This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/CTIK34W0gV9x3uv1-r0HDqxk6oI.roa File: CTIK34W0gV9x3uv1-r0HDqxk6oI.roa (raw, json) Hash identifier: yVsgO2IBgHOLaRgSGBJBDT5TTrMQD1SCcScxIYhY8XY= Subject key identifier: 09:32:0A:DF:85:B4:81:5F:71:DE:EB:F5:FA:BD:07:0E:AC:64:EA:82 Certificate issuer: /CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14 Certificate serial: 019B7A5B5930DB8B313F0AEF2732044B8BEC Authority key identifier: 1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/CTIK34W0gV9x3uv1-r0HDqxk6oI.roa Signing time: Thu 01 Jan 2026 16:19:25 +0000 ROA not before: Thu 01 Jan 2026 16:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33932 IP address blocks: 185.228.172.0/24 maxlen: 24 185.228.173.0/24 maxlen: 24 185.228.174.0/24 maxlen: 24 185.228.175.0/24 maxlen: 24 217.150.208.0/20 maxlen: 24 217.150.208.0/24 maxlen: 24 217.150.209.0/24 maxlen: 24 217.150.210.0/24 maxlen: 24 217.150.211.0/24 maxlen: 24 217.150.212.0/24 maxlen: 24 217.150.213.0/24 maxlen: 24 217.150.214.0/24 maxlen: 24 217.150.223.0/24 maxlen: 24 2a0d:2e00::/29 maxlen: 48 2a0d:2e00:1000::/36 maxlen: 36 2a0d:2e00:1000::/48 maxlen: 48 2a0d:2e00:2000::/36 maxlen: 36 2a0d:2e00:2000::/48 maxlen: 48 2a0d:2e00:3000::/36 maxlen: 36 2a0d:2e00:3000::/48 maxlen: 48 2a0d:2e00:4000::/36 maxlen: 36 2a0d:2e00:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:59:30:db:8b:31:3f:0a:ef:27:32:04:4b:8b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8626749cbf84bcf42ebb2985b86dee830e5c14 Validity Not Before: Jan 1 16:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09320adf85b4815f71deebf5fabd070eac64ea82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:26:d3:d0:63:5f:f6:a0:81:7d:c4:f6:4f: 41:0a:18:84:9b:49:0e:5e:3e:da:dd:d4:55:92:1e: cd:e0:18:90:22:e7:56:96:40:af:49:64:74:bb:f4: 73:98:f3:f3:32:28:74:72:c0:7f:aa:50:4d:80:2a: 0f:7e:26:b9:29:8d:8a:5d:1e:da:a7:ae:a0:cd:eb: 26:7c:6d:35:90:24:78:55:77:3e:fe:56:47:75:4b: b8:a1:0b:55:92:88:c6:c7:52:a8:6a:d3:f9:d5:64: 13:7b:7b:c7:61:b9:bf:f9:f2:1c:9f:6f:28:8e:c8: e1:73:71:bd:33:0e:e0:b1:ec:21:91:65:27:ce:fe: 09:83:d8:a9:3f:09:c4:fd:73:f4:77:f6:3c:87:7e: d7:f4:13:93:51:64:00:c7:00:ad:50:b6:dc:77:62: f3:50:ff:b7:3b:5e:4a:17:c7:53:1d:77:8a:d3:35: c3:35:05:67:6b:19:1e:9d:a7:85:1a:78:04:41:c4: a7:53:ae:77:b5:8f:03:df:14:75:81:e7:92:c0:00: 61:92:96:dc:ce:74:38:bd:1d:aa:ce:24:24:71:17: cb:5e:43:e1:6d:f6:37:85:d1:c7:0e:50:95:51:f0: 4c:6d:15:80:51:a0:f0:a1:dc:8f:3e:82:0d:2c:21: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:32:0A:DF:85:B4:81:5F:71:DE:EB:F5:FA:BD:07:0E:AC:64:EA:82 X509v3 Authority Key Identifier: keyid:1D:86:26:74:9C:BF:84:BC:F4:2E:BB:29:85:B8:6D:EE:83:0E:5C:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYmdJy_hLz0Lrsphbht7oMOXBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/CTIK34W0gV9x3uv1-r0HDqxk6oI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/951c8e-4a86-4c8e-9986-0bfbad4849cd/1/HYYmdJy_hLz0Lrsphbht7oMOXBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.172.0/22 217.150.208.0/20 IPv6: 2a0d:2e00::/29 Signature Algorithm: sha256WithRSAEncryption 8c:3c:af:99:6a:c4:0e:0a:c3:1b:03:a3:65:12:95:9c:08:a0: ec:dd:67:4e:7e:c7:d2:b1:e5:17:a8:e0:f9:0a:29:11:a8:c7: e4:f2:a3:9b:5d:74:95:43:f5:8f:ce:63:91:2c:ca:bf:ed:bc: c8:5c:62:3c:23:ba:16:6f:87:d8:93:ba:0d:c4:46:b7:7a:78: fe:8e:ef:2e:3a:f9:c2:e3:69:46:34:c6:f2:39:fe:12:98:3c: 19:c1:9c:cb:59:4f:23:64:ac:30:b8:eb:79:fc:b5:9b:37:7f: b1:ac:17:16:73:e8:ee:b0:89:63:54:79:58:68:5f:72:fb:36: 48:af:03:f0:a2:20:f4:6c:51:9b:a2:f3:18:b2:b1:2c:29:6e: 16:95:c5:a6:eb:c2:cb:b3:8a:3b:7b:8f:d8:0f:a9:34:ae:1f: d9:38:dd:c6:ac:34:b2:c6:6a:1e:02:f8:b0:10:d5:e7:94:d5: be:d5:43:31:3a:1a:63:03:58:95:6a:c1:41:c6:53:31:a3:58: 06:ce:97:09:aa:4e:6f:6b:8e:87:3d:e6:e4:f0:e9:f6:02:56: a4:5e:e1:45:cb:1b:7c:26:68:c6:32:bf:14:03:1a:c1:e6:db: 38:8c:9f:09:9c:22:33:3f:e3:34:b8:b5:b6:25:fa:31:b1:4e: 5a:dc:c3:de -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W1kw24sxPwrvJzIES4vsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODYyNjc0OWNiZjg0YmNmNDJlYmIyOTg1Yjg2ZGVlODMw ZTVjMTQwHhcNMjYwMTAxMTYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTMyMGFkZjg1YjQ4MTVmNzFkZWViZjVmYWJkMDcwZWFjNjRlYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzkm09BjX/aggX3E9k9BChiEm0kO Xj7a3dRVkh7N4BiQIudWlkCvSWR0u/RzmPPzMih0csB/qlBNgCoPfia5KY2KXR7a p66gzesmfG01kCR4VXc+/lZHdUu4oQtVkojGx1KoatP51WQTe3vHYbm/+fIcn28o jsjhc3G9Mw7gsewhkWUnzv4Jg9ipPwnE/XP0d/Y8h37X9BOTUWQAxwCtULbcd2Lz UP+3O15KF8dTHXeK0zXDNQVnaxkenaeFGngEQcSnU653tY8D3xR1geeSwABhkpbc znQ4vR2qziQkcRfLXkPhbfY3hdHHDlCVUfBMbRWAUaDwodyPPoINLCGIHwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAkyCt+FtIFfcd7r9fq9Bw6sZOqCMB8GA1UdIwQY MBaAFB2GJnScv4S89C67KYW4be6DDlwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYt MGJmYmFkNDg0OWNkLzEvQ1RJSzM0VzBnVjl4M3V2MS1yMEhEcXhrNm9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85NTFjOGUtNGE4Ni00YzhlLTk5ODYtMGJmYmFkNDg0OWNk LzEvSFlZbWRKeV9oTHowTHJzcGhiaHQ3b01PWEJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCueSsAwQE 2ZbQMA0EAgACMAcDBQMqDS4AMA0GCSqGSIb3DQEBCwUAA4IBAQCMPK+ZasQOCsMb A6NlEpWcCKDs3WdOfsfSseUXqOD5CikRqMfk8qObXXSVQ/WPzmORLMq/7bzIXGI8 I7oWb4fYk7oNxEa3enj+ju8uOvnC42lGNMbyOf4SmDwZwZzLWU8jZKwwuOt5/LWb N3+xrBcWc+jusIljVHlYaF9y+zZIrwPwoiD0bFGbovMYsrEsKW4WlcWm68LLs4o7 e4/YD6k0rh/ZON3GrDSyxmoeAviwENXnlNW+1UMxOhpjA1iVasFBxlMxo1gGzpcJ qk5va46HPebk8On2AlakXuFFyxt8JmjGMr8UAxrB5ts4jJ8JnCIzP+M0uLW2Jfox sU5a3MPe -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:36 2026 by rpki-client