This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa File: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (raw, json) Hash identifier: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0= Subject key identifier: 72:03:AA:BB:84:9D:36:25:2C:CA:F5:60:46:C5:B2:D8:88:92:AD:19 Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Certificate serial: 019B791143E8D24740ECCDFF97AE71ECDF01 Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210619 IP address blocks: 195.54.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:43:e8:d2:47:40:ec:cd:ff:97:ae:71:ec:df:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7203aabb849d36252ccaf56046c5b2d88892ad19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:59:98:bc:19:19:a3:15:b0:51:5b:20:42: 70:eb:6f:ff:35:50:00:72:6d:28:44:49:68:63:97: 3c:10:f2:85:f9:d4:04:78:0b:2f:e8:c9:a9:ee:ac: 77:f6:44:bc:0d:43:40:d7:1e:6f:0a:d6:e6:3d:43: 2c:c3:70:8a:7f:4e:5e:7e:45:d8:31:24:f8:82:7c: 08:af:63:20:99:30:d7:8a:03:df:24:b8:8b:34:10: 49:fe:e6:60:22:9a:c1:27:f6:81:af:95:8c:bf:c0: 5a:e1:2c:08:d0:1c:fa:c8:f2:cf:e5:9f:16:51:b0: 99:5f:db:dc:03:32:fc:40:19:73:d7:1a:f8:c9:ac: 03:4a:66:65:e7:64:f1:f0:1e:00:5c:6a:dd:9f:47: d1:be:16:60:d8:17:ed:96:40:88:10:84:a6:0f:b7: 75:21:d5:62:a8:c7:27:8c:09:20:cf:c7:e9:26:41: 79:b6:51:b0:8c:05:f3:d1:55:3a:97:85:68:2a:82: 9a:0d:2f:5f:fd:90:74:87:52:a2:cd:a3:55:00:f6: 7a:a4:d9:28:0f:12:61:2d:35:c6:eb:b6:c5:30:2b: b4:d4:c6:0c:5e:c6:d8:6f:49:84:fc:0e:46:ba:b2: a9:35:32:51:a6:b3:5e:a0:72:13:ff:a5:e6:33:be: a8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:03:AA:BB:84:9D:36:25:2C:CA:F5:60:46:C5:B2:D8:88:92:AD:19 X509v3 Authority Key Identifier: keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.54.59.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:26:ee:11:c5:f8:b3:77:aa:4f:16:fc:fa:af:79:71:28:56: 29:00:3d:d6:c7:6b:5f:ef:87:55:05:87:f7:ab:55:49:52:d1: dd:53:81:20:26:2a:7a:dc:03:90:13:b0:ad:d4:e7:71:bc:d2: c8:ec:1b:b4:c9:e2:a3:ec:e4:e8:97:79:e0:99:cc:7e:8d:31: 3f:72:71:24:b2:96:32:90:5c:d2:e2:fc:ac:51:49:59:3c:12: 9b:41:68:5c:1e:b0:21:72:07:d7:45:53:d3:8a:30:e0:37:79: ab:e6:e2:b5:18:7a:cb:92:11:61:f7:95:92:b1:55:86:d8:00: 28:ee:d4:7c:63:44:a7:e0:ca:95:74:75:5d:99:74:74:6b:9f: 33:5a:3b:c7:18:40:3c:6d:ca:ff:20:90:9e:2c:a0:3d:9e:97: e2:d6:16:53:e0:d8:1e:34:13:6b:65:b2:11:89:5d:8d:29:df: fa:3f:d9:7a:ea:b2:ec:ea:58:5f:9a:fb:3f:ee:9d:7a:cc:0e: 33:44:d7:51:c8:4e:83:ca:df:e3:ff:71:34:9d:f8:29:35:6a: b4:5f:f9:bd:fd:08:d2:c1:e3:c5:f1:c0:33:85:5e:54:dc:be: e0:40:81:e3:7b:4b:e4:62:e1:0e:28:6f:c5:7f:d8:18:16:c0: 61:78:94:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUPo0kdA7M3/l65x7N8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk N2RhMDMwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjAzYWFiYjg0OWQzNjI1MmNjYWY1NjA0NmM1YjJkODg4OTJhZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxdZmLwZGaMVsFFbIEJw62//NVAA cm0oREloY5c8EPKF+dQEeAsv6Mmp7qx39kS8DUNA1x5vCtbmPUMsw3CKf05efkXY MST4gnwIr2MgmTDXigPfJLiLNBBJ/uZgIprBJ/aBr5WMv8Ba4SwI0Bz6yPLP5Z8W UbCZX9vcAzL8QBlz1xr4yawDSmZl52Tx8B4AXGrdn0fRvhZg2BftlkCIEISmD7d1 IdViqMcnjAkgz8fpJkF5tlGwjAXz0VU6l4VoKoKaDS9f/ZB0h1KizaNVAPZ6pNko DxJhLTXG67bFMCu01MYMXsbYb0mE/A5GurKpNTJRprNeoHIT/6XmM76obwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHIDqruEnTYlLMr1YEbFstiIkq0ZMB8GA1UdIwQY MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt ZWZkMjBmNmMyZWMzLzEvY2dPcXU0U2ROaVVzeXZWZ1JzV3kySWlTclJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzY7MA0G CSqGSIb3DQEBCwUAA4IBAQCcJu4Rxfizd6pPFvz6r3lxKFYpAD3Wx2tf74dVBYf3 q1VJUtHdU4EgJip63AOQE7Ct1OdxvNLI7Bu0yeKj7OTol3ngmcx+jTE/cnEkspYy kFzS4vysUUlZPBKbQWhcHrAhcgfXRVPTijDgN3mr5uK1GHrLkhFh95WSsVWG2AAo 7tR8Y0Sn4MqVdHVdmXR0a58zWjvHGEA8bcr/IJCeLKA9npfi1hZT4NgeNBNrZbIR iV2NKd/6P9l66rLs6lhfmvs/7p16zA4zRNdRyE6Dyt/j/3E0nfgpNWq0X/m9/QjS wePF8cAzhV5U3L7gQIHje0vkYuEOKG/Ff9gYFsBheJRc -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:25 2026 by rpki-client