This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CUHSJicA7RUhsUiL1F-AbMOenhE.roa File: CUHSJicA7RUhsUiL1F-AbMOenhE.roa (raw, json) Hash identifier: yBGysDb/N6TwRljKDghCIbTKMhzLLsdUSknOL1+Mdi0= Subject key identifier: 09:41:D2:26:27:00:ED:15:21:B1:48:8B:D4:5F:80:6C:C3:9E:9E:11 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B91346DE13E0A8E1333772FE169C Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CUHSJicA7RUhsUiL1F-AbMOenhE.roa Signing time: Fri 02 Jan 2026 02:19:29 +0000 ROA not before: Fri 02 Jan 2026 02:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213896 IP address blocks: 84.32.59.0/24 maxlen: 24 84.32.98.0/24 maxlen: 24 84.32.100.0/24 maxlen: 24 84.32.223.0/24 maxlen: 24 88.216.70.0/24 maxlen: 24 88.216.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b9:13:46:de:13:e0:a8:e1:33:37:72:fe:16:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0941d2262700ed1521b1488bd45f806cc39e9e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:a7:47:04:3e:5e:b5:0c:d7:a3:08:95:01: 72:87:7c:34:9b:58:12:cd:aa:29:94:b6:3a:6f:e6: 73:9f:43:90:42:0d:c7:c2:8a:62:81:bd:84:f3:6c: 83:47:68:78:1b:08:fc:f8:bb:86:fa:90:36:10:48: fd:24:a3:d7:8d:e5:7a:67:cd:06:73:63:ff:b0:50: e6:49:a3:37:8c:37:c6:f1:97:9c:60:73:0a:18:6f: 6d:39:95:a4:ed:52:a7:f9:cf:3d:22:b4:b2:24:66: 16:85:8f:12:9f:20:28:75:48:c2:3b:98:94:32:17: 60:51:e5:1a:37:06:f6:88:ec:a3:60:d7:a2:a2:92: 6d:06:6f:7f:97:de:c4:ba:db:b0:4f:6d:92:dc:37: 58:ca:f3:85:15:73:94:ca:07:57:02:f8:19:33:e0: 32:49:c3:8d:8b:4e:5d:56:dd:f0:d6:71:c0:4b:f5: f9:5f:62:2b:40:fc:7a:a6:09:92:3f:af:44:5f:4f: b8:12:54:3d:3a:5b:78:4c:90:40:1c:61:b8:f9:50: 7a:3e:c6:9a:40:9a:c9:a6:de:9b:14:06:c1:25:9b: c3:99:8f:fe:c5:0c:6f:94:f2:08:e1:3a:1b:93:17: a1:db:62:d2:f2:8f:ad:b8:5d:99:50:18:2f:50:0f: 86:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:41:D2:26:27:00:ED:15:21:B1:48:8B:D4:5F:80:6C:C3:9E:9E:11 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/CUHSJicA7RUhsUiL1F-AbMOenhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.59.0/24 84.32.98.0/24 84.32.100.0/24 84.32.223.0/24 88.216.70.0/24 88.216.220.0/24 Signature Algorithm: sha256WithRSAEncryption 67:e2:c2:03:3b:66:86:4b:2f:83:08:4f:12:98:90:ac:cb:47: 6b:48:c1:49:34:e9:d5:54:78:dd:d0:4e:60:3f:a8:cf:d4:f1: e4:8d:18:aa:16:b3:9d:dd:bb:bc:59:a7:6e:d0:f8:5b:58:9e: 2a:ee:cd:36:fe:8b:78:22:74:52:53:e7:6d:20:84:7e:15:66: d2:ec:69:45:19:9f:1b:e7:88:9e:6c:44:7f:a4:24:f0:6e:12: 4f:91:54:0f:64:77:43:12:dc:41:01:d6:59:fd:fc:19:27:27: 8a:02:94:2b:39:01:1b:8b:e9:9d:5f:0d:2e:6a:02:11:50:20: db:db:ea:25:6e:76:5f:71:93:9f:41:ab:8d:89:b9:1d:a3:b2: 12:8a:d9:52:01:82:14:6b:a1:ef:87:7d:5c:bc:02:1f:f4:34: 7b:58:7c:0c:39:7d:40:70:58:0a:3d:c1:ce:be:55:2a:64:01: 42:2a:63:81:b1:7f:a7:75:a0:41:5a:db:b8:22:e9:4a:27:c1: f2:eb:e6:64:fe:00:fe:79:5b:ae:6b:35:56:8a:7c:4b:0f:a1: b5:e2:04:42:09:be:78:05:66:2c:df:2d:c5:a7:62:ad:b0:42: ab:b6:9b:6b:32:e3:ab:72:0b:d6:ce:43:e8:04:30:87:cf:f1: a6:db:1d:14 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8gLkTRt4T4KjhMzdy/hacMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTQxZDIyNjI3MDBlZDE1MjFiMTQ4OGJkNDVmODA2Y2MzOWU5ZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUSnRwQ+XrUM16MIlQFyh3w0m1gS zaoplLY6b+Zzn0OQQg3Hwopigb2E82yDR2h4Gwj8+LuG+pA2EEj9JKPXjeV6Z80G c2P/sFDmSaM3jDfG8ZecYHMKGG9tOZWk7VKn+c89IrSyJGYWhY8SnyAodUjCO5iU MhdgUeUaNwb2iOyjYNeiopJtBm9/l97EutuwT22S3DdYyvOFFXOUygdXAvgZM+Ay ScONi05dVt3w1nHAS/X5X2IrQPx6pgmSP69EX0+4ElQ9Olt4TJBAHGG4+VB6Psaa QJrJpt6bFAbBJZvDmY/+xQxvlPII4Tobkxeh22LS8o+tuF2ZUBgvUA+G1QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFAlB0iYnAO0VIbFIi9RfgGzDnp4RMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvQ1VIU0ppY0E3UlVoc1VpTDFGLUFiTU9lbmhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVCA7AwQA VCBiAwQAVCBkAwQAVCDfAwQAWNhGAwQAWNjcMA0GCSqGSIb3DQEBCwUAA4IBAQBn 4sIDO2aGSy+DCE8SmJCsy0drSMFJNOnVVHjd0E5gP6jP1PHkjRiqFrOd3bu8Wadu 0PhbWJ4q7s02/ot4InRSU+dtIIR+FWbS7GlFGZ8b54iebER/pCTwbhJPkVQPZHdD EtxBAdZZ/fwZJyeKApQrOQEbi+mdXw0uagIRUCDb2+olbnZfcZOfQauNibkdo7IS itlSAYIUa6Hvh31cvAIf9DR7WHwMOX1AcFgKPcHOvlUqZAFCKmOBsX+ndaBBWtu4 IulKJ8Hy6+Zk/gD+eVuuazVWinxLD6G14gRCCb54BWYs3y3Fp2KtsEKrtptrMuOr cgvWzkPoBDCHz/Gm2x0U -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:28 2026 by rpki-client