This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ICxNkHVdZUyA-MMi06XyBXtMGFI.roa File: ICxNkHVdZUyA-MMi06XyBXtMGFI.roa (raw, json) Hash identifier: tc8Mjcz/VcLIkW4UZlYi3j2nXPT+9w20PNzLI3zIbVI= Subject key identifier: 20:2C:4D:90:75:5D:65:4C:80:F8:C3:22:D3:A5:F2:05:7B:4C:18:52 Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Certificate serial: 019B7AC7DE0090833FE9225D81FEAA40EDE1 Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ICxNkHVdZUyA-MMi06XyBXtMGFI.roa Signing time: Thu 01 Jan 2026 18:17:57 +0000 ROA not before: Thu 01 Jan 2026 18:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211096 IP address blocks: 95.156.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:de:00:90:83:3f:e9:22:5d:81:fe:aa:40:ed:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545 Validity Not Before: Jan 1 18:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=202c4d90755d654c80f8c322d3a5f2057b4c1852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:fb:29:f7:6e:3a:64:6c:96:8f:23:f8:03: 56:9b:8a:1b:36:c5:0b:c5:d3:f9:6d:49:01:b7:27: de:f9:e1:38:2b:38:20:e2:76:a0:6f:ef:76:78:ef: e2:79:f4:83:84:64:94:44:01:b6:34:27:f5:32:3f: ed:a3:ba:b4:4c:25:1a:96:d1:81:a1:aa:ca:4c:32: e3:8b:36:ad:31:91:41:d2:a4:5d:6a:b1:cf:aa:86: 2b:30:55:ba:67:b5:aa:78:6f:4c:a2:b6:87:1f:f7: 42:d5:b0:f6:df:65:ff:94:72:66:b3:8a:57:4c:c8: 18:08:77:e6:bd:17:ee:9f:01:eb:dd:18:e4:21:d8: 5b:ac:98:cb:7d:a3:4d:47:b3:ed:ec:f9:38:7d:22: 4e:ca:d0:14:88:64:e1:00:bc:db:e4:2f:ba:fb:07: a5:eb:95:74:2a:f0:6f:cd:64:5b:83:91:ec:cc:b4: 43:01:3b:6f:94:48:71:c0:37:9a:70:27:e6:93:d9: 58:8a:ef:0e:ed:15:e1:89:0b:92:22:fb:b4:9d:ed: c4:5e:cc:e7:fa:60:4f:91:76:19:f4:f1:cd:c6:cc: c2:32:b2:9f:b2:e6:7a:fd:08:72:65:08:65:3f:54: b1:9b:b5:4e:6e:1b:e7:91:ba:c7:7e:e5:a6:0a:f0: 20:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2C:4D:90:75:5D:65:4C:80:F8:C3:22:D3:A5:F2:05:7B:4C:18:52 X509v3 Authority Key Identifier: keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/ICxNkHVdZUyA-MMi06XyBXtMGFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.156.203.0/24 Signature Algorithm: sha256WithRSAEncryption 03:ad:f3:52:c3:fa:4c:09:d5:75:67:49:63:e3:4a:d9:02:05: a7:e3:fb:72:9a:ac:0a:05:e9:7f:df:c7:ee:d3:fb:26:24:9c: 1c:4a:8c:d8:81:80:f6:71:23:04:23:b3:81:d4:ab:eb:00:34: 75:a2:a9:73:31:e8:54:43:16:0a:2e:73:eb:9f:58:dc:5e:d5: fe:08:ba:25:ef:64:fd:cb:6b:b8:a5:7e:bd:a9:1b:57:5b:04: d3:3f:9d:1f:82:2b:c7:78:2f:ab:d9:dd:c5:10:d5:3e:d6:57: 65:1e:9d:bb:26:43:de:64:63:c7:a9:47:85:d9:60:e5:88:ce: c2:5a:96:f8:7b:44:3a:96:2e:15:53:a5:9d:a3:27:0b:c8:3c: 7b:ba:fa:f1:f1:09:1a:c4:dd:93:4c:c9:4c:60:d1:13:6b:a5: 21:40:8f:05:93:19:8d:11:66:6a:ee:45:aa:51:59:9a:37:8c: a0:21:67:41:5f:3f:df:a7:5e:f8:bc:8e:ae:8f:07:ac:ee:b4: 06:bb:e3:2f:d8:9d:25:8a:c9:7f:dc:7c:aa:2d:0a:09:4c:e6: d5:66:6c:6a:82:b8:40:a2:6a:a2:2c:b6:0c:7f:c3:81:0a:ad: fc:09:a7:52:e2:a2:dd:5c:7d:81:06:e2:ba:8e:4f:2e:4d:e8: ca:97:d1:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x94AkIM/6SJdgf6qQO3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi MDI1NDUwHhcNMjYwMTAxMTgxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDJjNGQ5MDc1NWQ2NTRjODBmOGMzMjJkM2E1ZjIwNTdiNGMxODUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk/7KfduOmRslo8j+ANWm4obNsUL xdP5bUkBtyfe+eE4Kzgg4nagb+92eO/iefSDhGSURAG2NCf1Mj/to7q0TCUaltGB oarKTDLjizatMZFB0qRdarHPqoYrMFW6Z7WqeG9MoraHH/dC1bD232X/lHJms4pX TMgYCHfmvRfunwHr3RjkIdhbrJjLfaNNR7Pt7Pk4fSJOytAUiGThALzb5C+6+wel 65V0KvBvzWRbg5HszLRDATtvlEhxwDeacCfmk9lYiu8O7RXhiQuSIvu0ne3EXszn +mBPkXYZ9PHNxszCMrKfsuZ6/QhyZQhlP1Sxm7VObhvnkbrHfuWmCvAgJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAsTZB1XWVMgPjDItOl8gV7TBhSMB8GA1UdIwQY MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt YjQ3M2NlNzgwN2NhLzEvSUN4TmtIVmRaVXlBLU1NaTA2WHlCWHRNR0ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX5zLMA0G CSqGSIb3DQEBCwUAA4IBAQADrfNSw/pMCdV1Z0lj40rZAgWn4/tymqwKBel/38fu 0/smJJwcSozYgYD2cSMEI7OB1KvrADR1oqlzMehUQxYKLnPrn1jcXtX+CLol72T9 y2u4pX69qRtXWwTTP50fgivHeC+r2d3FENU+1ldlHp27JkPeZGPHqUeF2WDliM7C Wpb4e0Q6li4VU6WdoycLyDx7uvrx8QkaxN2TTMlMYNETa6UhQI8FkxmNEWZq7kWq UVmaN4ygIWdBXz/fp174vI6ujwes7rQGu+Mv2J0lisl/3HyqLQoJTObVZmxqgrhA omqiLLYMf8OBCq38CadS4qLdXH2BBuK6jk8uTejKl9Ha -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:48 2026 by rpki-client