This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/r_CfuATE8NEEgiRwgtvIfyO2mTc.roa File: r_CfuATE8NEEgiRwgtvIfyO2mTc.roa (raw, json) Hash identifier: WUMjD5yncYjL6aq2tODEEnxRJBKfg1siKrEsUcEjMzk= Subject key identifier: AF:F0:9F:B8:04:C4:F0:D1:04:82:24:70:82:DB:C8:7F:23:B6:99:37 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37BBC660264CEDDC626C4B894BFA0A Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/r_CfuATE8NEEgiRwgtvIfyO2mTc.roa Signing time: Fri 02 Jan 2026 10:19:00 +0000 ROA not before: Fri 02 Jan 2026 10:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54103 IP address blocks: 46.244.116.0/22 maxlen: 24 185.51.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:bb:c6:60:26:4c:ed:dc:62:6c:4b:89:4b:fa:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aff09fb804c4f0d10482247082dbc87f23b69937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:a8:96:be:96:b1:c9:f5:52:c8:20:96:02: 5c:b0:06:34:f5:98:fc:ff:44:0e:64:2b:16:39:50: 5e:78:49:f7:7a:58:cf:e6:42:57:3a:e9:04:c7:6e: d9:9b:1f:c1:02:06:6c:37:88:e1:cc:5e:e9:7a:18: 20:0d:31:51:d5:4e:9f:54:32:96:30:51:90:72:6d: ba:aa:d3:3f:12:a5:87:62:19:e5:64:70:17:5b:32: 27:9e:34:38:da:a9:a7:c8:ce:8a:97:26:9d:1e:3a: 3e:26:60:e7:d2:92:bd:7d:fe:ee:ca:d5:e3:5f:df: 3a:8b:04:72:5a:e6:63:64:c5:e0:c2:4c:69:c6:f5: f0:55:8a:69:fe:d6:0e:47:31:bd:d1:56:f4:37:ab: 1d:f3:6d:0a:84:a6:cf:8b:e4:4c:35:3b:df:38:6a: 23:83:6c:3a:1a:49:69:96:8b:cf:5a:61:83:47:89: 23:f4:44:05:1e:73:d2:1c:53:ba:10:fa:41:10:f3: 67:f5:4f:40:4f:1c:68:78:1e:f7:7b:12:09:f0:53: ed:03:3e:c0:98:b2:85:f7:62:37:61:e5:7c:5c:32: 5f:1f:ee:b3:44:f7:44:59:88:7a:90:9b:c6:21:50: b9:f3:31:fd:8d:e3:a9:ec:2b:75:f5:2f:a6:f2:cb: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F0:9F:B8:04:C4:F0:D1:04:82:24:70:82:DB:C8:7F:23:B6:99:37 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/r_CfuATE8NEEgiRwgtvIfyO2mTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.244.116.0/22 185.51.48.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:fa:4e:b8:51:c2:56:6d:72:81:92:9d:d2:d6:e7:06:75:70: 3f:63:3e:11:7a:6a:f8:7c:12:40:ba:12:1e:c6:13:5e:2a:e6: 06:aa:9c:50:b9:b3:fc:8e:f8:69:13:62:20:a7:f4:75:1f:9f: e4:24:9a:9c:74:e1:45:57:40:b6:a4:72:a5:2d:29:79:ca:93: 31:c4:fc:3b:41:0e:4b:f0:52:37:63:92:be:c5:a6:03:b1:61: ad:43:e1:a0:42:4b:ec:00:4a:9f:f5:ed:fd:8e:61:fe:78:ad: 96:cc:2c:6c:69:ee:cc:e7:5f:90:b3:70:23:a9:e4:41:ab:bd: 46:85:59:a7:74:c5:c7:25:09:24:cd:58:81:62:4d:50:dc:3c: 2e:f6:32:7d:21:85:42:4a:d7:45:46:e7:ad:11:e6:9e:58:42: 15:b7:8e:c3:3d:b7:f5:8b:66:8a:63:08:42:4f:50:c6:03:da: ba:07:50:87:5a:c4:70:f7:bd:06:eb:54:61:b9:cc:91:a1:e9: 08:15:f0:fd:a2:b8:a4:ef:94:84:d2:80:f3:9c:b9:76:9a:c7: 90:5e:03:ff:50:45:87:58:d9:53:df:1d:93:37:be:1a:da:7b: 12:60:49:17:34:7a:6e:77:f9:28:ce:de:82:9e:95:b0:65:9f: 75:20:da:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N7vGYCZM7dxibEuJS/oKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmYwOWZiODA0YzRmMGQxMDQ4MjI0NzA4MmRiYzg3ZjIzYjY5OTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwGolr6Wscn1UsgglgJcsAY09Zj8 /0QOZCsWOVBeeEn3eljP5kJXOukEx27Zmx/BAgZsN4jhzF7pehggDTFR1U6fVDKW MFGQcm26qtM/EqWHYhnlZHAXWzInnjQ42qmnyM6KlyadHjo+JmDn0pK9ff7uytXj X986iwRyWuZjZMXgwkxpxvXwVYpp/tYORzG90Vb0N6sd820KhKbPi+RMNTvfOGoj g2w6GklplovPWmGDR4kj9EQFHnPSHFO6EPpBEPNn9U9ATxxoeB73exIJ8FPtAz7A mLKF92I3YeV8XDJfH+6zRPdEWYh6kJvGIVC58zH9jeOp7Ct19S+m8ssKeQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK/wn7gExPDRBIIkcILbyH8jtpk3MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvcl9DZnVBVEU4TkVFZ2lSd2d0dklmeU8ybVRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLvR0AwQC uTMwMA0GCSqGSIb3DQEBCwUAA4IBAQAt+k64UcJWbXKBkp3S1ucGdXA/Yz4Remr4 fBJAuhIexhNeKuYGqpxQubP8jvhpE2Igp/R1H5/kJJqcdOFFV0C2pHKlLSl5ypMx xPw7QQ5L8FI3Y5K+xaYDsWGtQ+GgQkvsAEqf9e39jmH+eK2WzCxsae7M51+Qs3Aj qeRBq71GhVmndMXHJQkkzViBYk1Q3Dwu9jJ9IYVCStdFRuetEeaeWEIVt47DPbf1 i2aKYwhCT1DGA9q6B1CHWsRw970G61RhucyRoekIFfD9orik75SE0oDznLl2mseQ XgP/UEWHWNlT3x2TN74a2nsSYEkXNHpud/kozt6CnpWwZZ91INrX -----END CERTIFICATE-----Generated at Wed Jan 21 06:05:51 2026 by rpki-client