This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cwRd0glIeBvZbQwOnSNg99QPdP8.roa File: cwRd0glIeBvZbQwOnSNg99QPdP8.roa (raw, json) Hash identifier: pEb1XR50WAkDQveEAVMSE5A2qYynVXDknZNBFeIJwow= Subject key identifier: 73:04:5D:D2:09:48:78:1B:D9:6D:0C:0E:9D:23:60:F7:D4:0F:74:FF Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CA7E2104AD28A2361EEA48D81C18F Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cwRd0glIeBvZbQwOnSNg99QPdP8.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34800 IP address blocks: 194.50.99.0/24 maxlen: 24 2001:7f8:e7::/48 maxlen: 48 2a04:ccc2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a7:e2:10:4a:d2:8a:23:61:ee:a4:8d:81:c1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73045dd20948781bd96d0c0e9d2360f7d40f74ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:55:99:7b:55:49:94:d6:93:bd:eb:61:45:68: b4:0a:34:56:38:ee:b4:ca:16:47:53:51:d5:29:04: 1e:d6:93:f7:88:dd:4f:16:89:4a:3a:12:15:ba:71: f1:37:75:05:f0:49:1e:68:b8:ff:37:f0:20:9c:5a: 7e:9b:aa:ea:5a:9b:c7:b7:e8:89:94:a8:3d:39:96: 70:f1:fa:fd:9e:15:5f:76:e4:01:21:4d:a5:e4:e8: 6b:31:bb:8e:22:e1:b5:ae:88:09:4c:3e:f7:04:6e: 19:83:36:63:4b:30:37:6d:fd:1e:e9:c4:49:65:ae: fa:29:88:91:a3:30:c9:1a:4b:f5:e5:3a:72:45:b4: a3:50:1f:52:8d:f7:31:14:20:c4:9e:76:5b:23:48: a2:10:8f:ec:a9:94:20:e2:62:e3:e4:c0:dd:1f:0b: 38:09:ab:88:2a:9c:6b:a1:b9:f6:3f:8d:e8:99:38: 58:e2:a2:5c:06:7d:95:14:06:85:e0:ce:9a:91:12: 0c:8b:d2:7b:87:54:c5:f5:4c:ea:96:4a:38:5b:15: 60:2f:db:ae:53:05:38:11:d1:66:a9:70:c8:90:39: c9:0d:4e:8d:30:88:01:3b:53:21:1b:49:33:eb:cf: 39:8a:b6:88:fd:89:ec:28:19:dd:ed:b0:27:ca:30: 41:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:04:5D:D2:09:48:78:1B:D9:6D:0C:0E:9D:23:60:F7:D4:0F:74:FF X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cwRd0glIeBvZbQwOnSNg99QPdP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.99.0/24 IPv6: 2001:7f8:e7::/48 2a04:ccc2::/32 Signature Algorithm: sha256WithRSAEncryption 35:de:d8:b1:97:12:e6:f1:24:32:ff:4d:d3:d5:d1:6b:7f:3a: 8d:a4:d6:5f:aa:b7:10:46:7b:49:84:04:cb:34:db:db:1d:38: 4b:90:21:f3:74:a7:6b:7b:34:64:21:55:f1:1d:36:93:b6:08: 6e:ae:71:41:19:6a:97:b7:23:03:9d:4d:70:a2:87:52:40:1e: 4e:fa:79:c3:7b:b5:1d:48:63:69:a5:28:0f:c3:05:95:c7:22: 98:01:23:04:21:3c:85:db:9f:26:33:2b:18:e4:71:a5:cf:6a: 2a:e7:6e:ca:ab:91:1b:e3:a3:ef:91:f8:71:80:da:88:2d:64: 9d:b0:fa:27:14:73:48:a7:f4:37:67:b9:5a:a1:67:83:fc:07: fb:ad:e4:f0:42:3c:36:c0:e7:5d:15:dd:bc:ba:5f:14:83:21: ec:37:fd:eb:da:b6:26:85:05:08:2e:dd:55:54:33:48:ec:ac: 91:39:f3:f4:8c:d7:ea:88:dd:4b:13:bb:cb:54:c5:bb:ac:a4: 0e:82:d8:f4:2b:45:9b:91:17:1b:33:30:1c:9f:ba:9c:ed:e6: 8e:15:b3:e3:11:d2:6f:3e:95:f3:68:4c:2c:5c:80:20:8b:9d: d9:e3:3b:18:f2:f3:bf:d2:b2:13:5e:a2:19:ab:cd:e0:db:50: ff:78:8f:67 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9XKfiEErSiiNh7qSNgcGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzA0NWRkMjA5NDg3ODFiZDk2ZDBjMGU5ZDIzNjBmN2Q0MGY3NGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1WZe1VJlNaTvethRWi0CjRWOO60 yhZHU1HVKQQe1pP3iN1PFolKOhIVunHxN3UF8EkeaLj/N/AgnFp+m6rqWpvHt+iJ lKg9OZZw8fr9nhVfduQBIU2l5OhrMbuOIuG1rogJTD73BG4ZgzZjSzA3bf0e6cRJ Za76KYiRozDJGkv15TpyRbSjUB9SjfcxFCDEnnZbI0iiEI/sqZQg4mLj5MDdHws4 CauIKpxrobn2P43omThY4qJcBn2VFAaF4M6akRIMi9J7h1TF9Uzqlko4WxVgL9uu UwU4EdFmqXDIkDnJDU6NMIgBO1MhG0kz6885iraI/YnsKBnd7bAnyjBBNwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHMEXdIJSHgb2W0MDp0jYPfUD3T/MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvY3dSZDBnbEllQnZaYlF3T25TTmc5OVFQZFA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAwjJjMBYE AgACMBADBwAgAQf4AOcDBQAqBMzCMA0GCSqGSIb3DQEBCwUAA4IBAQA13tixlxLm 8SQy/03T1dFrfzqNpNZfqrcQRntJhATLNNvbHThLkCHzdKdrezRkIVXxHTaTtghu rnFBGWqXtyMDnU1woodSQB5O+nnDe7UdSGNppSgPwwWVxyKYASMEITyF258mMysY 5HGlz2oq527Kq5Eb46PvkfhxgNqILWSdsPonFHNIp/Q3Z7laoWeD/Af7reTwQjw2 wOddFd28ul8UgyHsN/3r2rYmhQUILt1VVDNI7KyROfP0jNfqiN1LE7vLVMW7rKQO gtj0K0WbkRcbMzAcn7qc7eaOFbPjEdJvPpXzaEwsXIAgi53Z4zsY8vO/0rITXqIZ q83g21D/eI9n -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:50 2026 by rpki-client