCb/jgDsUDA07iGMKRsbbRXJz1T9jHY+1SKxqsrlgXfLaL+gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAlg105DEeQLQZ0vdHDmLs3N+GfiMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvQ1dEWFRrTVI1QXRCblM5MGNPWXV6YzM0Wi1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZLBMA0G CSqGSIb3DQEBCwUAA4IBAQB2CHD4q6NvGc8UYhtYV7JTQY66S3AGWFaTz7N6QIHX d0+MOJPlOA0mwNgviKvIKJ1arPs4ULK+DCf99c/rhwwVLUvh26drlBdvnkDWo3Z2 ZL9b9KVuQoNV2NkxzqYlx9fL80iFJ1I90LJEy7R17WLry2mMc7cbBlE9Zd8dQBbQ yQ5lerL46g3WUXzNydG+/i+wUIlbR/8aKVfCEkwrP2E88GhCYq4azZtaysALaSv/ daffWzTTkhJvIKsXIWf9V6Hn5HD6387Rn9PkRKVRU+BCRFSUNFo8Bx32WgEAsEHV EO80u6d3+E07aFnTqQdGJP0MJ8iA3N/B0Vxb3ezzRQVL -----END CERTIFICATE-----Generated at Mon Jan 19 20:21:09 2026 by rpki-client