This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/CcIzXROi2l84KbeZyJPUJ8bkToM.roa File: CcIzXROi2l84KbeZyJPUJ8bkToM.roa (raw, json) Hash identifier: 70O+lX+cJu+NCXvhGoF16ylW0JcDpTG1gwUSBq7n7MY= Subject key identifier: 09:C2:33:5D:13:A2:DA:5F:38:29:B7:99:C8:93:D4:27:C6:E4:4E:83 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6FEE1D3D4B007A3E977A9090C43EF Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/CcIzXROi2l84KbeZyJPUJ8bkToM.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209742 IP address blocks: 193.151.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fe:e1:d3:d4:b0:07:a3:e9:77:a9:09:0c:43:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09c2335d13a2da5f3829b799c893d427c6e44e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0f:96:6e:7b:6f:36:ea:c5:46:7f:43:9a:43: 29:d8:d3:97:86:6e:f4:85:3f:7c:ae:8f:af:d1:a7: 4a:f5:80:7e:9e:34:18:4f:98:ef:f7:2f:f8:33:2d: ce:44:ee:18:72:0b:78:a1:04:99:98:5b:af:57:91: cc:a0:d8:73:47:83:e6:bf:d6:25:a2:4b:cc:38:a5: 82:27:9f:55:ac:ea:7b:03:99:a9:fb:06:a3:24:52: ee:7c:8c:ff:4d:bd:cc:1e:2a:dd:ac:70:46:8f:10: 09:d6:44:35:b5:a5:96:7e:f7:da:a7:0c:23:87:9e: 1c:0f:7d:2e:ad:f1:bd:fb:f4:a5:60:78:86:27:3b: e7:de:5a:06:b6:2a:56:71:a8:28:3a:e5:6a:4e:06: fc:0a:85:85:bf:20:e9:bb:e7:bc:a3:3f:21:28:43: 47:31:4e:c8:22:e4:c0:d8:82:1c:b9:ca:5f:17:b8: 3d:91:8a:32:0d:51:b6:9d:f0:b8:e6:f4:dd:79:34: 50:95:7d:d2:96:08:64:aa:69:68:73:d7:64:fd:a8: 3e:a4:d5:d9:9d:8f:e4:10:e8:0d:2f:2a:10:87:50: 8d:af:11:07:c1:3c:13:3d:a2:ab:c3:9c:46:7b:98: 5e:c5:5d:31:23:77:59:cc:ad:08:15:b3:92:ab:58: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C2:33:5D:13:A2:DA:5F:38:29:B7:99:C8:93:D4:27:C6:E4:4E:83 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/CcIzXROi2l84KbeZyJPUJ8bkToM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.151.166.0/24 Signature Algorithm: sha256WithRSAEncryption 41:68:7f:80:9b:6e:38:e6:45:2b:07:30:3f:60:55:de:ea:df: 5d:66:d3:7e:b0:ec:b9:ad:96:18:cc:e4:6d:c1:fe:6c:aa:2a: a6:e8:b6:9b:3f:9b:1f:ec:b4:1a:bd:3a:ca:52:be:ae:5b:f8: 10:91:6b:95:d2:ba:1d:19:18:a2:99:20:95:59:ba:a5:c9:fe: 69:e2:67:a3:96:a4:5d:ce:82:b0:75:e1:c6:4a:3a:b2:3a:80: b0:c3:8f:2f:7d:90:2c:bd:97:9c:69:40:da:46:25:74:de:d6: 78:e3:99:0a:d1:68:dd:7e:94:59:68:b0:62:ce:b9:5c:2f:7d: 57:39:73:2f:ad:b8:40:cc:a7:5d:0e:bc:99:4b:3f:c2:1a:c8: c9:7c:1a:84:e5:59:2a:0f:d4:44:64:1d:27:01:f4:87:bd:f6: 36:24:5d:29:b7:cc:1b:bd:64:91:6d:ff:81:b1:8e:ac:de:01: d4:49:1d:e0:41:50:6d:94:28:46:92:e6:c7:38:e4:ca:ff:13: 69:b3:6e:c3:bf:23:bb:ce:23:54:63:62:0f:96:cc:85:38:ae: 66:b0:ab:31:45:95:bf:ef:53:38:b6:43:cb:7b:c1:ae:25:17: e6:88:ac:aa:ef:c1:38:d4:df:69:9a:56:86:95:bb:a5:12:d8: fd:7a:8c:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xv7h09SwB6Ppd6kJDEPvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWMyMzM1ZDEzYTJkYTVmMzgyOWI3OTljODkzZDQyN2M2ZTQ0ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg+WbntvNurFRn9DmkMp2NOXhm70 hT98ro+v0adK9YB+njQYT5jv9y/4My3ORO4Ycgt4oQSZmFuvV5HMoNhzR4Pmv9Yl okvMOKWCJ59VrOp7A5mp+wajJFLufIz/Tb3MHirdrHBGjxAJ1kQ1taWWfvfapwwj h54cD30urfG9+/SlYHiGJzvn3loGtipWcagoOuVqTgb8CoWFvyDpu+e8oz8hKENH MU7IIuTA2IIcucpfF7g9kYoyDVG2nfC45vTdeTRQlX3Slghkqmloc9dk/ag+pNXZ nY/kEOgNLyoQh1CNrxEHwTwTPaKrw5xGe5hexV0xI3dZzK0IFbOSq1jIYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAnCM10TotpfOCm3mciT1CfG5E6DMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvQ2NJelhST2kybDg0S2JlWnlKUFVKOGJrVG9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZemMA0G CSqGSIb3DQEBCwUAA4IBAQBBaH+Am2445kUrBzA/YFXe6t9dZtN+sOy5rZYYzORt wf5sqiqm6LabP5sf7LQavTrKUr6uW/gQkWuV0rodGRiimSCVWbqlyf5p4mejlqRd zoKwdeHGSjqyOoCww48vfZAsvZecaUDaRiV03tZ445kK0WjdfpRZaLBizrlcL31X OXMvrbhAzKddDryZSz/CGsjJfBqE5VkqD9REZB0nAfSHvfY2JF0pt8wbvWSRbf+B sY6s3gHUSR3gQVBtlChGkubHOOTK/xNps27DvyO7ziNUY2IPlsyFOK5msKsxRZW/ 71M4tkPLe8GuJRfmiKyq78E41N9pmlaGlbulEtj9eow4 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:40 2026 by rpki-client