This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CZtGpLAUhYdLU22gYJ3M8sldtRE.roa File: CZtGpLAUhYdLU22gYJ3M8sldtRE.roa (raw, json) Hash identifier: dqMfLW0eVcLT+nytfHwV4Lxmua3438Ke47oKR7OOxJ8= Subject key identifier: 09:9B:46:A4:B0:14:85:87:4B:53:6D:A0:60:9D:CC:F2:C9:5D:B5:11 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C7708CC7377CB64390C74AF494DC31 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CZtGpLAUhYdLU22gYJ3M8sldtRE.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 176.106.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:70:8c:c7:37:7c:b6:43:90:c7:4a:f4:94:dc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=099b46a4b01485874b536da0609dccf2c95db511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:99:30:32:c0:b4:34:92:6a:98:31:0d:87:01: c0:ae:67:c1:bb:fc:c3:53:bc:7d:69:f1:85:90:f5: 4f:ca:7f:7e:71:40:1f:97:65:11:8b:be:1f:07:7e: c7:99:3c:10:2b:e7:ba:a4:64:85:9f:34:bd:be:b5: 95:a0:06:92:73:66:db:5a:e4:57:59:8f:14:f5:c5: b7:31:0c:24:2d:5b:54:5c:aa:07:53:16:51:da:03: 3f:d2:48:db:37:0c:51:a2:81:db:06:5d:a2:d0:b5: a3:09:ca:14:12:e5:01:a7:11:95:ed:43:94:e1:c2: 4f:59:3f:0c:47:3c:b7:ec:e9:8c:15:14:d7:ae:05: 39:2d:a0:5f:59:9f:15:e8:e5:d9:70:b9:79:1a:cf: c7:16:3c:1c:0b:05:bf:46:28:07:26:cb:91:25:e7: 4d:d3:d5:b9:cd:bf:e0:7a:ad:76:20:5d:9c:de:0f: fe:60:1e:bb:1c:89:a5:30:a5:af:f6:3a:42:3b:82: 39:61:c1:f2:5c:60:71:8b:9e:c9:0f:aa:76:d6:68: 7a:85:0c:ee:44:92:f4:51:1d:8e:d3:08:3d:ae:69: b8:c6:41:1a:c3:61:1e:19:3b:a7:ba:1b:63:1f:d2: f0:8d:6a:10:b0:e4:42:36:9c:32:ee:1d:12:c2:84: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9B:46:A4:B0:14:85:87:4B:53:6D:A0:60:9D:CC:F2:C9:5D:B5:11 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CZtGpLAUhYdLU22gYJ3M8sldtRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.106.102.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:bd:b1:b5:b2:c1:7e:71:e5:be:45:6c:0f:2b:bd:3f:ba:0c: b2:a6:5a:ed:5f:a8:f1:1f:28:83:b0:b1:b5:a4:e7:0d:e8:cd: 67:45:39:32:37:6f:d4:56:79:80:8b:52:8e:2f:5c:c4:86:55: 93:34:0a:ad:79:87:53:1c:d8:0a:85:e8:64:d0:53:cc:91:8b: 0b:0c:55:f9:9e:ef:7d:6b:08:56:90:af:dd:1e:bb:b2:67:c7: c6:bd:6f:ff:ae:c8:87:9a:30:9e:89:9b:7c:ba:61:59:ef:8e: e3:5a:68:bc:35:15:38:a8:d6:03:0f:b6:c9:e6:15:15:79:da: 80:ff:21:96:b1:84:6c:c2:2e:46:f8:e4:d8:27:2b:a6:d5:d8: f5:87:39:bd:46:eb:c9:f0:83:c2:27:52:c5:24:57:1a:d4:4d: 9b:fc:81:e8:40:f4:52:59:81:6d:3f:6e:e3:7f:fb:80:0d:d9: db:91:a6:53:42:7c:36:f7:38:64:18:e9:2e:20:08:b1:d6:c7: 8e:7a:ce:ce:af:48:da:cc:00:6c:52:c7:31:4c:6e:d7:dc:1e: e3:06:65:c8:7c:ff:5a:f0:00:fc:d1:12:16:80:96:03:5c:e6: 0b:65:71:8d:2b:b8:13:22:27:d2:df:f5:44:51:76:74:3b:e7: 36:68:fc:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3CMxzd8tkOQx0r0lNwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTliNDZhNGIwMTQ4NTg3NGI1MzZkYTA2MDlkY2NmMmM5NWRiNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZkwMsC0NJJqmDENhwHArmfBu/zD U7x9afGFkPVPyn9+cUAfl2URi74fB37HmTwQK+e6pGSFnzS9vrWVoAaSc2bbWuRX WY8U9cW3MQwkLVtUXKoHUxZR2gM/0kjbNwxRooHbBl2i0LWjCcoUEuUBpxGV7UOU 4cJPWT8MRzy37OmMFRTXrgU5LaBfWZ8V6OXZcLl5Gs/HFjwcCwW/RigHJsuRJedN 09W5zb/geq12IF2c3g/+YB67HImlMKWv9jpCO4I5YcHyXGBxi57JD6p21mh6hQzu RJL0UR2O0wg9rmm4xkEaw2EeGTunuhtjH9LwjWoQsORCNpwy7h0SwoT5PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmbRqSwFIWHS1NtoGCdzPLJXbURMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvQ1p0R3BMQVVoWWRMVTIyZ1lKM004c2xkdFJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsGpmMA0G CSqGSIb3DQEBCwUAA4IBAQBrvbG1ssF+ceW+RWwPK70/ugyyplrtX6jxHyiDsLG1 pOcN6M1nRTkyN2/UVnmAi1KOL1zEhlWTNAqteYdTHNgKhehk0FPMkYsLDFX5nu99 awhWkK/dHruyZ8fGvW//rsiHmjCeiZt8umFZ747jWmi8NRU4qNYDD7bJ5hUVedqA /yGWsYRswi5G+OTYJyum1dj1hzm9RuvJ8IPCJ1LFJFca1E2b/IHoQPRSWYFtP27j f/uADdnbkaZTQnw29zhkGOkuIAix1seOes7Or0jazABsUscxTG7X3B7jBmXIfP9a 8AD80RIWgJYDXOYLZXGNK7gTIifS3/VEUXZ0O+c2aPwU -----END CERTIFICATE-----Generated at Sun Jan 25 14:59:32 2026 by rpki-client