This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/czKDro5NX_B7iWJU3teZpH_MFjc.roa File: czKDro5NX_B7iWJU3teZpH_MFjc.roa (raw, json) Hash identifier: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q= Subject key identifier: 73:32:83:AE:8E:4D:5F:F0:7B:89:62:54:DE:D7:99:A4:7F:CC:16:37 Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 019B7C7FB48FB5DE6BF6A57DD9E5208E7B85 Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/czKDro5NX_B7iWJU3teZpH_MFjc.roa Signing time: Fri 02 Jan 2026 02:18:22 +0000 ROA not before: Fri 02 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52045 IP address blocks: 185.41.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b4:8f:b5:de:6b:f6:a5:7d:d9:e5:20:8e:7b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Jan 2 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=733283ae8e4d5ff07b896254ded799a47fcc1637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:37:c1:db:71:a8:b1:c1:9b:b9:6d:75:a7:b8: 9d:05:70:0e:9f:be:0f:a3:75:31:bd:0c:df:17:66: 0d:91:44:61:4c:9a:03:28:ec:a2:95:95:63:43:d3: 81:df:da:0b:69:5f:9a:be:70:77:69:c6:ed:55:ca: 41:ef:4c:2a:33:90:a4:17:60:63:cc:a1:37:9d:8a: 9f:5f:af:fb:72:e3:5e:ab:7e:7d:a9:3d:8a:ff:09: 2d:09:8e:21:22:23:c7:5c:9b:c9:9d:2f:9c:3a:8a: 27:4f:0c:24:99:63:ed:f5:0c:9c:63:d0:30:f4:58: 69:f3:35:c9:12:a7:47:51:ed:94:30:8c:95:7e:0b: bb:3e:f7:fb:a0:73:0d:4f:c6:81:c1:6a:f8:c0:cf: fd:0c:4e:50:e1:de:b5:b3:71:c2:59:0a:12:70:b7: 7c:d3:1c:03:b1:53:e5:3b:19:51:9f:8d:4b:fd:a6: d4:09:d6:e9:da:a3:42:e5:67:49:e4:5e:89:2c:5e: 11:18:97:08:68:4b:3a:12:a8:93:47:8a:54:f6:f1: 0d:71:91:f3:00:17:66:a8:27:18:46:8f:8f:ba:e0: 5a:1e:d3:30:c5:79:f0:da:44:10:bc:b4:4c:fc:5d: d7:8a:10:6e:79:5f:22:0d:18:d5:df:1e:e7:18:66: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:32:83:AE:8E:4D:5F:F0:7B:89:62:54:DE:D7:99:A4:7F:CC:16:37 X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/czKDro5NX_B7iWJU3teZpH_MFjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.41.21.0/24 Signature Algorithm: sha256WithRSAEncryption b0:c7:c7:02:7f:07:3e:aa:33:24:50:73:b3:0b:9d:e3:1c:1d: 24:1d:76:39:fa:2f:b1:82:9d:6d:2a:97:fe:1c:74:a0:c6:ec: 6a:1d:0b:0a:9e:21:ce:8f:f3:71:cb:81:7f:0f:71:d0:f4:6d: 93:db:a7:0c:7b:8c:2d:4e:0a:31:be:17:36:b4:95:6d:0b:0a: 32:d4:a6:9f:56:99:8b:56:c4:98:e3:b3:ab:2e:20:93:ee:36: 62:d1:4e:4e:05:4a:9e:de:ca:e5:e1:53:fb:eb:af:62:e4:f9: 83:fb:92:d4:68:9d:f3:7a:80:f5:a9:be:90:fd:5c:72:34:fa: 26:91:d1:3d:bf:da:f2:b5:0e:ea:41:90:e3:ec:fc:92:d8:d6: 47:9a:7d:9e:f7:c0:cf:d8:b4:51:62:d3:cf:8f:40:ef:2f:f6: 23:30:a9:4d:58:64:59:36:9f:d9:b9:40:f2:c1:8d:0f:c2:41: 9f:17:72:9f:61:3e:e7:ba:e4:0f:95:9d:dc:de:a3:69:70:f1: 3b:9b:bc:d0:a6:8b:ef:65:ba:03:60:ed:b2:4f:53:e1:80:3d: d8:ac:fb:3f:7c:d9:82:86:5e:e2:a9:96:0e:99:47:3d:93:ad: a5:04:ac:69:5c:ab:4d:75:6f:96:41:eb:f3:ab:ad:0e:4f:0f: ba:0e:5f:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7SPtd5r9qV92eUgjnuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjYwMTAyMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzMyODNhZThlNGQ1ZmYwN2I4OTYyNTRkZWQ3OTlhNDdmY2MxNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jfB23GoscGbuW11p7idBXAOn74P o3UxvQzfF2YNkURhTJoDKOyilZVjQ9OB39oLaV+avnB3acbtVcpB70wqM5CkF2Bj zKE3nYqfX6/7cuNeq359qT2K/wktCY4hIiPHXJvJnS+cOoonTwwkmWPt9QycY9Aw 9Fhp8zXJEqdHUe2UMIyVfgu7Pvf7oHMNT8aBwWr4wM/9DE5Q4d61s3HCWQoScLd8 0xwDsVPlOxlRn41L/abUCdbp2qNC5WdJ5F6JLF4RGJcIaEs6EqiTR4pU9vENcZHz ABdmqCcYRo+PuuBaHtMwxXnw2kQQvLRM/F3XihBueV8iDRjV3x7nGGaAYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHMyg66OTV/we4liVN7XmaR/zBY3MB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvY3pLRHJvNU5YX0I3aVdKVTN0ZVpwSF9NRmpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSkVMA0G CSqGSIb3DQEBCwUAA4IBAQCwx8cCfwc+qjMkUHOzC53jHB0kHXY5+i+xgp1tKpf+ HHSgxuxqHQsKniHOj/Nxy4F/D3HQ9G2T26cMe4wtTgoxvhc2tJVtCwoy1KafVpmL VsSY47OrLiCT7jZi0U5OBUqe3srl4VP7669i5PmD+5LUaJ3zeoD1qb6Q/VxyNPom kdE9v9rytQ7qQZDj7PyS2NZHmn2e98DP2LRRYtPPj0DvL/YjMKlNWGRZNp/ZuUDy wY0PwkGfF3KfYT7nuuQPlZ3c3qNpcPE7m7zQpovvZboDYO2yT1PhgD3YrPs/fNmC hl7iqZYOmUc9k62lBKxpXKtNdW+WQevzq60OTw+6Dl8f -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:37 2026 by rpki-client