This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa File: Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa (raw, json) Hash identifier: Eb0kwzwy039z3kdPuDAhVSjmubzFKvvOj2jQKrMMEP8= Subject key identifier: 09:CD:16:4F:91:06:EA:7F:68:0C:04:1D:EA:1F:25:56:C7:FC:25:A4 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019B7EA545DBB5A80C6F2B3F04E53F70F714 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa Signing time: Fri 02 Jan 2026 12:18:39 +0000 ROA not before: Fri 02 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 91.235.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:45:db:b5:a8:0c:6f:2b:3f:04:e5:3f:70:f7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jan 2 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09cd164f9106ea7f680c041dea1f2556c7fc25a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:64:8a:41:9f:e0:81:8c:32:ad:f6:12:7c: b2:30:29:fa:0a:c6:6c:b9:6f:b5:2f:e0:78:95:63: 7e:0a:6b:8e:85:34:3f:d7:60:de:f9:71:2a:83:88: 14:d8:cd:cb:cc:38:11:5a:8d:3b:70:a8:07:d0:d1: d8:fb:31:9a:bf:04:a0:b8:94:48:ce:73:09:6c:06: d5:50:c2:a0:4e:87:e0:fc:38:51:27:31:fc:ac:a9: a9:01:3d:68:c5:29:a3:3a:54:90:c9:b4:2f:18:9e: be:04:88:54:3b:31:c8:c0:0e:84:a0:a3:c6:59:84: 65:53:9a:ec:94:01:87:aa:40:3c:80:12:b9:3f:73: 34:6c:f6:4a:af:d1:23:ae:dd:42:c3:66:1e:9c:68: b2:a7:3a:a3:c8:ea:38:76:e9:4d:fc:1b:50:67:f8: 30:c6:b8:56:34:81:6a:a3:cf:a4:55:65:21:dc:1e: fc:a6:44:11:d2:75:9e:0f:0b:36:c5:f6:f6:ee:8a: 3a:f3:da:7a:13:ff:56:ea:38:59:87:0b:e0:a3:4a: 5a:00:b4:19:5b:e3:ba:92:de:b8:fb:ec:93:64:cf: cd:01:60:13:5b:a8:44:cf:aa:56:42:8a:41:07:a0: 0a:87:20:ae:d9:a4:b1:0d:8d:20:89:6b:13:36:84: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CD:16:4F:91:06:EA:7F:68:0C:04:1D:EA:1F:25:56:C7:FC:25:A4 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.2.0/24 Signature Algorithm: sha256WithRSAEncryption c1:b2:92:13:24:9d:22:01:29:9a:cf:06:f3:13:1d:1f:8f:4c: 22:e3:6b:65:20:20:4f:d3:46:18:cf:b9:f8:06:f6:d9:66:27: c9:a0:ca:c3:39:c3:c2:38:c0:ac:ca:6a:c4:ea:0b:62:70:33: 6b:d8:3d:3c:25:d3:71:af:63:c8:19:9a:a3:8e:d8:9d:08:f7: 7c:f8:be:9c:ba:cf:61:34:16:20:f3:dd:3b:37:01:f8:58:57: ac:8b:98:b0:50:73:8c:ba:e5:ce:3b:08:a5:e6:e3:76:f0:48: b0:7d:c7:2b:52:d4:f2:2b:f9:be:d1:79:37:4a:19:40:9b:0a: 9a:6a:d9:ba:31:3f:23:0a:4a:b1:1a:53:85:77:fe:45:35:db: 41:62:36:6f:2a:f4:e4:84:41:f5:43:0d:cf:ba:72:ab:4d:79: 00:22:04:9d:2d:cc:32:af:31:c7:2b:91:3e:d8:ff:96:37:16: c7:da:b2:63:fb:de:1d:41:7f:5e:c2:14:c1:27:45:2b:3b:8a: 41:f8:07:16:69:f9:83:17:e2:04:4e:2f:42:ab:fd:3d:43:d9: 65:6a:a4:c0:d3:ea:4d:19:8d:c4:1a:da:c2:db:ba:0b:93:ea: 6f:4a:6d:03:86:ea:5c:f6:26:d3:19:e0:bc:37:d9:a3:22:9c: 17:21:90:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pUXbtagMbys/BOU/cPcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMTAyMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWNkMTY0ZjkxMDZlYTdmNjgwYzA0MWRlYTFmMjU1NmM3ZmMyNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVFkikGf4IGMMq32EnyyMCn6CsZs uW+1L+B4lWN+CmuOhTQ/12De+XEqg4gU2M3LzDgRWo07cKgH0NHY+zGavwSguJRI znMJbAbVUMKgTofg/DhRJzH8rKmpAT1oxSmjOlSQybQvGJ6+BIhUOzHIwA6EoKPG WYRlU5rslAGHqkA8gBK5P3M0bPZKr9Ejrt1Cw2YenGiypzqjyOo4dulN/BtQZ/gw xrhWNIFqo8+kVWUh3B78pkQR0nWeDws2xfb27oo689p6E/9W6jhZhwvgo0paALQZ W+O6kt64++yTZM/NAWATW6hEz6pWQopBB6AKhyCu2aSxDY0giWsTNoRexQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAnNFk+RBup/aAwEHeofJVbH/CWkMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvQ2MwV1Q1RUc2bjlvREFRZDZoOGxWc2Y4SmFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+sCMA0G CSqGSIb3DQEBCwUAA4IBAQDBspITJJ0iASmazwbzEx0fj0wi42tlICBP00YYz7n4 BvbZZifJoMrDOcPCOMCsymrE6gticDNr2D08JdNxr2PIGZqjjtidCPd8+L6cus9h NBYg8907NwH4WFesi5iwUHOMuuXOOwil5uN28EiwfccrUtTyK/m+0Xk3ShlAmwqa atm6MT8jCkqxGlOFd/5FNdtBYjZvKvTkhEH1Qw3PunKrTXkAIgSdLcwyrzHHK5E+ 2P+WNxbH2rJj+94dQX9ewhTBJ0UrO4pB+AcWafmDF+IETi9Cq/09Q9llaqTA0+pN GY3EGtrC27oLk+pvSm0Dhupc9ibTGeC8N9mjIpwXIZDn -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:53 2026 by rpki-client