This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/CDYmmFn4kNHHl9vwGaT6rCDPI3Y.roa File: CDYmmFn4kNHHl9vwGaT6rCDPI3Y.roa (raw, json) Hash identifier: nNkOheFA1Bvc9D0wPsf9Fhra1hW/4NT0jdBtU1SIYdk= Subject key identifier: 08:36:26:98:59:F8:90:D1:C7:97:DB:F0:19:A4:FA:AC:20:CF:23:76 Certificate issuer: /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0 Certificate serial: 019B7758A2434A35B746926861708869214F Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/CDYmmFn4kNHHl9vwGaT6rCDPI3Y.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200777 IP address blocks: 194.55.16.0/20 maxlen: 20 194.55.25.0/24 maxlen: 24 194.55.26.0/24 maxlen: 24 194.55.29.0/24 maxlen: 24 194.55.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.mft rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a2:43:4a:35:b7:46:92:68:61:70:88:69:21:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0836269859f890d1c797dbf019a4faac20cf2376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cc:f3:5a:04:11:73:6d:48:24:74:a3:4a:c5: 2c:eb:d3:10:ab:90:45:66:ec:44:c1:0d:01:d1:b6: cc:8a:ca:50:97:82:e1:18:f4:64:ed:38:cd:e6:92: 08:7e:53:ce:8a:af:7d:03:49:de:2b:28:5a:0f:ea: 75:21:8a:89:18:0a:0b:e1:a7:b5:2d:0d:27:a2:05: 74:b8:8f:55:d1:b8:aa:d6:2f:df:e0:32:e5:9a:e1: be:74:b1:0b:70:a8:02:02:3d:71:2d:52:23:3f:20: 03:f3:9d:86:6a:b6:26:06:01:ce:58:05:ab:3f:a4: 11:f9:ed:2a:0e:78:b3:95:44:ce:0e:9c:8b:11:56: 9a:84:14:86:56:d1:6a:15:ab:f3:f0:38:ef:b0:00: a8:db:b5:3c:b5:20:a6:ae:71:a4:dc:09:01:52:84: d4:08:a6:d6:01:42:5f:8a:f5:e6:6e:81:27:9e:ed: 39:af:f5:bd:2c:59:49:22:83:4f:d7:ef:4f:dd:81: 11:10:69:f1:eb:e1:5c:42:4f:b3:7a:d5:ac:ca:be: 4f:4f:7c:a3:47:07:18:bd:fe:bd:92:61:b9:80:27: fa:83:05:58:aa:bf:bf:1f:50:1f:09:ce:34:d7:fd: e4:a0:1f:e2:f3:18:90:2a:f7:c6:83:f6:75:32:3f: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:36:26:98:59:F8:90:D1:C7:97:DB:F0:19:A4:FA:AC:20:CF:23:76 X509v3 Authority Key Identifier: keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/CDYmmFn4kNHHl9vwGaT6rCDPI3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.55.16.0/20 Signature Algorithm: sha256WithRSAEncryption 90:43:37:c1:1e:45:4e:14:41:3c:d7:0c:72:6f:a7:ce:c0:20: f5:bd:87:e3:02:3e:85:1b:ba:f0:92:d3:0d:6a:2a:96:2f:c9: 14:f2:d7:44:9a:7a:e0:89:f8:8f:d6:57:9e:55:64:36:0c:c1: 98:ca:98:a1:f1:2d:32:9c:da:ff:8a:28:ce:5f:79:5c:ce:ea: 56:5d:e8:a2:9c:cb:e1:04:33:f1:6b:1a:88:87:00:89:2d:3d: 6e:36:db:c1:29:df:64:9d:01:1f:aa:e9:ec:fd:8c:f0:78:bc: ad:bb:9a:a8:05:e9:7a:0b:10:12:9c:69:2e:9c:d9:d2:42:c2: b3:17:2e:15:3f:8a:14:69:d8:7c:f5:ca:99:6f:a8:cc:7f:09: 1b:25:55:c0:ab:05:47:84:72:9b:c3:8b:bd:f5:e3:8f:b8:65: f2:eb:c5:aa:27:4e:b4:c7:bb:92:1d:e5:f4:bc:93:46:53:20: cf:fc:c1:ac:88:fb:fd:29:a1:5a:1a:ab:c3:0a:e8:8d:f7:b5: f9:8a:6a:9a:18:65:1a:9a:ff:e1:20:a1:bc:f6:78:84:70:f3: f4:3a:a5:0d:44:13:04:5b:8a:01:e9:22:1a:4c:a5:89:d9:45: 24:3b:b0:d5:e1:f4:4c:4e:d3:3d:05:1b:c0:6d:68:1e:5d:c8: 1c:49:1d:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WKJDSjW3RpJoYXCIaSFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDY0YzhjMTY3ZGQyYzg3YWEzZDg4YWNiZmFlNGMyMzNm Zjc3YjAwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODM2MjY5ODU5Zjg5MGQxYzc5N2RiZjAxOWE0ZmFhYzIwY2YyMzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMzzWgQRc21IJHSjSsUs69MQq5BF ZuxEwQ0B0bbMispQl4LhGPRk7TjN5pIIflPOiq99A0neKyhaD+p1IYqJGAoL4ae1 LQ0nogV0uI9V0biq1i/f4DLlmuG+dLELcKgCAj1xLVIjPyAD852GarYmBgHOWAWr P6QR+e0qDnizlUTODpyLEVaahBSGVtFqFavz8DjvsACo27U8tSCmrnGk3AkBUoTU CKbWAUJfivXmboEnnu05r/W9LFlJIoNP1+9P3YEREGnx6+FcQk+zetWsyr5PT3yj RwcYvf69kmG5gCf6gwVYqr+/H1AfCc401/3koB/i8xiQKvfGg/Z1Mj9AEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAg2JphZ+JDRx5fb8Bmk+qwgzyN2MB8GA1UdIwQY MBaAFOhGTIwWfdLIeqPYisv65MIz/3ewMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgt NmVhYTU5YjBkNzUwLzEvQ0RZbW1GbjRrTkhIbDl2d0dhVDZyQ0RQSTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgtNmVhYTU5YjBkNzUw LzEvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwjcQMA0G CSqGSIb3DQEBCwUAA4IBAQCQQzfBHkVOFEE81wxyb6fOwCD1vYfjAj6FG7rwktMN aiqWL8kU8tdEmnrgifiP1leeVWQ2DMGYypih8S0ynNr/iijOX3lczupWXeiinMvh BDPxaxqIhwCJLT1uNtvBKd9knQEfquns/YzweLytu5qoBel6CxASnGkunNnSQsKz Fy4VP4oUadh89cqZb6jMfwkbJVXAqwVHhHKbw4u99eOPuGXy68WqJ060x7uSHeX0 vJNGUyDP/MGsiPv9KaFaGqvDCuiN97X5imqaGGUamv/hIKG89niEcPP0OqUNRBME W4oB6SIaTKWJ2UUkO7DV4fRMTtM9BRvAbWgeXcgcSR3e -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:36 2026 by rpki-client