This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/CM5wA7_Mj4XNK2JxKM8h4YQ6N-c.roa File: CM5wA7_Mj4XNK2JxKM8h4YQ6N-c.roa (raw, json) Hash identifier: vqRJimrGP27MPdv4zjttCm0+Djwer+Zrgp7ip8OhqNI= Subject key identifier: 08:CE:70:03:BF:CC:8F:85:CD:2B:62:71:28:CF:21:E1:84:3A:37:E7 Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Certificate serial: 019B7C12757FE936D11718F669E952334D93 Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/CM5wA7_Mj4XNK2JxKM8h4YQ6N-c.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209980 IP address blocks: 89.185.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:75:7f:e9:36:d1:17:18:f6:69:e9:52:33:4d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331 Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08ce7003bfcc8f85cd2b627128cf21e1843a37e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fe:fc:78:95:04:cb:76:4f:ff:51:44:22:f1: 3c:ca:4d:e3:e6:1d:1d:e8:5b:e6:18:b6:bd:ac:8e: 9c:2d:9d:c1:5e:65:44:10:2d:d0:55:a2:61:34:b0: 09:84:f9:87:03:51:6f:e3:64:7d:69:c1:b4:fc:fb: 41:44:2e:0b:29:f3:d1:14:77:bf:f6:e3:df:b5:b7: 14:48:ce:9a:2b:79:cc:29:ff:a6:29:92:e4:70:b2: d4:09:b5:fb:b4:b7:56:44:9a:b8:3f:6f:fa:5f:6f: ab:32:a5:2d:d4:7b:d6:b1:3b:8c:b1:0b:d8:47:c5: ae:25:df:3a:f6:b7:6d:78:cb:92:27:4e:9e:b6:a5: 53:54:c6:9e:60:8d:74:be:99:75:6f:39:a4:dc:9c: d9:aa:86:53:c4:55:ca:b9:59:df:d2:b4:c9:a2:08: d7:e3:51:bd:c0:23:12:8d:17:6b:6e:49:c7:92:ea: e1:44:36:f3:36:2d:f7:5f:56:e6:2c:8d:35:d2:41: 9c:21:a8:d8:ba:5d:0a:48:77:a2:9f:79:b9:cf:f4: b1:26:e0:54:5a:9d:69:d5:52:2c:3c:25:27:62:7d: 4b:6d:60:9f:c2:77:1a:4b:f6:06:98:8c:31:28:a2: a0:6b:4b:08:c1:0a:e8:1e:b5:bf:af:12:fc:2d:2e: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CE:70:03:BF:CC:8F:85:CD:2B:62:71:28:CF:21:E1:84:3A:37:E7 X509v3 Authority Key Identifier: keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/CM5wA7_Mj4XNK2JxKM8h4YQ6N-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.140.0/24 Signature Algorithm: sha256WithRSAEncryption 58:22:18:95:61:e1:17:50:09:c4:24:72:bf:67:a6:1c:a9:db: 5f:46:f6:ed:3e:31:2d:a9:a6:40:9f:3e:83:3a:20:b5:b9:4a: 7e:34:5d:60:73:29:ed:08:1f:ef:2a:15:07:f9:66:6f:9a:f9: 27:22:32:aa:69:45:ac:58:13:f5:37:22:00:b5:b3:8c:7a:5d: 66:f4:90:05:7a:cb:33:8c:87:72:f7:93:c0:24:51:17:03:ec: 7b:cc:b5:ea:f4:67:4e:a2:29:e9:57:94:03:9e:50:17:af:f2: 03:47:8e:4b:29:e7:33:e2:23:c4:ba:a5:69:eb:33:f9:a8:7f: e7:99:21:01:16:bd:d2:aa:ea:8d:fc:8b:d4:66:21:c4:8f:6c: 74:aa:3e:34:d1:ff:5a:19:6d:32:4f:62:6b:59:e4:42:af:00: 8a:bd:0b:1a:7d:10:6d:da:97:5c:9c:15:83:4b:c7:10:df:ce: 78:6e:98:62:01:fd:ba:43:3e:e6:99:65:af:f6:97:9c:3c:8a: 4d:74:08:15:e2:7a:ec:7a:f1:16:5e:94:2b:6e:77:43:a2:37: e8:7b:98:e5:4d:ca:1d:9c:e0:81:5e:52:ae:fe:03:be:c5:5b: a5:da:b1:c3:44:fa:24:ac:aa:41:b9:23:73:f5:84:b0:e4:6a: f5:5b:16:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EnV/6TbRFxj2aelSM02TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5N2E0OGNjMTNlMjAwZTJkM2YzOGFmODMzMThkMWJjYWY2 ZjYzMzEwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGNlNzAwM2JmY2M4Zjg1Y2QyYjYyNzEyOGNmMjFlMTg0M2EzN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/78eJUEy3ZP/1FEIvE8yk3j5h0d 6FvmGLa9rI6cLZ3BXmVEEC3QVaJhNLAJhPmHA1Fv42R9acG0/PtBRC4LKfPRFHe/ 9uPftbcUSM6aK3nMKf+mKZLkcLLUCbX7tLdWRJq4P2/6X2+rMqUt1HvWsTuMsQvY R8WuJd869rdteMuSJ06etqVTVMaeYI10vpl1bzmk3JzZqoZTxFXKuVnf0rTJogjX 41G9wCMSjRdrbknHkurhRDbzNi33X1bmLI010kGcIajYul0KSHein3m5z/SxJuBU Wp1p1VIsPCUnYn1LbWCfwncaS/YGmIwxKKKga0sIwQroHrW/rxL8LS5nCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjOcAO/zI+FzSticSjPIeGEOjfnMB8GA1UdIwQY MBaAFHl6SMwT4gDi0/OK+DMY0byvb2MxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEt N2Q3ZjRiNjM0ODQ5LzEvQ001d0E3X01qNFhOSzJKeEtNOGg0WVE2Ti1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iOWNlYTAtNjkyOC00NTg0LWIzMjEtN2Q3ZjRiNjM0ODQ5 LzEvZVhwSXpCUGlBT0xUODRyNE14alJ2Szl2WXpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbmMMA0G CSqGSIb3DQEBCwUAA4IBAQBYIhiVYeEXUAnEJHK/Z6YcqdtfRvbtPjEtqaZAnz6D OiC1uUp+NF1gcyntCB/vKhUH+WZvmvknIjKqaUWsWBP1NyIAtbOMel1m9JAFessz jIdy95PAJFEXA+x7zLXq9GdOoinpV5QDnlAXr/IDR45LKecz4iPEuqVp6zP5qH/n mSEBFr3SquqN/IvUZiHEj2x0qj400f9aGW0yT2JrWeRCrwCKvQsafRBt2pdcnBWD S8cQ3854bphiAf26Qz7mmWWv9pecPIpNdAgV4nrsevEWXpQrbndDojfoe5jlTcod nOCBXlKu/gO+xVul2rHDRPokrKpBuSNz9YSw5Gr1Wxbh -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:23 2026 by rpki-client