This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa File: cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa (raw, json) Hash identifier: 9KAJy5B5/gYF9JmztZmHa3vCIGRv+J2QDYi/xV8zpFc= Subject key identifier: 71:D3:30:0F:13:B0:B2:63:A0:9D:72:AD:2B:18:10:4B:D1:30:1B:9B Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab Certificate serial: 019B78A3488600A9F7FA21C3F09558987231 Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211432 IP address blocks: 185.193.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:48:86:00:a9:f7:fa:21:c3:f0:95:58:98:72:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71d3300f13b0b263a09d72ad2b18104bd1301b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:69:92:37:d5:e0:62:ae:63:82:40:4d:c8: 7b:7b:3d:36:73:65:65:d2:b8:62:31:f4:df:5e:0c: 35:db:f9:2b:41:eb:ce:d1:a1:1f:9c:e6:4f:d0:26: b6:74:59:ee:fc:1f:62:db:b6:00:56:3e:72:c4:67: 60:a5:29:c6:06:b8:db:83:c2:1c:4a:5e:9d:15:d6: b1:4b:d7:0b:ba:ba:b7:12:1b:61:e1:5e:5e:70:0b: 8a:4d:42:11:78:85:08:2c:43:9e:a2:40:16:d0:a6: 7d:7e:62:d6:f0:69:77:94:66:a2:02:87:88:e8:d8: c6:be:01:53:2a:84:be:c1:3f:52:02:dd:3e:6a:6e: 00:3c:9a:34:38:32:a1:03:03:11:ed:fa:7f:36:e7: f8:45:78:03:eb:fd:87:09:37:29:3e:98:e6:61:bb: f7:72:18:1e:8a:92:f4:8b:e1:15:a4:35:b7:cd:6a: f1:d8:cc:4d:24:2b:9d:f8:b7:98:c8:e7:d8:0b:e4: be:39:31:e6:96:b3:5d:bc:ee:1b:2d:c0:e5:97:42: 50:42:e0:d7:24:d5:46:fc:fe:e1:e8:57:35:ed:76: 38:c8:e4:15:24:b4:dc:9e:de:4f:f0:5e:66:72:c5: 5b:06:26:c3:3d:a8:24:03:8a:dc:70:18:cc:2e:70: 39:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D3:30:0F:13:B0:B2:63:A0:9D:72:AD:2B:18:10:4B:D1:30:1B:9B X509v3 Authority Key Identifier: keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/cdMwDxOwsmOgnXKtKxgQS9EwG5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.164.0/24 Signature Algorithm: sha256WithRSAEncryption 88:53:bb:c7:a9:07:e3:0b:c0:4f:f7:d4:bb:f2:80:86:f6:87: 4e:5f:3b:d0:9e:41:ae:8c:05:ae:aa:39:55:70:1f:f5:bd:1f: 24:46:93:1d:81:bc:cd:ef:0f:4f:f9:3a:9b:a1:63:89:65:fd: b3:04:ce:de:2b:09:53:0d:cc:1c:0a:e6:0c:8b:c7:4f:0c:07: 65:81:07:8c:32:fa:aa:8e:8e:03:da:ab:8e:a9:29:f7:1a:87: 8e:fd:55:04:39:fe:0a:f6:b2:b3:28:fc:67:64:48:dd:6c:14: c8:13:21:f5:c7:1c:a3:73:74:c6:96:da:8b:09:18:ea:9d:79: 13:4d:6b:33:d5:5f:c8:59:bc:c9:15:e1:53:f8:0e:40:94:ef: 25:fd:c2:75:8b:11:cb:26:64:2b:1f:4c:e3:0a:a0:08:25:70: b4:78:e3:e1:87:ab:97:fa:ee:eb:87:f3:9e:fe:4d:2b:ae:9c: 41:d8:cd:53:1c:73:7b:02:e8:c6:33:c8:a6:d2:cc:5e:af:f0: 1b:a5:cd:c2:e8:85:93:fb:59:a5:49:e7:04:6d:3f:b1:2d:97: 27:ff:28:5f:fd:d2:63:0d:a1:ce:15:c9:2e:3f:7f:0d:58:9d: 73:27:d9:4d:91:c9:43:04:e5:75:bf:76:5f:0d:b1:2a:bd:a7: da:87:51:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0iGAKn3+iHD8JVYmHIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDZiNTlhOTNlMzI0MDgzZmJjYTQyMzdlNDdlOWY1ZWJm MzcxYWIwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWQzMzAwZjEzYjBiMjYzYTA5ZDcyYWQyYjE4MTA0YmQxMzAxYjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz9pkjfV4GKuY4JATch7ez02c2Vl 0rhiMfTfXgw12/krQevO0aEfnOZP0Ca2dFnu/B9i27YAVj5yxGdgpSnGBrjbg8Ic Sl6dFdaxS9cLurq3Ehth4V5ecAuKTUIReIUILEOeokAW0KZ9fmLW8Gl3lGaiAoeI 6NjGvgFTKoS+wT9SAt0+am4APJo0ODKhAwMR7fp/Nuf4RXgD6/2HCTcpPpjmYbv3 chgeipL0i+EVpDW3zWrx2MxNJCud+LeYyOfYC+S+OTHmlrNdvO4bLcDll0JQQuDX JNVG/P7h6Fc17XY4yOQVJLTcnt5P8F5mcsVbBibDPagkA4rccBjMLnA5cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHHTMA8TsLJjoJ1yrSsYEEvRMBubMB8GA1UdIwQY MBaAFMnWtZqT4yQIP7ykI35H6fXr83GrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTIt YjkyMTFlMWZjMWFjLzEvY2RNd0R4T3dzbU9nblhLdEt4Z1FTOUV3RzVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82ODJiMDctNzczZi00NmZkLTgyZTItYjkyMTFlMWZjMWFj LzEveWRhMW1wUGpKQWdfdktRamZrZnA5ZXZ6Y2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucGkMA0G CSqGSIb3DQEBCwUAA4IBAQCIU7vHqQfjC8BP99S78oCG9odOXzvQnkGujAWuqjlV cB/1vR8kRpMdgbzN7w9P+TqboWOJZf2zBM7eKwlTDcwcCuYMi8dPDAdlgQeMMvqq jo4D2quOqSn3GoeO/VUEOf4K9rKzKPxnZEjdbBTIEyH1xxyjc3TGltqLCRjqnXkT TWsz1V/IWbzJFeFT+A5AlO8l/cJ1ixHLJmQrH0zjCqAIJXC0eOPhh6uX+u7rh/Oe /k0rrpxB2M1THHN7AujGM8im0sxer/Abpc3C6IWT+1mlSecEbT+xLZcn/yhf/dJj DaHOFckuP38NWJ1zJ9lNkclDBOV1v3ZfDbEqvafah1E4 -----END CERTIFICATE-----Generated at Sun Jan 25 16:41:01 2026 by rpki-client