This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/CsyMHLJsqJsWQMS5RZVl3HT44Ig.roa File: CsyMHLJsqJsWQMS5RZVl3HT44Ig.roa (raw, json) Hash identifier: eTv1DPwyjyPAv2oxMpOhG4oCNxnU96J8zTE8wkeBsrA= Subject key identifier: 0A:CC:8C:1C:B2:6C:A8:9B:16:40:C4:B9:45:95:65:DC:74:F8:E0:88 Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Certificate serial: 019B78A3435C504FF88F30908C79503B401E Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/CsyMHLJsqJsWQMS5RZVl3HT44Ig.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48645 IP address blocks: 94.143.208.0/21 maxlen: 24 185.63.20.0/22 maxlen: 24 2a02:27c8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:43:5c:50:4f:f8:8f:30:90:8c:79:50:3b:40:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0acc8c1cb26ca89b1640c4b9459565dc74f8e088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bd:19:7b:e8:5f:39:bc:f3:2e:09:58:a0:d6: b1:fd:5d:14:79:1e:20:30:be:4d:22:53:3b:de:49: a3:b4:62:29:92:12:4c:43:2c:9e:e5:84:70:95:9c: b5:45:8c:3c:c6:65:2f:97:87:14:e1:b2:5f:bf:8b: f9:d6:4d:ff:f2:45:b1:bc:e2:98:f7:e9:8b:19:67: b1:0d:12:e3:89:6e:5c:b5:68:d1:08:7b:5d:f2:fa: 9f:ff:b3:ae:2c:e9:ef:47:6b:16:e0:c8:0a:7b:2a: bd:c9:29:ff:f9:82:56:f8:5c:ed:73:e1:e3:39:5c: 67:bf:75:73:c3:ea:21:03:85:e4:e6:6d:5d:b5:fd: 2e:b0:6f:a0:e4:3b:70:90:4b:1f:5c:e4:d9:67:0f: b0:87:14:93:c4:75:ba:7f:bf:6c:09:2b:7d:c4:e5: e7:ef:b1:69:b5:99:1b:08:4f:a0:3b:54:a4:aa:3d: 56:f3:d9:2d:05:c3:4a:52:f0:75:09:88:68:b5:70: 91:f0:ef:f2:47:ce:72:f5:87:53:cd:2e:08:fc:68: 80:32:d4:27:27:8a:82:19:8f:c4:f3:ca:1b:2f:ba: 3a:25:eb:e4:5c:02:2c:8c:a8:fa:e4:fe:68:66:51: 33:cc:dd:03:2c:1f:00:8b:9d:15:53:b6:ca:3c:30: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CC:8C:1C:B2:6C:A8:9B:16:40:C4:B9:45:95:65:DC:74:F8:E0:88 X509v3 Authority Key Identifier: keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/CsyMHLJsqJsWQMS5RZVl3HT44Ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.143.208.0/21 185.63.20.0/22 IPv6: 2a02:27c8::/32 Signature Algorithm: sha256WithRSAEncryption 0f:73:17:0a:a5:9a:10:b9:79:a7:56:5b:64:b0:b1:97:54:ab: 6c:ba:aa:87:55:8d:56:ee:e5:7c:07:fc:c4:95:6c:55:1b:de: 8b:71:95:ec:2a:bf:0f:dd:de:b6:c0:90:1e:0d:de:61:bd:e1: 20:f2:ba:3a:d2:ef:4f:4f:92:44:75:1a:be:fc:92:31:92:ac: f7:9b:34:ec:fc:28:42:8e:12:10:c2:62:5b:ff:7f:2f:f1:79: 72:21:0d:62:e1:f0:43:e6:e2:86:d4:73:b4:b9:8e:1a:fa:ca: 44:e8:3b:bf:be:46:b3:92:93:c5:8e:73:7f:1a:8f:60:16:3b: d8:b7:26:82:97:93:4a:73:89:e3:49:f3:82:70:bf:59:a4:f1: b1:83:b3:e8:f0:6b:f1:cf:83:a6:93:cf:e1:79:e3:ca:14:a4: 5c:a2:88:c9:4f:06:5a:64:11:ee:6f:18:04:7f:0a:55:89:fe: 6c:d3:82:6f:e2:2a:d7:44:fc:92:52:88:42:4a:b4:85:9e:ba: 11:3c:05:d6:aa:ca:9a:26:1b:4c:20:d3:2d:c4:11:fa:79:3c: 95:71:fa:b3:20:98:80:62:a9:94:b1:f0:ab:05:46:66:6b:92: 68:fa:be:e6:96:e3:72:5d:ae:1d:68:ea:94:34:e8:01:2c:34: 3a:b0:a4:53 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4o0NcUE/4jzCQjHlQO0AeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4MDAzYzk3OTYwM2Y3Y2VhMTJhY2EwMWViYzIwNTdjMzZm ZDdmMzAwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWNjOGMxY2IyNmNhODliMTY0MGM0Yjk0NTk1NjVkYzc0ZjhlMDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr0Ze+hfObzzLglYoNax/V0UeR4g ML5NIlM73kmjtGIpkhJMQyye5YRwlZy1RYw8xmUvl4cU4bJfv4v51k3/8kWxvOKY 9+mLGWexDRLjiW5ctWjRCHtd8vqf/7OuLOnvR2sW4MgKeyq9ySn/+YJW+Fztc+Hj OVxnv3Vzw+ohA4Xk5m1dtf0usG+g5DtwkEsfXOTZZw+whxSTxHW6f79sCSt9xOXn 77FptZkbCE+gO1Skqj1W89ktBcNKUvB1CYhotXCR8O/yR85y9YdTzS4I/GiAMtQn J4qCGY/E88obL7o6JevkXAIsjKj65P5oZlEzzN0DLB8Ai50VU7bKPDCxYwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFArMjByybKibFkDEuUWVZdx0+OCIMB8GA1UdIwQY MBaAFMgAPJeWA/fOoSrKAevCBXw2/X8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMt MDcyMjg4MTJkMDE3LzEvQ3N5TUhMSnNxSnNXUU1TNVJaVmwzSFQ0NElnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8wM2NhMDEtYjk1OS00MWE2LTgxMzMtMDcyMjg4MTJkMDE3 LzEveUFBOGw1WUQ5ODZoS3NvQjY4SUZmRGI5ZnpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXo/QAwQC uT8UMA0EAgACMAcDBQAqAifIMA0GCSqGSIb3DQEBCwUAA4IBAQAPcxcKpZoQuXmn VltksLGXVKtsuqqHVY1W7uV8B/zElWxVG96LcZXsKr8P3d62wJAeDd5hveEg8ro6 0u9PT5JEdRq+/JIxkqz3mzTs/ChCjhIQwmJb/38v8XlyIQ1i4fBD5uKG1HO0uY4a +spE6Du/vkazkpPFjnN/Go9gFjvYtyaCl5NKc4njSfOCcL9ZpPGxg7Po8Gvxz4Om k8/heePKFKRcoojJTwZaZBHubxgEfwpVif5s04Jv4irXRPySUohCSrSFnroRPAXW qsqaJhtMINMtxBH6eTyVcfqzIJiAYqmUsfCrBUZma5Jo+r7mluNyXa4daOqUNOgB LDQ6sKRT -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:05 2026 by rpki-client