This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/cCfCyGxkxUozU9FRyKJ9edlcQkE.roa File: cCfCyGxkxUozU9FRyKJ9edlcQkE.roa (raw, json) Hash identifier: h9vt0bGSL2WHGRbc9Q7mU1NqYbThUpUx2quDNYLWXTI= Subject key identifier: 70:27:C2:C8:6C:64:C5:4A:33:53:D1:51:C8:A2:7D:79:D9:5C:42:41 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019AC64AE7DF0DF4C403D1B48EB5CF72ACBA Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/cCfCyGxkxUozU9FRyKJ9edlcQkE.roa Signing time: Thu 27 Nov 2025 17:09:49 +0000 ROA not before: Thu 27 Nov 2025 17:09:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63018 IP address blocks: 80.174.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:4a:e7:df:0d:f4:c4:03:d1:b4:8e:b5:cf:72:ac:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Nov 27 17:09:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7027c2c86c64c54a3353d151c8a27d79d95c4241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:6b:4d:8d:d7:a1:3b:24:65:bb:3f:d1:24: fa:74:2c:6e:5c:23:a5:dc:54:18:2e:5e:4b:d0:d5: be:f0:7a:09:d5:ac:7a:6c:51:02:d8:23:5e:28:0b: c1:3e:f9:65:67:8c:67:ac:94:ba:67:ec:90:e6:62: 6e:90:a6:25:60:53:9c:17:f9:f4:fb:d6:0b:d4:0a: 18:d9:c9:ce:65:c5:db:04:71:ec:26:e0:67:8b:9d: b2:c4:62:44:d3:de:88:cc:35:e9:3c:66:d9:58:04: 52:cb:32:c9:07:a7:7f:78:9d:e7:f2:54:b6:49:d2: ae:75:80:b4:36:72:9e:bf:22:61:a0:d8:c2:84:f8: 78:71:44:4a:e6:a4:f7:a8:33:c0:31:4a:01:f2:82: ff:93:65:68:a1:a4:3c:02:f5:43:b0:40:4a:1b:be: 67:34:fe:b5:a0:b5:5c:7c:87:0e:bf:97:c7:22:f9: 13:86:0c:ed:ae:e0:18:82:f4:e3:b4:5c:af:7f:b7: 07:f9:e7:58:62:de:22:aa:2b:85:99:b8:2c:70:34: 17:cb:33:df:11:3d:1b:a4:b2:96:f0:b0:39:61:eb: 8b:d4:2d:a2:74:3e:6a:07:b9:6d:d4:c6:a6:8a:47: 82:1a:80:f0:6c:ee:5c:82:a0:40:f4:36:32:35:ef: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:27:C2:C8:6C:64:C5:4A:33:53:D1:51:C8:A2:7D:79:D9:5C:42:41 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/cCfCyGxkxUozU9FRyKJ9edlcQkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.251.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:5d:b4:4a:1f:c9:8e:a4:2e:cd:72:ba:e8:1b:8a:02:3f:b7: 49:58:c4:73:ee:c8:73:1f:61:28:18:80:2b:8f:30:cb:4e:3f: c0:30:37:8a:45:0f:f8:48:30:00:02:9d:8e:ba:71:5d:f3:41: aa:1a:e1:9f:19:ef:d2:22:83:b8:0b:e4:c7:87:aa:12:6e:3b: 56:ae:f9:4a:00:ed:97:55:bb:c9:ab:f0:05:fa:07:97:f6:40: 89:58:6f:df:a2:23:81:d0:78:0f:be:5c:53:6d:56:40:79:8f: e9:d2:41:57:c9:64:f8:c3:e5:c6:2c:b1:47:6e:d4:5a:34:2a: 0e:20:3c:14:8b:cb:ca:d2:fb:5c:23:f0:34:ba:48:2e:1a:7c: ae:a7:63:32:84:9e:9c:54:9f:35:6b:62:f6:52:28:dd:5c:8a: 63:e5:52:ea:69:39:92:eb:6d:13:a1:33:88:38:9d:ba:02:31: 32:30:f7:d6:20:84:f7:bd:fa:0a:e8:02:9f:04:8d:1a:18:06: 37:e7:27:b0:80:f5:f6:f1:7c:a8:a0:9e:22:23:61:47:fc:7c: ca:f1:cb:e6:b5:1f:83:56:1d:f2:6a:72:d0:82:b7:e0:e5:98: af:85:ea:ff:4d:82:3e:7a:58:dc:5a:81:f3:79:b6:f1:78:95: f7:24:70:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrGSuffDfTEA9G0jrXPcqy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMTI3MTcwOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDI3YzJjODZjNjRjNTRhMzM1M2QxNTFjOGEyN2Q3OWQ5NWM0MjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DBrTY3XoTskZbs/0ST6dCxuXCOl 3FQYLl5L0NW+8HoJ1ax6bFEC2CNeKAvBPvllZ4xnrJS6Z+yQ5mJukKYlYFOcF/n0 +9YL1AoY2cnOZcXbBHHsJuBni52yxGJE096IzDXpPGbZWARSyzLJB6d/eJ3n8lS2 SdKudYC0NnKevyJhoNjChPh4cURK5qT3qDPAMUoB8oL/k2VooaQ8AvVDsEBKG75n NP61oLVcfIcOv5fHIvkThgztruAYgvTjtFyvf7cH+edYYt4iqiuFmbgscDQXyzPf ET0bpLKW8LA5YeuL1C2idD5qB7lt1MamikeCGoDwbO5cgqBA9DYyNe9FKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAnwshsZMVKM1PRUciifXnZXEJBMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvY0NmQ3lHeGt4VW96VTlGUnlLSjllZGxjUWtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUK77MA0G CSqGSIb3DQEBCwUAA4IBAQCbXbRKH8mOpC7NcrroG4oCP7dJWMRz7shzH2EoGIAr jzDLTj/AMDeKRQ/4SDAAAp2OunFd80GqGuGfGe/SIoO4C+THh6oSbjtWrvlKAO2X VbvJq/AF+geX9kCJWG/foiOB0HgPvlxTbVZAeY/p0kFXyWT4w+XGLLFHbtRaNCoO IDwUi8vK0vtcI/A0ukguGnyup2MyhJ6cVJ81a2L2UijdXIpj5VLqaTmS620ToTOI OJ26AjEyMPfWIIT3vfoK6AKfBI0aGAY35yewgPX28XyooJ4iI2FH/HzK8cvmtR+D Vh3yanLQgrfg5Zivher/TYI+eljcWoHzebbxeJX3JHDH -----END CERTIFICATE-----Generated at Sun Dec 7 02:06:27 2025 by rpki-client