This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Cs2Zd6251zSrXetle0RtfRConbA.roa File: Cs2Zd6251zSrXetle0RtfRConbA.roa (raw, json) Hash identifier: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww= Subject key identifier: 0A:CD:99:77:AD:B9:D7:34:AB:5D:EB:65:7B:44:6D:7D:10:A8:9D:B0 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5CFF663B0974FA6759D6A218FFA717 Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Cs2Zd6251zSrXetle0RtfRConbA.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58224 IP address blocks: 37.156.12.0/22 maxlen: 32 77.238.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ff:66:3b:09:74:fa:67:59:d6:a2:18:ff:a7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0acd9977adb9d734ab5deb657b446d7d10a89db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a6:a7:94:16:3a:c9:b7:45:f9:e0:ed:bb:e3: f1:0a:a8:22:2f:73:36:6e:8a:4e:4f:8a:8e:40:ae: a7:ab:c9:18:44:de:35:39:de:5d:38:1f:72:1d:e1: 72:8e:26:47:ed:26:03:62:48:4b:a9:a7:c2:c4:38: c4:8f:10:6d:93:b0:44:23:7c:d1:45:80:9b:ae:45: 3e:d0:da:b9:d1:c4:6a:e3:37:6a:3c:1f:d8:1c:29: da:5f:b4:32:48:2a:06:c6:73:38:74:9c:be:79:91: 88:b3:07:69:6c:41:5b:88:f7:a1:37:70:1f:82:4d: 56:79:15:51:90:28:72:2d:a8:4f:5a:cf:46:a5:f7: 7a:23:42:a5:59:5b:dd:08:9b:bb:01:29:42:fa:32: b7:c4:9f:13:17:08:85:b6:43:f1:e2:ca:60:1a:b5: 71:4a:99:c4:8f:d0:18:fa:71:a6:29:5e:e4:68:e1: 4e:e9:72:cc:99:67:22:ec:6c:e4:c2:e0:18:ce:19: 9b:cd:e9:8f:ea:1b:9b:87:07:b9:67:e6:31:18:c2: 7b:d2:d4:ba:e8:26:e3:9d:45:98:e6:86:67:bc:d8: 74:03:46:ef:a9:46:48:a7:fb:1e:dc:1e:be:af:a7: e7:b9:55:b0:7c:b5:ea:1d:00:62:27:19:48:13:0b: 6a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CD:99:77:AD:B9:D7:34:AB:5D:EB:65:7B:44:6D:7D:10:A8:9D:B0 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/Cs2Zd6251zSrXetle0RtfRConbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.156.12.0/22 77.238.108.0/22 Signature Algorithm: sha256WithRSAEncryption b8:5d:5b:00:b1:a1:74:06:86:76:6e:ce:54:5e:c7:9b:bf:34: f8:31:92:14:ea:d9:6c:66:50:c5:4d:4d:05:a5:42:92:41:4d: bb:75:cc:1d:de:e8:67:9f:72:eb:0b:51:3b:5f:6f:04:e2:30: 20:97:a4:ec:98:c2:1c:f3:81:7d:3b:9b:4c:1b:31:56:3e:45: af:34:2b:89:6c:18:a0:d9:a6:c2:0b:91:14:f0:53:dd:28:47: 7d:1d:52:17:59:4c:49:e6:9a:6e:97:15:dc:77:8b:8b:91:74: e8:ea:2b:55:bf:f1:ae:e9:0c:e3:89:bd:09:6a:ff:68:92:44: e4:f9:13:7a:7d:90:2e:a2:a4:10:2a:87:e3:1e:2e:75:82:bc: 41:35:e6:2c:b0:e8:13:dd:01:28:7a:3d:d0:b9:a8:55:7b:6d: d3:d0:f6:30:4d:3d:90:72:02:a2:5e:a3:bc:6b:da:95:59:64: 85:c4:33:56:e7:6b:4b:6e:de:75:26:9c:5d:22:32:ab:21:0d: a9:f6:19:9b:37:24:3d:0b:a0:8f:21:f9:02:13:76:92:ea:42: e5:e1:61:cd:7d:0e:c2:66:25:3e:f4:8d:28:4d:d3:67:a6:6c: 54:02:e0:cc:90:bf:94:46:ee:3e:55:ca:38:a4:11:85:57:fe: c0:26:09:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XP9mOwl0+mdZ1qIY/6cXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWNkOTk3N2FkYjlkNzM0YWI1ZGViNjU3YjQ0NmQ3ZDEwYTg5ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66anlBY6ybdF+eDtu+PxCqgiL3M2 bopOT4qOQK6nq8kYRN41Od5dOB9yHeFyjiZH7SYDYkhLqafCxDjEjxBtk7BEI3zR RYCbrkU+0Nq50cRq4zdqPB/YHCnaX7QySCoGxnM4dJy+eZGIswdpbEFbiPehN3Af gk1WeRVRkChyLahPWs9Gpfd6I0KlWVvdCJu7ASlC+jK3xJ8TFwiFtkPx4spgGrVx SpnEj9AY+nGmKV7kaOFO6XLMmWci7GzkwuAYzhmbzemP6hubhwe5Z+YxGMJ70tS6 6CbjnUWY5oZnvNh0A0bvqUZIp/se3B6+r6fnuVWwfLXqHQBiJxlIEwtqLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFArNmXetudc0q13rZXtEbX0QqJ2wMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvQ3MyWmQ2MjUxelNyWGV0bGUwUnRmUkNvbmJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCJZwMAwQC Te5sMA0GCSqGSIb3DQEBCwUAA4IBAQC4XVsAsaF0BoZ2bs5UXsebvzT4MZIU6tls ZlDFTU0FpUKSQU27dcwd3uhnn3LrC1E7X28E4jAgl6TsmMIc84F9O5tMGzFWPkWv NCuJbBig2abCC5EU8FPdKEd9HVIXWUxJ5ppulxXcd4uLkXTo6itVv/Gu6Qzjib0J av9okkTk+RN6fZAuoqQQKofjHi51grxBNeYssOgT3QEoej3QuahVe23T0PYwTT2Q cgKiXqO8a9qVWWSFxDNW52tLbt51JpxdIjKrIQ2p9hmbNyQ9C6CPIfkCE3aS6kLl 4WHNfQ7CZiU+9I0oTdNnpmxUAuDMkL+URu4+Vco4pBGFV/7AJgms -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:21 2026 by rpki-client