This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa File: CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa (raw, json) Hash identifier: yl/TzXvizjcQkXaqTrcqSMtt/sGUH2HO4v5PSOx89k0= Subject key identifier: 0A:71:82:D7:10:5C:4B:F1:F0:D2:5E:CE:60:B9:45:82:63:11:82:13 Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Certificate serial: 019B78A264ED905002152AC168769729B9A3 Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa Signing time: Thu 01 Jan 2026 08:17:47 +0000 ROA not before: Thu 01 Jan 2026 08:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207456 IP address blocks: 91.197.32.0/22 maxlen: 22 185.239.204.0/22 maxlen: 22 185.239.207.0/24 maxlen: 24 185.241.156.0/22 maxlen: 22 193.108.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:64:ed:90:50:02:15:2a:c1:68:76:97:29:b9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10 Validity Not Before: Jan 1 08:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a7182d7105c4bf1f0d25ece60b9458263118213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:74:65:72:5e:f3:0d:7f:b9:30:a0:ac:c3:29: 93:51:28:48:89:93:95:5d:ea:66:ec:4d:e5:d0:7e: 35:94:1b:c2:b7:c9:2f:5c:97:62:a9:7a:03:97:28: 29:73:ee:86:70:46:57:e9:27:9b:6a:e9:86:4b:d6: 45:0f:13:e9:d7:11:40:c0:0a:35:c8:86:f0:08:57: 27:f9:86:f0:82:32:e3:5e:5d:b3:d4:48:d2:d4:37: bf:d7:bc:6f:f2:7a:1b:9b:31:12:06:87:32:a9:6d: 11:80:77:78:6f:30:85:ce:06:f7:14:31:49:97:c7: a4:f2:60:4c:56:54:a4:48:dd:8f:e4:16:2a:d5:c9: a8:f9:8f:18:d6:91:3b:1f:81:23:c4:db:d3:3e:2f: 17:0e:47:17:03:87:d1:91:a4:33:e2:6d:78:0e:90: 46:7f:37:80:2d:d8:05:da:f5:d3:a1:86:8d:7d:63: 84:b5:88:5b:08:18:fe:c1:f7:c1:ef:89:23:53:80: 83:2f:f7:f7:f7:1c:d1:a6:ff:2a:45:c9:41:d9:07: 64:4a:d3:da:4c:45:25:6f:3a:c3:6c:1e:48:26:97: ec:47:03:c4:8d:08:28:dd:5a:e4:c6:94:95:e0:d3: 16:04:34:ef:4b:40:ba:58:42:1e:70:9c:93:c6:03: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:71:82:D7:10:5C:4B:F1:F0:D2:5E:CE:60:B9:45:82:63:11:82:13 X509v3 Authority Key Identifier: keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.197.32.0/22 185.239.204.0/22 185.241.156.0/22 193.108.84.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:6d:19:7f:ea:10:2c:9a:7a:1b:2c:2d:f7:a6:57:b5:f5:2b: d0:94:78:be:ac:84:97:a3:bf:25:38:7e:fd:f0:26:e3:bd:9f: 84:96:4c:e0:38:10:4f:0f:0d:d4:53:3b:1f:07:ea:0a:5b:a2: 3c:45:a2:dc:bb:3f:d0:c7:e7:6f:2d:15:19:20:9f:8c:88:bc: 42:9c:46:6a:c8:0f:55:84:e9:56:66:50:d4:58:46:1f:da:a6: 07:9b:d3:31:65:66:9d:69:94:b0:ee:d6:e8:b5:75:24:6e:9b: 84:af:9b:ec:10:3d:62:b0:ce:f8:00:98:af:80:68:31:b1:52: 56:89:2a:51:b0:ca:3f:92:21:9c:0e:17:01:76:34:d5:c0:c0: 09:ab:f3:8d:cb:e4:ed:3c:c4:01:66:27:5c:71:c7:9a:9b:b8: 80:3b:96:c7:33:d5:53:f3:a1:c8:c5:39:9c:2e:9b:e3:f7:64: 15:d5:62:ec:67:32:00:f3:3f:c5:de:da:5a:72:b6:a6:fe:97: ae:9f:a9:51:7b:7a:36:8c:4e:b3:ab:f5:36:67:bc:31:30:6b: 32:fb:f6:f5:19:52:03:ad:78:75:c0:cd:06:2e:53:33:9d:95: 0d:c3:cb:5a:66:cb:31:36:92:6b:ce:a0:09:be:3d:80:7c:6b: 8d:8c:3a:65 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4omTtkFACFSrBaHaXKbmjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmMmEwZmEyMDM4MzMzMmEzZjQxNGYwNTQ3NTNhMGI2MGIy NWJhMTAwHhcNMjYwMTAxMDgxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTcxODJkNzEwNWM0YmYxZjBkMjVlY2U2MGI5NDU4MjYzMTE4MjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXRlcl7zDX+5MKCswymTUShIiZOV Xepm7E3l0H41lBvCt8kvXJdiqXoDlygpc+6GcEZX6SebaumGS9ZFDxPp1xFAwAo1 yIbwCFcn+YbwgjLjXl2z1EjS1De/17xv8nobmzESBocyqW0RgHd4bzCFzgb3FDFJ l8ek8mBMVlSkSN2P5BYq1cmo+Y8Y1pE7H4EjxNvTPi8XDkcXA4fRkaQz4m14DpBG fzeALdgF2vXToYaNfWOEtYhbCBj+wffB74kjU4CDL/f39xzRpv8qRclB2QdkStPa TEUlbzrDbB5IJpfsRwPEjQgo3VrkxpSV4NMWBDTvS0C6WEIecJyTxgNLQQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFApxgtcQXEvx8NJezmC5RYJjEYITMB8GA1UdIwQY MBaAFC8qD6IDgzMqP0FPBUdToLYLJboQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMt NTVhOTMwZmMwYzcxLzEvQ25HQzF4QmNTX0h3MGw3T1lMbEZnbU1SZ2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9kNmQzMGItMGI5Yi00MjllLTg0MTMtNTVhOTMwZmMwYzcx LzEvTHlvUG9nT0RNeW9fUVU4RlIxT2d0Z3NsdWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW8UgAwQC ue/MAwQCufGcAwQCwWxUMA0GCSqGSIb3DQEBCwUAA4IBAQBqbRl/6hAsmnobLC33 ple19SvQlHi+rISXo78lOH798CbjvZ+ElkzgOBBPDw3UUzsfB+oKW6I8RaLcuz/Q x+dvLRUZIJ+MiLxCnEZqyA9VhOlWZlDUWEYf2qYHm9MxZWadaZSw7tbotXUkbpuE r5vsED1isM74AJivgGgxsVJWiSpRsMo/kiGcDhcBdjTVwMAJq/ONy+TtPMQBZidc cceam7iAO5bHM9VT86HIxTmcLpvj92QV1WLsZzIA8z/F3tpacram/peun6lRe3o2 jE6zq/U2Z7wxMGsy+/b1GVIDrXh1wM0GLlMznZUNw8taZssxNpJrzqAJvj2AfGuN jDpl -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:07 2026 by rpki-client