This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa File: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (raw, json) Hash identifier: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o= Subject key identifier: 09:BA:5F:19:28:36:75:CE:71:A4:3C:7F:3C:A6:5C:2A:D1:3E:54:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019B7D5CFD522826DD66908D50BF11C60EF6 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25227 IP address blocks: 92.63.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fd:52:28:26:dd:66:90:8d:50:bf:11:c6:0e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09ba5f19283675ce71a43c7f3ca65c2ad13e54ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2f:0d:c9:e4:49:4d:4b:67:5b:44:fa:4d:24: 52:89:37:a5:55:cc:d5:a4:7c:f9:e0:a2:2e:f5:3d: c7:ee:8b:66:e1:ee:24:b7:83:dc:15:6b:20:43:13: ed:ca:fa:ce:50:68:c0:16:6b:0c:ee:a3:98:d2:ae: 70:96:cc:a2:6e:1a:95:1d:f6:87:42:88:f8:c7:bb: 91:4c:a8:ee:9f:f8:ef:29:ac:43:9f:97:6f:0e:97: 00:c3:78:ec:3f:73:ec:24:b9:ce:f8:05:38:64:0b: 30:cf:a6:43:79:54:54:fe:ca:fe:6d:c2:be:50:fd: 96:dd:c3:96:ab:15:86:6a:7a:82:28:e6:ab:04:71: ca:82:d3:e5:82:0e:ca:54:f2:9d:e0:d5:ec:8a:a8: 56:84:7c:94:77:4a:65:88:b6:5b:c6:38:97:6e:17: eb:f6:39:1a:14:12:48:ed:c0:0d:e9:59:c0:46:67: 22:99:5f:e4:bb:dc:a6:9f:11:e3:32:cc:1f:91:27: 1f:37:70:8f:03:14:50:56:99:d2:bf:78:74:8b:ea: be:b9:98:c4:d8:c9:7c:22:71:c6:a5:34:88:e9:37: 4b:f3:3d:aa:d7:b5:39:77:42:a4:2c:78:3c:19:9e: 83:9e:43:9d:0e:c5:fb:bf:2e:61:31:04:19:14:66: e9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BA:5F:19:28:36:75:CE:71:A4:3C:7F:3C:A6:5C:2A:D1:3E:54:ED X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.63.201.0/24 Signature Algorithm: sha256WithRSAEncryption 86:ac:f2:44:e2:8b:cc:a5:b4:a6:0a:6a:84:57:70:5f:ad:5a: 83:60:8e:6e:5e:f1:44:56:67:66:0d:b5:5c:33:34:ba:59:d0: f3:ac:a1:fe:e5:d8:e0:c0:7d:c4:6c:c5:85:1a:15:18:14:b8: 90:b8:4e:8c:83:2f:a2:4a:d8:fe:42:32:90:fb:a3:fd:e7:6d: 98:bf:b3:75:f4:5b:c0:60:d1:e1:55:59:4f:eb:26:a2:ba:d9: b8:7a:d4:d6:da:6e:04:47:a1:5a:3b:ed:88:c0:40:27:60:2b: 84:41:5d:ee:f9:2b:1e:5c:95:aa:27:6b:a0:db:c4:9a:96:7f: d0:53:5e:00:c2:2d:75:9a:42:4f:9f:8a:db:0c:f7:37:c6:56: 36:7d:54:cd:13:91:67:54:a1:45:27:44:3c:60:89:23:2c:9d: b4:09:f0:6c:2c:60:f7:79:61:df:b5:9f:38:ab:f1:ab:61:20: 58:9c:e3:b6:7a:0a:ef:d6:48:fa:5a:b5:54:32:fb:62:28:64: fa:7d:b1:85:fe:28:91:7f:cb:ba:9a:69:90:2d:3b:fc:3c:b9: 7b:b3:ba:a4:59:80:88:8d:73:84:ae:54:78:44:88:b7:f3:15: 4a:e7:9d:6e:22:0d:7b:19:19:d5:17:16:65:0c:71:45:fb:b7: 98:95:3c:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XP1SKCbdZpCNUL8Rxg72MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWJhNWYxOTI4MzY3NWNlNzFhNDNjN2YzY2E2NWMyYWQxM2U1NGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7C8NyeRJTUtnW0T6TSRSiTelVczV pHz54KIu9T3H7otm4e4kt4PcFWsgQxPtyvrOUGjAFmsM7qOY0q5wlsyibhqVHfaH Qoj4x7uRTKjun/jvKaxDn5dvDpcAw3jsP3PsJLnO+AU4ZAswz6ZDeVRU/sr+bcK+ UP2W3cOWqxWGanqCKOarBHHKgtPlgg7KVPKd4NXsiqhWhHyUd0pliLZbxjiXbhfr 9jkaFBJI7cAN6VnARmcimV/ku9ymnxHjMswfkScfN3CPAxRQVpnSv3h0i+q+uZjE 2Ml8InHGpTSI6TdL8z2q17U5d0KkLHg8GZ6DnkOdDsX7vy5hMQQZFGbpQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAm6XxkoNnXOcaQ8fzymXCrRPlTtMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvQ2JwZkdTZzJkYzV4cER4X1BLWmNLdEUtVk8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD/JMA0G CSqGSIb3DQEBCwUAA4IBAQCGrPJE4ovMpbSmCmqEV3BfrVqDYI5uXvFEVmdmDbVc MzS6WdDzrKH+5djgwH3EbMWFGhUYFLiQuE6Mgy+iStj+QjKQ+6P9522Yv7N19FvA YNHhVVlP6yaiutm4etTW2m4ER6FaO+2IwEAnYCuEQV3u+SseXJWqJ2ug28Saln/Q U14Awi11mkJPn4rbDPc3xlY2fVTNE5FnVKFFJ0Q8YIkjLJ20CfBsLGD3eWHftZ84 q/GrYSBYnOO2egrv1kj6WrVUMvtiKGT6fbGF/iiRf8u6mmmQLTv8PLl7s7qkWYCI jXOErlR4RIi38xVK551uIg17GRnVFxZlDHFF+7eYlTyg -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:12 2026 by rpki-client