This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/cgkSjyInxeBAfsrMtADKQej1dQA.roa File: cgkSjyInxeBAfsrMtADKQej1dQA.roa (raw, json) Hash identifier: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0= Subject key identifier: 72:09:12:8F:22:27:C5:E0:40:7E:CA:CC:B4:00:CA:41:E8:F5:75:00 Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Certificate serial: 019B7D5CE31624EABCA35175141520D3CA32 Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/cgkSjyInxeBAfsrMtADKQej1dQA.roa Signing time: Fri 02 Jan 2026 06:19:58 +0000 ROA not before: Fri 02 Jan 2026 06:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31122 IP address blocks: 185.69.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e3:16:24:ea:bc:a3:51:75:14:15:20:d3:ca:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9 Validity Not Before: Jan 2 06:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7209128f2227c5e0407ecaccb400ca41e8f57500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2d:4b:22:46:71:41:a9:0d:0f:65:1d:7f:dc: b4:57:ca:c8:21:5d:3f:25:59:73:11:a5:9a:5d:2e: 88:ce:58:fa:fd:8c:66:47:f0:4e:22:ae:1d:db:76: 4f:9e:d5:db:42:97:1b:e5:e5:50:6c:06:3f:ec:1b: 31:68:e7:74:f4:3e:4a:48:f9:bb:12:22:ee:70:48: 85:7e:f8:a7:b7:f6:d8:1f:87:d5:2a:0a:0a:db:9c: e3:a5:ed:7c:82:bd:c3:f1:e5:a7:b1:59:a5:ae:73: 66:d2:0e:c1:28:5a:52:cc:ef:e8:72:a4:c7:db:12: 6e:9b:c4:dd:8d:02:a4:6a:05:90:56:d4:cb:b8:cb: 88:68:e2:c7:05:f9:77:dc:e9:ea:87:f3:dc:ec:23: 23:41:d1:35:5b:99:64:e0:49:62:e8:9f:7b:46:a8: f8:ed:de:a9:fc:dc:14:1a:d8:d5:71:54:a0:fd:4b: d3:92:5f:81:3b:44:ed:3a:5a:d1:81:e0:8b:84:18: 1c:22:80:24:d5:8a:7e:05:db:fa:40:a4:f6:b2:bd: d3:1f:68:60:be:4d:df:d3:af:ec:90:7d:1c:cd:bb: 3d:ab:4c:e8:47:75:86:40:fd:51:61:c5:96:09:8b: 55:e2:46:ad:ca:d3:d6:e0:30:f1:5e:11:5a:2c:8e: 09:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:09:12:8F:22:27:C5:E0:40:7E:CA:CC:B4:00:CA:41:E8:F5:75:00 X509v3 Authority Key Identifier: keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/cgkSjyInxeBAfsrMtADKQej1dQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.214.0/24 Signature Algorithm: sha256WithRSAEncryption 90:cb:4b:51:9b:83:68:2a:46:8e:23:a4:97:f4:fa:3b:52:cb: ed:e3:5f:df:ec:cd:a7:dd:1f:da:5d:3b:d9:36:be:1e:1b:85: bf:ff:d4:5d:21:4f:b9:90:04:56:a2:d4:b4:f9:36:73:ee:03: 0a:12:da:58:7e:94:ef:3c:51:d5:96:78:ac:1a:43:9f:50:7d: db:ed:f6:93:cc:78:a5:07:4a:b6:62:a1:6a:ec:c6:f1:a6:6d: b1:e8:90:cf:14:bf:28:df:cb:b2:5e:fb:63:71:69:46:59:46: 4c:08:27:12:cd:c9:6e:fc:4f:24:60:22:77:10:ee:ef:88:e2: fe:72:83:ae:7e:9d:d7:50:7c:75:ff:66:16:4d:fe:be:1a:18: c6:90:c4:c1:4b:be:45:4d:7e:9c:9f:25:d9:42:c8:a0:a5:48: d4:12:be:4a:a7:57:3d:c7:8e:1c:ca:76:ee:91:a6:19:b0:ab: 11:25:d5:fd:e8:04:6b:70:36:3e:6f:60:b7:23:53:90:5d:e4: e8:1f:e0:7a:f2:54:0c:b6:6f:fe:92:e9:58:6c:24:36:32:4c: 39:7b:9d:10:0c:1a:ee:b2:29:33:59:42:f7:8b:4f:15:3a:4f: 39:1e:37:c2:d8:02:42:fa:e5:11:ff:de:f3:60:43:dd:b5:f7: 1b:e6:c0:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOMWJOq8o1F1FBUg08oyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDE3YWRhNjQzOTI4OGMyOTcwM2NmNzA1ZWY2NGFmYjM4 MjBhZDkwHhcNMjYwMTAyMDYxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjA5MTI4ZjIyMjdjNWUwNDA3ZWNhY2NiNDAwY2E0MWU4ZjU3NTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3y1LIkZxQakND2Udf9y0V8rIIV0/ JVlzEaWaXS6Izlj6/YxmR/BOIq4d23ZPntXbQpcb5eVQbAY/7BsxaOd09D5KSPm7 EiLucEiFfvint/bYH4fVKgoK25zjpe18gr3D8eWnsVmlrnNm0g7BKFpSzO/ocqTH 2xJum8TdjQKkagWQVtTLuMuIaOLHBfl33Onqh/Pc7CMjQdE1W5lk4Eli6J97Rqj4 7d6p/NwUGtjVcVSg/UvTkl+BO0TtOlrRgeCLhBgcIoAk1Yp+Bdv6QKT2sr3TH2hg vk3f06/skH0czbs9q0zoR3WGQP1RYcWWCYtV4katytPW4DDxXhFaLI4JPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHIJEo8iJ8XgQH7KzLQAykHo9XUAMB8GA1UdIwQY MBaAFOLRetpkOSiMKXA89wXvZK+zggrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDkt Yzk5N2I4N2I0YjVmLzEvY2drU2p5SW54ZUJBZnNyTXRBREtRZWoxZFFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mMTJiYTEtZDgyNi00NjYyLWJlZDktYzk5N2I4N2I0YjVm LzEvNHRGNjJtUTVLSXdwY0R6M0JlOWtyN09DQ3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUXWMA0G CSqGSIb3DQEBCwUAA4IBAQCQy0tRm4NoKkaOI6SX9Po7Usvt41/f7M2n3R/aXTvZ Nr4eG4W//9RdIU+5kARWotS0+TZz7gMKEtpYfpTvPFHVlnisGkOfUH3b7faTzHil B0q2YqFq7Mbxpm2x6JDPFL8o38uyXvtjcWlGWUZMCCcSzclu/E8kYCJ3EO7viOL+ coOufp3XUHx1/2YWTf6+GhjGkMTBS75FTX6cnyXZQsigpUjUEr5Kp1c9x44cynbu kaYZsKsRJdX96ARrcDY+b2C3I1OQXeToH+B68lQMtm/+kulYbCQ2Mkw5e50QDBru sikzWUL3i08VOk85HjfC2AJC+uUR/97zYEPdtfcb5sCH -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:41 2026 by rpki-client