This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/CYsGcdSH7bcw6ttptcbOdbODOc4.roa File: CYsGcdSH7bcw6ttptcbOdbODOc4.roa (raw, json) Hash identifier: wXe45N0RFs32ccEALNCnd59LOD4wha28MAHYlRsCzAg= Subject key identifier: 09:8B:06:71:D4:87:ED:B7:30:EA:DB:69:B5:C6:CE:75:B3:83:39:CE Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019B78A3141C7F7D462CC050DA987BF47D9F Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/CYsGcdSH7bcw6ttptcbOdbODOc4.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29076 IP address blocks: 37.202.12.0/24 maxlen: 24 37.202.13.0/24 maxlen: 24 37.202.15.0/24 maxlen: 24 212.113.114.0/23 maxlen: 23 212.113.115.0/24 maxlen: 24 212.113.125.0/24 maxlen: 24 212.113.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:14:1c:7f:7d:46:2c:c0:50:da:98:7b:f4:7d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=098b0671d487edb730eadb69b5c6ce75b38339ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fe:d3:b1:8b:43:d8:31:43:df:78:3b:a6:3b: 54:a0:90:f9:cf:46:6d:d0:9f:b9:86:71:5c:75:2b: d0:1c:3e:20:30:4b:13:12:5e:c2:36:64:ae:14:9f: 16:0e:c9:7b:c2:c7:b3:bd:98:00:c6:ed:17:9a:6d: 5e:51:a4:2b:fb:2e:11:1d:c5:52:e8:46:ca:28:65: a3:1f:b2:44:6e:bf:ec:a1:92:6d:fe:b2:20:de:3e: 96:36:76:46:db:fd:4f:19:dc:2f:09:5b:51:73:b1: bb:7d:78:37:b2:1e:86:00:88:89:ff:28:22:7a:eb: 17:db:c4:f5:8c:38:e9:3e:61:f7:77:19:93:27:c7: 89:ea:95:b4:5a:d4:e2:52:46:7c:6f:27:d3:96:d5: f9:61:8d:40:97:35:b2:c3:77:cc:21:e3:6f:07:51: 72:6d:8b:e8:d6:fe:9c:ad:e5:13:53:fc:7b:3a:71: b3:72:a8:76:32:07:52:68:18:91:0f:83:2d:30:55: 6e:ae:6c:c7:8a:97:7c:e7:3e:09:0b:b3:ee:ed:87: 46:a4:60:9a:0c:bf:34:23:b4:cc:67:77:a4:f1:d9: e1:d0:45:e6:78:41:53:60:bd:f8:74:88:b0:e1:96: 6d:3e:cc:d9:46:87:44:9c:70:15:5c:53:45:ea:5d: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8B:06:71:D4:87:ED:B7:30:EA:DB:69:B5:C6:CE:75:B3:83:39:CE X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/CYsGcdSH7bcw6ttptcbOdbODOc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.12.0/23 37.202.15.0/24 212.113.114.0/23 212.113.125.0-212.113.126.255 Signature Algorithm: sha256WithRSAEncryption 0c:ab:5c:c8:18:0e:58:90:6a:b3:8e:a8:3c:39:fe:7f:5f:7f: 5e:ac:ed:9b:4f:fd:85:a4:7e:ef:6a:73:4a:9a:56:1a:80:af: 22:fa:a3:4a:6c:9f:a1:57:c5:6a:dd:c2:5d:25:08:b6:c2:2b: 3c:6b:75:7b:13:ad:e7:42:9a:08:48:57:6b:ff:ac:a5:69:81: 74:4d:dd:31:00:81:e7:66:d4:32:04:4a:23:6d:73:3b:11:a3: 89:e0:59:f7:2a:66:d6:b5:ad:92:e0:fc:cc:66:9b:f5:c0:cf: e9:7b:6b:37:66:c5:95:f0:54:a8:97:b1:76:82:07:aa:2d:bd: 33:ff:fb:3a:0c:4c:19:ee:20:a4:84:d7:28:5b:38:46:ed:d5: 9d:01:62:66:84:c5:de:63:0e:54:28:16:23:8b:dd:14:f1:b4: 1d:74:96:58:34:87:6f:2a:c3:89:49:50:56:5b:74:77:d6:76: 7b:22:64:63:1a:d2:2b:30:29:9d:b9:3c:2a:e2:70:e3:02:17: ae:56:f6:71:0f:c5:5c:a9:14:b2:5b:e6:d4:6c:49:bf:d9:80: 96:10:bb:8a:dd:a5:de:a0:3a:41:99:bf:35:84:3e:00:cc:3d: 5c:d6:a7:71:e0:23:41:72:eb:6d:21:b1:d1:e2:e3:bf:b8:ac: 28:32:bf:d4 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt4oxQcf31GLMBQ2ph79H2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOThiMDY3MWQ0ODdlZGI3MzBlYWRiNjliNWM2Y2U3NWIzODMzOWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/7TsYtD2DFD33g7pjtUoJD5z0Zt 0J+5hnFcdSvQHD4gMEsTEl7CNmSuFJ8WDsl7wsezvZgAxu0Xmm1eUaQr+y4RHcVS 6EbKKGWjH7JEbr/soZJt/rIg3j6WNnZG2/1PGdwvCVtRc7G7fXg3sh6GAIiJ/ygi eusX28T1jDjpPmH3dxmTJ8eJ6pW0WtTiUkZ8byfTltX5YY1AlzWyw3fMIeNvB1Fy bYvo1v6creUTU/x7OnGzcqh2MgdSaBiRD4MtMFVurmzHipd85z4JC7Pu7YdGpGCa DL80I7TMZ3ek8dnh0EXmeEFTYL34dIiw4ZZtPszZRodEnHAVXFNF6l0LRQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFAmLBnHUh+23MOrbabXGznWzgznOMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQ1lzR2NkU0g3YmN3NnR0cHRjYk9kYk9ET2M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBJcoMAwQA JcoPAwQB1HFyMAwDBADUcX0DBADUcX4wDQYJKoZIhvcNAQELBQADggEBAAyrXMgY DliQarOOqDw5/n9ff16s7ZtP/YWkfu9qc0qaVhqAryL6o0psn6FXxWrdwl0lCLbC KzxrdXsTredCmghIV2v/rKVpgXRN3TEAgedm1DIESiNtczsRo4ngWfcqZta1rZLg /Mxmm/XAz+l7azdmxZXwVKiXsXaCB6otvTP/+zoMTBnuIKSE1yhbOEbt1Z0BYmaE xd5jDlQoFiOL3RTxtB10llg0h28qw4lJUFZbdHfWdnsiZGMa0iswKZ25PCricOMC F65W9nEPxVypFLJb5tRsSb/ZgJYQu4rdpd6gOkGZvzWEPgDMPVzWp3HgI0Fy620h sdHi47+4rCgyv9Q= -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:44 2026 by rpki-client