This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa File: CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa (raw, json) Hash identifier: rD2u98MLb0jiD+OOiIWSkvqJ6RlBaZKAcES5KA3b+A4= Subject key identifier: 09:A3:0E:AC:0C:FE:DD:58:CF:AA:EF:A0:6F:27:89:E7:F0:B1:EC:D3 Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Certificate serial: 019B78A22A6D44983DAD29BED3655DDC29A8 Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa Signing time: Thu 01 Jan 2026 08:17:32 +0000 ROA not before: Thu 01 Jan 2026 08:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57136 IP address blocks: 91.212.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2a:6d:44:98:3d:ad:29:be:d3:65:5d:dc:29:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb Validity Not Before: Jan 1 08:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09a30eac0cfedd58cfaaefa06f2789e7f0b1ecd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f6:17:83:c7:70:55:01:b4:d4:88:6c:54:97: 12:66:38:50:9d:a6:a2:a6:de:2d:ff:f3:07:47:8f: c9:f8:14:99:e4:48:cd:a9:3e:7d:f4:36:36:8c:38: e7:07:cf:2f:36:74:83:a1:96:d9:09:9f:0a:ae:fa: 80:5b:65:98:f4:83:15:9e:af:6d:c5:14:6d:80:40: e8:53:33:72:9a:77:c1:ca:81:46:cd:34:fa:5b:ee: 2a:c9:11:24:ec:d7:b4:f2:21:c1:58:fb:a2:a4:85: 5b:98:00:fd:ff:db:8e:ad:55:9b:02:3b:72:d3:37: 10:ed:cc:81:a5:0f:88:33:2f:32:bf:b7:7c:bd:f5: 50:a3:37:02:3f:d2:8a:98:84:6b:d5:d4:77:7b:03: 50:5a:57:12:50:46:71:90:7d:cd:db:9a:ad:69:9d: bc:f5:32:cc:6c:75:34:84:89:88:53:07:74:35:82: 6b:9b:8e:48:3d:03:09:41:0a:77:e0:79:6f:61:01: 95:05:60:cf:0b:59:a2:00:ed:ac:06:37:b6:0a:fc: f2:20:3f:4e:68:71:a2:1f:ee:f8:02:26:02:79:fa: 1e:a1:83:a1:31:ce:3b:27:d3:e0:e3:eb:e8:87:0f: a7:6d:1b:f9:89:d8:a7:15:5c:79:8c:d7:f0:d6:8b: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A3:0E:AC:0C:FE:DD:58:CF:AA:EF:A0:6F:27:89:E7:F0:B1:EC:D3 X509v3 Authority Key Identifier: keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/CaMOrAz-3VjPqu-gbyeJ5_Cx7NM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.192.0/24 Signature Algorithm: sha256WithRSAEncryption be:e9:a0:a6:8a:87:c4:30:26:cf:fd:1a:eb:61:91:58:ca:79: 1a:63:1d:01:58:12:16:96:ee:64:b4:92:81:75:b6:b5:ba:02: a9:0b:d1:50:9e:0a:97:dc:23:19:c4:dc:d0:12:f5:94:16:42: e8:73:ba:9b:97:09:67:43:62:8f:0e:16:5e:4f:50:35:bf:95: bb:55:0d:3a:75:d0:85:9a:58:53:f7:ea:74:0f:18:e1:fd:4f: e3:c7:62:26:c8:18:d7:b3:bd:f0:96:d0:d6:f9:22:45:ca:41: 31:f3:a5:95:bc:d6:cc:65:3b:15:c8:31:ca:8f:86:b1:c7:dc: 0c:36:4e:17:6a:1d:90:96:ee:46:b5:14:f8:72:29:ba:f1:e9: e7:6e:a2:2d:c7:2e:16:26:15:01:52:6c:e8:4e:76:0d:ec:ab: c7:58:88:a1:e9:21:05:df:8f:be:83:99:c9:3a:99:85:dc:0f: 8a:cb:87:ab:31:be:a7:6e:37:a5:cb:67:3d:4c:b9:56:d7:52: 43:92:91:69:8f:43:49:c2:03:74:e0:b2:18:0c:c1:ba:79:1f: f5:42:0f:8f:a7:5d:65:39:6a:f8:a6:98:14:08:81:48:bb:16: 60:20:6a:ec:44:17:ac:b9:8c:e2:72:e8:2f:90:f9:49:f8:e5: 9b:f8:8f:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiptRJg9rSm+02Vd3CmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiY2JkYjZmZDM5ZTc2ZjAwNDg0MDEyZTEzMTQ2YjIxODc1 NWMzZmIwHhcNMjYwMTAxMDgxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWEzMGVhYzBjZmVkZDU4Y2ZhYWVmYTA2ZjI3ODllN2YwYjFlY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfYXg8dwVQG01IhsVJcSZjhQnaai pt4t//MHR4/J+BSZ5EjNqT599DY2jDjnB88vNnSDoZbZCZ8KrvqAW2WY9IMVnq9t xRRtgEDoUzNymnfByoFGzTT6W+4qyREk7Ne08iHBWPuipIVbmAD9/9uOrVWbAjty 0zcQ7cyBpQ+IMy8yv7d8vfVQozcCP9KKmIRr1dR3ewNQWlcSUEZxkH3N25qtaZ28 9TLMbHU0hImIUwd0NYJrm45IPQMJQQp34HlvYQGVBWDPC1miAO2sBje2CvzyID9O aHGiH+74AiYCefoeoYOhMc47J9Pg4+vohw+nbRv5idinFVx5jNfw1ovvewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmjDqwM/t1Yz6rvoG8niefwsezTMB8GA1UdIwQY MBaAFGvL22/TnnbwBIQBLhMUayGHVcP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTIt YzlkYTAzMGFmMzI2LzEvQ2FNT3JBei0zVmpQcXUtZ2J5ZUo1X0N4N05NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83NGQ4NzYtMDVhOC00YjEwLTkwZTItYzlkYTAzMGFmMzI2 LzEvYTh2YmI5T2VkdkFFaEFFdUV4UnJJWWRWd19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9TAMA0G CSqGSIb3DQEBCwUAA4IBAQC+6aCmiofEMCbP/RrrYZFYynkaYx0BWBIWlu5ktJKB dba1ugKpC9FQngqX3CMZxNzQEvWUFkLoc7qblwlnQ2KPDhZeT1A1v5W7VQ06ddCF mlhT9+p0Dxjh/U/jx2ImyBjXs73wltDW+SJFykEx86WVvNbMZTsVyDHKj4axx9wM Nk4Xah2Qlu5GtRT4cim68ennbqItxy4WJhUBUmzoTnYN7KvHWIih6SEF34++g5nJ OpmF3A+Ky4erMb6nbjely2c9TLlW11JDkpFpj0NJwgN04LIYDMG6eR/1Qg+Pp11l OWr4ppgUCIFIuxZgIGrsRBesuYzicugvkPlJ+OWb+I9z -----END CERTIFICATE-----Generated at Mon Jan 26 08:57:45 2026 by rpki-client