This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/cStfMjNC3Zvni5434bm3caCEf5o.roa File: cStfMjNC3Zvni5434bm3caCEf5o.roa (raw, json) Hash identifier: Qxph82RP6YDfbEy+8YlRPGS3pCRFGm/I35TRuOkaYg8= Subject key identifier: 71:2B:5F:32:33:42:DD:9B:E7:8B:9E:37:E1:B9:B7:71:A0:84:7F:9A Certificate issuer: /CN=232b798ff76e8d5cec5ba47f7be7832983db3335 Certificate serial: 019B77C7411A00A2AF043E3A49F10046EA0B Authority key identifier: 23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/cStfMjNC3Zvni5434bm3caCEf5o.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214761 IP address blocks: 195.191.30.0/23 maxlen: 24 195.191.31.0/24 maxlen: 24 2001:67c:1420::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.mft rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:41:1a:00:a2:af:04:3e:3a:49:f1:00:46:ea:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=232b798ff76e8d5cec5ba47f7be7832983db3335 Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=712b5f323342dd9be78b9e37e1b9b771a0847f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:00:77:fb:a9:4e:a1:ba:dc:81:d9:fe:98: e6:9d:a6:f4:5e:6e:2f:2f:ba:ad:21:74:44:2a:22: 87:49:7c:13:cb:a8:9d:c1:6d:09:6d:4c:54:3f:5d: 94:d9:e1:60:43:b8:ff:5a:4d:77:50:bb:01:85:a5: e8:08:3e:90:c3:56:ef:56:58:ab:6a:f9:9f:ee:30: dc:43:27:44:a7:45:45:fb:bd:e4:99:b0:3b:81:94: 6e:00:ce:5d:f6:80:ed:59:a5:1c:87:9a:46:20:7c: 50:8e:f8:16:b4:16:79:d0:8d:6c:50:15:9b:45:2c: e2:7d:dc:cd:15:ac:70:2d:2f:a5:1c:43:7e:c0:9d: 99:b1:c2:bc:d6:93:6f:bd:48:96:14:c5:2c:30:20: bd:d8:67:1a:58:08:81:3e:24:4a:9e:11:f2:57:9c: 78:8c:d7:5b:ae:42:15:ab:2f:57:85:12:60:ed:a4: bf:3e:bc:d6:56:2c:00:62:92:fc:0a:57:ce:4c:7a: ce:93:65:7e:69:49:e4:bf:a7:34:6f:54:82:08:bc: ec:b1:04:80:2d:4c:3b:49:84:10:79:db:5e:da:30: 10:c7:7a:40:a5:6e:09:ac:a9:0e:a7:ba:d5:1e:00: db:88:05:9c:22:1f:61:d4:a0:4c:74:c6:6e:52:65: ef:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:5F:32:33:42:DD:9B:E7:8B:9E:37:E1:B9:B7:71:A0:84:7F:9A X509v3 Authority Key Identifier: keyid:23:2B:79:8F:F7:6E:8D:5C:EC:5B:A4:7F:7B:E7:83:29:83:DB:33:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyt5j_dujVzsW6R_e-eDKYPbMzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/cStfMjNC3Zvni5434bm3caCEf5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2f91ed-a1fd-4bfe-8131-fd483de9e7e4/1/Iyt5j_dujVzsW6R_e-eDKYPbMzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.30.0/23 IPv6: 2001:67c:1420::/48 Signature Algorithm: sha256WithRSAEncryption c5:fa:0b:91:d5:9a:f3:c2:07:7e:8f:b5:35:1a:e6:bb:af:61: 95:e0:76:70:02:3a:cb:8d:b6:82:17:dd:ea:b1:ca:54:e9:fb: 8f:4f:f0:42:f4:77:a9:54:1c:af:9d:ac:d8:e0:95:f7:83:70: 86:45:b1:7b:09:b6:06:ee:8c:63:1d:f0:5e:20:80:be:a3:29: 50:92:7d:2a:62:2a:1b:5f:22:e6:79:1a:46:d8:d5:68:f9:bc: db:09:fb:12:11:2b:f3:3a:d3:0e:00:33:79:13:30:92:7c:84: 64:a4:33:56:df:8e:e5:1b:b4:95:03:1d:8c:33:9b:a4:a8:ca: c9:87:89:46:d7:19:72:46:17:87:63:53:aa:82:1b:24:32:1f: 00:90:34:bf:8b:29:92:73:78:32:94:f0:7e:35:f7:47:b4:53: 79:66:2e:9c:0d:fa:08:14:16:9d:16:94:d1:4a:22:92:11:08: d0:55:88:29:68:53:4b:75:ab:9f:ac:9a:ac:10:de:f4:d2:eb: b8:23:48:d6:98:eb:51:df:07:0f:a4:f7:07:78:97:33:e5:e0: f6:bb:c7:e2:2e:7d:ab:d1:e9:07:f3:4b:5e:47:de:01:2d:70: 94:b1:85:a3:9a:6b:1e:ec:00:4d:9b:19:0d:49:d4:7d:e6:5b: e6:86:49:8a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3x0EaAKKvBD46SfEARuoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMmI3OThmZjc2ZThkNWNlYzViYTQ3ZjdiZTc4MzI5ODNk YjMzMzUwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJiNWYzMjMzNDJkZDliZTc4YjllMzdlMWI5Yjc3MWEwODQ3ZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXIAd/upTqG63IHZ/pjmnab0Xm4v L7qtIXREKiKHSXwTy6idwW0JbUxUP12U2eFgQ7j/Wk13ULsBhaXoCD6Qw1bvVlir avmf7jDcQydEp0VF+73kmbA7gZRuAM5d9oDtWaUch5pGIHxQjvgWtBZ50I1sUBWb RSzifdzNFaxwLS+lHEN+wJ2ZscK81pNvvUiWFMUsMCC92GcaWAiBPiRKnhHyV5x4 jNdbrkIVqy9XhRJg7aS/PrzWViwAYpL8ClfOTHrOk2V+aUnkv6c0b1SCCLzssQSA LUw7SYQQedte2jAQx3pApW4JrKkOp7rVHgDbiAWcIh9h1KBMdMZuUmXvVwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHErXzIzQt2b54ueN+G5t3GghH+aMB8GA1UdIwQY MBaAFCMreY/3bo1c7Fukf3vngymD2zM1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yZjkxZWQtYTFmZC00YmZlLTgxMzEt ZmQ0ODNkZTllN2U0LzEvY1N0Zk1qTkMzWnZuaTU0MzRibTNjYUNFZjVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yZjkxZWQtYTFmZC00YmZlLTgxMzEtZmQ0ODNkZTllN2U0 LzEvSXl0NWpfZHVqVnpzVzZSX2UtZURLWVBiTXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw78eMA8E AgACMAkDBwAgAQZ8FCAwDQYJKoZIhvcNAQELBQADggEBAMX6C5HVmvPCB36PtTUa 5ruvYZXgdnACOsuNtoIX3eqxylTp+49P8EL0d6lUHK+drNjglfeDcIZFsXsJtgbu jGMd8F4ggL6jKVCSfSpiKhtfIuZ5GkbY1Wj5vNsJ+xIRK/M60w4AM3kTMJJ8hGSk M1bfjuUbtJUDHYwzm6SoysmHiUbXGXJGF4djU6qCGyQyHwCQNL+LKZJzeDKU8H41 90e0U3lmLpwN+ggUFp0WlNFKIpIRCNBViCloU0t1q5+smqwQ3vTS67gjSNaY61Hf Bw+k9wd4lzPl4Pa7x+IufavR6QfzS15H3gEtcJSxhaOaax7sAE2bGQ1J1H3mW+aG SYo= -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:47 2026 by rpki-client