This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/COXiBfifc_qmKtRo5iliPytbk6Y.roa File: COXiBfifc_qmKtRo5iliPytbk6Y.roa (raw, json) Hash identifier: Yk5Ow5nOsEoU8dsAMXQclepMDy3OLtvSY8ZeR+T0oyI= Subject key identifier: 08:E5:E2:05:F8:9F:73:FA:A6:2A:D4:68:E6:29:62:3F:2B:5B:93:A6 Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Certificate serial: 019B79ED552164CDC43E5F382767B0B48326 Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/COXiBfifc_qmKtRo5iliPytbk6Y.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48695 IP address blocks: 92.43.168.0/23 maxlen: 23 92.43.169.0/24 maxlen: 24 92.43.170.0/23 maxlen: 23 92.43.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:55:21:64:cd:c4:3e:5f:38:27:67:b0:b4:83:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08e5e205f89f73faa62ad468e629623f2b5b93a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:ed:d9:38:d6:d9:f0:ab:fb:61:8c:d2:87: 5a:1a:73:8e:c6:8b:3d:d2:d7:25:00:0b:06:c5:34: a8:cf:f0:a5:f6:5c:8c:9e:47:23:21:49:a7:5a:89: a1:29:7d:60:5a:54:10:66:44:97:52:4c:2f:d9:39: 5a:30:14:51:64:35:0d:a0:3e:d4:cc:17:7b:cb:6e: b5:fb:7a:b8:96:5f:9e:93:2a:12:87:df:6a:6c:07: 80:2d:e0:79:b7:8e:e3:1c:7e:68:38:96:ee:7d:1f: 72:1a:99:8b:91:ca:c6:10:b0:95:e3:4e:38:31:14: 1f:30:00:bc:ec:d4:c7:0d:a4:30:61:c9:55:1b:70: b6:dc:d1:78:72:ba:db:f3:af:c5:68:c8:c0:20:af: 2e:31:4a:c6:b6:bd:3f:d3:7a:0f:18:60:f6:5e:f9: dc:18:d2:9b:b5:1b:14:8f:98:cc:da:81:6e:7b:95: ef:e2:e3:44:42:57:58:60:e3:4c:83:d3:dd:55:3c: 4d:1b:a4:8a:a4:af:5e:a0:74:e7:50:d3:8a:58:29: 36:31:7b:dd:89:64:43:9f:46:5f:62:27:80:4e:06: e7:eb:04:d0:5a:b3:82:4b:d0:7b:c2:33:93:57:a5: 52:d2:b8:66:63:aa:a9:c9:12:4e:e4:46:6b:4b:4a: 28:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E5:E2:05:F8:9F:73:FA:A6:2A:D4:68:E6:29:62:3F:2B:5B:93:A6 X509v3 Authority Key Identifier: keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/COXiBfifc_qmKtRo5iliPytbk6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.168.0/22 Signature Algorithm: sha256WithRSAEncryption 08:2c:d1:08:89:f0:d8:cb:59:58:08:9d:78:ea:7c:30:23:a8: 29:ef:8a:47:43:13:9d:c9:fe:2b:d6:96:c6:35:76:20:5a:d3: f9:57:eb:59:a6:45:bf:c3:27:a6:bb:f9:0d:66:c7:c2:4f:6b: 76:b2:ff:e3:dd:6d:e8:bb:ab:c3:90:c4:bd:22:d4:a3:57:86: d4:52:0c:71:33:c3:26:71:b3:7d:d1:37:bd:80:fd:43:47:1e: 5e:29:0a:a9:29:45:c9:27:6b:1b:62:d7:fb:87:7a:27:cf:65: 23:b1:57:7d:89:d8:1e:d8:8e:6f:53:a1:07:b8:a4:ff:4c:b7: c3:82:42:05:8a:f0:60:68:9d:30:72:20:39:41:63:e3:08:cb: 3e:21:08:f8:d6:e3:f5:35:6b:98:74:53:71:62:d1:15:da:1c: de:5b:d7:95:2f:c1:06:aa:3c:85:2d:a0:bf:1a:35:17:1c:dc: 60:9d:52:e6:ac:c0:b9:9f:2b:66:57:b4:cd:cf:89:0d:fa:21: d7:42:98:b6:d7:87:a1:72:bc:bf:e3:85:bb:dc:ed:8a:9d:6b: 53:52:60:f7:93:09:f6:32:8b:43:3f:ef:5e:46:29:f7:ab:b0: 9d:57:b3:99:2e:0b:16:6b:7d:c3:90:12:66:66:0e:f8:0d:91: 30:c6:ee:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VUhZM3EPl84J2ewtIMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy NmMzNTYwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGU1ZTIwNWY4OWY3M2ZhYTYyYWQ0NjhlNjI5NjIzZjJiNWI5M2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW/t2TjW2fCr+2GM0odaGnOOxos9 0tclAAsGxTSoz/Cl9lyMnkcjIUmnWomhKX1gWlQQZkSXUkwv2TlaMBRRZDUNoD7U zBd7y261+3q4ll+ekyoSh99qbAeALeB5t47jHH5oOJbufR9yGpmLkcrGELCV4044 MRQfMAC87NTHDaQwYclVG3C23NF4crrb86/FaMjAIK8uMUrGtr0/03oPGGD2Xvnc GNKbtRsUj5jM2oFue5Xv4uNEQldYYONMg9PdVTxNG6SKpK9eoHTnUNOKWCk2MXvd iWRDn0ZfYieATgbn6wTQWrOCS9B7wjOTV6VS0rhmY6qpyRJO5EZrS0oo4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjl4gX4n3P6pirUaOYpYj8rW5OmMB8GA1UdIwQY MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt MzdiMjFiYWIzYjAwLzEvQ09YaUJmaWZjX3FtS3RSbzVpbGlQeXRiazZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXCuoMA0G CSqGSIb3DQEBCwUAA4IBAQAILNEIifDYy1lYCJ146nwwI6gp74pHQxOdyf4r1pbG NXYgWtP5V+tZpkW/wyemu/kNZsfCT2t2sv/j3W3ou6vDkMS9ItSjV4bUUgxxM8Mm cbN90Te9gP1DRx5eKQqpKUXJJ2sbYtf7h3onz2UjsVd9idge2I5vU6EHuKT/TLfD gkIFivBgaJ0wciA5QWPjCMs+IQj41uP1NWuYdFNxYtEV2hzeW9eVL8EGqjyFLaC/ GjUXHNxgnVLmrMC5nytmV7TNz4kN+iHXQpi214ehcry/44W73O2KnWtTUmD3kwn2 MotDP+9eRin3q7CdV7OZLgsWa33DkBJmZg74DZEwxu6D -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:02 2026 by rpki-client