This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_CYCWbRZPLRCPV-_r0sjHiqegHc.roa File: _CYCWbRZPLRCPV-_r0sjHiqegHc.roa (raw, json) Hash identifier: TclMHPjmaUII6EWsqM0io9gA5k+R+Qo9afD9pWBOwtE= Subject key identifier: FC:26:02:59:B4:59:3C:B4:42:3D:5F:BF:AF:4B:23:1E:2A:9E:80:77 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B0C83EB873ACF03680FD1C1C9A20E2855 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_CYCWbRZPLRCPV-_r0sjHiqegHc.roa Signing time: Thu 11 Dec 2025 08:25:30 +0000 ROA not before: Thu 11 Dec 2025 08:25:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199614 IP address blocks: 109.176.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:83:eb:87:3a:cf:03:68:0f:d1:c1:c9:a2:0e:28:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 11 08:25:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fc260259b4593cb4423d5fbfaf4b231e2a9e8077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:72:c1:58:e1:25:fb:9f:7e:da:bd:f4:6d: 2c:dc:83:5c:61:30:82:ea:4e:50:7b:85:0e:fa:94: ff:c9:e4:cf:ea:de:88:c8:e6:8f:ff:26:62:c5:9d: 5d:3a:84:15:86:b8:c2:0d:8e:15:ea:18:1a:92:9a: 37:d7:17:b1:3b:09:c8:fe:c0:11:54:82:cb:87:16: 97:2b:f1:a7:b5:bd:34:c6:cd:eb:e2:d4:75:5c:a9: fe:53:72:63:89:74:9d:bc:9c:34:b0:6c:a8:3c:89: ca:e1:f4:84:37:04:04:e2:75:f5:e3:3c:b8:e5:25: 91:1a:47:65:1d:55:23:f2:1a:37:cb:d0:27:be:15: b8:8e:8d:fd:8b:0d:6f:57:34:e0:2d:09:13:83:ed: 6b:d4:ae:e7:6e:d6:6e:8a:e6:67:7d:d3:5a:e1:6b: 10:4b:63:69:26:8f:5a:bc:89:64:4b:a0:1d:06:fd: b5:d7:59:ac:8d:74:0d:ef:82:b6:ed:4f:df:2c:25: 9e:29:ce:d4:bb:71:39:88:1e:5f:68:29:e4:c5:53: e9:a4:1d:f4:3d:97:66:81:86:18:55:b2:b8:5c:48: 13:82:53:53:3d:cb:bd:86:42:52:c0:89:17:d0:4a: 2b:84:7e:cc:ab:23:1d:e2:f2:c4:60:08:7e:65:1e: 17:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:26:02:59:B4:59:3C:B4:42:3D:5F:BF:AF:4B:23:1E:2A:9E:80:77 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/_CYCWbRZPLRCPV-_r0sjHiqegHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.28.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:30:c9:03:87:54:9b:fc:c2:46:87:09:69:28:ff:86:ab:26: 02:25:c8:cc:c4:0a:f8:b0:8e:a0:87:72:f2:f0:8f:97:d5:07: e7:6b:a1:9e:15:06:36:ca:fb:66:f7:c5:d9:6f:ad:6c:2d:3b: 6d:26:1f:ce:68:aa:f6:cf:8c:44:86:39:4f:ba:8a:fe:0c:70: 65:d5:ef:42:c1:8b:57:b4:21:0b:58:be:7d:2a:c6:35:4d:3d: fc:da:29:e5:db:8c:88:bc:17:8b:c5:77:2a:8f:5e:26:ae:d0: 4e:c4:a5:1d:e7:7c:c4:1e:be:45:6d:1d:be:0a:05:93:09:7e: e8:81:86:15:a8:3e:65:2c:f9:cc:9c:09:e9:23:27:f7:b0:58: b7:66:a2:4d:17:95:79:70:b6:fe:e8:47:8d:80:ca:35:22:0a: 36:2d:d3:6a:ff:97:f8:6d:1e:fc:9f:32:0b:7e:83:c1:9f:97: 31:d0:c6:d3:60:43:3c:82:fc:76:fe:73:5b:b1:1d:c2:d5:8c: cc:24:5b:9b:1c:43:86:9d:d8:8b:27:71:10:29:ce:b6:3f:28: 55:bc:73:06:4d:b8:e0:fe:cc:f4:49:07:ba:a5:22:b6:98:9d: b3:18:64:10:49:bb:d7:5c:db:90:fd:08:00:3c:f7:a4:c7:95: 6b:6e:27:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMg+uHOs8DaA/RwcmiDihVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjExMDgyNTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzI2MDI1OWI0NTkzY2I0NDIzZDVmYmZhZjRiMjMxZTJhOWU4MDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT9ywVjhJfufftq99G0s3INcYTCC 6k5Qe4UO+pT/yeTP6t6IyOaP/yZixZ1dOoQVhrjCDY4V6hgakpo31xexOwnI/sAR VILLhxaXK/Gntb00xs3r4tR1XKn+U3JjiXSdvJw0sGyoPInK4fSENwQE4nX14zy4 5SWRGkdlHVUj8ho3y9AnvhW4jo39iw1vVzTgLQkTg+1r1K7nbtZuiuZnfdNa4WsQ S2NpJo9avIlkS6AdBv2111msjXQN74K27U/fLCWeKc7Uu3E5iB5faCnkxVPppB30 PZdmgYYYVbK4XEgTglNTPcu9hkJSwIkX0EorhH7MqyMd4vLEYAh+ZR4XgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPwmAlm0WTy0Qj1fv69LIx4qnoB3MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvX0NZQ1diUlpQTFJDUFYtX3Iwc2pIaXFlZ0hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbAcMA0G CSqGSIb3DQEBCwUAA4IBAQAaMMkDh1Sb/MJGhwlpKP+GqyYCJcjMxAr4sI6gh3Ly 8I+X1Qfna6GeFQY2yvtm98XZb61sLTttJh/OaKr2z4xEhjlPuor+DHBl1e9CwYtX tCELWL59KsY1TT382inl24yIvBeLxXcqj14mrtBOxKUd53zEHr5FbR2+CgWTCX7o gYYVqD5lLPnMnAnpIyf3sFi3ZqJNF5V5cLb+6EeNgMo1Igo2LdNq/5f4bR78nzIL foPBn5cx0MbTYEM8gvx2/nNbsR3C1YzMJFubHEOGndiLJ3EQKc62PyhVvHMGTbjg /sz0SQe6pSK2mJ2zGGQQSbvXXNuQ/QgAPPekx5VrbieR -----END CERTIFICATE-----Generated at Fri Dec 19 11:50:27 2025 by rpki-client