This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Cawe25tqfGGJs6n4gKI57FsVYWg.roa File: Cawe25tqfGGJs6n4gKI57FsVYWg.roa (raw, json) Hash identifier: NB+MRtNZHu4vvSgnR8KFr0cA3CZnUgip7ZoVVLCCGZM= Subject key identifier: 09:AC:1E:DB:9B:6A:7C:61:89:B3:A9:F8:80:A2:39:EC:5B:15:61:68 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019B7F156C8A98173FCA9E92477DEF2ED78B Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Cawe25tqfGGJs6n4gKI57FsVYWg.roa Signing time: Fri 02 Jan 2026 14:21:09 +0000 ROA not before: Fri 02 Jan 2026 14:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200088 IP address blocks: 92.63.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6c:8a:98:17:3f:ca:9e:92:47:7d:ef:2e:d7:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09ac1edb9b6a7c6189b3a9f880a239ec5b156168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cd:e9:b2:e8:be:19:9c:47:41:55:4f:fe:ff: af:6e:2c:58:e9:9b:c8:96:03:ec:eb:d4:3b:90:19: 2c:35:4e:79:02:29:47:a3:86:a9:3e:c7:6e:ac:53: 92:3c:93:ea:cd:5a:15:90:d7:81:fd:52:b6:0e:9f: a7:5d:4b:c1:9f:3a:16:e0:72:7d:69:6a:64:2d:17: 55:29:96:bf:be:22:52:98:d8:e8:39:1f:af:e9:9e: be:04:a6:e8:ca:78:14:30:79:fd:7e:e6:ec:c2:07: 8b:89:9e:4d:c1:5b:ff:f6:a4:00:25:54:3a:d0:87: eb:9d:a3:c7:63:c4:62:79:5e:58:db:4a:45:87:78: 6f:0a:da:28:1f:61:03:8d:46:1b:35:74:73:20:80: 48:8f:4b:6b:35:4c:1a:5f:d3:24:5c:7a:c2:09:95: 26:ac:18:ec:f1:96:df:f2:9d:cb:6e:88:74:6d:51: c1:d0:4b:a8:29:67:34:bd:d9:64:d3:cf:b5:b8:3c: 94:f8:bb:94:9c:e2:85:f6:9b:9d:8e:fe:c7:6d:50: 75:57:58:5b:21:20:7e:cb:7d:b0:b7:91:fe:07:f7: d9:a5:7d:4b:de:fa:e4:c2:85:9d:ee:2e:87:23:a9: bd:cd:cb:7b:66:c4:b0:40:77:d4:69:fc:b8:06:29: 32:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AC:1E:DB:9B:6A:7C:61:89:B3:A9:F8:80:A2:39:EC:5B:15:61:68 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/Cawe25tqfGGJs6n4gKI57FsVYWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.63.227.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e3:6f:e4:4e:71:2c:2d:5f:c5:5c:04:c2:e4:a7:cb:2c:1e: b3:1a:86:61:30:4f:7d:e8:1d:03:e3:ba:80:21:ce:c7:6d:5f: de:e0:35:ee:85:e1:85:22:9f:05:5c:0a:54:b7:fd:6e:87:32: 1a:e7:67:e9:23:1d:3d:82:5e:70:fc:7f:01:74:38:7e:eb:b3: 51:db:00:28:83:24:69:81:24:ed:8c:da:42:5c:52:a7:58:28: 9c:3c:13:38:c8:56:24:ed:5c:39:ec:13:07:a6:e4:36:c6:3b: be:bc:1e:bd:d4:d8:5a:06:ec:1d:c6:71:71:b2:bc:2a:51:2c: e5:36:9b:fc:17:9a:6c:2a:34:95:57:47:e5:88:e0:45:ea:22: d7:e1:a6:81:ad:17:2d:e9:c8:c5:f0:30:bb:63:d0:fd:0b:eb: 03:08:72:34:21:88:10:76:ff:15:ac:2c:8c:2e:a0:d6:9f:78: 06:22:30:b8:d6:ee:c5:76:7a:02:f3:e3:d1:2a:3e:ec:8a:c4: 66:5f:b3:eb:9d:f3:e0:42:60:59:3e:42:51:64:7f:69:f0:7c: f8:e2:10:d2:f4:e6:4f:de:3a:86:26:0e:4b:60:df:26:f0:45: e8:99:22:67:e6:db:45:b3:3e:4c:56:76:19:5f:bd:41:87:72: 28:b1:4b:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FWyKmBc/yp6SR33vLteLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWFjMWVkYjliNmE3YzYxODliM2E5Zjg4MGEyMzllYzViMTU2MTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo83psui+GZxHQVVP/v+vbixY6ZvI lgPs69Q7kBksNU55AilHo4apPsdurFOSPJPqzVoVkNeB/VK2Dp+nXUvBnzoW4HJ9 aWpkLRdVKZa/viJSmNjoOR+v6Z6+BKboyngUMHn9fubswgeLiZ5NwVv/9qQAJVQ6 0IfrnaPHY8RieV5Y20pFh3hvCtooH2EDjUYbNXRzIIBIj0trNUwaX9MkXHrCCZUm rBjs8Zbf8p3Lboh0bVHB0EuoKWc0vdlk08+1uDyU+LuUnOKF9pudjv7HbVB1V1hb ISB+y32wt5H+B/fZpX1L3vrkwoWd7i6HI6m9zct7ZsSwQHfUafy4BikyJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmsHtubanxhibOp+ICiOexbFWFoMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvQ2F3ZTI1dHFmR0dKczZuNGdLSTU3RnNWWVdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD/jMA0G CSqGSIb3DQEBCwUAA4IBAQCO42/kTnEsLV/FXATC5KfLLB6zGoZhME996B0D47qA Ic7HbV/e4DXuheGFIp8FXApUt/1uhzIa52fpIx09gl5w/H8BdDh+67NR2wAogyRp gSTtjNpCXFKnWCicPBM4yFYk7Vw57BMHpuQ2xju+vB691NhaBuwdxnFxsrwqUSzl Npv8F5psKjSVV0fliOBF6iLX4aaBrRct6cjF8DC7Y9D9C+sDCHI0IYgQdv8VrCyM LqDWn3gGIjC41u7FdnoC8+PRKj7sisRmX7PrnfPgQmBZPkJRZH9p8Hz44hDS9OZP 3jqGJg5LYN8m8EXomSJn5ttFsz5MVnYZX71Bh3IosUth -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:42 2026 by rpki-client