This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/CprHXAsrH8JdmMZSQZXivSSe6E4.roa File: CprHXAsrH8JdmMZSQZXivSSe6E4.roa (raw, json) Hash identifier: FeFr2Lyz21YuPKbhFzqjbNPKoCmaSebQnIlOtdAGIx4= Subject key identifier: 0A:9A:C7:5C:0B:2B:1F:C2:5D:98:C6:52:41:95:E2:BD:24:9E:E8:4E Certificate issuer: /CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e Certificate serial: 019B7FF21537B9E1697A1E01393A9FDF8F04 Authority key identifier: 70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/CprHXAsrH8JdmMZSQZXivSSe6E4.roa Signing time: Fri 02 Jan 2026 18:22:10 +0000 ROA not before: Fri 02 Jan 2026 18:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52115 IP address blocks: 46.252.224.0/20 maxlen: 20 185.168.140.0/24 maxlen: 24 2a05:e780::/29 maxlen: 29 2a0d:cf00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:15:37:b9:e1:69:7a:1e:01:39:3a:9f:df:8f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e Validity Not Before: Jan 2 18:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a9ac75c0b2b1fc25d98c6524195e2bd249ee84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:a3:cc:24:ab:e4:2d:bc:ef:98:6f:e7:d0: 93:37:50:55:c9:fb:2c:59:25:94:c6:e6:c8:bb:d4: 27:69:a7:9f:30:f5:67:bf:03:d3:0a:aa:b0:83:95: 1e:95:3e:c9:64:1e:e3:29:be:c3:99:8d:c8:b5:fb: f1:c0:0e:ac:b2:1e:b7:a2:e3:50:f6:d5:09:e0:db: c3:fa:4e:3e:f2:1d:93:f2:83:bf:c9:f9:11:13:b4: 35:88:9d:83:65:4e:55:82:65:48:28:3d:d1:75:7c: 23:41:f5:0b:7e:68:67:fc:c8:b5:69:bf:3c:29:35: 3b:00:40:b5:78:01:fc:c7:00:df:9e:e5:a6:27:e9: 42:8b:24:d9:f3:62:77:f5:65:31:9f:26:fb:b4:75: be:7f:0d:80:22:39:c9:71:4e:95:df:ac:3c:47:9e: 75:cb:3c:c8:3f:f5:b6:02:97:20:a1:fe:11:9e:34: 4b:ba:44:d9:18:3d:d5:95:14:b0:12:84:be:01:cf: 26:74:e2:26:01:40:f3:7d:31:a0:f1:d3:4b:ca:b6: b0:8b:f4:9d:60:30:b7:e9:67:cf:20:8c:c3:4f:3d: d9:c0:06:a0:8f:00:9d:1e:f6:25:6f:92:b6:dc:07: be:17:6b:4a:7e:18:ba:d6:de:f9:a3:89:ae:a3:3a: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9A:C7:5C:0B:2B:1F:C2:5D:98:C6:52:41:95:E2:BD:24:9E:E8:4E X509v3 Authority Key Identifier: keyid:70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/CprHXAsrH8JdmMZSQZXivSSe6E4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.252.224.0/20 185.168.140.0/24 IPv6: 2a05:e780::/29 2a0d:cf00::/29 Signature Algorithm: sha256WithRSAEncryption 13:96:1e:07:4e:21:1f:36:67:d4:94:71:11:88:fb:99:06:3b: b1:ed:f8:6f:ab:fd:07:86:db:be:dc:36:55:0e:73:47:6c:cf: d3:2a:6a:ea:a3:c1:7d:55:36:d9:40:52:a7:92:47:a3:b7:2b: 87:66:25:98:e6:8b:99:84:d7:a4:b9:b0:40:29:55:b7:88:9f: 4d:73:b2:cc:fb:bf:1b:67:a9:13:10:bb:aa:db:08:11:82:4d: 40:cd:ae:e8:2d:f2:17:51:22:11:48:2d:ac:34:06:65:52:98: 00:93:a6:cb:ca:88:0d:68:c9:47:66:a7:5e:53:63:12:5d:d0: 0d:e9:8d:05:7a:2d:d6:b7:11:b9:db:39:05:98:57:55:23:fc: 86:19:61:6e:02:72:d4:8e:73:03:89:9b:24:07:b3:2e:fa:aa: 3d:1a:4c:6d:bf:18:8d:dd:98:13:cc:93:c9:31:97:fc:88:b1: ce:2c:d2:eb:dc:1f:95:15:4c:e0:c9:28:db:48:d3:46:ee:bb: 39:58:e7:0c:82:31:66:b6:87:37:00:83:c5:23:6f:b0:d1:b5: 4b:37:14:5c:db:41:86:04:c4:53:04:70:94:01:9f:0f:28:99: 71:cf:53:ce:95:b4:60:d7:a9:e0:86:c0:af:32:5e:a5:e8:7a: 29:91:66:ab -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt/8hU3ueFpeh4BOTqf348EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwN2FmNDUzNDZmMDZiNjIyYTBlYmJiNGZmOWJhMzNiZTZm NDJmMWUwHhcNMjYwMTAyMTgyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTlhYzc1YzBiMmIxZmMyNWQ5OGM2NTI0MTk1ZTJiZDI0OWVlODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/mjzCSr5C2875hv59CTN1BVyfss WSWUxubIu9QnaaefMPVnvwPTCqqwg5UelT7JZB7jKb7DmY3ItfvxwA6ssh63ouNQ 9tUJ4NvD+k4+8h2T8oO/yfkRE7Q1iJ2DZU5VgmVIKD3RdXwjQfULfmhn/Mi1ab88 KTU7AEC1eAH8xwDfnuWmJ+lCiyTZ82J39WUxnyb7tHW+fw2AIjnJcU6V36w8R551 yzzIP/W2Apcgof4RnjRLukTZGD3VlRSwEoS+Ac8mdOImAUDzfTGg8dNLyrawi/Sd YDC36WfPIIzDTz3ZwAagjwCdHvYlb5K23Ae+F2tKfhi61t75o4muozohQQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAqax1wLKx/CXZjGUkGV4r0knuhOMB8GA1UdIwQY MBaAFHB69FNG8GtiKg67tP+bozvm9C8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0hyMFUwYndhMklxRHJ1MF81dWpPLWIwTHg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83OTIwZDAtZjk1Ni00NDM5LTljZDIt NGI3ODA4ZDk4NjY0LzEvQ3BySFhBc3JIOEpkbU1aU1FaWGl2U1NlNkU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS83OTIwZDAtZjk1Ni00NDM5LTljZDItNGI3ODA4ZDk4NjY0 LzEvY0hyMFUwYndhMklxRHJ1MF81dWpPLWIwTHg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQELvzgAwQA uaiMMBQEAgACMA4DBQMqBeeAAwUDKg3PADANBgkqhkiG9w0BAQsFAAOCAQEAE5Ye B04hHzZn1JRxEYj7mQY7se34b6v9B4bbvtw2VQ5zR2zP0ypq6qPBfVU22UBSp5JH o7crh2YlmOaLmYTXpLmwQClVt4ifTXOyzPu/G2epExC7qtsIEYJNQM2u6C3yF1Ei EUgtrDQGZVKYAJOmy8qIDWjJR2anXlNjEl3QDemNBXot1rcRuds5BZhXVSP8hhlh bgJy1I5zA4mbJAezLvqqPRpMbb8Yjd2YE8yTyTGX/IixzizS69wflRVM4Mko20jT Ru67OVjnDIIxZraHNwCDxSNvsNG1SzcUXNtBhgTEUwRwlAGfDyiZcc9TzpW0YNep 4IbArzJepeh6KZFmqw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:14 2026 by rpki-client