This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/CSMhzk4QNto51XCFdt7AijiryeE.roa File: CSMhzk4QNto51XCFdt7AijiryeE.roa (raw, json) Hash identifier: /pZB8ZU1GJwmjG+rj4CqNfxKPraUkyvAW+JFipdspp4= Subject key identifier: 09:23:21:CE:4E:10:36:DA:39:D5:70:85:76:DE:C0:8A:38:AB:C9:E1 Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a Certificate serial: 019B30062C9C423564259012C1AD16635CD2 Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/CSMhzk4QNto51XCFdt7AijiryeE.roa Signing time: Thu 18 Dec 2025 05:54:29 +0000 ROA not before: Thu 18 Dec 2025 05:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47550 IP address blocks: 91.241.19.0/24 maxlen: 24 193.106.236.0/24 maxlen: 24 193.106.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:06:2c:9c:42:35:64:25:90:12:c1:ad:16:63:5c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a Validity Not Before: Dec 18 05:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=092321ce4e1036da39d5708576dec08a38abc9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6e:27:9b:0e:52:b1:4b:61:74:c5:cc:92:8a: 71:97:e8:ac:58:8f:35:83:cb:9d:5f:1b:cd:76:b3: 54:37:98:7c:b3:0f:49:3f:3c:38:32:1b:a7:b8:b8: 93:67:c4:8b:77:37:9a:33:d4:9a:73:82:85:d5:d3: 20:97:ee:6e:40:88:8d:23:39:20:04:51:d0:69:9d: 02:a3:fa:8a:57:75:b2:a9:bb:d1:a0:44:79:4b:77: c3:4d:43:bd:44:2c:f3:7d:4d:ad:a7:f4:a3:a4:94: 0a:bb:5b:0d:54:ff:4e:e1:c9:da:e5:56:d6:5f:8b: 2b:b5:9a:29:0f:df:d7:6c:ee:ec:32:b7:34:b3:aa: 54:c4:83:b5:c0:ce:65:41:ac:9e:34:12:6b:59:9f: 6e:89:d3:b0:d5:de:ac:2f:78:4d:86:ff:19:36:f0: 70:3f:58:bc:a2:fe:3b:aa:73:c9:97:f2:d4:f1:19: 7a:ee:dc:dd:0c:28:b2:7e:1e:82:88:8e:d0:c9:9c: 65:16:87:73:90:cf:12:ee:a5:2e:15:23:8a:e4:18: d0:79:fd:fb:57:e9:79:a0:3b:21:cb:8c:cb:2f:8e: e0:cc:80:d8:a3:3a:f9:38:4d:21:13:11:9a:2b:2b: 2e:86:cc:59:56:72:00:dd:ed:de:86:9e:80:b7:99: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:23:21:CE:4E:10:36:DA:39:D5:70:85:76:DE:C0:8A:38:AB:C9:E1 X509v3 Authority Key Identifier: keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/CSMhzk4QNto51XCFdt7AijiryeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.19.0/24 193.106.236.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:a0:46:52:32:ae:aa:0e:0f:75:cb:ac:f0:0c:d9:b1:7e:4a: 71:2f:a8:fc:05:65:07:cc:89:b7:8b:ba:23:9d:f4:33:2b:73: c2:f5:26:4f:79:41:d4:15:01:81:26:1b:88:6d:26:27:23:77: b8:da:53:44:30:12:2b:01:2e:b2:88:67:74:a7:4b:7b:33:b6: 48:2a:4c:0d:0c:e7:3a:28:9e:a4:51:8c:63:1e:00:81:53:d4: 6a:59:be:da:1b:6f:5d:a2:6c:1c:50:28:3f:ae:d5:eb:2d:f4: 34:44:ea:4b:f9:89:64:70:66:6b:f6:eb:3f:88:05:a6:c0:3f: fb:22:3c:bc:27:dc:df:73:a5:2f:d4:b8:d2:2e:f8:7f:a0:8f: 3d:4e:8c:7f:31:95:9f:71:dd:3f:5e:b8:59:b2:88:68:b2:82: 10:81:62:e4:7f:d5:58:ad:79:ae:69:fe:6e:b9:be:eb:61:ee: 03:15:77:be:97:a5:e1:a3:9e:b0:4a:db:69:4b:1c:13:f4:28: 82:b3:e5:0c:a9:63:e4:b1:4c:bd:08:22:27:4d:d8:4d:a1:ec: 6f:03:91:09:f9:91:71:d0:3e:82:ca:e9:9e:97:96:44:24:1a: 97:9a:e6:bd:55:7a:40:0c:6a:8b:ce:67:d5:5b:d0:23:f4:00: 1c:0a:5a:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZswBiycQjVkJZASwa0WY1zSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxY2Y1ZDkyZGQ3N2I4ZWY3ZWQ2Y2Q1N2NhYWExMGFmZDk4 ZTllNWEwHhcNMjUxMjE4MDU1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTIzMjFjZTRlMTAzNmRhMzlkNTcwODU3NmRlYzA4YTM4YWJjOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA424nmw5SsUthdMXMkopxl+isWI81 g8udXxvNdrNUN5h8sw9JPzw4MhunuLiTZ8SLdzeaM9Sac4KF1dMgl+5uQIiNIzkg BFHQaZ0Co/qKV3WyqbvRoER5S3fDTUO9RCzzfU2tp/SjpJQKu1sNVP9O4cna5VbW X4srtZopD9/XbO7sMrc0s6pUxIO1wM5lQayeNBJrWZ9uidOw1d6sL3hNhv8ZNvBw P1i8ov47qnPJl/LU8Rl67tzdDCiyfh6CiI7QyZxlFodzkM8S7qUuFSOK5BjQef37 V+l5oDshy4zLL47gzIDYozr5OE0hExGaKysuhsxZVnIA3e3ehp6At5mdxwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAkjIc5OEDbaOdVwhXbewIo4q8nhMB8GA1UdIwQY MBaAFNHPXZLdd7jvftbNV8qqEK/Zjp5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGM5ZGt0MTN1TzktMXMxWHlxb1FyOW1PbmxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yOTRhMTItMzBlYi00YWViLTk1Yzgt NTAxYTA3MTlkYTBjLzEvQ1NNaHprNFFOdG81MVhDRmR0N0FpamlyeWVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8yOTRhMTItMzBlYi00YWViLTk1YzgtNTAxYTA3MTlkYTBj LzEvMGM5ZGt0MTN1TzktMXMxWHlxb1FyOW1PbmxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/ETAwQB wWrsMA0GCSqGSIb3DQEBCwUAA4IBAQBvoEZSMq6qDg91y6zwDNmxfkpxL6j8BWUH zIm3i7ojnfQzK3PC9SZPeUHUFQGBJhuIbSYnI3e42lNEMBIrAS6yiGd0p0t7M7ZI KkwNDOc6KJ6kUYxjHgCBU9RqWb7aG29domwcUCg/rtXrLfQ0ROpL+YlkcGZr9us/ iAWmwD/7Ijy8J9zfc6Uv1LjSLvh/oI89Tox/MZWfcd0/XrhZsohosoIQgWLkf9VY rXmuaf5uub7rYe4DFXe+l6Xho56wSttpSxwT9CiCs+UMqWPksUy9CCInTdhNoexv A5EJ+ZFx0D6Cyumel5ZEJBqXmua9VXpADGqLzmfVW9Aj9AAcClpa -----END CERTIFICATE-----Generated at Sun Dec 21 06:01:25 2025 by rpki-client