This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/CUo08eCGhsUGAERyMcyWLHgw0FY.roa File: CUo08eCGhsUGAERyMcyWLHgw0FY.roa (raw, json) Hash identifier: OZrR5kxOfzyV1paUyeUHWcbrdMnl0Gse1l0uDH06X7I= Subject key identifier: 09:4A:34:F1:E0:86:86:C5:06:00:44:72:31:CC:96:2C:78:30:D0:56 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B36089E14DDDDB1EC0D60C991399901 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/CUo08eCGhsUGAERyMcyWLHgw0FY.roa Signing time: Thu 01 Jan 2026 20:18:16 +0000 ROA not before: Thu 01 Jan 2026 20:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41571 IP address blocks: 86.104.124.0/24 maxlen: 24 89.33.196.0/24 maxlen: 24 89.34.5.0/24 maxlen: 24 89.34.93.0/24 maxlen: 24 89.35.55.0/24 maxlen: 24 89.35.116.0/24 maxlen: 24 89.36.19.0/24 maxlen: 24 89.36.92.0/24 maxlen: 24 89.41.63.0/24 maxlen: 24 89.42.35.0/24 maxlen: 24 89.42.214.0/24 maxlen: 24 89.44.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:08:9e:14:dd:dd:b1:ec:0d:60:c9:91:39:99:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=094a34f1e08686c50600447231cc962c7830d056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:11:21:03:e9:ba:4e:e4:a7:28:62:cc:5e: 5c:eb:f7:dc:84:81:7a:0e:7c:3a:e0:0e:cc:cf:a5: b3:54:6c:88:97:62:fb:f9:4c:1c:4e:8d:55:ac:d4: 01:18:75:63:b0:91:bf:8c:71:f0:4c:44:d6:5f:1d: f4:c9:c0:88:45:1c:d9:52:cd:5d:85:96:4e:36:80: 5b:fd:bc:e2:99:7e:eb:41:6d:52:be:d0:b2:51:f5: 52:ff:5d:85:9d:de:ba:e1:ee:f9:da:0b:25:c6:bc: f2:6a:e7:f4:b6:9a:df:47:ad:88:e6:1e:0b:5e:1b: c2:91:c0:af:c7:d2:ef:a8:0b:90:e9:d2:9b:25:2d: 80:1d:8b:8e:96:7b:33:83:fd:f0:4f:08:7e:a2:25: c8:1b:e4:33:06:f0:be:8e:f7:23:ae:89:3b:00:ef: ed:a7:9b:f2:25:71:a5:46:32:2b:01:76:cd:59:5b: 2a:0a:af:af:8f:3f:8d:8e:2f:6b:f7:5c:40:42:f2: 5a:b7:b6:42:9b:cb:bc:71:fa:3c:1b:aa:fd:ed:11: a6:3d:06:59:c5:dd:63:cc:f2:a0:5c:ce:f7:e7:b1: 6e:a7:c7:9d:e9:e8:81:d1:e2:f3:ab:5a:a2:02:cb: 09:99:bc:7e:16:ec:e8:ae:6f:61:3a:4d:5a:82:c7: 9c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4A:34:F1:E0:86:86:C5:06:00:44:72:31:CC:96:2C:78:30:D0:56 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/CUo08eCGhsUGAERyMcyWLHgw0FY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.124.0/24 89.33.196.0/24 89.34.5.0/24 89.34.93.0/24 89.35.55.0/24 89.35.116.0/24 89.36.19.0/24 89.36.92.0/24 89.41.63.0/24 89.42.35.0/24 89.42.214.0/24 89.44.104.0/24 Signature Algorithm: sha256WithRSAEncryption 88:be:65:49:3c:87:82:0a:d2:11:e7:ea:3c:14:3b:89:d6:85: 32:b3:b1:4f:5f:7b:27:81:8c:ff:fc:ac:f7:ee:68:9f:e8:20: 44:e8:8e:90:3e:b3:66:58:55:19:1c:dc:29:2d:72:7c:fd:be: 60:54:3c:ed:a0:7f:0d:85:1b:48:c5:31:00:72:78:2a:10:67: 48:1b:ab:14:d3:16:57:b3:2b:99:c0:0b:bd:04:8a:5f:ed:7c: da:9d:a3:6d:67:89:6e:6b:71:75:9c:e8:75:df:8a:ea:34:f5: d1:e6:4c:90:44:2e:cf:52:30:e5:52:c6:ea:c6:e6:68:94:37: 3c:fe:d8:59:af:d0:77:fe:17:67:de:b7:bd:65:e8:16:60:7f: f4:58:76:98:84:2e:ec:3e:35:1d:7f:ae:3f:8b:f7:9b:ea:2e: 6b:a1:d0:99:95:33:58:3b:a2:5a:c1:a0:41:7b:a9:a7:92:d7: 02:24:fd:a6:37:2c:40:cc:e1:93:7a:f8:b3:39:5e:68:3c:ee: a7:06:73:48:b4:2a:77:89:af:d4:f1:79:f4:be:84:2b:1b:04: 4d:c2:b8:01:fb:00:6c:9b:d4:9e:b4:84:3f:34:67:f0:01:97: d3:9a:7e:10:e0:73:6a:16:e9:eb:e5:52:17:a3:6a:c4:ae:59: bf:a8:c9:29 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt7NgieFN3dsewNYMmROZkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTRhMzRmMWUwODY4NmM1MDYwMDQ0NzIzMWNjOTYyYzc4MzBkMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLcRIQPpuk7kpyhizF5c6/fchIF6 Dnw64A7Mz6WzVGyIl2L7+UwcTo1VrNQBGHVjsJG/jHHwTETWXx30ycCIRRzZUs1d hZZONoBb/bzimX7rQW1SvtCyUfVS/12Fnd664e752gslxrzyauf0tprfR62I5h4L XhvCkcCvx9LvqAuQ6dKbJS2AHYuOlnszg/3wTwh+oiXIG+QzBvC+jvcjrok7AO/t p5vyJXGlRjIrAXbNWVsqCq+vjz+Nji9r91xAQvJat7ZCm8u8cfo8G6r97RGmPQZZ xd1jzPKgXM7357Fup8ed6eiB0eLzq1qiAssJmbx+Fuzorm9hOk1agsec2wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAlKNPHghobFBgBEcjHMlix4MNBWMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvQ1VvMDhlQ0doc1VHQUVSeU1jeVdMSGd3MEZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAVmh8AwQA WSHEAwQAWSIFAwQAWSJdAwQAWSM3AwQAWSN0AwQAWSQTAwQAWSRcAwQAWSk/AwQA WSojAwQAWSrWAwQAWSxoMA0GCSqGSIb3DQEBCwUAA4IBAQCIvmVJPIeCCtIR5+o8 FDuJ1oUys7FPX3sngYz//Kz37mif6CBE6I6QPrNmWFUZHNwpLXJ8/b5gVDztoH8N hRtIxTEAcngqEGdIG6sU0xZXsyuZwAu9BIpf7XzanaNtZ4lua3F1nOh134rqNPXR 5kyQRC7PUjDlUsbqxuZolDc8/thZr9B3/hdn3re9ZegWYH/0WHaYhC7sPjUdf64/ i/eb6i5rodCZlTNYO6JawaBBe6mnktcCJP2mNyxAzOGTevizOV5oPO6nBnNItCp3 ia/U8Xn0voQrGwRNwrgB+wBsm9SetIQ/NGfwAZfTmn4Q4HNqFunr5VIXo2rErlm/ qMkp -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:42 2026 by rpki-client