This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/cygXBaoOYUMyrNkALPI5b6qaiAA.roa File: cygXBaoOYUMyrNkALPI5b6qaiAA.roa (raw, json) Hash identifier: X4SsV2zvH5oJlwSwWEp5auzny9zYrYAXIWvcZGeHaOM= Subject key identifier: 73:28:17:05:AA:0E:61:43:32:AC:D9:00:2C:F2:39:6F:AA:9A:88:00 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68E516C94E26B94A9EDE67D8EAF00 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/cygXBaoOYUMyrNkALPI5b6qaiAA.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199482 IP address blocks: 37.72.12.0/24 maxlen: 24 84.236.157.0/24 maxlen: 24 178.156.122.0/24 maxlen: 24 178.156.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8e:51:6c:94:e2:6b:94:a9:ed:e6:7d:8e:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73281705aa0e614332acd9002cf2396faa9a8800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:b8:e9:82:c9:95:3b:5e:69:ba:be:61:bb: 37:37:b2:a7:67:4c:d0:17:dc:ca:fd:a8:d7:68:23: 1c:2a:31:34:57:3d:d9:70:22:b5:81:ef:70:ab:a5: 61:bf:4a:09:30:aa:a6:f8:f1:a9:a5:72:42:bd:67: 00:db:b2:f1:cf:cc:a6:60:66:0c:78:33:d3:01:24: 75:05:73:cb:56:e2:a1:34:23:66:38:68:94:f1:a2: f1:72:e0:76:64:e4:57:6b:c5:de:1b:cc:ca:97:f5: c0:a6:ec:f0:bc:c6:11:ba:01:af:9d:4f:40:25:5c: 66:6f:2c:7c:b3:d8:47:6a:d3:3b:86:da:45:04:44: 70:4f:45:11:99:63:54:80:7c:da:d5:c6:c8:7a:2d: 1e:d4:49:31:90:56:8c:e8:77:38:61:53:2f:6b:a7: fb:fe:24:d4:be:72:17:bf:36:93:8b:89:6b:d6:86: 53:1d:f2:6e:c5:c4:56:f8:7a:6e:d0:54:7b:8f:66: 40:c5:ff:d4:18:9b:ed:2d:09:1a:35:45:dd:bb:63: 5a:e5:97:48:0a:d5:f4:8a:cb:d4:d8:73:16:ec:42: ad:3d:15:ce:2e:fd:fd:58:73:55:c6:cc:4d:83:b3: 38:22:e3:c3:ed:63:15:44:bd:da:8f:67:66:79:8c: 6f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:28:17:05:AA:0E:61:43:32:AC:D9:00:2C:F2:39:6F:AA:9A:88:00 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/cygXBaoOYUMyrNkALPI5b6qaiAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.72.12.0/24 84.236.157.0/24 178.156.122.0/24 178.156.126.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:e9:15:1a:94:41:42:30:20:6e:08:4e:40:da:44:c7:06:59: 22:35:fb:37:f0:f3:6b:fe:4f:0b:f6:39:e2:1b:ec:b5:1a:d3: 77:3f:fc:9f:67:84:5e:4c:e5:d5:81:be:3f:d1:98:21:b5:ae: ce:9b:0f:32:82:52:d6:50:31:9e:74:86:ef:f0:66:5c:15:ac: 82:00:86:81:0e:0f:a6:c2:1b:cf:69:c4:47:d3:34:7c:30:0e: d0:36:bd:76:3c:64:3b:45:79:7b:b7:ab:ca:5d:8b:eb:7d:9d: c2:18:44:bd:e0:71:79:50:30:f3:4d:63:62:3f:63:cc:06:07: 25:25:3b:ec:eb:a8:57:e6:6a:1b:59:e9:0b:db:e4:a5:d2:e6: bb:2c:f1:0b:36:73:94:c4:47:56:72:de:ea:f0:b9:37:e4:ea: 2a:7c:80:1f:de:11:ca:c7:ec:5f:88:91:3b:9b:34:c0:ad:17: 9a:6b:69:75:6c:ab:30:6e:c7:be:8d:a1:e8:19:ef:aa:72:79: 01:c9:10:87:fb:81:e4:da:da:7c:a2:ed:aa:8a:ca:7b:82:31: 9d:98:a7:f9:8d:6e:9a:38:c9:37:3d:47:b2:a3:6c:78:f6:a9: ab:1f:c6:f1:7e:24:6e:85:46:fe:d9:64:7f:20:cc:c8:36:f2: e8:88:34:a0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3xo5RbJTia5Sp7eZ9jq8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzI4MTcwNWFhMGU2MTQzMzJhY2Q5MDAyY2YyMzk2ZmFhOWE4ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz646YLJlTteabq+Ybs3N7KnZ0zQ F9zK/ajXaCMcKjE0Vz3ZcCK1ge9wq6Vhv0oJMKqm+PGppXJCvWcA27Lxz8ymYGYM eDPTASR1BXPLVuKhNCNmOGiU8aLxcuB2ZORXa8XeG8zKl/XApuzwvMYRugGvnU9A JVxmbyx8s9hHatM7htpFBERwT0URmWNUgHza1cbIei0e1EkxkFaM6Hc4YVMva6f7 /iTUvnIXvzaTi4lr1oZTHfJuxcRW+Hpu0FR7j2ZAxf/UGJvtLQkaNUXdu2Na5ZdI CtX0isvU2HMW7EKtPRXOLv39WHNVxsxNg7M4IuPD7WMVRL3aj2dmeYxvWQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHMoFwWqDmFDMqzZACzyOW+qmogAMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvY3lnWEJhb09ZVU15ck5rQUxQSTViNnFhaUFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJUgMAwQA VOydAwQAspx6AwQAspx+MA0GCSqGSIb3DQEBCwUAA4IBAQA76RUalEFCMCBuCE5A 2kTHBlkiNfs38PNr/k8L9jniG+y1GtN3P/yfZ4ReTOXVgb4/0Zghta7Omw8yglLW UDGedIbv8GZcFayCAIaBDg+mwhvPacRH0zR8MA7QNr12PGQ7RXl7t6vKXYvrfZ3C GES94HF5UDDzTWNiP2PMBgclJTvs66hX5mobWekL2+Sl0ua7LPELNnOUxEdWct7q 8Lk35OoqfIAf3hHKx+xfiJE7mzTArReaa2l1bKswbse+jaHoGe+qcnkByRCH+4Hk 2tp8ou2qisp7gjGdmKf5jW6aOMk3PUeyo2x49qmrH8bxfiRuhUb+2WR/IMzINvLo iDSg -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:53 2026 by rpki-client