This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/1CoDti7UyWuABXfzaLp-v2yW2HA.roa File: 1CoDti7UyWuABXfzaLp-v2yW2HA.roa (raw, json) Hash identifier: E0ry/JWuGn8+ExPO+znV4eEnxCmGw1JlXLAD1xMsn3M= Subject key identifier: D4:2A:03:B6:2E:D4:C9:6B:80:05:77:F3:68:BA:7E:BF:6C:96:D8:70 Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Certificate serial: 019B7C12742AD60531692F850A3400DD856D Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/1CoDti7UyWuABXfzaLp-v2yW2HA.roa Signing time: Fri 02 Jan 2026 00:19:02 +0000 ROA not before: Fri 02 Jan 2026 00:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16032 IP address blocks: 194.46.126.0/23 maxlen: 23 194.46.128.0/22 maxlen: 22 194.46.136.0/21 maxlen: 21 194.46.144.0/22 maxlen: 22 194.46.148.0/22 maxlen: 22 194.46.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:74:2a:d6:05:31:69:2f:85:0a:34:00:dd:85:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Validity Not Before: Jan 2 00:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d42a03b62ed4c96b800577f368ba7ebf6c96d870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e3:dd:5b:ae:d1:11:81:d9:cf:e3:20:31:35: c6:ef:31:e7:c2:2c:c9:4d:61:23:b5:07:82:be:6f: 72:7c:fd:cd:a1:ad:69:4f:3f:3b:79:73:bb:db:07: 07:1c:40:a7:2d:40:a8:28:a8:d5:2d:7b:48:f4:96: 49:89:74:f7:c6:f9:93:0e:e2:8a:a3:1d:d9:76:9b: de:ea:cd:c3:b8:ac:5f:8d:3f:5c:71:76:c1:44:b6: 30:d0:71:60:bc:9d:c6:6a:ef:be:b5:d0:2d:34:6c: d5:4e:03:8d:c3:34:f1:3e:07:0c:05:4f:c8:77:6c: e2:dc:90:25:e6:d4:5b:5f:06:ed:79:be:a8:a9:ec: c8:86:12:4f:ca:e5:d7:47:07:7f:85:c2:b1:2c:a0: b8:c2:89:17:df:e7:6f:bb:6a:a8:86:49:40:00:30: c5:d5:83:3f:5a:36:25:f1:61:d7:ce:6b:9f:c3:a8: 79:ab:cb:84:50:ee:f8:9d:1b:55:db:24:68:94:f8: d3:28:3c:c2:be:e9:3b:f2:aa:2d:0c:e8:ac:cb:ad: e0:ca:4d:43:b0:07:c9:10:7d:6f:62:c9:af:a0:18: 5d:65:4f:60:7d:27:53:9f:7d:1b:12:22:13:7a:2c: a1:98:46:53:f7:ed:a7:62:b7:32:f2:0d:44:ef:3e: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:2A:03:B6:2E:D4:C9:6B:80:05:77:F3:68:BA:7E:BF:6C:96:D8:70 X509v3 Authority Key Identifier: keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/1CoDti7UyWuABXfzaLp-v2yW2HA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.46.126.0-194.46.131.255 194.46.136.0-194.46.151.255 194.46.156.0/22 Signature Algorithm: sha256WithRSAEncryption 82:b6:73:dc:d6:9d:c7:5e:2a:88:f6:4b:07:aa:5f:5e:90:53: c4:5f:31:ec:47:5a:32:5d:70:f9:5a:c9:c3:9e:eb:9e:00:e9: 1b:6d:fd:b2:e2:f8:38:6d:e6:f5:48:e5:19:78:e5:18:7e:b8: 87:80:05:7c:29:6f:5b:eb:60:9c:65:8f:7e:43:36:26:76:3a: e2:bd:87:52:01:2d:9b:55:15:08:3b:5f:c8:af:6b:2c:19:4b: 24:3e:cc:30:b3:85:11:21:a6:c0:d8:a5:19:c7:33:b5:5f:27: 83:b9:df:34:62:b4:8d:85:49:a7:8c:09:12:a5:1b:c8:da:11: c8:41:d9:91:5b:e7:3c:25:2e:eb:11:2d:ca:d1:51:72:34:2c: d9:7b:f4:ce:e8:f7:0c:27:d9:bf:27:9f:d1:48:79:df:8f:04: 73:03:e9:23:e2:e7:bd:24:ff:a8:7a:35:f2:c0:f1:e9:19:81: c7:1e:e4:c1:46:2e:c2:cd:8b:b7:81:0b:5e:ef:78:63:89:f2: b3:1f:06:08:a4:cc:3e:45:6b:bb:6e:e9:9b:b8:7b:a4:ea:c5: 1a:96:03:80:3f:2c:92:6a:b0:1e:b9:e7:9e:02:a8:1f:48:1c: 5c:b0:06:aa:a4:33:9e:26:78:b1:c2:38:ef:95:59:35:ec:94: 7a:26:5a:8d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt8EnQq1gUxaS+FCjQA3YVtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5N2E0OGNjMTNlMjAwZTJkM2YzOGFmODMzMThkMWJjYWY2 ZjYzMzEwHhcNMjYwMTAyMDAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDJhMDNiNjJlZDRjOTZiODAwNTc3ZjM2OGJhN2ViZjZjOTZkODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uPdW67REYHZz+MgMTXG7zHnwizJ TWEjtQeCvm9yfP3Noa1pTz87eXO72wcHHECnLUCoKKjVLXtI9JZJiXT3xvmTDuKK ox3Zdpve6s3DuKxfjT9ccXbBRLYw0HFgvJ3Gau++tdAtNGzVTgONwzTxPgcMBU/I d2zi3JAl5tRbXwbteb6oqezIhhJPyuXXRwd/hcKxLKC4wokX3+dvu2qohklAADDF 1YM/WjYl8WHXzmufw6h5q8uEUO74nRtV2yRolPjTKDzCvuk78qotDOisy63gyk1D sAfJEH1vYsmvoBhdZU9gfSdTn30bEiITeiyhmEZT9+2nYrcy8g1E7z6DSwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNQqA7Yu1MlrgAV382i6fr9slthwMB8GA1UdIwQY MBaAFHl6SMwT4gDi0/OK+DMY0byvb2MxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEt N2Q3ZjRiNjM0ODQ5LzEvMUNvRHRpN1V5V3VBQlhmemFMcC12MnlXMkhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEtN2Q3ZjRiNjM0ODQ5 LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAHCLn4D BALCLoAwDAMEA8IuiAMEA8IukAMEAsIunDANBgkqhkiG9w0BAQsFAAOCAQEAgrZz 3Nadx14qiPZLB6pfXpBTxF8x7EdaMl1w+VrJw57rngDpG239suL4OG3m9UjlGXjl GH64h4AFfClvW+tgnGWPfkM2JnY64r2HUgEtm1UVCDtfyK9rLBlLJD7MMLOFESGm wNilGccztV8ng7nfNGK0jYVJp4wJEqUbyNoRyEHZkVvnPCUu6xEtytFRcjQs2Xv0 zuj3DCfZvyef0Uh5348EcwPpI+LnvST/qHo18sDx6RmBxx7kwUYuws2Lt4ELXu94 Y4nysx8GCKTMPkVru27pm7h7pOrFGpYDgD8skmqwHrnnngKoH0gcXLAGqqQzniZ4 scI475VZNeyUeiZajQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:05 2026 by rpki-client