This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa File: CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa (raw, json) Hash identifier: 7zRrcVpQEfWDa1cgriGdXYM3UTbJ90zYlGXeGAuJSjI= Subject key identifier: 08:1E:5D:67:0F:CE:51:B5:90:99:FE:AB:AF:15:59:E1:2C:E6:38:F0 Certificate issuer: /CN=3c19e6f27d928095e560de7678f28e3459d55947 Certificate serial: 019B76EB955D1182B2C21789B1473F0E8244 Authority key identifier: 3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31673 IP address blocks: 193.36.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.mft rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:95:5d:11:82:b2:c2:17:89:b1:47:3f:0e:82:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c19e6f27d928095e560de7678f28e3459d55947 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=081e5d670fce51b59099feabaf1559e12ce638f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:87:df:c9:53:90:34:e1:66:94:18:4e:a7: 9b:c6:12:f0:9d:25:19:51:87:55:23:c7:54:da:1a: 05:6b:2b:28:51:94:a8:54:98:ff:24:40:4a:63:ca: b3:64:95:63:b9:ed:10:78:b8:b4:2a:4e:10:d6:37: 2d:e2:cc:4e:c6:37:fe:01:f5:fb:1f:15:26:54:48: b1:fd:35:f9:7d:09:b4:70:67:c7:db:31:2d:56:74: ba:6b:fb:cf:c7:24:46:2b:f5:e4:29:a1:21:1c:72: c5:a0:f2:4f:eb:f8:1d:13:64:c0:e2:61:bb:86:54: 66:54:e5:1f:40:28:ca:6b:90:89:d0:fd:9d:6a:c8: d4:01:1b:b4:30:00:f9:76:de:b2:c6:cf:fa:e2:c3: f8:d7:5e:d6:56:f2:6b:82:23:8d:05:f1:70:4c:8a: 4d:58:0e:3c:9e:45:52:92:d9:84:af:fd:26:28:b1: b2:d3:9d:c1:e5:32:15:04:c5:b4:b8:32:4c:05:85: ba:ba:60:f3:a7:d0:16:04:23:2f:f8:a2:bc:e4:ea: 2d:38:94:08:d8:96:e6:08:34:02:78:a0:ef:7c:e3: 89:73:07:25:3d:2c:7b:46:4d:c0:2c:11:d9:6c:d7: e5:92:71:f4:7a:c0:52:7b:38:1a:ed:2a:11:09:d0: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1E:5D:67:0F:CE:51:B5:90:99:FE:AB:AF:15:59:E1:2C:E6:38:F0 X509v3 Authority Key Identifier: keyid:3C:19:E6:F2:7D:92:80:95:E5:60:DE:76:78:F2:8E:34:59:D5:59:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBnm8n2SgJXlYN52ePKONFnVWUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/CB5dZw_OUbWQmf6rrxVZ4SzmOPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/239b73-7aa7-4b58-b12c-7927de539364/1/PBnm8n2SgJXlYN52ePKONFnVWUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.186.0/24 Signature Algorithm: sha256WithRSAEncryption d5:b2:cd:1d:92:d5:ed:90:d2:fd:3f:8c:5e:a2:5a:42:93:7b: b3:a5:ae:e2:4a:06:69:90:89:4e:0c:8f:ba:79:dc:b5:d7:a2: f1:92:7c:03:92:f4:8c:8a:cc:37:1b:3c:a1:7f:ab:b3:3e:d9: a0:7b:4b:94:75:ac:0c:20:7b:58:80:87:66:13:31:e5:71:63: 21:b9:aa:54:8b:8f:43:24:6a:92:30:00:e7:7a:2d:92:7d:20: 54:db:cc:a8:c6:24:b2:83:e7:1f:a8:79:2d:c0:61:84:c0:24: 15:aa:88:06:e9:b0:6c:67:96:70:26:ae:f5:16:69:4f:b6:71: b7:4f:a5:e1:03:f0:5f:f4:5f:32:a3:98:52:16:a5:c9:89:6c: 4f:da:81:00:07:af:2d:0d:08:e8:53:ba:0f:59:d0:4f:13:3e: c9:b3:eb:00:de:44:85:f0:44:78:ff:bd:33:fa:4d:f0:a1:bb: c6:78:30:36:49:0d:f7:24:7f:0b:4f:df:09:3c:88:a2:47:79: 2d:8b:e2:24:5c:9c:07:00:88:69:de:fd:2b:8a:59:e7:0e:52: b5:a6:23:0f:9f:71:2d:d9:23:f8:d8:11:68:09:4b:55:fa:89: 02:01:8e:00:1e:4b:4e:97:1d:43:9a:33:90:ed:46:43:b5:45: 41:b1:e5:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265VdEYKywheJsUc/DoJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTllNmYyN2Q5MjgwOTVlNTYwZGU3Njc4ZjI4ZTM0NTlk NTU5NDcwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODFlNWQ2NzBmY2U1MWI1OTA5OWZlYWJhZjE1NTllMTJjZTYzOGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo32H38lTkDThZpQYTqebxhLwnSUZ UYdVI8dU2hoFaysoUZSoVJj/JEBKY8qzZJVjue0QeLi0Kk4Q1jct4sxOxjf+AfX7 HxUmVEix/TX5fQm0cGfH2zEtVnS6a/vPxyRGK/XkKaEhHHLFoPJP6/gdE2TA4mG7 hlRmVOUfQCjKa5CJ0P2dasjUARu0MAD5dt6yxs/64sP4117WVvJrgiONBfFwTIpN WA48nkVSktmEr/0mKLGy053B5TIVBMW0uDJMBYW6umDzp9AWBCMv+KK85OotOJQI 2JbmCDQCeKDvfOOJcwclPSx7Rk3ALBHZbNflknH0esBSezga7SoRCdDyxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgeXWcPzlG1kJn+q68VWeEs5jjwMB8GA1UdIwQY MBaAFDwZ5vJ9koCV5WDednjyjjRZ1VlHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yMzliNzMtN2FhNy00YjU4LWIxMmMt NzkyN2RlNTM5MzY0LzEvQ0I1ZFp3X09VYldRbWY2cnJ4Vlo0U3ptT1BBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8yMzliNzMtN2FhNy00YjU4LWIxMmMtNzkyN2RlNTM5MzY0 LzEvUEJubThuMlNnSlhsWU41MmVQS09ORm5WV1VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSS6MA0G CSqGSIb3DQEBCwUAA4IBAQDVss0dktXtkNL9P4xeolpCk3uzpa7iSgZpkIlODI+6 edy116LxknwDkvSMisw3Gzyhf6uzPtmge0uUdawMIHtYgIdmEzHlcWMhuapUi49D JGqSMADnei2SfSBU28yoxiSyg+cfqHktwGGEwCQVqogG6bBsZ5ZwJq71FmlPtnG3 T6XhA/Bf9F8yo5hSFqXJiWxP2oEAB68tDQjoU7oPWdBPEz7Js+sA3kSF8ER4/70z +k3wobvGeDA2SQ33JH8LT98JPIiiR3kti+IkXJwHAIhp3v0rilnnDlK1piMPn3Et 2SP42BFoCUtV+okCAY4AHktOlx1DmjOQ7UZDtUVBseXO -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:35 2026 by rpki-client