This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa File: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (raw, json) Hash identifier: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA= Subject key identifier: 72:7A:C9:97:1F:08:EC:D5:DD:33:7B:C2:3A:92:02:D8:B8:49:FD:8F Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4 Certificate serial: 019B775893A7F34CDDBDE1A41B02C5C5D9CC Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa Signing time: Thu 01 Jan 2026 02:17:32 +0000 ROA not before: Thu 01 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211841 IP address blocks: 194.127.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:93:a7:f3:4c:dd:bd:e1:a4:1b:02:c5:c5:d9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4 Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=727ac9971f08ecd5dd337bc23a9202d8b849fd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:03:02:e5:58:2c:38:48:82:1e:b1:ff:5d: 27:c4:d9:9c:9c:f4:14:12:92:b4:88:29:ee:99:2f: ae:64:fb:e8:5c:bd:a4:c6:75:aa:37:a9:09:d2:58: 45:99:67:d5:88:58:cb:58:14:21:e6:b7:3e:5f:f5: ec:f7:61:39:fd:6b:53:92:a8:45:61:96:bd:af:95: b6:69:27:1a:55:e3:78:16:9d:c1:a3:92:66:98:34: 31:11:33:96:e5:47:99:2d:f8:9a:6d:80:11:5f:63: 5c:66:c5:0c:57:da:c1:58:a2:7f:af:ca:a6:1d:87: 5c:ee:de:ab:90:32:4e:ab:bf:7f:f5:20:df:c9:1b: 3a:2d:a2:bc:7e:0e:26:1f:0d:19:81:d8:c4:38:99: 3e:a8:9c:ce:19:e9:b0:1f:4c:63:fc:0e:15:18:0b: 55:88:79:23:52:6f:56:02:27:42:78:c0:97:49:e6: a6:3f:4f:74:30:97:c4:59:82:fa:82:e5:b6:c4:7a: e1:fa:ea:81:c2:67:85:00:e4:fa:d3:df:06:cf:50: 08:5c:b5:c8:bf:99:23:eb:03:01:60:da:9e:1d:1f: b7:a6:df:05:3a:92:7d:72:1d:9c:9f:78:51:72:6a: d1:ec:52:47:53:98:89:60:ae:b7:c4:5d:8b:f8:3e: 48:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7A:C9:97:1F:08:EC:D5:DD:33:7B:C2:3A:92:02:D8:B8:49:FD:8F X509v3 Authority Key Identifier: keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.127.137.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:90:81:cc:d5:de:f3:f6:6f:da:9c:3a:50:e0:12:6a:91:24: e0:9a:cd:f9:95:62:75:c3:aa:9d:f6:2c:21:7c:1b:64:99:61: 1a:6c:00:3f:2a:c8:2a:99:bb:ff:16:93:7e:5b:5f:e5:0a:63: da:ea:4d:77:b7:ce:fc:7f:02:50:21:04:0c:63:60:8d:96:ae: b8:1c:92:4d:7a:75:d6:f4:ab:a2:92:ef:61:36:2e:5a:e3:92: 11:38:78:07:08:7f:75:2d:71:89:97:11:c1:5d:7a:86:a1:7d: 16:e8:d3:23:7f:63:b2:75:bf:81:f3:09:74:49:f7:43:d1:7e: 15:7c:8b:ed:85:33:4c:2d:14:5e:7e:d9:8c:35:68:e3:0f:f8: 42:87:66:cd:e1:9c:68:88:9b:41:93:5c:08:62:6b:29:dd:80: a9:46:2a:11:31:05:f2:26:d5:f8:6d:28:67:5f:ae:2f:69:e3: 37:b8:fc:1b:36:4b:b7:c2:7b:d4:09:71:d9:bd:a2:ca:52:49: d1:26:40:a3:bc:5a:c0:0f:8b:19:f7:83:a4:5f:69:70:c5:24: fd:15:c1:ce:12:4a:d0:72:91:25:d2:16:78:ba:f3:9e:dd:6d: c7:72:11:1b:89:32:a8:91:73:9a:d2:2c:37:4a:a6:72:61:d9: dd:3d:47:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJOn80zdveGkGwLFxdnMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl ODI2ZDQwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjdhYzk5NzFmMDhlY2Q1ZGQzMzdiYzIzYTkyMDJkOGI4NDlmZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVUDAuVYLDhIgh6x/10nxNmcnPQU EpK0iCnumS+uZPvoXL2kxnWqN6kJ0lhFmWfViFjLWBQh5rc+X/Xs92E5/WtTkqhF YZa9r5W2aScaVeN4Fp3Bo5JmmDQxETOW5UeZLfiabYARX2NcZsUMV9rBWKJ/r8qm HYdc7t6rkDJOq79/9SDfyRs6LaK8fg4mHw0ZgdjEOJk+qJzOGemwH0xj/A4VGAtV iHkjUm9WAidCeMCXSeamP090MJfEWYL6guW2xHrh+uqBwmeFAOT6098Gz1AIXLXI v5kj6wMBYNqeHR+3pt8FOpJ9ch2cn3hRcmrR7FJHU5iJYK63xF2L+D5IEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHJ6yZcfCOzV3TN7wjqSAti4Sf2PMB8GA1UdIwQY MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt M2RiY2RmNzc5ZjI0LzEvY25ySmx4OEk3TlhkTTN2Q09wSUMyTGhKX1k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0 LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn+JMA0G CSqGSIb3DQEBCwUAA4IBAQCckIHM1d7z9m/anDpQ4BJqkSTgms35lWJ1w6qd9iwh fBtkmWEabAA/Ksgqmbv/FpN+W1/lCmPa6k13t878fwJQIQQMY2CNlq64HJJNenXW 9Kuiku9hNi5a45IROHgHCH91LXGJlxHBXXqGoX0W6NMjf2Oydb+B8wl0SfdD0X4V fIvthTNMLRReftmMNWjjD/hCh2bN4ZxoiJtBk1wIYmsp3YCpRioRMQXyJtX4bShn X64vaeM3uPwbNku3wnvUCXHZvaLKUknRJkCjvFrAD4sZ94OkX2lwxST9FcHOEkrQ cpEl0hZ4uvOe3W3HchEbiTKokXOa0iw3SqZyYdndPUc4 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:29 2026 by rpki-client