This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa File: cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa (raw, json) Hash identifier: oSg1p4d3f/Ek/TgEvq1Kl3nuuVmFt2QEXW8+ntmYEbw= Subject key identifier: 71:1C:23:D3:C3:B7:BB:07:EF:AC:33:87:A6:9E:99:EE:17:19:1A:8D Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Certificate serial: 019B7C11FB717406B1D05C3362D7D8797BE7 Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa Signing time: Fri 02 Jan 2026 00:18:31 +0000 ROA not before: Fri 02 Jan 2026 00:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199397 IP address blocks: 84.14.149.0/24 maxlen: 24 84.14.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:fb:71:74:06:b1:d0:5c:33:62:d7:d8:79:7b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026 Validity Not Before: Jan 2 00:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=711c23d3c3b7bb07efac3387a69e99ee17191a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:7a:12:d1:16:29:e2:7d:2c:d8:ca:0b:b6: b7:a5:df:e4:4d:c4:0c:a9:4b:70:3c:51:85:53:e9: 09:1a:97:e2:9b:75:97:9d:d5:46:2f:2d:a7:ae:e3: 41:5e:29:09:d0:03:9d:62:9e:f1:42:e2:24:32:16: 60:ed:9f:be:c1:3a:b3:c2:a4:fe:24:aa:97:5b:f1: 35:7a:7f:8f:7d:84:f9:0f:dc:a4:89:60:5b:c6:c7: dc:ae:e7:63:04:c2:8f:88:5e:94:82:6f:73:ee:99: ff:26:e3:73:65:68:e3:f6:02:06:e8:e8:06:ae:5a: fd:71:78:eb:1f:00:85:2b:a9:7f:3a:c7:85:a6:1a: b4:a7:90:e3:20:94:b0:47:03:ba:f7:07:04:a0:e7: 37:24:42:17:90:cc:64:7f:c3:a7:11:44:36:7e:d9: 3b:48:09:f9:38:b5:43:36:a3:ba:18:74:82:87:24: 3b:03:ef:4e:09:4f:7e:58:01:73:2a:4c:37:7c:54: 09:d1:9f:56:46:11:f4:97:da:ee:12:22:31:07:00: e0:01:c5:50:28:82:ab:d9:b2:6e:23:71:f5:38:ab: 61:c4:a6:12:48:98:fc:a4:f0:f0:31:3d:7c:0b:44: 9c:3f:8c:13:6d:a6:29:ad:51:f1:b0:bf:d6:0c:87: 21:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1C:23:D3:C3:B7:BB:07:EF:AC:33:87:A6:9E:99:EE:17:19:1A:8D X509v3 Authority Key Identifier: keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.14.149.0/24 84.14.245.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:c0:c8:5b:23:78:6b:f8:34:0c:b8:ad:d4:98:2a:24:1d:21: 5c:11:9c:02:3c:92:06:c8:76:92:c3:fc:18:59:be:33:cb:f8: 0b:74:3b:02:93:de:7f:ed:a0:ab:08:87:b9:80:fe:ef:85:25: 91:6c:82:d9:2d:7a:7e:98:cb:6a:c3:38:29:7d:ee:cf:90:b1: 98:88:18:71:ac:a5:0b:95:9b:44:e4:5c:ee:4c:63:83:ed:4f: db:fc:e8:7e:5f:29:05:87:32:35:45:59:39:bf:64:82:88:83: 5f:a9:38:92:92:53:9f:71:c0:e6:85:6b:c5:33:b5:4a:bb:53: 80:eb:29:6e:1a:5a:7d:e2:db:ff:65:ce:86:b2:d0:9e:99:85: 90:a4:fd:61:8f:38:c7:6b:76:06:8e:ce:04:62:2c:63:2d:a6: 08:e4:ca:94:fe:ba:17:66:6e:51:de:2e:af:4f:7a:dc:96:44: e3:9f:9d:74:ce:00:a8:63:8c:b5:4e:62:60:9f:94:c3:a9:f8: ce:26:12:7f:b3:05:d8:f7:0d:f1:63:32:43:05:b1:22:94:24: e1:f5:7f:27:20:36:5e:5b:80:3a:3a:96:c3:e8:94:25:cf:80: 97:70:32:df:e9:16:eb:1f:27:03:9a:20:49:45:ad:fb:1a:87: aa:40:7d:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EftxdAax0FwzYtfYeXvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz NjYwMjYwHhcNMjYwMTAyMDAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTFjMjNkM2MzYjdiYjA3ZWZhYzMzODdhNjllOTllZTE3MTkxYThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3N6EtEWKeJ9LNjKC7a3pd/kTcQM qUtwPFGFU+kJGpfim3WXndVGLy2nruNBXikJ0AOdYp7xQuIkMhZg7Z++wTqzwqT+ JKqXW/E1en+PfYT5D9ykiWBbxsfcrudjBMKPiF6Ugm9z7pn/JuNzZWjj9gIG6OgG rlr9cXjrHwCFK6l/OseFphq0p5DjIJSwRwO69wcEoOc3JEIXkMxkf8OnEUQ2ftk7 SAn5OLVDNqO6GHSChyQ7A+9OCU9+WAFzKkw3fFQJ0Z9WRhH0l9ruEiIxBwDgAcVQ KIKr2bJuI3H1OKthxKYSSJj8pPDwMT18C0ScP4wTbaYprVHxsL/WDIchwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHEcI9PDt7sH76wzh6aeme4XGRqNMB8GA1UdIwQY MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt YjNiNzhiMGI2NmVhLzEvY1J3ajA4TzN1d2Z2ckRPSHBwNlo3aGNaR28wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVA6VAwQA VA71MA0GCSqGSIb3DQEBCwUAA4IBAQBKwMhbI3hr+DQMuK3UmCokHSFcEZwCPJIG yHaSw/wYWb4zy/gLdDsCk95/7aCrCIe5gP7vhSWRbILZLXp+mMtqwzgpfe7PkLGY iBhxrKULlZtE5FzuTGOD7U/b/Oh+XykFhzI1RVk5v2SCiINfqTiSklOfccDmhWvF M7VKu1OA6yluGlp94tv/Zc6GstCemYWQpP1hjzjHa3YGjs4EYixjLaYI5MqU/roX Zm5R3i6vT3rclkTjn510zgCoY4y1TmJgn5TDqfjOJhJ/swXY9w3xYzJDBbEilCTh 9X8nIDZeW4A6OpbD6JQlz4CXcDLf6RbrHycDmiBJRa37GoeqQH12 -----END CERTIFICATE-----Generated at Mon Jan 26 23:42:52 2026 by rpki-client