This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/CpNNw_FBjV7WQ4kyfcNgEUKuQGQ.roa File: CpNNw_FBjV7WQ4kyfcNgEUKuQGQ.roa (raw, json) Hash identifier: qsbzd5kGA6KOQsn+NSJ/jwzydnhbMFq6Wy9RwChfdc4= Subject key identifier: 0A:93:4D:C3:F1:41:8D:5E:D6:43:89:32:7D:C3:60:11:42:AE:40:64 Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e Certificate serial: 019C28D24596B1FAB53D0CEBB4ADB252D9DD Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/CpNNw_FBjV7WQ4kyfcNgEUKuQGQ.roa Signing time: Wed 04 Feb 2026 13:23:14 +0000 ROA not before: Wed 04 Feb 2026 13:23:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 91.239.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:d2:45:96:b1:fa:b5:3d:0c:eb:b4:ad:b2:52:d9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e Validity Not Before: Feb 4 13:23:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a934dc3f1418d5ed64389327dc3601142ae4064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3e:6a:d0:25:8d:fd:5a:df:ba:86:56:88:0f: a7:34:bb:5e:62:07:c3:39:fd:5f:f4:4b:72:10:2c: 4e:36:56:10:08:a4:4e:07:6f:af:94:09:5b:16:58: 76:a3:8d:63:4b:82:a5:b3:64:97:fb:32:dd:a4:cf: e5:07:7e:0d:e2:3c:1e:91:85:af:b2:bb:85:c3:ed: c7:a1:6e:86:a5:df:de:25:90:20:a2:70:66:09:ab: 9b:7c:6c:81:cf:47:11:99:e9:6c:5f:28:f2:a2:0a: ee:56:d4:61:66:e8:61:c9:46:93:7d:6b:a0:44:65: 5f:20:f5:af:49:d3:6b:a7:28:be:aa:b1:e4:57:4b: 3e:77:d7:9d:61:c9:49:7c:6e:79:e1:89:07:a7:b3: a4:8d:3d:6f:7a:36:58:ec:d4:9a:69:bb:fb:d5:ec: 47:4e:6c:df:7e:61:c4:97:91:65:8f:7f:0b:3b:ff: a3:95:d2:f6:83:d2:f8:9c:ad:91:4b:3c:98:a0:ef: 81:4d:11:27:1b:b2:a7:e7:45:b0:1d:b7:c4:88:35: 0b:d4:98:33:56:31:41:1b:ce:6a:4a:1b:37:00:aa: 35:95:c1:56:bf:27:19:c5:44:82:8f:55:10:a4:57: d4:25:fb:3f:9b:be:4b:77:97:23:33:12:39:53:84: 02:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:93:4D:C3:F1:41:8D:5E:D6:43:89:32:7D:C3:60:11:42:AE:40:64 X509v3 Authority Key Identifier: keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/CpNNw_FBjV7WQ4kyfcNgEUKuQGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.192.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:15:c5:16:4e:4d:c8:d3:51:d0:2e:d0:9d:17:54:60:e8:92: 7c:4d:3b:53:d9:76:5d:ec:84:94:e5:41:80:46:17:c6:57:6f: 82:59:11:a9:f1:70:5c:7d:cc:e2:d2:72:44:b0:85:76:44:be: 4e:cc:8b:50:4e:e8:3f:19:89:02:61:24:4f:66:50:c9:b1:1d: cc:c5:5f:77:64:2f:c9:ec:7b:c7:76:e7:db:a8:63:bc:f9:7d: 1c:e0:c6:25:e9:c6:6e:14:0f:8e:e4:bf:47:94:b6:80:e8:e7: 55:49:8c:16:fa:54:3a:c2:e3:f5:5b:a2:43:8b:fc:27:8f:17: e9:01:84:6c:78:3f:5a:77:86:4e:9c:f9:2e:06:d9:90:90:b0: c9:f4:ae:f3:5c:ba:7e:9f:b2:71:7c:96:2a:8f:23:f8:98:00: 3b:04:c7:98:01:24:3b:27:96:e0:0b:50:f3:30:72:75:7f:82: 98:63:53:c1:ba:5c:72:4d:1f:c0:20:6c:bd:f8:08:a3:aa:09: c7:5f:80:30:98:1e:71:65:19:e1:19:38:92:12:81:14:c8:69: 20:cb:78:c7:62:56:44:30:90:ec:ab:e8:5f:44:24:00:9b:10: 98:63:29:a6:83:da:f4:67:a8:e0:5a:c5:da:27:34:dc:fe:07: 7d:d9:4f:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwo0kWWsfq1PQzrtK2yUtndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MTYyMDlkN2RlZjk4YTJiYjM0OTc3ZjY1MDA5YjM1MjBk YTI1NmUwHhcNMjYwMjA0MTMyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTkzNGRjM2YxNDE4ZDVlZDY0Mzg5MzI3ZGMzNjAxMTQyYWU0MDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD5q0CWN/VrfuoZWiA+nNLteYgfD Of1f9EtyECxONlYQCKROB2+vlAlbFlh2o41jS4Kls2SX+zLdpM/lB34N4jwekYWv sruFw+3HoW6Gpd/eJZAgonBmCaubfGyBz0cRmelsXyjyogruVtRhZuhhyUaTfWug RGVfIPWvSdNrpyi+qrHkV0s+d9edYclJfG554YkHp7OkjT1vejZY7NSaabv71exH TmzffmHEl5Flj38LO/+jldL2g9L4nK2RSzyYoO+BTREnG7Kn50WwHbfEiDUL1Jgz VjFBG85qShs3AKo1lcFWvycZxUSCj1UQpFfUJfs/m75Ld5cjMxI5U4QCxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqTTcPxQY1e1kOJMn3DYBFCrkBkMB8GA1UdIwQY MBaAFNcWIJ1975iiuzSXf2UAmzUg2iVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMt ODUxZDljMDQ0ZTcwLzEvQ3BOTndfRkJqVjdXUTRreWZjTmdFVUt1UUdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMtODUxZDljMDQ0ZTcw LzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+/AMA0G CSqGSIb3DQEBCwUAA4IBAQArFcUWTk3I01HQLtCdF1Rg6JJ8TTtT2XZd7ISU5UGA RhfGV2+CWRGp8XBcfczi0nJEsIV2RL5OzItQTug/GYkCYSRPZlDJsR3MxV93ZC/J 7HvHdufbqGO8+X0c4MYl6cZuFA+O5L9HlLaA6OdVSYwW+lQ6wuP1W6JDi/wnjxfp AYRseD9ad4ZOnPkuBtmQkLDJ9K7zXLp+n7JxfJYqjyP4mAA7BMeYASQ7J5bgC1Dz MHJ1f4KYY1PBulxyTR/AIGy9+AijqgnHX4AwmB5xZRnhGTiSEoEUyGkgy3jHYlZE MJDsq+hfRCQAmxCYYymmg9r0Z6jgWsXaJzTc/gd92U+7 -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:58 2026 by rpki-client