This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/cm7yc5ocW07wElUQnj8sV7yvJ1E.roa File: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (raw, json) Hash identifier: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s= Subject key identifier: 72:6E:F2:73:9A:1C:5B:4E:F0:12:55:10:9E:3F:2C:57:BC:AF:27:51 Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769 Certificate serial: 019B7A5AE819FCFB4B19315C2D7ED84939B3 Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/cm7yc5ocW07wElUQnj8sV7yvJ1E.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47610 IP address blocks: 134.61.0.0/16 maxlen: 16 134.130.0.0/16 maxlen: 16 137.226.0.0/16 maxlen: 16 192.35.229.0/24 maxlen: 24 194.35.108.0/22 maxlen: 22 2a00:8a60::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e8:19:fc:fb:4b:19:31:5c:2d:7e:d8:49:39:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769 Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=726ef2739a1c5b4ef01255109e3f2c57bcaf2751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8d:19:a1:08:4c:f4:87:b8:32:74:58:2a:04: 13:02:4f:9b:6c:e5:d4:cc:5b:eb:c1:6e:a4:ce:3b: 52:74:1c:49:d6:6d:b4:a3:1f:6d:aa:ce:ec:ef:33: 8c:a9:58:91:60:82:92:e4:0c:75:16:3e:5f:50:c8: 7d:75:cf:fb:72:5e:84:65:fd:b6:52:e9:d3:82:03: 08:c7:f5:ef:34:0d:87:19:bb:0e:0d:e1:a1:2e:1d: d1:03:51:69:83:29:d3:7f:e3:bb:52:6c:af:6b:7e: e7:6f:ab:06:2e:7a:ac:ff:0f:dc:06:40:26:d6:d7: 93:ac:24:7b:78:3a:26:06:50:14:17:61:10:fb:d7: d2:48:7c:a4:cf:8c:65:be:2d:29:73:24:19:d3:61: c7:ed:eb:e3:50:f0:fb:95:53:db:40:3e:8b:9a:11: 2c:d1:c9:5a:e6:fb:ae:66:f3:4a:a9:01:8b:ca:ca: 40:4d:64:6d:9a:63:2b:d4:95:32:7c:10:35:bb:ac: f5:a9:d9:7d:96:b7:b4:9d:bc:71:5d:db:25:e4:2b: 8d:b3:81:32:c6:62:1a:42:39:89:0d:f9:67:7c:46: 47:6d:f5:7c:6c:4c:3b:a1:e7:eb:b8:9d:fe:d7:62: 67:90:6c:e8:92:2c:3b:51:eb:b2:f7:89:69:31:fd: 1f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6E:F2:73:9A:1C:5B:4E:F0:12:55:10:9E:3F:2C:57:BC:AF:27:51 X509v3 Authority Key Identifier: keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/cm7yc5ocW07wElUQnj8sV7yvJ1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.61.0.0/16 134.130.0.0/16 137.226.0.0/16 192.35.229.0/24 194.35.108.0/22 IPv6: 2a00:8a60::/29 Signature Algorithm: sha256WithRSAEncryption 65:26:80:f8:47:e1:7d:85:ef:cd:26:7b:5c:87:81:07:d6:8e: 86:ba:fa:65:fd:0f:c3:d3:03:54:65:a5:10:7f:0f:4c:dd:c5: 84:64:b8:ed:8f:98:bb:55:56:00:9a:51:1b:84:2b:55:9a:53: 4a:ab:e4:ea:41:19:6d:4e:1e:ca:1b:be:0d:97:4e:1f:a6:fa: a8:bb:fe:85:98:58:21:36:38:e3:9d:07:33:70:88:01:a9:bf: 2e:a9:65:ee:40:04:fe:61:71:d8:a0:89:75:2b:33:e1:00:6d: 15:ab:3b:25:02:e6:fe:2a:94:38:13:4b:93:dc:fe:6f:78:76: 51:2c:69:b7:80:75:e5:89:d7:68:f8:fb:81:0b:03:1f:0f:4e: e4:bf:6a:30:e6:c0:94:e0:e3:19:38:5e:60:34:c7:76:ef:b2: 06:9e:12:22:51:e5:fa:2b:4b:15:97:30:54:47:63:b1:4c:ad: d9:26:4a:bd:02:35:e9:3e:31:75:5b:07:6e:9b:a8:95:fd:5a: cf:59:28:1d:71:25:cf:6e:b9:f1:09:02:e6:fb:6b:c9:42:6f: a6:f4:69:51:3a:c2:2f:c4:e0:ff:0c:54:46:49:b6:92:8c:f0: e1:bc:3f:4d:17:a1:58:f8:f1:56:cf:ab:05:fa:6f:d2:06:70: 7a:13:5d:a3 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt6WugZ/PtLGTFcLX7YSTmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj N2U3NjkwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjZlZjI3MzlhMWM1YjRlZjAxMjU1MTA5ZTNmMmM1N2JjYWYyNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy40ZoQhM9Ie4MnRYKgQTAk+bbOXU zFvrwW6kzjtSdBxJ1m20ox9tqs7s7zOMqViRYIKS5Ax1Fj5fUMh9dc/7cl6EZf22 UunTggMIx/XvNA2HGbsODeGhLh3RA1FpgynTf+O7Umyva37nb6sGLnqs/w/cBkAm 1teTrCR7eDomBlAUF2EQ+9fSSHykz4xlvi0pcyQZ02HH7evjUPD7lVPbQD6LmhEs 0cla5vuuZvNKqQGLyspATWRtmmMr1JUyfBA1u6z1qdl9lre0nbxxXdsl5CuNs4Ey xmIaQjmJDflnfEZHbfV8bEw7oefruJ3+12JnkGzokiw7Ueuy94lpMf0fhQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFHJu8nOaHFtO8BJVEJ4/LFe8rydRMB8GA1UdIwQY MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2 LWY0YjhjYTM3YTFmYi8xL2NtN3ljNW9jVzA3d0VsVVFuajhzVjd5dkoxRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2LWY0YjhjYTM3YTFm Yi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMCEEAgABMBsDAwCGPQMD AIaCAwMAieIDBADAI+UDBALCI2wwDQQCAAIwBwMFAyoAimAwDQYJKoZIhvcNAQEL BQADggEBAGUmgPhH4X2F780me1yHgQfWjoa6+mX9D8PTA1RlpRB/D0zdxYRkuO2P mLtVVgCaURuEK1WaU0qr5OpBGW1OHsobvg2XTh+m+qi7/oWYWCE2OOOdBzNwiAGp vy6pZe5ABP5hcdigiXUrM+EAbRWrOyUC5v4qlDgTS5Pc/m94dlEsabeAdeWJ12j4 +4ELAx8PTuS/ajDmwJTg4xk4XmA0x3bvsgaeEiJR5forSxWXMFRHY7FMrdkmSr0C Nek+MXVbB26bqJX9Ws9ZKB1xJc9uufEJAub7a8lCb6b0aVE6wi/E4P8MVEZJtpKM 8OG8P00XoVj48VbPqwX6b9IGcHoTXaM= -----END CERTIFICATE-----Generated at Wed Jan 21 17:34:13 2026 by rpki-client