This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/CbnygaBWTQeTgxo7VtHoGSI5Wjo.roa File: CbnygaBWTQeTgxo7VtHoGSI5Wjo.roa (raw, json) Hash identifier: YABN8P02IK4MPeY+oFxkFQxQ2hLyZWLZEaI6zjoc+IM= Subject key identifier: 09:B9:F2:81:A0:56:4D:07:93:83:1A:3B:56:D1:E8:19:22:39:5A:3A Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b Certificate serial: 019B7CEDB70CE9CF01C38BB05B62EB537791 Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/CbnygaBWTQeTgxo7VtHoGSI5Wjo.roa Signing time: Fri 02 Jan 2026 04:18:32 +0000 ROA not before: Fri 02 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51101 IP address blocks: 88.135.186.0/24 maxlen: 24 178.217.112.0/21 maxlen: 21 185.230.224.0/22 maxlen: 22 195.43.66.0/23 maxlen: 23 2a0c:3100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b7:0c:e9:cf:01:c3:8b:b0:5b:62:eb:53:77:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b Validity Not Before: Jan 2 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09b9f281a0564d0793831a3b56d1e81922395a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:fe:3e:d0:26:9c:05:4c:f3:5c:8b:60:b0: 7f:ae:d3:60:89:5d:31:e4:c1:9e:cd:69:58:31:a7: 5b:19:58:bb:cd:c2:72:1a:d6:07:b5:89:f0:09:fd: f5:85:37:0e:9a:ed:53:b2:fb:58:f0:7c:2f:9e:13: 0b:f3:fb:f1:71:77:45:77:61:e8:98:af:e3:94:a8: 28:0b:66:c8:53:81:d1:1b:0e:3b:e2:8b:0f:3b:ab: ca:31:17:11:62:9b:3d:d2:a8:ef:2f:02:10:26:f0: 0e:b7:f6:88:d3:46:da:ba:f9:47:81:7c:a4:fa:93: 19:18:f1:ff:f8:be:e4:24:3b:79:80:d0:26:e5:e9: 19:91:37:76:3d:d8:98:6f:50:63:96:e3:f7:53:3b: f9:fe:56:e0:74:b8:4b:af:92:7f:62:d1:8a:08:eb: b3:dd:64:e5:49:f2:94:aa:5f:8e:b1:35:b1:e8:c0: 50:ba:09:7f:3d:ea:11:95:f8:64:71:ab:c6:1e:5c: 2c:68:9d:4a:8c:b6:cb:d0:14:27:70:2f:c7:70:62: 0b:1b:42:c2:08:b8:50:48:71:2a:42:4f:45:9f:64: 12:ab:b9:00:e5:3a:4d:8e:17:15:f5:a9:ef:30:11: d0:36:19:cf:2c:8f:2f:89:b2:72:ec:12:b1:c1:d7: 09:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B9:F2:81:A0:56:4D:07:93:83:1A:3B:56:D1:E8:19:22:39:5A:3A X509v3 Authority Key Identifier: keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/CbnygaBWTQeTgxo7VtHoGSI5Wjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.135.186.0/24 178.217.112.0/21 185.230.224.0/22 195.43.66.0/23 IPv6: 2a0c:3100::/29 Signature Algorithm: sha256WithRSAEncryption 31:b9:ab:d1:cc:62:72:64:fc:e1:41:29:f9:97:77:00:9b:3b: 57:fd:d6:35:0d:4f:4e:90:e4:a1:83:e8:2d:b2:d0:be:4e:7d: b6:c7:ae:47:10:cf:fc:ea:0b:44:a2:db:6d:c2:57:a3:d0:73: 02:92:07:43:c6:9e:7b:cd:17:ad:84:23:b2:e4:aa:09:5d:f4: 63:6e:4c:40:c6:d3:c7:60:0a:6e:c6:bd:07:78:27:d0:6f:83: 2c:db:24:a0:d8:e5:e5:9c:c6:a4:f2:d2:46:41:5a:83:31:6c: 5b:a8:d8:5c:52:30:25:bf:74:cc:f7:9a:80:06:14:8f:c2:09: 84:5d:17:ce:09:bc:d3:dc:25:6f:a5:a4:39:0d:7a:03:56:83: d6:97:94:16:8b:97:e8:37:c7:06:1f:b3:72:6f:0c:5b:85:1c: 29:db:b2:6b:58:4f:70:b3:03:84:87:0e:c5:cc:06:5e:c1:55: 4f:b9:f4:56:52:1e:f4:77:c4:f9:0a:8d:57:a9:65:9f:4d:bc: 8a:2e:1a:0b:7f:c6:2f:ff:4c:69:ce:f8:e9:83:ae:9e:82:3b: 22:5e:bf:3d:c9:59:a1:fc:20:c1:38:5e:bf:8c:cf:bb:05:be: 98:b8:35:97:dd:79:70:ab:58:30:d4:d3:e7:af:c9:c5:fc:77: f1:f8:6d:de -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt87bcM6c8Bw4uwW2LrU3eRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NGU1MTVjYzViZTRlMjdlOWQzZDEzZTVlMWMxMWRjNzUy OTI3NGIwHhcNMjYwMTAyMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWI5ZjI4MWEwNTY0ZDA3OTM4MzFhM2I1NmQxZTgxOTIyMzk1YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sn+PtAmnAVM81yLYLB/rtNgiV0x 5MGezWlYMadbGVi7zcJyGtYHtYnwCf31hTcOmu1TsvtY8HwvnhML8/vxcXdFd2Ho mK/jlKgoC2bIU4HRGw474osPO6vKMRcRYps90qjvLwIQJvAOt/aI00bauvlHgXyk +pMZGPH/+L7kJDt5gNAm5ekZkTd2PdiYb1BjluP3Uzv5/lbgdLhLr5J/YtGKCOuz 3WTlSfKUql+OsTWx6MBQugl/PeoRlfhkcavGHlwsaJ1KjLbL0BQncC/HcGILG0LC CLhQSHEqQk9Fn2QSq7kA5TpNjhcV9anvMBHQNhnPLI8vibJy7BKxwdcJxQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAm58oGgVk0Hk4MaO1bR6BkiOVo6MB8GA1UdIwQY MBaAFGlOUVzFvk4n6dPRPl4cEdx1KSdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYt NTFjNzdjYzQ5MTQ2LzEvQ2JueWdhQldUUWVUZ3hvN1Z0SG9HU0k1V2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83OTU2MjAtMjAwMy00Nzg1LTk5OWYtNTFjNzdjYzQ5MTQ2 LzEvYVU1UlhNVy1UaWZwMDlFLVhod1IzSFVwSjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAWIe6AwQD stlwAwQCuebgAwQBwytCMA0EAgACMAcDBQMqDDEAMA0GCSqGSIb3DQEBCwUAA4IB AQAxuavRzGJyZPzhQSn5l3cAmztX/dY1DU9OkOShg+gtstC+Tn22x65HEM/86gtE otttwlej0HMCkgdDxp57zRethCOy5KoJXfRjbkxAxtPHYApuxr0HeCfQb4Ms2ySg 2OXlnMak8tJGQVqDMWxbqNhcUjAlv3TM95qABhSPwgmEXRfOCbzT3CVvpaQ5DXoD VoPWl5QWi5foN8cGH7NybwxbhRwp27JrWE9wswOEhw7FzAZewVVPufRWUh70d8T5 Co1XqWWfTbyKLhoLf8Yv/0xpzvjpg66egjsiXr89yVmh/CDBOF6/jM+7Bb6YuDWX 3Xlwq1gw1NPnr8nF/Hfx+G3e -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:16 2026 by rpki-client