This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa File: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (raw, json) Hash identifier: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE= Subject key identifier: 09:83:7E:EA:48:F6:BB:D1:C8:A5:8A:10:DE:19:A0:BD:2B:01:DF:99 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019B7D5C9C48DE39FFC8FC5079C413A629F5 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa Signing time: Fri 02 Jan 2026 06:19:39 +0000 ROA not before: Fri 02 Jan 2026 06:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214706 IP address blocks: 62.108.35.0/24 maxlen: 24 62.108.37.0/24 maxlen: 24 62.108.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9c:48:de:39:ff:c8:fc:50:79:c4:13:a6:29:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09837eea48f6bbd1c8a58a10de19a0bd2b01df99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a5:02:4d:2b:ea:29:0f:a7:1e:2b:c6:7d:c7: 14:80:c4:82:c7:8a:6f:cd:7f:a0:2a:e8:dd:20:8f: 09:b5:95:02:8d:b6:98:4c:3a:50:d1:64:8a:96:6b: 72:c8:a9:70:d1:df:eb:a5:f1:74:17:c7:1a:bb:2c: 11:77:3e:fc:80:ef:81:f6:80:41:84:ae:4a:82:96: d3:2b:ff:21:26:85:43:6a:61:b8:21:3e:0c:52:ba: 94:96:47:c7:ef:90:a4:46:69:87:40:da:e8:e8:b8: b8:5f:99:1b:28:ce:40:e8:63:b5:ba:dd:8a:17:a4: 26:86:f2:1a:6d:e3:ca:d1:6c:f7:be:7b:57:62:2b: 6a:a6:df:74:e6:38:e1:c1:5d:d7:90:7e:a5:b7:fd: e0:5f:a3:cf:ea:44:e7:a3:b7:1c:58:26:71:bd:32: 35:d5:2a:7f:48:d7:e4:69:18:ce:2d:fc:a8:84:8a: 8f:98:78:c8:70:2e:5b:c2:04:31:39:49:e2:e3:41: 81:e3:da:cc:dd:5b:69:93:b0:21:94:8d:12:ce:19: bd:19:7a:39:57:dc:89:cb:03:7d:c7:b1:9f:b9:c4: b6:75:11:6f:60:41:1b:66:dd:0f:13:2c:11:d1:8b: 3f:26:5a:ff:63:a7:99:77:ea:13:3c:8f:11:1b:b0: 22:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:83:7E:EA:48:F6:BB:D1:C8:A5:8A:10:DE:19:A0:BD:2B:01:DF:99 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.108.35.0/24 62.108.37.0/24 62.108.40.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:6f:82:b6:cc:cd:6c:49:a0:93:6d:fd:ec:f3:ec:d1:55:f5: 2a:cf:cb:2e:89:a9:2b:d1:37:5e:74:dc:cc:50:c6:f9:8f:25: 74:62:75:ae:bd:c2:a8:bc:ef:64:40:0f:c7:82:d9:39:76:a9: c7:b0:a1:e1:c2:32:d0:25:3f:de:99:91:34:a3:68:7b:8e:e3: e2:56:19:07:00:dd:02:46:e0:e1:60:d7:fe:ea:c9:b8:f3:29: 43:8d:83:5b:c1:e5:f0:61:f6:f2:0c:ca:98:d3:fa:97:8b:4d: 5d:c7:a3:cd:ad:4f:87:50:45:cc:0e:7a:87:0e:62:7c:a8:1b: b1:29:62:55:5a:f2:ef:05:82:97:03:3a:d8:6a:99:fd:9d:ee: 2d:83:50:2a:f3:5f:5c:57:bc:91:0d:09:41:3c:3f:77:70:92: d8:74:3b:b8:8d:8d:d7:9b:86:4b:0b:d4:34:59:cd:df:df:dd: 89:01:fc:cd:52:fa:ce:08:74:31:d6:da:b2:81:6b:12:c8:29: 56:d8:37:2f:52:1e:63:d6:59:62:d0:1f:bf:3b:c8:45:9f:aa: 58:3d:f6:74:2a:fd:dc:11:88:85:60:5a:76:3d:3f:c2:a0:d9: b8:a3:61:6a:3a:b5:36:19:c6:0b:ff:2a:a3:e8:f8:3f:a0:8c: 20:6f:a9:7b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XJxI3jn/yPxQecQTpin1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTgzN2VlYTQ4ZjZiYmQxYzhhNThhMTBkZTE5YTBiZDJiMDFkZjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaUCTSvqKQ+nHivGfccUgMSCx4pv zX+gKujdII8JtZUCjbaYTDpQ0WSKlmtyyKlw0d/rpfF0F8cauywRdz78gO+B9oBB hK5KgpbTK/8hJoVDamG4IT4MUrqUlkfH75CkRmmHQNro6Li4X5kbKM5A6GO1ut2K F6QmhvIabePK0Wz3vntXYitqpt905jjhwV3XkH6lt/3gX6PP6kTno7ccWCZxvTI1 1Sp/SNfkaRjOLfyohIqPmHjIcC5bwgQxOUni40GB49rM3Vtpk7AhlI0Szhm9GXo5 V9yJywN9x7GfucS2dRFvYEEbZt0PEywR0Ys/Jlr/Y6eZd+oTPI8RG7AiMQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAmDfupI9rvRyKWKEN4ZoL0rAd+ZMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQ1lOLTZrajJ1OUhJcFlvUTNobWd2U3NCMzVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPmwjAwQA PmwlAwQAPmwoMA0GCSqGSIb3DQEBCwUAA4IBAQAKb4K2zM1sSaCTbf3s8+zRVfUq z8suiakr0TdedNzMUMb5jyV0YnWuvcKovO9kQA/Hgtk5dqnHsKHhwjLQJT/emZE0 o2h7juPiVhkHAN0CRuDhYNf+6sm48ylDjYNbweXwYfbyDMqY0/qXi01dx6PNrU+H UEXMDnqHDmJ8qBuxKWJVWvLvBYKXAzrYapn9ne4tg1Aq819cV7yRDQlBPD93cJLY dDu4jY3Xm4ZLC9Q0Wc3f392JAfzNUvrOCHQx1tqygWsSyClW2DcvUh5j1lli0B+/ O8hFn6pYPfZ0Kv3cEYiFYFp2PT/CoNm4o2FqOrU2GcYL/yqj6Pg/oIwgb6l7 -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:36 2026 by rpki-client