This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/CJmYQlnt8oTwHcc-XYCXlVJRl0Y.roa File: CJmYQlnt8oTwHcc-XYCXlVJRl0Y.roa (raw, json) Hash identifier: Wv9na50Hk59IBbuSGPYFZW6tYs7AHRdExWlfEtmgec0= Subject key identifier: 08:99:98:42:59:ED:F2:84:F0:1D:C7:3E:5D:80:97:95:52:51:97:46 Certificate issuer: /CN=6992125e3d53cc481336105483fcff701fda1bb3 Certificate serial: 019B7D5AB38CD65848A0F426C768D28D8E9A Authority key identifier: 69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/CJmYQlnt8oTwHcc-XYCXlVJRl0Y.roa Signing time: Fri 02 Jan 2026 06:17:34 +0000 ROA not before: Fri 02 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209761 IP address blocks: 213.226.88.0/22 maxlen: 22 213.226.88.0/23 maxlen: 23 213.226.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.mft rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:b3:8c:d6:58:48:a0:f4:26:c7:68:d2:8d:8e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6992125e3d53cc481336105483fcff701fda1bb3 Validity Not Before: Jan 2 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0899984259edf284f01dc73e5d80979552519746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:6f:08:ed:ec:7f:51:fa:b7:2b:d6:81:c5: 8a:7a:88:0c:16:ee:cc:5e:5d:30:05:1a:06:07:01: 94:77:3f:33:17:4e:98:2f:d5:80:60:ef:cd:5e:81: ae:c8:12:08:dd:7f:8f:82:34:2a:3b:83:d2:3c:3d: 4a:63:47:39:1e:87:d7:3d:84:94:f4:81:bf:89:71: cb:48:03:33:58:8a:e6:f5:1b:07:6e:0c:68:02:cd: 0a:f4:48:35:e5:8a:cb:e6:20:70:94:c8:d0:d2:46: c1:10:c2:d1:0c:6b:41:5a:d1:d8:73:66:a0:ba:b9: 21:b5:13:a0:13:20:74:2a:d9:ce:cd:1f:86:f9:09: ba:c0:b9:c9:42:69:54:75:56:60:20:5b:1e:42:ae: 81:99:89:b7:88:5f:d8:c4:ee:58:7d:88:4d:0e:dc: 85:8d:6b:d7:1c:8d:24:49:ba:a8:78:75:e8:c8:0e: 3c:87:76:b7:d9:3a:0d:1f:2b:5b:61:d9:26:46:ee: 1a:72:d0:6c:ae:cf:66:00:08:93:16:cb:92:ba:58: 36:f7:b6:f2:aa:59:c9:3c:13:68:0f:93:c0:24:c9: 0b:12:2b:02:ac:ff:ff:9d:48:0c:74:0e:f9:6f:cf: a5:72:48:26:4d:08:cd:97:87:bf:a4:2d:b4:74:38: 8d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:99:98:42:59:ED:F2:84:F0:1D:C7:3E:5D:80:97:95:52:51:97:46 X509v3 Authority Key Identifier: keyid:69:92:12:5E:3D:53:CC:48:13:36:10:54:83:FC:FF:70:1F:DA:1B:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZISXj1TzEgTNhBUg_z_cB_aG7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/CJmYQlnt8oTwHcc-XYCXlVJRl0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4ac957-4183-49f3-bfbe-837c5e12bd04/1/aZISXj1TzEgTNhBUg_z_cB_aG7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.226.88.0/22 Signature Algorithm: sha256WithRSAEncryption 66:7a:37:b3:2e:7b:b6:49:ef:ef:2c:10:b7:58:19:6f:37:96: cd:8b:23:ea:2a:90:00:d8:7a:b9:7f:6b:3e:24:7a:83:16:a1: d5:80:af:f9:c2:8b:35:b2:5c:cd:bf:74:03:72:bc:42:9b:ef: c1:ef:b3:24:f2:1b:74:4e:2e:cb:10:3c:fa:f0:52:2a:96:07: d0:a3:83:f6:be:bc:a9:47:46:ec:c8:bb:83:94:8e:30:48:37: e6:a2:52:8f:8c:9e:dd:03:db:48:54:3a:a2:05:a2:ba:ea:50: cf:92:ca:61:08:38:94:5c:8d:4e:5b:ad:82:1e:04:bf:ad:87: 95:12:2a:4c:79:06:6b:97:aa:76:0c:98:f1:bc:6a:54:b3:fa: ec:6e:59:8f:7e:9b:28:37:29:0b:72:ce:1c:fe:88:96:4f:3b: 44:e6:80:e4:c1:c7:62:32:05:60:db:fc:1c:90:fd:45:94:1e: b3:05:81:aa:51:bc:20:6d:0e:c8:bc:60:96:98:6b:a1:82:e0: 09:53:41:ff:e0:6a:42:27:31:3a:ea:4e:b8:39:7b:83:06:8f: 12:a6:d2:6f:13:f3:41:67:fe:91:e6:d5:d2:bc:88:16:e8:d7: e4:80:59:8c:6a:83:90:94:ba:5b:7f:a6:00:29:ce:32:18:6e: 6e:26:64:be -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WrOM1lhIoPQmx2jSjY6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTIxMjVlM2Q1M2NjNDgxMzM2MTA1NDgzZmNmZjcwMWZk YTFiYjMwHhcNMjYwMTAyMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODk5OTg0MjU5ZWRmMjg0ZjAxZGM3M2U1ZDgwOTc5NTUyNTE5NzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJpvCO3sf1H6tyvWgcWKeogMFu7M Xl0wBRoGBwGUdz8zF06YL9WAYO/NXoGuyBII3X+PgjQqO4PSPD1KY0c5HofXPYSU 9IG/iXHLSAMzWIrm9RsHbgxoAs0K9Eg15YrL5iBwlMjQ0kbBEMLRDGtBWtHYc2ag urkhtROgEyB0KtnOzR+G+Qm6wLnJQmlUdVZgIFseQq6BmYm3iF/YxO5YfYhNDtyF jWvXHI0kSbqoeHXoyA48h3a32ToNHytbYdkmRu4actBsrs9mAAiTFsuSulg297by qlnJPBNoD5PAJMkLEisCrP//nUgMdA75b8+lckgmTQjNl4e/pC20dDiNMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiZmEJZ7fKE8B3HPl2Al5VSUZdGMB8GA1UdIwQY MBaAFGmSEl49U8xIEzYQVIP8/3Af2huzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUt ODM3YzVlMTJiZDA0LzEvQ0ptWVFsbnQ4b1R3SGNjLVhZQ1hsVkpSbDBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy80YWM5NTctNDE4My00OWYzLWJmYmUtODM3YzVlMTJiZDA0 LzEvYVpJU1hqMVR6RWdUTmhCVWdfel9jQl9hRzdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1eJYMA0G CSqGSIb3DQEBCwUAA4IBAQBmejezLnu2Se/vLBC3WBlvN5bNiyPqKpAA2Hq5f2s+ JHqDFqHVgK/5wos1slzNv3QDcrxCm+/B77Mk8ht0Ti7LEDz68FIqlgfQo4P2vryp R0bsyLuDlI4wSDfmolKPjJ7dA9tIVDqiBaK66lDPksphCDiUXI1OW62CHgS/rYeV EipMeQZrl6p2DJjxvGpUs/rsblmPfpsoNykLcs4c/oiWTztE5oDkwcdiMgVg2/wc kP1FlB6zBYGqUbwgbQ7IvGCWmGuhguAJU0H/4GpCJzE66k64OXuDBo8SptJvE/NB Z/6R5tXSvIgW6NfkgFmMaoOQlLpbf6YAKc4yGG5uJmS+ -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:23 2026 by rpki-client