This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/cFgdjeeP9MpYfV_2AUL1U_5M24c.roa File: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (raw, json) Hash identifier: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs= Subject key identifier: 70:58:1D:8D:E7:8F:F4:CA:58:7D:5F:F6:01:42:F5:53:FE:4C:DB:87 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF1FCE1B7DB0A3C4B0478FA84A310 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/cFgdjeeP9MpYfV_2AUL1U_5M24c.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7203 IP address blocks: 212.42.197.0/24 maxlen: 24 212.42.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f1:fc:e1:b7:db:0a:3c:4b:04:78:fa:84:a3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70581d8de78ff4ca587d5ff60142f553fe4cdb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:b2:3d:dd:bb:ca:52:ac:11:70:c5:5e:ea: 00:ff:98:89:fc:d0:9e:71:21:f3:9b:9f:28:a1:dd: c5:72:b2:33:43:29:d0:61:e5:27:74:21:c9:eb:b8: 60:3a:22:f2:f3:3f:80:07:86:8e:83:9a:37:3e:48: 23:8b:1a:0e:84:1f:cc:a7:ed:28:bc:98:0b:ba:0c: 5d:a5:a8:10:51:bf:2b:5a:79:4c:74:0e:b4:68:e9: 97:ce:05:63:fe:49:2b:ab:4c:de:ed:49:5c:3f:47: e2:64:35:da:d5:a4:09:ee:d2:b3:1b:43:b4:8e:ff: fd:73:92:af:23:d7:f7:8b:83:2d:fe:da:24:d0:1d: 39:a9:fa:35:27:33:d1:62:d6:57:7e:9d:9d:6e:91: 69:37:80:3e:7f:c3:34:5a:e5:7a:fa:c2:99:f8:3a: fa:d6:f4:6b:b9:d5:f4:cd:d4:9f:a3:0c:9c:1c:d3: d7:75:97:5e:9f:3f:1a:01:91:da:af:f1:86:d8:08: c8:8b:08:2d:96:6d:d1:cf:18:74:88:ad:5e:41:8f: cb:26:93:a5:e9:39:16:ba:6a:21:26:e0:43:5e:bc: b4:b1:94:64:36:a6:71:66:83:dc:23:78:07:cf:ab: ee:f7:30:e6:fe:e0:d4:8b:98:2b:bd:e9:ab:26:70: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:58:1D:8D:E7:8F:F4:CA:58:7D:5F:F6:01:42:F5:53:FE:4C:DB:87 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/cFgdjeeP9MpYfV_2AUL1U_5M24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.42.197.0/24 212.42.205.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:b4:de:5e:ca:17:e9:73:25:3c:8e:bb:1b:19:9a:d8:71:6d: 4d:4a:6d:07:4e:25:5b:cb:dc:6f:f7:8c:b2:ec:93:2b:0a:f3: 99:8d:16:d1:f3:3e:6c:f8:2f:86:c8:0e:83:7f:dc:ab:72:7f: 43:24:59:f0:51:ec:db:bb:db:da:d9:d5:4e:2f:9b:09:dc:2a: f2:8b:a7:fd:dc:83:e7:05:f5:61:dd:bb:b5:40:e9:5e:c8:b5: 75:1c:91:0b:5f:de:dc:02:ac:fd:eb:be:5e:5e:b0:8f:4a:be: f6:a7:c5:1e:e5:36:12:a2:b0:20:e6:9b:13:eb:5d:66:d4:fa: 72:16:fc:9c:ac:75:c9:a1:d8:d0:ec:d9:23:bb:1e:27:6b:2d: 83:27:1e:dc:2c:e0:9b:72:58:d1:e3:2a:2b:ae:2c:22:55:45: 95:e7:a0:0a:65:6a:32:57:9b:b3:69:76:38:e5:da:b9:ef:c5: ca:5d:57:43:46:3b:c0:d4:6c:18:7a:ef:41:e8:ee:c5:75:c0: f9:0c:f8:17:5b:28:21:de:11:1a:c3:91:ae:c4:b4:0c:8e:6d: 97:7a:36:43:91:7f:f6:35:e0:50:f9:13:8f:b7:00:aa:9c:28: 7d:9f:c1:0f:d4:b8:44:fb:ae:94:69:33:99:ff:f5:c3:2a:40: 97:c4:ab:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fvH84bfbCjxLBHj6hKMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDU4MWQ4ZGU3OGZmNGNhNTg3ZDVmZjYwMTQyZjU1M2ZlNGNkYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXqyPd27ylKsEXDFXuoA/5iJ/NCe cSHzm58ood3FcrIzQynQYeUndCHJ67hgOiLy8z+AB4aOg5o3PkgjixoOhB/Mp+0o vJgLugxdpagQUb8rWnlMdA60aOmXzgVj/kkrq0ze7UlcP0fiZDXa1aQJ7tKzG0O0 jv/9c5KvI9f3i4Mt/tok0B05qfo1JzPRYtZXfp2dbpFpN4A+f8M0WuV6+sKZ+Dr6 1vRrudX0zdSfowycHNPXdZdenz8aAZHar/GG2AjIiwgtlm3Rzxh0iK1eQY/LJpOl 6TkWumohJuBDXry0sZRkNqZxZoPcI3gHz6vu9zDm/uDUi5grvemrJnA/hwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHBYHY3nj/TKWH1f9gFC9VP+TNuHMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvY0ZnZGplZVA5TXBZZlZfMkFVTDFVXzVNMjRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1CrFAwQA 1CrNMA0GCSqGSIb3DQEBCwUAA4IBAQA7tN5eyhfpcyU8jrsbGZrYcW1NSm0HTiVb y9xv94yy7JMrCvOZjRbR8z5s+C+GyA6Df9yrcn9DJFnwUezbu9va2dVOL5sJ3Cry i6f93IPnBfVh3bu1QOleyLV1HJELX97cAqz9675eXrCPSr72p8Ue5TYSorAg5psT 611m1PpyFvycrHXJodjQ7Nkjux4nay2DJx7cLOCbcljR4yorriwiVUWV56AKZWoy V5uzaXY45dq578XKXVdDRjvA1GwYeu9B6O7FdcD5DPgXWygh3hEaw5GuxLQMjm2X ejZDkX/2NeBQ+ROPtwCqnCh9n8EP1LhE+66UaTOZ//XDKkCXxKvV -----END CERTIFICATE-----Generated at Sat Jan 10 21:05:56 2026 by rpki-client