This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CcsfLgIWUZwCgNwXEEBCtNjNu9c.roa File: CcsfLgIWUZwCgNwXEEBCtNjNu9c.roa (raw, json) Hash identifier: FuKr2JzcXDazZzQ5SYg7llYCZvvrCARUUfeoDZ8tXGY= Subject key identifier: 09:CB:1F:2E:02:16:51:9C:02:80:DC:17:10:40:42:B4:D8:CD:BB:D7 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B0A2EFC89F9391C223F21ED6AAEE6AD11 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CcsfLgIWUZwCgNwXEEBCtNjNu9c.roa Signing time: Wed 10 Dec 2025 21:33:30 +0000 ROA not before: Wed 10 Dec 2025 21:33:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 80.96.38.0/24 maxlen: 24 80.96.39.0/24 maxlen: 24 80.96.44.0/23 maxlen: 24 80.96.54.0/23 maxlen: 24 80.96.89.0/24 maxlen: 24 80.96.90.0/23 maxlen: 23 80.96.102.0/23 maxlen: 24 80.96.156.0/22 maxlen: 24 80.96.236.0/23 maxlen: 23 80.97.40.0/21 maxlen: 24 80.97.96.0/23 maxlen: 24 81.180.36.0/24 maxlen: 24 81.180.94.0/23 maxlen: 23 81.180.98.0/23 maxlen: 24 81.180.139.0/24 maxlen: 24 81.180.172.0/24 maxlen: 24 81.180.174.0/23 maxlen: 24 81.180.204.0/24 maxlen: 24 81.180.228.0/23 maxlen: 24 81.180.254.0/23 maxlen: 24 81.181.14.0/23 maxlen: 24 81.181.26.0/23 maxlen: 24 81.181.68.0/23 maxlen: 24 81.181.72.0/23 maxlen: 24 81.181.104.0/21 maxlen: 24 85.120.44.0/24 maxlen: 24 85.120.84.0/23 maxlen: 24 85.120.184.0/24 maxlen: 24 85.121.48.0/21 maxlen: 24 85.121.120.0/21 maxlen: 24 85.121.168.0/22 maxlen: 24 85.121.232.0/21 maxlen: 24 85.121.244.0/24 maxlen: 24 85.122.84.0/24 maxlen: 24 85.122.85.0/24 maxlen: 24 85.122.124.0/22 maxlen: 24 85.122.231.0/24 maxlen: 24 193.226.76.0/22 maxlen: 24 194.102.36.0/22 maxlen: 24 194.102.148.0/23 maxlen: 24 194.102.160.0/23 maxlen: 24 194.102.174.0/23 maxlen: 24 194.102.180.0/22 maxlen: 24 194.102.224.0/22 maxlen: 24 194.105.12.0/22 maxlen: 24 194.153.225.0/24 maxlen: 24 194.153.230.0/23 maxlen: 24 194.153.244.0/23 maxlen: 24 217.156.16.0/23 maxlen: 24 217.156.48.0/22 maxlen: 24 217.156.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:2e:fc:89:f9:39:1c:22:3f:21:ed:6a:ae:e6:ad:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Dec 10 21:33:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=09cb1f2e0216519c0280dc17104042b4d8cdbbd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:cb:6f:81:00:fc:4a:80:62:2d:98:2d:4b: 99:53:f8:6c:c2:46:65:03:20:33:34:ce:79:ca:ae: dc:34:3d:ae:60:9f:3b:dd:00:03:0b:30:e4:de:c7: 56:ea:ed:66:e9:97:27:ec:42:2e:b1:2c:21:86:c0: ae:7e:35:f7:ad:82:32:e9:5c:ab:06:10:8d:d1:02: 7f:46:f1:4d:01:0a:70:79:60:7d:90:a6:b7:00:d8: ed:96:08:cf:8e:f5:50:1c:7c:42:76:e4:12:88:77: 2f:a2:b0:46:c4:16:c9:ea:28:a9:f3:5e:fc:b5:eb: 05:5e:e2:75:58:1d:1f:1d:d9:8e:88:40:ad:31:d6: fe:4e:33:9f:c3:5b:e5:30:17:e7:13:e1:9c:94:1b: 6c:11:eb:ad:d7:5d:f3:0f:45:b7:8b:1e:2e:13:8a: 0c:77:b2:68:e5:66:a4:e0:5b:d7:d0:7b:a4:7d:76: 82:01:c8:90:66:d7:04:5d:ff:a4:46:1c:01:b2:22: 89:71:cb:7e:f1:eb:18:13:53:4c:77:7f:0f:3f:da: 09:3e:e7:e6:66:bf:c2:2a:6a:1e:f3:12:d3:da:2e: b0:49:aa:94:d8:e5:37:8e:1e:fa:51:39:54:cf:47: 0c:c7:e4:17:68:9a:5e:ea:d9:29:74:4b:db:9b:5b: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CB:1F:2E:02:16:51:9C:02:80:DC:17:10:40:42:B4:D8:CD:BB:D7 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/CcsfLgIWUZwCgNwXEEBCtNjNu9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.96.38.0/23 80.96.44.0/23 80.96.54.0/23 80.96.89.0-80.96.91.255 80.96.102.0/23 80.96.156.0/22 80.96.236.0/23 80.97.40.0/21 80.97.96.0/23 81.180.36.0/24 81.180.94.0/23 81.180.98.0/23 81.180.139.0/24 81.180.172.0/24 81.180.174.0/23 81.180.204.0/24 81.180.228.0/23 81.180.254.0/23 81.181.14.0/23 81.181.26.0/23 81.181.68.0/23 81.181.72.0/23 81.181.104.0/21 85.120.44.0/24 85.120.84.0/23 85.120.184.0/24 85.121.48.0/21 85.121.120.0/21 85.121.168.0/22 85.121.232.0/21 85.121.244.0/24 85.122.84.0/23 85.122.124.0/22 85.122.231.0/24 193.226.76.0/22 194.102.36.0/22 194.102.148.0/23 194.102.160.0/23 194.102.174.0/23 194.102.180.0/22 194.102.224.0/22 194.105.12.0/22 194.153.225.0/24 194.153.230.0/23 194.153.244.0/23 217.156.16.0/23 217.156.48.0/22 217.156.94.0/23 Signature Algorithm: sha256WithRSAEncryption 10:5d:3b:17:39:d3:ef:b0:65:16:b1:d7:2d:8a:d5:dc:b2:bd: 27:9d:55:48:91:cc:af:cb:55:e6:87:22:7a:26:e3:c4:8f:76: a6:80:be:8e:1d:b7:2e:32:ca:af:af:41:87:3b:5a:72:8f:94: 20:65:b3:35:66:f0:7e:4f:6e:3c:ae:b3:6e:28:0c:2c:f5:9f: 7e:f1:c7:71:ba:d9:7a:9b:79:50:37:5d:4c:cc:5d:51:64:b2: 22:9e:58:15:9b:44:e1:97:34:a5:03:94:00:7d:84:a4:93:45: 8a:e8:96:32:9b:30:a7:e2:9e:24:b9:29:ff:b5:a4:cf:b2:11: 2f:f5:6c:e8:5f:c9:20:d8:d5:4d:d0:8f:3a:9b:e1:a0:51:a0: 08:e5:79:98:71:c9:d2:26:f6:a0:d6:cd:54:70:c5:84:b5:74: f0:55:72:1b:97:62:38:42:23:8b:07:bc:a2:ee:02:63:38:e2: 00:1b:78:a7:0b:58:a5:cc:26:49:22:df:6f:7c:e0:7e:37:6c: 33:61:fa:09:5c:66:cb:e7:45:9c:34:57:be:b8:2c:31:c1:95: e3:75:e6:75:3c:cd:64:e7:63:6b:2c:03:fa:13:f2:85:a8:9a: 7b:67:02:a2:e1:dd:be:c9:99:65:ac:d6:4d:78:2c:6f:aa:bf: fd:35:2b:2a -----BEGIN CERTIFICATE----- MIIGKTCCBRGgAwIBAgISAZsKLvyJ+TkcIj8h7Wqu5q0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjUxMjEwMjEzMzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWNiMWYyZTAyMTY1MTljMDI4MGRjMTcxMDQwNDJiNGQ4Y2RiYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApenLb4EA/EqAYi2YLUuZU/hswkZl AyAzNM55yq7cND2uYJ873QADCzDk3sdW6u1m6Zcn7EIusSwhhsCufjX3rYIy6Vyr BhCN0QJ/RvFNAQpweWB9kKa3ANjtlgjPjvVQHHxCduQSiHcvorBGxBbJ6iip8178 tesFXuJ1WB0fHdmOiECtMdb+TjOfw1vlMBfnE+GclBtsEeut113zD0W3ix4uE4oM d7Jo5Wak4FvX0HukfXaCAciQZtcEXf+kRhwBsiKJcct+8esYE1NMd38PP9oJPufm Zr/CKmoe8xLT2i6wSaqU2OU3jh76UTlUz0cMx+QXaJpe6tkpdEvbm1vwPwIDAQAB o4IDNTCCAzEwHQYDVR0OBBYEFAnLHy4CFlGcAoDcFxBAQrTYzbvXMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvQ2NzZkxnSVdVWndDZ053WEVFQkN0TmpOdTljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBSQYIKwYBBQUHAQcBAf8EggE4MIIBNDCCATAEAgABMIIB KAMEAVBgJgMEAVBgLAMEAVBgNjAMAwQAUGBZAwQCUGBYAwQBUGBmAwQCUGCcAwQB UGDsAwQDUGEoAwQBUGFgAwQAUbQkAwQBUbReAwQBUbRiAwQAUbSLAwQAUbSsAwQB UbSuAwQAUbTMAwQBUbTkAwQBUbT+AwQBUbUOAwQBUbUaAwQBUbVEAwQBUbVIAwQD UbVoAwQAVXgsAwQBVXhUAwQAVXi4AwQDVXkwAwQDVXl4AwQCVXmoAwQDVXnoAwQA VXn0AwQBVXpUAwQCVXp8AwQAVXrnAwQCweJMAwQCwmYkAwQBwmaUAwQBwmagAwQB wmauAwQCwma0AwQCwmbgAwQCwmkMAwQAwpnhAwQBwpnmAwQBwpn0AwQB2ZwQAwQC 2ZwwAwQB2ZxeMA0GCSqGSIb3DQEBCwUAA4IBAQAQXTsXOdPvsGUWsdctitXcsr0n nVVIkcyvy1XmhyJ6JuPEj3amgL6OHbcuMsqvr0GHO1pyj5QgZbM1ZvB+T248rrNu KAws9Z9+8cdxutl6m3lQN11MzF1RZLIinlgVm0ThlzSlA5QAfYSkk0WK6JYymzCn 4p4kuSn/taTPshEv9WzoX8kg2NVN0I86m+GgUaAI5XmYccnSJvag1s1UcMWEtXTw VXIbl2I4QiOLB7yi7gJjOOIAG3inC1ilzCZJIt9vfOB+N2wzYfoJXGbL50WcNFe+ uCwxwZXjdeZ1PM1k52NrLAP6E/KFqJp7ZwKi4d2+yZllrNZNeCxvqr/9NSsq -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:13 2025 by rpki-client