This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/cFm6ye9YYzLfyOwoeW-SophEslI.roa File: cFm6ye9YYzLfyOwoeW-SophEslI.roa (raw, json) Hash identifier: wK5ZZbYjXfq8ZMAuBJ6aukKc/TCZu0uxRC1ZIPKuaL8= Subject key identifier: 70:59:BA:C9:EF:58:63:32:DF:C8:EC:28:79:6F:92:A2:98:44:B2:52 Certificate issuer: /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366 Certificate serial: 019B7DCA59A66B23BCE5817DD3211C02FA60 Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/cFm6ye9YYzLfyOwoeW-SophEslI.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200016 IP address blocks: 193.142.35.0/24 maxlen: 24 213.226.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:59:a6:6b:23:bc:e5:81:7d:d3:21:1c:02:fa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7059bac9ef586332dfc8ec28796f92a29844b252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c6:3e:d6:3b:5e:be:d9:86:31:5a:9c:f9:fd: e7:80:2d:f8:13:ae:fa:5a:17:69:16:c6:6b:aa:58: b2:ce:1f:42:70:67:f0:fe:dd:98:66:63:68:6c:23: 69:8e:9e:88:03:08:87:3b:13:95:eb:f0:a8:e4:67: de:89:05:8e:e3:2a:83:ac:cb:29:10:0d:a7:10:1c: cd:4b:a9:61:e4:be:2e:61:ed:1c:f3:41:9b:c2:67: c1:ad:86:16:7f:a0:c5:dd:c4:7f:22:04:19:97:45: fd:94:b0:4b:b4:c3:e5:b1:6a:ca:db:bb:93:99:9e: ec:9f:ba:99:c4:7d:4e:6c:8b:c5:cf:50:e3:c8:e2: d2:33:5d:75:2e:5e:b2:cb:d1:be:58:3d:d6:9c:8d: b0:4d:46:73:e8:b4:c3:70:e2:a4:25:b8:d3:95:99: 9d:f7:3c:e9:50:c7:fe:3a:67:06:1a:1f:89:64:b1: 6d:fb:8d:7e:09:c4:75:f0:61:ab:b9:33:c8:58:f9: 86:c9:7c:c5:f8:bb:fd:88:bb:05:9c:21:c8:dd:77: 72:45:c8:f8:58:5b:db:c2:e3:86:db:87:cd:1d:2a: 3d:5e:34:3e:18:f5:30:1d:82:8f:03:81:5b:3c:df: 92:e4:40:09:4a:e8:8f:2c:11:49:6f:48:cf:84:57: 9f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:59:BA:C9:EF:58:63:32:DF:C8:EC:28:79:6F:92:A2:98:44:B2:52 X509v3 Authority Key Identifier: keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/cFm6ye9YYzLfyOwoeW-SophEslI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.35.0/24 213.226.118.0/24 Signature Algorithm: sha256WithRSAEncryption 09:f6:4c:4a:c4:fb:4d:67:bf:19:5c:f1:83:10:fd:1b:bb:46: 36:64:e0:13:8d:43:88:95:c9:e1:e4:05:58:41:6f:fd:fd:57: 59:f9:0c:0e:d1:e8:be:55:9d:ee:57:40:47:61:ce:01:79:e2: ff:4d:0e:48:40:01:ba:1c:c2:b6:0c:52:73:28:52:54:c5:8e: 91:02:5a:32:73:68:59:1f:2b:5a:d9:37:e7:67:a3:c6:c5:2c: b1:0c:3f:20:07:95:71:89:5c:38:9d:ad:4a:bb:ab:d3:2d:05: 1b:1e:69:58:e8:09:d3:38:a8:d0:cd:40:02:6b:b7:1e:14:8b: 3b:43:49:33:b8:14:72:00:ca:b0:7d:48:3b:ea:64:d5:bc:a9: d9:41:43:7f:e1:42:a8:c0:4d:f8:70:81:77:ba:cb:f6:3e:31: 44:c4:5f:5e:8c:bc:65:7f:66:c6:1a:22:d3:f6:d5:e6:7e:dd: 40:b9:47:13:c0:cf:9a:da:fc:fa:5f:d0:a5:33:eb:fb:1b:a1: 09:d8:36:c3:0a:44:69:47:32:9f:73:9e:ee:b9:d3:7b:e1:57: 84:f7:db:fa:ae:f1:a5:d1:51:38:73:de:5f:59:ea:b3:73:74: 91:7e:31:be:f8:8a:2f:1c:85:03:e1:30:fc:0d:2e:40:fa:78: 34:04:58:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ylmmayO85YF90yEcAvpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYWE1MjQxNjMxM2I3NjQzZWQyOGQ0M2JjM2M0NjYxZjQ2 YWIzNjYwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDU5YmFjOWVmNTg2MzMyZGZjOGVjMjg3OTZmOTJhMjk4NDRiMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcY+1jtevtmGMVqc+f3ngC34E676 WhdpFsZrqliyzh9CcGfw/t2YZmNobCNpjp6IAwiHOxOV6/Co5GfeiQWO4yqDrMsp EA2nEBzNS6lh5L4uYe0c80GbwmfBrYYWf6DF3cR/IgQZl0X9lLBLtMPlsWrK27uT mZ7sn7qZxH1ObIvFz1DjyOLSM111Ll6yy9G+WD3WnI2wTUZz6LTDcOKkJbjTlZmd 9zzpUMf+OmcGGh+JZLFt+41+CcR18GGruTPIWPmGyXzF+Lv9iLsFnCHI3XdyRcj4 WFvbwuOG24fNHSo9XjQ+GPUwHYKPA4FbPN+S5EAJSuiPLBFJb0jPhFefaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHBZusnvWGMy38jsKHlvkqKYRLJSMB8GA1UdIwQY MBaAFO6qUkFjE7dkPtKNQ7w8RmH0arNmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZTMxMmQtMTcyNC00MzA4LTgyNDAt ZDMzN2I5MzhkM2NjLzEvY0ZtNnllOVlZekxmeU93b2VXLVNvcGhFc2xJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iZTMxMmQtMTcyNC00MzA4LTgyNDAtZDMzN2I5MzhkM2Nj LzEvN3FwU1FXTVR0MlEtMG8xRHZEeEdZZlJxczJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwY4jAwQA 1eJ2MA0GCSqGSIb3DQEBCwUAA4IBAQAJ9kxKxPtNZ78ZXPGDEP0bu0Y2ZOATjUOI lcnh5AVYQW/9/VdZ+QwO0ei+VZ3uV0BHYc4BeeL/TQ5IQAG6HMK2DFJzKFJUxY6R Aloyc2hZHyta2TfnZ6PGxSyxDD8gB5VxiVw4na1Ku6vTLQUbHmlY6AnTOKjQzUAC a7ceFIs7Q0kzuBRyAMqwfUg76mTVvKnZQUN/4UKowE34cIF3usv2PjFExF9ejLxl f2bGGiLT9tXmft1AuUcTwM+a2vz6X9ClM+v7G6EJ2DbDCkRpRzKfc57uudN74VeE 99v6rvGl0VE4c95fWeqzc3SRfjG++IovHIUD4TD8DS5A+ng0BFgM -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:11 2026 by rpki-client