This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/cisGlTDG6YbGvbXjq8ObLwOftto.roa File: cisGlTDG6YbGvbXjq8ObLwOftto.roa (raw, json) Hash identifier: B+cjo1pRI6fh+IOCsdjVyvdJ7iW7PB7/BMnta8fuFho= Subject key identifier: 72:2B:06:95:30:C6:E9:86:C6:BD:B5:E3:AB:C3:9B:2F:03:9F:B6:DA Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a Certificate serial: 019B7F15238AE9DFBB3D93BAF061441A3F5C Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/cisGlTDG6YbGvbXjq8ObLwOftto.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32875 IP address blocks: 5.226.169.0/24 maxlen: 24 5.226.170.0/24 maxlen: 24 5.226.174.0/24 maxlen: 24 5.226.175.0/24 maxlen: 24 185.48.205.0/24 maxlen: 24 185.48.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:23:8a:e9:df:bb:3d:93:ba:f0:61:44:1a:3f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=722b069530c6e986c6bdb5e3abc39b2f039fb6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:8b:b0:8a:58:c2:56:f3:05:ae:f2:c5:ad: 94:4f:9e:51:53:a6:1c:4f:cf:ea:83:27:41:96:00: ce:15:11:31:89:f7:b1:2f:cc:e8:a1:11:8f:71:05: d9:aa:c6:c0:60:2d:f2:ee:8e:ca:a4:37:65:9e:0f: 10:a1:71:93:e7:36:02:58:cd:a9:4e:c2:60:2d:f8: 7d:15:18:58:c9:99:e2:e4:57:3f:b8:5b:98:6f:08: 77:5a:ac:c5:3b:8e:b2:b2:df:95:7f:f2:31:78:11: 8c:14:ca:c5:3f:2d:26:4c:37:e0:8f:ee:c9:b0:7a: 75:fa:b0:c9:ed:3b:36:b5:bf:95:f4:a6:85:81:b8: a8:df:cd:ff:08:37:2c:b0:d7:a0:65:1b:4c:77:31: a8:db:07:ee:08:a9:c1:73:d5:3f:5b:aa:cb:61:d1: d3:44:27:e1:0b:2e:bb:81:8a:93:c9:d3:25:fe:66: 9b:ed:fc:95:87:e4:5c:4d:cd:c9:e4:70:96:ff:96: 41:0f:0d:be:7d:5f:41:ff:1d:7b:08:82:f5:c6:3d: e5:5a:80:70:12:ac:eb:d7:97:fa:da:82:96:62:05: da:6c:8c:95:24:f7:bc:30:46:65:4a:15:da:52:4c: 9d:e1:07:23:ff:88:8f:35:1e:31:7b:39:8c:77:81: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:2B:06:95:30:C6:E9:86:C6:BD:B5:E3:AB:C3:9B:2F:03:9F:B6:DA X509v3 Authority Key Identifier: keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/cisGlTDG6YbGvbXjq8ObLwOftto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.169.0-5.226.170.255 5.226.174.0/23 185.48.205.0/24 185.48.207.0/24 Signature Algorithm: sha256WithRSAEncryption 37:26:17:5c:a8:91:8a:f0:96:7a:1f:40:35:a9:64:ff:dc:46: 78:24:a2:51:53:3b:db:61:4d:c0:48:f4:fa:d1:b8:96:ae:5f: fe:91:d7:88:85:e1:96:e1:e7:27:54:f0:b7:f2:49:c8:64:d5: ea:68:2c:74:d7:2c:cb:8b:ab:82:b0:a2:3a:f1:65:5b:8d:e8: 2a:3e:57:f0:f0:d8:2a:03:71:dc:d1:a1:b6:b3:42:19:52:40: 7c:9e:de:08:e6:6f:48:07:e5:0b:ab:58:24:bb:50:8a:1b:d6: a2:0d:69:f9:41:e4:82:81:f2:cc:70:f8:80:d3:dd:68:fd:ed: 3c:d3:e0:2e:96:f2:4e:c4:7f:f4:21:a9:39:68:f6:88:f3:37: 1e:1d:b9:99:a6:d0:3b:f3:79:48:e3:63:5a:94:54:9c:a8:f7: af:31:02:a5:77:5d:a9:fb:29:33:cc:9f:7f:41:0b:30:0e:55: 17:2d:84:06:de:bf:6e:c3:9b:6f:08:2c:35:37:a2:aa:6d:c2: d4:7a:df:99:76:f7:3a:18:42:91:b9:7d:4d:8e:d1:5c:14:ab: 26:ce:aa:0d:00:f2:d5:ae:ac:ba:a8:c7:e2:68:86:a9:ee:5b: 85:f3:95:b9:2d:0c:2b:0a:c5:39:02:8c:62:f7:9e:6e:d5:ca: e1:4a:0e:42 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FSOK6d+7PZO68GFEGj9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5MzM0ODFkM2ZhNDg3MTBkY2I5NzNmZGNkMjkzNDBkZWRi NjIyOWEwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjJiMDY5NTMwYzZlOTg2YzZiZGI1ZTNhYmMzOWIyZjAzOWZiNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+6LsIpYwlbzBa7yxa2UT55RU6Yc T8/qgydBlgDOFRExifexL8zooRGPcQXZqsbAYC3y7o7KpDdlng8QoXGT5zYCWM2p TsJgLfh9FRhYyZni5Fc/uFuYbwh3WqzFO46yst+Vf/IxeBGMFMrFPy0mTDfgj+7J sHp1+rDJ7Ts2tb+V9KaFgbio383/CDcssNegZRtMdzGo2wfuCKnBc9U/W6rLYdHT RCfhCy67gYqTydMl/mab7fyVh+RcTc3J5HCW/5ZBDw2+fV9B/x17CIL1xj3lWoBw Eqzr15f62oKWYgXabIyVJPe8MEZlShXaUkyd4Qcj/4iPNR4xezmMd4EqSQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHIrBpUwxumGxr2146vDmy8Dn7baMB8GA1UdIwQY MBaAFMkzSB0/pIcQ3Llz/c0pNA3ttiKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUt ZmVmZDM3NjY2NzQxLzEvY2lzR2xUREc2WWJHdmJYanE4T2JMd09mdHRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUtZmVmZDM3NjY2NzQx LzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAF4qkD BAAF4qoDBAEF4q4DBAC5MM0DBAC5MM8wDQYJKoZIhvcNAQELBQADggEBADcmF1yo kYrwlnofQDWpZP/cRngkolFTO9thTcBI9PrRuJauX/6R14iF4Zbh5ydU8LfySchk 1epoLHTXLMuLq4KwojrxZVuN6Co+V/Dw2CoDcdzRobazQhlSQHye3gjmb0gH5Qur WCS7UIob1qINaflB5IKB8sxw+IDT3Wj97TzT4C6W8k7Ef/QhqTlo9ojzNx4duZmm 0DvzeUjjY1qUVJyo968xAqV3Xan7KTPMn39BCzAOVRcthAbev27Dm28ILDU3oqpt wtR635l29zoYQpG5fU2O0VwUqybOqg0A8tWurLqox+JohqnuW4XzlbktDCsKxTkC jGL3nm7VyuFKDkI= -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:08 2026 by rpki-client