This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa File: CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa (raw, json) Hash identifier: 64gVJuHjRSQovFr9XT+uIvTrz2Nlh3y9/QzHL+fzAZ0= Subject key identifier: 09:FC:59:D1:E1:9E:87:A2:03:22:A1:15:A7:E7:E3:64:4B:29:18:EC Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6 Certificate serial: 019B7B35BCB0468D565C528D33955F691452 Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8549 IP address blocks: 80.77.208.0/20 maxlen: 24 87.237.88.0/21 maxlen: 22 185.199.192.0/22 maxlen: 22 193.24.32.0/22 maxlen: 22 2a03:f00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bc:b0:46:8d:56:5c:52:8d:33:95:5f:69:14:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6 Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09fc59d1e19e87a20322a115a7e7e3644b2918ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:03:d4:91:c2:03:ef:4f:50:1e:f0:a8:27: fe:cd:d3:9e:dc:36:e7:23:7c:0e:7a:48:77:d4:58: 2d:54:69:ff:4a:23:61:f9:69:ba:a1:93:cc:9c:a2: 62:c6:06:ea:d6:a3:c2:3f:9c:d7:1b:42:1a:85:ef: 5f:21:d9:f2:e8:2f:8a:7b:21:3c:e9:b2:39:0e:dd: 34:4a:d3:ed:cc:72:3e:99:f3:4c:45:f0:c1:67:8c: c5:47:71:65:fb:40:bf:30:c9:77:cb:f1:96:9d:60: f6:ad:d3:99:02:3d:6e:e9:0c:eb:da:88:2b:39:75: e8:01:6e:95:ba:7c:50:bc:97:4d:77:ea:45:b0:54: ae:ac:7e:d2:f4:96:a1:00:a5:bd:c8:cb:ba:0e:69: 62:fe:98:55:84:9a:b7:2a:06:76:e4:f9:76:af:13: 99:20:2a:bd:ea:e3:fa:b2:8d:38:77:df:6a:03:00: 76:db:8b:73:2d:ab:72:f0:6a:33:63:32:b6:c8:13: 85:b5:12:dd:5a:73:a2:71:23:ac:b8:75:c0:50:8b: 0e:f2:42:97:01:8b:e7:b9:38:22:c2:69:68:27:1c: e2:8b:1d:93:05:54:5e:80:f4:c4:60:82:24:5d:f0: 59:38:ac:7a:77:1e:9a:1d:ff:82:eb:cb:c9:6e:9c: 3c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FC:59:D1:E1:9E:87:A2:03:22:A1:15:A7:E7:E3:64:4B:29:18:EC X509v3 Authority Key Identifier: keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/CfxZ0eGeh6IDIqEVp-fjZEspGOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.77.208.0/20 87.237.88.0/21 185.199.192.0/22 193.24.32.0/22 IPv6: 2a03:f00::/29 Signature Algorithm: sha256WithRSAEncryption 74:aa:a3:4d:5c:fa:80:c3:5d:86:5e:65:c5:95:36:f6:6f:d8: 1c:9b:70:2e:69:e0:49:af:c4:c6:ad:27:2d:17:f4:5f:d3:ed: f6:b0:87:53:27:cd:5d:da:e1:4c:c1:bc:0d:57:7e:d9:c7:65: fd:05:b9:5d:b1:b0:7d:4c:da:ae:8e:91:b6:b4:97:17:d4:16: ab:e9:26:34:fb:68:7c:01:a9:30:74:96:40:82:d6:16:e9:c1: 3e:4d:91:5e:9f:ef:52:5e:86:d3:0d:07:de:c4:7a:36:82:14: 96:de:e7:27:2e:eb:68:4a:94:e6:62:a8:0b:e9:79:22:67:e7: 44:f0:4d:76:e5:1b:02:f6:7d:37:b2:c0:c7:86:d4:4f:60:33: 18:2b:b4:0b:12:14:64:42:0c:15:7a:98:cb:64:61:1d:23:8b: d0:e4:0a:51:02:b7:a1:57:bc:9b:dc:50:0a:da:5d:0f:8a:7f: 04:6c:50:92:f1:e2:a2:a7:f6:17:ff:e9:ac:10:5e:b5:b5:d9: a3:ef:40:30:8d:0c:c6:ca:fb:01:3f:bb:e7:d2:49:a7:48:37: 30:09:ff:52:15:1f:6e:76:fd:a4:4b:af:40:74:d8:e3:b1:78: 56:34:30:37:ba:92:3f:cc:24:1c:28:17:d3:a4:3f:3d:04:65: c1:2c:86:66 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7NbywRo1WXFKNM5VfaRRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzg5MTE2ODJiYzVjYTcxY2VjZTFlZmUzYWMxMzViZmRi NTlkZDYwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWZjNTlkMWUxOWU4N2EyMDMyMmExMTVhN2U3ZTM2NDRiMjkxOGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVMD1JHCA+9PUB7wqCf+zdOe3Dbn I3wOekh31FgtVGn/SiNh+Wm6oZPMnKJixgbq1qPCP5zXG0Iahe9fIdny6C+KeyE8 6bI5Dt00StPtzHI+mfNMRfDBZ4zFR3Fl+0C/MMl3y/GWnWD2rdOZAj1u6Qzr2ogr OXXoAW6VunxQvJdNd+pFsFSurH7S9JahAKW9yMu6Dmli/phVhJq3KgZ25Pl2rxOZ ICq96uP6so04d99qAwB224tzLaty8GozYzK2yBOFtRLdWnOicSOsuHXAUIsO8kKX AYvnuTgiwmloJxziix2TBVRegPTEYIIkXfBZOKx6dx6aHf+C68vJbpw86QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAn8WdHhnoeiAyKhFafn42RLKRjsMB8GA1UdIwQY MBaAFH3IkRaCvFynHOzh7+OsE1v9tZ3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQt NzUyOTUyNTFiMWU4LzEvQ2Z4WjBlR2VoNklESXFFVnAtZmpaRXNwR093LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQtNzUyOTUyNTFiMWU4 LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUE3QAwQD V+1YAwQCucfAAwQCwRggMA0EAgACMAcDBQMqAw8AMA0GCSqGSIb3DQEBCwUAA4IB AQB0qqNNXPqAw12GXmXFlTb2b9gcm3AuaeBJr8TGrSctF/Rf0+32sIdTJ81d2uFM wbwNV37Zx2X9BbldsbB9TNqujpG2tJcX1Bar6SY0+2h8AakwdJZAgtYW6cE+TZFe n+9SXobTDQfexHo2ghSW3ucnLutoSpTmYqgL6XkiZ+dE8E125RsC9n03ssDHhtRP YDMYK7QLEhRkQgwVepjLZGEdI4vQ5ApRArehV7yb3FAK2l0Pin8EbFCS8eKip/YX /+msEF61tdmj70AwjQzGyvsBP7vn0kmnSDcwCf9SFR9udv2kS69AdNjjsXhWNDA3 upI/zCQcKBfTpD89BGXBLIZm -----END CERTIFICATE-----Generated at Wed Jan 21 21:07:52 2026 by rpki-client