This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/CFu9oBncqnpNmNRX4mjTnLjrg88.roa File: CFu9oBncqnpNmNRX4mjTnLjrg88.roa (raw, json) Hash identifier: B2878+aNIHIe1LVscKgla2xHXSTcQOkvuEd8azDazoE= Subject key identifier: 08:5B:BD:A0:19:DC:AA:7A:4D:98:D4:57:E2:68:D3:9C:B8:EB:83:CF Certificate issuer: /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19 Certificate serial: 019B7CECF0039F8BA379663574C8B77EFEAC Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/CFu9oBncqnpNmNRX4mjTnLjrg88.roa Signing time: Fri 02 Jan 2026 04:17:41 +0000 ROA not before: Fri 02 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205565 IP address blocks: 185.213.244.0/22 maxlen: 22 2a0b:90c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f0:03:9f:8b:a3:79:66:35:74:c8:b7:7e:fe:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19 Validity Not Before: Jan 2 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=085bbda019dcaa7a4d98d457e268d39cb8eb83cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c0:2a:c4:bd:13:82:e2:b2:72:6e:88:c3:20: 1d:09:e0:7d:6a:07:93:59:8c:5d:cd:6f:b4:9c:c9: 62:0f:b0:02:29:bc:53:76:d2:83:d8:db:cd:3c:6b: 86:54:21:24:9d:44:7d:93:56:99:fc:75:cf:e2:63: 19:65:c2:45:c5:ea:d2:35:7b:75:a0:5e:f5:ab:71: c9:00:73:43:65:79:29:30:cd:49:5a:ba:2c:47:30: ac:5e:d7:79:8e:a8:e2:e7:5a:f1:1c:6d:73:8e:b9: 63:28:9e:d2:d3:d6:c1:53:c8:90:8c:5f:0a:6d:85: ef:b0:c1:23:31:43:2c:a5:8a:02:96:c2:ae:4b:cd: df:ae:56:0a:0b:39:fa:d9:77:be:7b:cf:04:b5:8a: 43:a0:27:42:d3:a5:7a:81:8e:79:98:3b:f1:35:8d: 37:ed:1d:5a:01:00:26:d7:e1:02:07:4b:11:45:93: 1d:74:b8:fe:98:3d:6e:de:9a:86:de:66:fb:db:f5: d3:12:ac:11:18:c0:83:e4:f7:a5:8b:71:24:87:c1: 55:17:cf:d5:c8:65:ca:23:72:91:a8:b2:08:a2:e3: e7:bf:90:d1:8a:96:d8:cf:54:83:f7:30:96:c6:a5: 9f:b1:0f:ac:54:44:c1:62:af:8f:a3:c5:ca:88:e0: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5B:BD:A0:19:DC:AA:7A:4D:98:D4:57:E2:68:D3:9C:B8:EB:83:CF X509v3 Authority Key Identifier: keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/CFu9oBncqnpNmNRX4mjTnLjrg88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.244.0/22 IPv6: 2a0b:90c0::/29 Signature Algorithm: sha256WithRSAEncryption 0b:c1:0e:0a:fb:c5:73:b1:2a:a9:fe:a8:52:38:54:ed:f8:dd: 0c:af:84:4c:cd:76:8c:ac:fd:c2:df:40:46:1d:55:a1:ff:ae: c8:77:9d:b0:f7:41:6a:e8:eb:e8:66:39:1b:44:e6:ac:99:1b: 77:ee:38:78:5c:6b:37:57:33:cb:39:3b:96:f3:24:48:dc:cf: 2d:25:1d:88:ed:be:a9:2c:87:44:d1:91:c8:5c:63:7f:b3:1c: 2d:d5:2c:65:50:30:47:88:63:88:7a:75:93:7f:d7:30:f7:6f: 66:ee:55:d1:f7:50:87:c4:1a:b9:a7:8f:26:0d:7f:95:f5:6d: 4d:c7:3c:14:66:9b:e8:a5:e3:1a:78:9d:bd:53:80:f5:20:47: fd:3c:73:41:19:7c:98:ef:5e:8b:06:a2:c8:65:65:ef:58:06: c7:2c:c4:3a:70:a4:a1:18:9b:28:a8:31:48:f2:8a:5c:58:dc: 6e:39:83:e5:80:6a:fa:f3:f0:9c:af:4c:1a:60:e5:8a:ab:90: 64:e8:ce:07:24:3a:c4:d6:1e:b9:d5:4a:0f:c7:39:8c:ad:c1: 70:0f:4e:ec:e3:a1:c8:37:c6:b6:68:94:8e:cb:c6:40:d8:64: 8a:6d:ee:91:61:5f:de:1c:8a:b1:e3:93:c8:b4:bb:ff:01:47: 20:7b:8e:3f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87PADn4ujeWY1dMi3fv6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzk5Yjk1MWM2YTZmNmFkY2M4NjhkODg1YTk0MGFkZjAw NTFhMTkwHhcNMjYwMTAyMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODViYmRhMDE5ZGNhYTdhNGQ5OGQ0NTdlMjY4ZDM5Y2I4ZWI4M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncAqxL0TguKycm6IwyAdCeB9ageT WYxdzW+0nMliD7ACKbxTdtKD2NvNPGuGVCEknUR9k1aZ/HXP4mMZZcJFxerSNXt1 oF71q3HJAHNDZXkpMM1JWrosRzCsXtd5jqji51rxHG1zjrljKJ7S09bBU8iQjF8K bYXvsMEjMUMspYoClsKuS83frlYKCzn62Xe+e88EtYpDoCdC06V6gY55mDvxNY03 7R1aAQAm1+ECB0sRRZMddLj+mD1u3pqG3mb72/XTEqwRGMCD5Peli3Ekh8FVF8/V yGXKI3KRqLIIouPnv5DRipbYz1SD9zCWxqWfsQ+sVETBYq+Po8XKiOB2iwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAhbvaAZ3Kp6TZjUV+Jo05y464PPMB8GA1UdIwQY MBaAFLDJm5Ucam9q3Mho2IWpQK3wBRoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMt M2U2OTU2ZWQyYzZhLzEvQ0Z1OW9CbmNxbnBObU5SWDRtalRuTGpyZzg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wYTdiYmYtYmYyMC00MTE0LTk3MmMtM2U2OTU2ZWQyYzZh LzEvc01tYmxSeHFiMnJjeUdqWWhhbEFyZkFGR2hrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudX0MA0E AgACMAcDBQMqC5DAMA0GCSqGSIb3DQEBCwUAA4IBAQALwQ4K+8VzsSqp/qhSOFTt +N0Mr4RMzXaMrP3C30BGHVWh/67Id52w90Fq6OvoZjkbROasmRt37jh4XGs3VzPL OTuW8yRI3M8tJR2I7b6pLIdE0ZHIXGN/sxwt1SxlUDBHiGOIenWTf9cw929m7lXR 91CHxBq5p48mDX+V9W1NxzwUZpvopeMaeJ29U4D1IEf9PHNBGXyY716LBqLIZWXv WAbHLMQ6cKShGJsoqDFI8opcWNxuOYPlgGr68/Ccr0waYOWKq5Bk6M4HJDrE1h65 1UoPxzmMrcFwD07s46HIN8a2aJSOy8ZA2GSKbe6RYV/eHIqx45PItLv/AUcge44/ -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:01 2026 by rpki-client