This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/CCQOO8anG7WZQ-CMnCxWzdFShTs.roa File: CCQOO8anG7WZQ-CMnCxWzdFShTs.roa (raw, json) Hash identifier: M83hlMTeAUf+xS69MU+OXr2z18iSzDUopMQnLTo5ras= Subject key identifier: 08:24:0E:3B:C6:A7:1B:B5:99:43:E0:8C:9C:2C:56:CD:D1:52:85:3B Certificate issuer: /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3 Certificate serial: 019B7C11AD5D2E4D0A6D8FB666F03CF45F61 Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/CCQOO8anG7WZQ-CMnCxWzdFShTs.roa Signing time: Fri 02 Jan 2026 00:18:11 +0000 ROA not before: Fri 02 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 192.109.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:ad:5d:2e:4d:0a:6d:8f:b6:66:f0:3c:f4:5f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3 Validity Not Before: Jan 2 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08240e3bc6a71bb59943e08c9c2c56cdd152853b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:31:61:3a:15:cd:0f:52:bb:01:ff:f1:53:af: 30:ab:38:93:e8:ff:76:54:64:68:b0:42:89:73:b4: 58:0b:24:aa:89:3c:50:c2:21:53:a0:1a:7b:26:ac: 57:31:9a:0f:5f:4e:d1:24:b0:62:04:fb:25:66:63: a0:02:3b:40:d8:dd:b7:df:78:7d:ac:62:24:cb:08: 42:c2:05:39:2d:50:b0:b4:78:03:92:1c:cd:3b:fc: 20:12:b6:35:4c:30:16:63:60:f9:e9:ae:99:f4:6d: e4:b9:38:b0:da:a5:db:d7:0c:cb:02:8b:99:5f:bb: 2f:9d:f1:6b:20:06:8f:3b:b6:00:af:3f:40:80:8a: 8c:01:30:db:dd:c5:c1:d6:5d:2a:cb:e2:00:e1:bb: a0:cd:8f:d6:c0:4e:02:30:93:e1:29:2b:0c:2a:08: 68:4e:e7:d3:21:96:de:34:40:bc:4a:b8:03:15:c9: b0:61:33:3f:66:fa:80:d3:d8:56:b2:71:77:1e:e9: ca:9c:e0:50:4a:8e:d3:85:6d:ce:3c:98:f7:e1:d8: a6:33:9b:62:2d:8a:a8:9c:75:04:a0:ef:52:f2:db: ee:21:2f:5b:6a:d0:bd:79:7f:87:3f:0d:d8:ca:c5: ea:c3:f3:78:7f:b2:a5:1e:31:05:b4:bf:47:f2:2b: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:24:0E:3B:C6:A7:1B:B5:99:43:E0:8C:9C:2C:56:CD:D1:52:85:3B X509v3 Authority Key Identifier: keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/CCQOO8anG7WZQ-CMnCxWzdFShTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.111.0/24 Signature Algorithm: sha256WithRSAEncryption 65:9b:43:01:46:4e:0f:17:b5:0a:65:39:44:db:34:b5:16:f4: 31:c4:80:b5:11:a4:f4:56:71:0a:e2:c8:fd:4c:d9:70:b3:fe: 5c:65:3a:4e:23:95:a7:87:5f:90:e3:fd:c4:20:3a:0e:2d:5b: 35:ff:9e:ca:a9:9d:4f:62:a2:28:0b:0e:66:83:0f:b4:e5:ae: 1c:89:1e:62:6e:a1:21:cd:ad:9a:eb:f8:15:d9:6e:c6:34:85: 5f:9d:b4:96:f1:da:a7:e7:44:21:e9:74:10:b8:12:a4:ec:df: 9f:54:ca:17:09:c7:a8:de:62:85:7e:47:b9:d4:ef:ef:1b:0b: c7:21:b9:e4:77:d1:5c:36:5d:e4:75:a5:82:7c:ce:69:a4:ff: 2d:35:a3:2f:20:ae:a2:de:43:94:ed:97:5b:c6:c5:c1:27:07: a6:fb:1f:6d:ae:7a:e8:2e:09:04:26:ba:59:6c:03:fc:05:87: 02:f3:64:b6:f8:98:03:0c:d5:0a:56:58:f5:52:a1:ec:14:58: b2:0e:42:4a:cd:a5:21:c7:00:c5:39:c3:cb:42:80:15:f3:1d: 12:e8:6d:e3:ea:ff:b7:3f:cd:40:77:ac:81:33:f3:f2:8e:a1: 2c:09:e3:46:01:86:a1:97:22:32:f4:5c:b8:41:d2:e6:82:a8: 86:16:d6:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ea1dLk0KbY+2ZvA89F9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzZmZDNmMzJjYTQ1OTRjOTYwNzU2NTlhNzA4OWIyN2Fl M2ZlZjMwHhcNMjYwMTAyMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODI0MGUzYmM2YTcxYmI1OTk0M2UwOGM5YzJjNTZjZGQxNTI4NTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DFhOhXND1K7Af/xU68wqziT6P92 VGRosEKJc7RYCySqiTxQwiFToBp7JqxXMZoPX07RJLBiBPslZmOgAjtA2N2333h9 rGIkywhCwgU5LVCwtHgDkhzNO/wgErY1TDAWY2D56a6Z9G3kuTiw2qXb1wzLAouZ X7svnfFrIAaPO7YArz9AgIqMATDb3cXB1l0qy+IA4bugzY/WwE4CMJPhKSsMKgho TufTIZbeNEC8SrgDFcmwYTM/ZvqA09hWsnF3HunKnOBQSo7ThW3OPJj34dimM5ti LYqonHUEoO9S8tvuIS9batC9eX+HPw3YysXqw/N4f7KlHjEFtL9H8isSkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgkDjvGpxu1mUPgjJwsVs3RUoU7MB8GA1UdIwQY MBaAFJvG/T8yykWUyWB1ZZpwibJ64/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYt ZGNiZTUzZGE3ODYwLzEvQ0NRT084YW5HN1daUS1DTW5DeFd6ZEZTaFRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9kYTI0NDctYjI1Mi00YjZhLWE4MmYtZGNiZTUzZGE3ODYw LzEvbThiOVB6TEtSWlRKWUhWbG1uQ0pzbnJqX3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG1vMA0G CSqGSIb3DQEBCwUAA4IBAQBlm0MBRk4PF7UKZTlE2zS1FvQxxIC1EaT0VnEK4sj9 TNlws/5cZTpOI5Wnh1+Q4/3EIDoOLVs1/57KqZ1PYqIoCw5mgw+05a4ciR5ibqEh za2a6/gV2W7GNIVfnbSW8dqn50Qh6XQQuBKk7N+fVMoXCceo3mKFfke51O/vGwvH Ibnkd9FcNl3kdaWCfM5ppP8tNaMvIK6i3kOU7ZdbxsXBJwem+x9trnroLgkEJrpZ bAP8BYcC82S2+JgDDNUKVlj1UqHsFFiyDkJKzaUhxwDFOcPLQoAV8x0S6G3j6v+3 P81Ad6yBM/PyjqEsCeNGAYahlyIy9Fy4QdLmgqiGFtaK -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:46 2026 by rpki-client