This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/CPH94JeMgheKT361oRSzpW7P5nw.roa File: CPH94JeMgheKT361oRSzpW7P5nw.roa (raw, json) Hash identifier: 9Do7cl4Ba1qyCBq+NlyeCvMfOdWfSvFqvFX6dyghoUo= Subject key identifier: 08:F1:FD:E0:97:8C:82:17:8A:4F:7E:B5:A1:14:B3:A5:6E:CF:E6:7C Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71 Certificate serial: 019B7CEE23579EE7FD6719F0978A0060AF14 Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/CPH94JeMgheKT361oRSzpW7P5nw.roa Signing time: Fri 02 Jan 2026 04:18:59 +0000 ROA not before: Fri 02 Jan 2026 04:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199996 IP address blocks: 81.30.100.0/24 maxlen: 24 185.35.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:23:57:9e:e7:fd:67:19:f0:97:8a:00:60:af:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71 Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08f1fde0978c82178a4f7eb5a114b3a56ecfe67c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:38:a0:87:bc:b4:c5:ad:d1:b4:71:25:9c:27: 28:31:7c:ea:09:9f:39:40:c6:92:67:92:2d:69:d7: a8:1f:b1:16:35:36:84:16:bf:e7:f2:51:49:ae:f3: 77:f9:99:47:df:6a:49:f7:66:68:e1:fa:83:94:b1: 43:af:e8:dd:f8:e0:d5:09:05:6b:94:48:14:c9:66: ab:1e:3a:8f:73:ca:79:82:56:7f:cb:c9:5d:a9:e8: 54:04:b4:26:c5:90:4e:8c:1b:6c:4b:e9:98:8d:e1: f1:f5:c4:51:d2:ec:35:48:3f:c5:18:5d:12:a3:a5: 6a:06:57:c5:b0:17:66:a3:be:bb:e1:26:b7:21:e2: bb:c2:89:a4:ab:85:99:1e:f8:2c:18:5f:53:51:72: c1:5b:39:fe:6c:78:b2:c4:72:12:a2:43:d3:02:23: cd:34:01:f9:7d:09:de:49:2f:a6:bf:e3:94:47:44: 16:37:b7:15:b3:fe:a0:14:90:1c:d3:6f:44:4d:fd: 0c:82:56:37:20:fb:94:82:13:38:53:c5:cb:8a:50: ee:04:6e:33:cb:3b:a7:34:71:d2:a7:d0:86:5d:99: b2:f7:8e:48:0d:6e:66:ec:f0:d8:86:d4:14:a0:d3: b6:9d:9d:bd:b6:35:e1:83:ad:f6:bb:8c:ae:92:5d: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F1:FD:E0:97:8C:82:17:8A:4F:7E:B5:A1:14:B3:A5:6E:CF:E6:7C X509v3 Authority Key Identifier: keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/CPH94JeMgheKT361oRSzpW7P5nw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.100.0/24 185.35.176.0/22 Signature Algorithm: sha256WithRSAEncryption 77:23:00:05:ad:6d:de:45:df:0e:63:4a:f4:a8:8e:a2:39:af: 34:1a:28:03:35:7c:23:0d:fc:98:32:28:26:4c:1d:54:0b:8b: e4:3a:f3:50:6a:13:71:dd:9d:d9:1c:09:2c:6d:32:e9:76:df: 91:1e:21:e6:4c:82:23:7b:1d:20:b1:1d:f7:e8:d0:cf:0b:53: be:80:51:b6:be:93:3b:ac:21:98:02:03:0b:a3:34:bd:f4:82: 45:d9:95:fa:35:62:cc:66:f4:41:b5:2c:3a:bf:1f:2a:fe:51: d5:b2:60:c3:69:f0:4d:d2:b9:7a:11:1a:ec:71:d5:2f:c7:77: 23:ff:03:71:9e:38:56:6c:09:76:97:8d:af:2c:20:19:af:78: 91:e7:3f:20:ba:02:1e:12:27:c5:fb:4f:7b:83:6e:50:0f:87: b0:a8:48:40:3b:3a:bc:48:5a:f0:e0:22:b8:8f:99:05:c9:90: 8e:a9:59:41:31:8f:b0:85:83:e1:73:a6:9b:26:58:74:17:3a: fe:f5:79:45:40:c3:2a:e6:c2:e3:a7:f7:b2:0f:31:b7:ac:82: 52:49:57:bc:5f:f4:a9:4c:a6:28:21:33:6e:01:5f:3d:7b:16: 70:c6:4d:17:d9:6b:b2:4c:7f:4a:ee:25:50:73:ff:fc:02:6d: b8:0f:dc:f5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87iNXnuf9Zxnwl4oAYK8UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2ViYmE5ZmEyY2FkMjg2YWM5MTI3NjU3NTc0NWY2MTVl OGZhNzEwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGYxZmRlMDk3OGM4MjE3OGE0ZjdlYjVhMTE0YjNhNTZlY2ZlNjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDigh7y0xa3RtHElnCcoMXzqCZ85 QMaSZ5ItadeoH7EWNTaEFr/n8lFJrvN3+ZlH32pJ92Zo4fqDlLFDr+jd+ODVCQVr lEgUyWarHjqPc8p5glZ/y8ldqehUBLQmxZBOjBtsS+mYjeHx9cRR0uw1SD/FGF0S o6VqBlfFsBdmo7674Sa3IeK7womkq4WZHvgsGF9TUXLBWzn+bHiyxHISokPTAiPN NAH5fQneSS+mv+OUR0QWN7cVs/6gFJAc029ETf0MglY3IPuUghM4U8XLilDuBG4z yzunNHHSp9CGXZmy945IDW5m7PDYhtQUoNO2nZ29tjXhg632u4yukl08cwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAjx/eCXjIIXik9+taEUs6Vuz+Z8MB8GA1UdIwQY MBaAFJ0+u6n6LK0oaskSdldXRfYV6PpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85ZmY5YzctZDMyOS00NWE2LTg5OGEt OWQ5NTlhYmNlNTI2LzEvQ1BIOTRKZU1naGVLVDM2MW9SU3pwVzdQNW53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85ZmY5YzctZDMyOS00NWE2LTg5OGEtOWQ5NTlhYmNlNTI2 LzEvblQ2N3Fmb3NyU2hxeVJKMlYxZEY5aFhvLW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUR5kAwQC uSOwMA0GCSqGSIb3DQEBCwUAA4IBAQB3IwAFrW3eRd8OY0r0qI6iOa80GigDNXwj DfyYMigmTB1UC4vkOvNQahNx3Z3ZHAksbTLpdt+RHiHmTIIjex0gsR336NDPC1O+ gFG2vpM7rCGYAgMLozS99IJF2ZX6NWLMZvRBtSw6vx8q/lHVsmDDafBN0rl6ERrs cdUvx3cj/wNxnjhWbAl2l42vLCAZr3iR5z8gugIeEifF+097g25QD4ewqEhAOzq8 SFrw4CK4j5kFyZCOqVlBMY+whYPhc6abJlh0Fzr+9XlFQMMq5sLjp/eyDzG3rIJS SVe8X/SpTKYoITNuAV89exZwxk0X2WuyTH9K7iVQc//8Am24D9z1 -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:34 2026 by rpki-client