This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/cu6Wrxo4ZqZMU9GF7q_e9kdBGlo.roa File: cu6Wrxo4ZqZMU9GF7q_e9kdBGlo.roa (raw, json) Hash identifier: tMjNINPr3lKeaeyyRSxR6dj8/4hk+Ftm9fb3jtQie/c= Subject key identifier: 72:EE:96:AF:1A:38:66:A6:4C:53:D1:85:EE:AF:DE:F6:47:41:1A:5A Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f Certificate serial: 019BD64CE41371AC28849FB5371EA798C3DE Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/cu6Wrxo4ZqZMU9GF7q_e9kdBGlo.roa Signing time: Mon 19 Jan 2026 12:48:41 +0000 ROA not before: Mon 19 Jan 2026 12:48:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215373 IP address blocks: 37.203.35.0/24 maxlen: 24 37.203.37.0/24 maxlen: 24 37.203.38.0/24 maxlen: 24 89.111.9.0/24 maxlen: 24 89.111.10.0/24 maxlen: 24 89.111.19.0/24 maxlen: 24 89.111.22.0/24 maxlen: 24 89.111.25.0/24 maxlen: 24 89.111.26.0/23 maxlen: 23 89.111.26.0/24 maxlen: 24 89.111.27.0/24 maxlen: 24 89.111.28.0/22 maxlen: 22 89.111.28.0/24 maxlen: 24 89.111.29.0/24 maxlen: 24 89.111.30.0/24 maxlen: 24 89.111.31.0/24 maxlen: 24 185.219.156.0/22 maxlen: 22 185.219.156.0/24 maxlen: 24 185.219.157.0/24 maxlen: 24 185.219.158.0/24 maxlen: 24 185.219.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:4c:e4:13:71:ac:28:84:9f:b5:37:1e:a7:98:c3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f Validity Not Before: Jan 19 12:48:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72ee96af1a3866a64c53d185eeafdef647411a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:55:ad:0b:05:21:73:80:3d:8d:9d:8c:bc:bc: ee:cb:92:de:8f:13:bc:2e:57:97:85:98:14:7c:a7: b1:fd:cc:97:a1:b5:23:d9:58:8e:a6:40:39:72:cd: 44:08:ec:9f:02:02:23:4c:16:c2:bb:c0:6c:37:b4: 75:43:05:a3:69:6c:e2:2b:56:0f:6b:78:4f:df:ac: 87:27:59:b2:2b:85:da:77:18:70:20:05:80:c1:89: c4:e4:0c:53:6c:32:7f:11:cb:23:27:53:8e:73:50: 21:96:00:d0:61:b5:b6:be:43:49:b4:80:53:cb:09: 7e:a8:3d:ea:49:25:24:c5:4b:20:16:58:72:da:1b: 70:38:63:d5:13:ea:20:83:03:56:ab:78:6f:8c:91: ae:fa:dc:19:62:0e:7d:77:c3:e1:be:bb:53:16:5e: 41:19:a3:c9:d0:f3:96:89:b7:d4:3a:d9:9c:19:3d: e9:c8:ee:64:a2:11:4f:28:b1:97:49:a3:8a:f2:0c: 81:8b:fe:94:08:6b:87:4c:07:4e:8c:e7:28:b6:a5: 0e:34:61:4a:f1:b9:78:9c:59:e4:6d:79:47:90:fe: 7f:24:e7:86:63:3c:20:6c:ba:83:fb:ec:00:37:f0: 89:b9:fa:eb:c1:c1:53:38:42:68:db:20:94:2e:46: bd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EE:96:AF:1A:38:66:A6:4C:53:D1:85:EE:AF:DE:F6:47:41:1A:5A X509v3 Authority Key Identifier: keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/cu6Wrxo4ZqZMU9GF7q_e9kdBGlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.35.0/24 37.203.37.0-37.203.38.255 89.111.9.0-89.111.10.255 89.111.19.0/24 89.111.22.0/24 89.111.25.0-89.111.31.255 185.219.156.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:28:b9:09:b4:49:a6:c1:1f:b9:3c:85:e0:59:4e:a6:5f:38: 2b:d7:88:88:e0:3c:18:8d:9e:f8:fd:ca:3e:28:6b:c6:c9:d9: 1b:bf:f8:3e:1f:76:3f:dc:b9:aa:31:8c:bc:58:d7:02:05:e8: e4:25:2f:56:a9:46:8e:96:f8:b8:12:9c:77:a5:b0:92:4c:1f: 46:37:69:2b:4f:59:ab:1e:eb:8c:ec:96:02:8d:47:f5:e9:bd: cd:ce:16:d4:ed:9d:0f:fa:86:a8:47:39:e6:53:f7:47:87:58: d8:99:75:4b:ce:09:31:9b:2e:b7:c0:54:26:92:f3:3f:74:81: 6e:21:a3:57:e3:b8:91:4f:ae:fd:d6:72:5d:63:ef:2d:25:00: 09:4b:33:02:f7:26:e5:1b:ee:4a:b1:23:e3:20:f1:49:08:bc: e6:58:d0:77:b1:8d:86:29:ad:33:d1:7f:95:54:6a:e8:89:70: e3:bd:d3:26:2e:26:25:40:27:9d:bc:28:e8:48:15:84:67:0d: c2:f2:a9:a4:b6:8d:47:e0:56:3f:b4:38:51:0e:1c:fa:d0:40: 84:ca:65:33:2e:67:03:b7:1a:f1:ae:4c:df:b9:1f:f5:ec:20: 7b:70:6d:8f:8e:70:1e:ea:18:13:3e:8d:52:01:89:6a:e8:84: a9:a8:35:93 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZvWTOQTcawohJ+1Nx6nmMPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3 NGRlMGYwHhcNMjYwMTE5MTI0ODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmVlOTZhZjFhMzg2NmE2NGM1M2QxODVlZWFmZGVmNjQ3NDExYTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlWtCwUhc4A9jZ2MvLzuy5LejxO8 LleXhZgUfKex/cyXobUj2ViOpkA5cs1ECOyfAgIjTBbCu8BsN7R1QwWjaWziK1YP a3hP36yHJ1myK4XadxhwIAWAwYnE5AxTbDJ/EcsjJ1OOc1AhlgDQYbW2vkNJtIBT ywl+qD3qSSUkxUsgFlhy2htwOGPVE+oggwNWq3hvjJGu+twZYg59d8PhvrtTFl5B GaPJ0POWibfUOtmcGT3pyO5kohFPKLGXSaOK8gyBi/6UCGuHTAdOjOcotqUONGFK 8bl4nFnkbXlHkP5/JOeGYzwgbLqD++wAN/CJufrrwcFTOEJo2yCULka9PQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFHLulq8aOGamTFPRhe6v3vZHQRpaMB8GA1UdIwQY MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt YWM2N2EzNmU0YWFiLzEvY3U2V3J4bzRacVpNVTlHRjdxX2U5a2RCR2xvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAJcsjMAwD BAAlyyUDBAAlyyYwDAMEAFlvCQMEAFlvCgMEAFlvEwMEAFlvFjAMAwQAWW8ZAwQF WW8AAwQCuducMA0GCSqGSIb3DQEBCwUAA4IBAQCdKLkJtEmmwR+5PIXgWU6mXzgr 14iI4DwYjZ74/co+KGvGydkbv/g+H3Y/3LmqMYy8WNcCBejkJS9WqUaOlvi4Epx3 pbCSTB9GN2krT1mrHuuM7JYCjUf16b3NzhbU7Z0P+oaoRznmU/dHh1jYmXVLzgkx my63wFQmkvM/dIFuIaNX47iRT6791nJdY+8tJQAJSzMC9yblG+5KsSPjIPFJCLzm WNB3sY2GKa0z0X+VVGroiXDjvdMmLiYlQCedvCjoSBWEZw3C8qmkto1H4FY/tDhR Dhz60ECEymUzLmcDtxrxrkzfuR/17CB7cG2PjnAe6hgTPo1SAYlq6ISpqDWT -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:42 2026 by rpki-client