This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cofCNEYRacANYAxSTZL4SPw_KX8.roa File: cofCNEYRacANYAxSTZL4SPw_KX8.roa (raw, json) Hash identifier: xwSJwljg2CxEqSDGPniocZpQ+W81lV+qFtetG3DGsxM= Subject key identifier: 72:87:C2:34:46:11:69:C0:0D:60:0C:52:4D:92:F8:48:FC:3F:29:7F Certificate issuer: /CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Certificate serial: 019A78F7327656B4F584A42B4AF5B25ADD1A Authority key identifier: 72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cofCNEYRacANYAxSTZL4SPw_KX8.roa Signing time: Wed 12 Nov 2025 16:47:37 +0000 ROA not before: Wed 12 Nov 2025 16:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47941 IP address blocks: 91.209.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:f7:32:76:56:b4:f5:84:a4:2b:4a:f5:b2:5a:dd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ebf817e1a92f3cd7f49df6a31c265ffe478008 Validity Not Before: Nov 12 16:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7287c234461169c00d600c524d92f848fc3f297f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7a:f9:8a:96:56:53:f6:d5:25:97:15:cd:af: 81:ac:80:d3:d3:bf:c1:c9:e2:40:95:cc:b1:3d:df: 51:a3:95:01:1f:8d:9e:4e:42:ff:43:a9:c8:f8:0b: 84:f6:94:03:bb:b3:5d:a4:d5:3e:b1:9c:61:52:78: f7:5a:25:d4:7e:8e:82:e0:32:09:4f:57:8a:0c:c5: 11:8e:e5:8e:5a:01:b2:e4:58:43:9f:53:71:3a:09: ea:b3:6b:4f:41:b5:37:62:7e:ce:d7:0a:9e:25:97: e6:04:b8:4e:f7:66:ef:19:14:43:1a:9f:f5:52:86: 10:04:9b:d8:c9:e0:6a:99:c2:dd:10:99:25:23:41: bc:eb:b4:c5:18:c8:f2:44:bc:a4:28:be:95:f8:ed: 37:86:b6:44:60:65:75:08:8d:53:ca:6e:cf:58:b0: c2:3e:18:ce:61:2a:fb:70:57:df:53:31:48:99:9f: ac:d2:84:ea:a1:3c:24:23:fc:4b:cf:5e:99:5f:ab: ac:b0:56:bf:01:82:a2:a4:ef:66:04:c0:b4:5c:e9: d7:26:03:73:2d:d2:09:d5:a5:f2:2d:04:ae:09:90: 74:49:97:ce:27:7f:ef:c3:a7:67:21:14:78:78:bd: 59:89:44:d7:f4:b9:6d:76:5a:6a:80:b0:1f:dc:6c: cc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:87:C2:34:46:11:69:C0:0D:60:0C:52:4D:92:F8:48:FC:3F:29:7F X509v3 Authority Key Identifier: keyid:72:EB:F8:17:E1:A9:2F:3C:D7:F4:9D:F6:A3:1C:26:5F:FE:47:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuv4F-GpLzzX9J32oxwmX_5HgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cofCNEYRacANYAxSTZL4SPw_KX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/434efd-ee54-4bcd-8141-c9f7c0e7acc6/1/cuv4F-GpLzzX9J32oxwmX_5HgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.10.0/24 Signature Algorithm: sha256WithRSAEncryption 21:8a:83:1c:b3:d4:76:de:7b:01:ae:c1:b0:46:0a:0b:9d:7d: 19:43:ab:15:3b:b0:03:d7:6f:7f:b7:00:92:51:5e:95:8a:cb: d9:cc:d1:73:05:77:e4:4a:47:c7:dc:e5:e9:a9:b6:a8:67:a4: bb:64:b0:d5:ce:ce:d3:44:fa:9f:7b:57:c4:68:a0:ef:0b:be: ba:1b:e8:2a:f5:f0:df:08:9d:7d:f5:e5:ef:aa:d0:5f:ad:85: d4:af:45:d7:0e:aa:85:55:08:b7:74:37:6a:0f:9c:6f:8b:68: 2b:c4:09:2b:34:2e:69:ca:0d:73:58:57:88:ef:43:57:46:d1: b7:a6:ad:93:54:11:61:24:88:d4:5e:c7:68:66:dc:55:19:8f: 66:ef:47:4e:da:0a:d4:03:a4:39:97:49:ea:72:73:b2:f0:b4: ed:8b:15:e0:9c:7e:3c:dc:d9:6e:10:78:d3:f3:2c:d3:95:04: 90:f7:8b:d2:93:b6:8a:39:9b:d5:5e:ef:7a:4d:f1:48:62:19: 26:b1:ef:b9:4f:9e:e3:9d:7d:fc:b5:c1:ba:dd:03:25:38:d9: 21:8a:c9:43:74:e9:80:e6:6b:71:67:d1:ea:3e:60:e7:e5:12: 2a:18:d0:a6:e7:3b:a0:32:5e:7c:34:0b:33:f8:af:1f:19:d5: 1a:c0:c7:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp49zJ2VrT1hKQrSvWyWt0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWJmODE3ZTFhOTJmM2NkN2Y0OWRmNmEzMWMyNjVmZmU0 NzgwMDgwHhcNMjUxMTEyMTY0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjg3YzIzNDQ2MTE2OWMwMGQ2MDBjNTI0ZDkyZjg0OGZjM2YyOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHr5ipZWU/bVJZcVza+BrIDT07/B yeJAlcyxPd9Ro5UBH42eTkL/Q6nI+AuE9pQDu7NdpNU+sZxhUnj3WiXUfo6C4DIJ T1eKDMURjuWOWgGy5FhDn1NxOgnqs2tPQbU3Yn7O1wqeJZfmBLhO92bvGRRDGp/1 UoYQBJvYyeBqmcLdEJklI0G867TFGMjyRLykKL6V+O03hrZEYGV1CI1Tym7PWLDC PhjOYSr7cFffUzFImZ+s0oTqoTwkI/xLz16ZX6ussFa/AYKipO9mBMC0XOnXJgNz LdIJ1aXyLQSuCZB0SZfOJ3/vw6dnIRR4eL1ZiUTX9LltdlpqgLAf3GzMowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKHwjRGEWnADWAMUk2S+Ej8Pyl/MB8GA1UdIwQY MBaAFHLr+BfhqS881/Sd9qMcJl/+R4AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEt YzlmN2MwZTdhY2M2LzEvY29mQ05FWVJhY0FOWUF4U1RaTDRTUHdfS1g4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC80MzRlZmQtZWU1NC00YmNkLTgxNDEtYzlmN2MwZTdhY2M2 LzEvY3V2NEYtR3BMenpYOUozMm94d21YXzVIZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9EKMA0G CSqGSIb3DQEBCwUAA4IBAQAhioMcs9R23nsBrsGwRgoLnX0ZQ6sVO7AD129/twCS UV6VisvZzNFzBXfkSkfH3OXpqbaoZ6S7ZLDVzs7TRPqfe1fEaKDvC766G+gq9fDf CJ199eXvqtBfrYXUr0XXDqqFVQi3dDdqD5xvi2grxAkrNC5pyg1zWFeI70NXRtG3 pq2TVBFhJIjUXsdoZtxVGY9m70dO2grUA6Q5l0nqcnOy8LTtixXgnH483NluEHjT 8yzTlQSQ94vSk7aKOZvVXu96TfFIYhkmse+5T57jnX38tcG63QMlONkhislDdOmA 5mtxZ9HqPmDn5RIqGNCm5zugMl58NAsz+K8fGdUawMeH -----END CERTIFICATE-----Generated at Sat Nov 22 21:46:56 2025 by rpki-client