This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa File: cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa (raw, json) Hash identifier: wujKocfHMBpZH00dc6pNcl9yD87nGXF+SDw9jaWJwcU= Subject key identifier: 70:52:F5:10:9C:98:37:34:85:BC:84:89:9D:0B:97:DD:99:14:63:B5 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9EDC7D72D8CED88641FC399229A0 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa Signing time: Fri 02 Jan 2026 04:18:26 +0000 ROA not before: Fri 02 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207106 IP address blocks: 147.234.8.0/21 maxlen: 24 147.234.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9e:dc:7d:72:d8:ce:d8:86:41:fc:39:92:29:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7052f5109c98373485bc84899d0b97dd991463b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:26:34:66:db:09:7b:c4:2e:4a:10:f4:05: ab:51:0a:4c:af:7f:7d:a2:94:13:eb:81:ad:f7:7b: cd:79:2a:c5:f4:2d:82:19:64:71:c7:9a:58:39:57: b3:3a:f6:71:9e:9e:f3:51:4e:ee:0d:60:d4:7e:1c: a4:1e:6a:4f:44:11:06:ef:7b:45:31:3d:43:40:02: fc:fa:af:9f:a6:ec:e9:75:00:fe:0f:47:b3:8e:6e: e5:6b:c5:dc:22:34:c9:38:ea:f1:66:85:9b:96:5e: e6:79:8d:ec:ba:75:5d:59:97:35:8a:20:49:62:a4: a5:b3:a3:a6:ab:96:1b:da:b3:b5:26:ed:30:3d:a9: 36:84:10:c2:5e:f1:58:d3:af:5c:b1:ca:22:20:53: 8c:ca:df:5e:74:f6:18:a7:b8:13:ab:0c:75:3e:77: 7e:60:f0:cf:81:60:d6:00:8c:21:23:65:29:48:dd: 91:4d:a6:07:e1:4c:bd:d9:df:b2:d4:5d:96:b5:93: 66:26:94:36:60:45:f7:ef:04:7a:54:e8:ef:28:54: 28:c9:00:47:b8:9c:66:41:00:e4:fe:7e:a7:13:80: b4:b4:65:a0:9e:55:bd:6a:52:f0:3a:41:81:a1:98: 96:b5:94:87:c4:b9:5e:bf:c0:9c:9d:30:b4:a2:a0: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:52:F5:10:9C:98:37:34:85:BC:84:89:9D:0B:97:DD:99:14:63:B5 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/cFL1EJyYNzSFvISJnQuX3ZkUY7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.8.0/21 Signature Algorithm: sha256WithRSAEncryption 1a:79:d5:b3:ae:cd:6a:b1:8a:af:2d:40:68:40:46:38:67:b6: 08:0e:be:09:1d:d5:ad:f8:fa:46:de:ed:f9:ef:56:3e:9e:30: b3:7e:0a:be:0f:c6:50:aa:df:08:7d:89:dd:a2:3a:87:62:fa: 18:5d:31:30:a3:04:66:65:72:fd:c1:2a:c1:3e:e7:cc:14:fb: b6:9a:57:2f:c5:f5:cd:2c:be:92:f3:11:4f:57:19:50:a4:a6: 81:e5:4f:94:20:34:3a:5d:d3:f1:95:af:30:fb:ea:93:63:b6: 35:63:4e:97:a1:de:27:12:58:9f:c9:92:a1:3e:33:ef:f5:52: 2d:71:6b:90:2f:15:b0:0b:0b:88:b7:32:3c:03:c9:d4:d8:6b: ba:b4:02:cc:d5:c8:6a:6c:42:87:48:ba:de:b7:15:a8:7e:c0: 34:5c:f7:d2:72:68:97:67:9f:bf:70:10:ad:88:e6:5b:18:76: f0:1d:bf:21:b1:84:41:79:2e:a8:fc:96:0b:cf:78:21:4c:b5: 3d:e6:f2:2e:2b:e7:73:c2:6a:09:24:25:8c:f6:72:6b:49:8a: b1:c6:d4:30:1a:5a:c8:2c:83:92:b5:fa:89:64:7b:e5:06:54: c6:f4:4a:c1:17:2a:21:af:0a:a0:b6:8c:53:43:02:e6:5c:6c: ce:cc:bb:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Z7cfXLYztiGQfw5kimgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDUyZjUxMDljOTgzNzM0ODViYzg0ODk5ZDBiOTdkZDk5MTQ2M2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUsmNGbbCXvELkoQ9AWrUQpMr399 opQT64Gt93vNeSrF9C2CGWRxx5pYOVezOvZxnp7zUU7uDWDUfhykHmpPRBEG73tF MT1DQAL8+q+fpuzpdQD+D0ezjm7la8XcIjTJOOrxZoWbll7meY3sunVdWZc1iiBJ YqSls6Omq5Yb2rO1Ju0wPak2hBDCXvFY069cscoiIFOMyt9edPYYp7gTqwx1Pnd+ YPDPgWDWAIwhI2UpSN2RTaYH4Uy92d+y1F2WtZNmJpQ2YEX37wR6VOjvKFQoyQBH uJxmQQDk/n6nE4C0tGWgnlW9alLwOkGBoZiWtZSHxLlev8CcnTC0oqBnJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBS9RCcmDc0hbyEiZ0Ll92ZFGO1MB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvY0ZMMUVKeVlOelNGdklTSm5RdVgzWmtVWTdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDk+oIMA0G CSqGSIb3DQEBCwUAA4IBAQAaedWzrs1qsYqvLUBoQEY4Z7YIDr4JHdWt+PpG3u35 71Y+njCzfgq+D8ZQqt8IfYndojqHYvoYXTEwowRmZXL9wSrBPufMFPu2mlcvxfXN LL6S8xFPVxlQpKaB5U+UIDQ6XdPxla8w++qTY7Y1Y06Xod4nElifyZKhPjPv9VIt cWuQLxWwCwuItzI8A8nU2Gu6tALM1chqbEKHSLretxWofsA0XPfScmiXZ5+/cBCt iOZbGHbwHb8hsYRBeS6o/JYLz3ghTLU95vIuK+dzwmoJJCWM9nJrSYqxxtQwGlrI LIOStfqJZHvlBlTG9ErBFyohrwqgtoxTQwLmXGzOzLs3 -----END CERTIFICATE-----Generated at Mon Jan 26 23:44:59 2026 by rpki-client