This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SK_CFDO-iUAzkOwc_W37tHqN3cE.roa File: SK_CFDO-iUAzkOwc_W37tHqN3cE.roa (raw, json) Hash identifier: BVjq4miKRHh2QAOUNDFZU7zK1XqYmxZT+C8lMtjltqw= Subject key identifier: 48:AF:C2:14:33:BE:89:40:33:90:EC:1C:FD:6D:FB:B4:7A:8D:DD:C1 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA541904285BC14AF7B86EC1CF78E2C Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SK_CFDO-iUAzkOwc_W37tHqN3cE.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197304 IP address blocks: 213.91.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:41:90:42:85:bc:14:af:7b:86:ec:1c:f7:8e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48afc21433be89403390ec1cfd6dfbb47a8dddc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:d8:8d:94:60:c9:6a:2a:a5:b1:94:a7:02: 19:66:96:6b:8d:39:ec:b3:06:1a:c4:16:96:77:02: 85:be:49:f9:b4:af:70:3b:59:24:cd:39:14:95:4b: 49:3d:6e:f4:ba:5c:81:9c:50:2e:9d:e0:a2:09:4a: 01:33:46:13:d5:58:3a:58:f7:50:76:ba:5d:95:56: f6:a6:21:30:96:86:c3:98:59:8c:3a:91:2b:02:44: 22:2f:58:f8:95:99:ed:d5:b1:be:f8:ae:11:d7:5f: c3:bd:77:eb:53:7d:97:5c:1d:37:c1:60:40:d8:e3: fe:8d:cb:08:50:0b:cd:3f:e0:ea:3f:05:a5:ca:74: cd:f1:5b:b1:da:ac:99:44:fb:35:c7:fc:f6:86:fa: 4b:ce:7d:95:0b:d9:ff:f1:22:b2:bb:7f:09:cd:09: 84:01:cf:6d:72:86:25:06:bc:90:13:80:d9:c2:b3: e6:4e:46:35:9d:50:6f:d5:f4:e3:e7:a2:6c:ab:64: 28:2b:b2:e3:8c:53:82:11:86:70:83:21:d5:98:3d: 31:ad:74:3e:89:d0:c7:6f:d2:ab:7e:0f:16:4a:6f: a4:0a:09:1c:75:f2:1c:30:d0:4d:65:53:5d:3a:e2: b5:31:0a:a7:d7:bf:34:2c:be:b8:1e:04:0c:f5:11: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AF:C2:14:33:BE:89:40:33:90:EC:1C:FD:6D:FB:B4:7A:8D:DD:C1 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/SK_CFDO-iUAzkOwc_W37tHqN3cE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.91.136.0/23 Signature Algorithm: sha256WithRSAEncryption 80:88:be:ac:54:4b:c6:2f:ea:44:a0:02:07:79:e3:a9:e3:e8: 55:66:0f:47:14:6d:6f:97:29:31:1d:9b:a8:c8:b2:dc:09:56: c9:65:ef:47:5f:cc:16:19:31:49:73:71:50:43:ed:61:63:d4: 9b:e2:b7:be:c5:fa:30:59:e2:90:44:34:0f:e8:6b:25:b9:78: 17:20:0f:58:1d:e9:16:60:db:20:b4:0b:d7:cf:98:38:b2:b2: 38:3c:4b:af:04:8b:0f:57:47:c0:23:4c:ad:30:28:4f:21:7f: 5b:c7:42:ce:08:03:4f:b6:8c:50:00:9f:90:9d:3d:a7:fd:a2: 1d:b9:40:1a:96:12:4c:c7:69:1c:7f:25:45:a8:56:8a:7e:a2: 64:91:f6:14:a8:b7:4f:06:01:be:2d:72:34:b7:7b:c0:27:b8: 19:b5:b3:73:c6:c2:a1:97:0a:39:b7:ab:2a:f2:9e:58:88:9d: 38:68:da:ec:7c:02:c1:58:4d:07:e4:a4:90:9a:94:02:c4:3d: 93:d3:a8:0a:01:97:d1:9d:cc:ba:80:01:99:7c:27:6a:45:2b: 0f:45:c1:47:80:04:cf:8e:79:e5:e0:55:aa:b3:a5:26:a0:7e: 4c:de:a4:b9:00:49:87:58:4c:2d:d3:2b:14:35:44:8a:86:01: 4f:57:50:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUGQQoW8FK97huwc944sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGFmYzIxNDMzYmU4OTQwMzM5MGVjMWNmZDZkZmJiNDdhOGRkZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OrYjZRgyWoqpbGUpwIZZpZrjTns swYaxBaWdwKFvkn5tK9wO1kkzTkUlUtJPW70ulyBnFAuneCiCUoBM0YT1Vg6WPdQ drpdlVb2piEwlobDmFmMOpErAkQiL1j4lZnt1bG++K4R11/DvXfrU32XXB03wWBA 2OP+jcsIUAvNP+DqPwWlynTN8Vux2qyZRPs1x/z2hvpLzn2VC9n/8SKyu38JzQmE Ac9tcoYlBryQE4DZwrPmTkY1nVBv1fTj56Jsq2QoK7LjjFOCEYZwgyHVmD0xrXQ+ idDHb9Krfg8WSm+kCgkcdfIcMNBNZVNdOuK1MQqn1780LL64HgQM9RFqTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEivwhQzvolAM5DsHP1t+7R6jd3BMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvU0tfQ0ZETy1pVUF6a093Y19XMzd0SHFOM2NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1VuIMA0G CSqGSIb3DQEBCwUAA4IBAQCAiL6sVEvGL+pEoAIHeeOp4+hVZg9HFG1vlykxHZuo yLLcCVbJZe9HX8wWGTFJc3FQQ+1hY9Sb4re+xfowWeKQRDQP6GsluXgXIA9YHekW YNsgtAvXz5g4srI4PEuvBIsPV0fAI0ytMChPIX9bx0LOCANPtoxQAJ+QnT2n/aId uUAalhJMx2kcfyVFqFaKfqJkkfYUqLdPBgG+LXI0t3vAJ7gZtbNzxsKhlwo5t6sq 8p5YiJ04aNrsfALBWE0H5KSQmpQCxD2T06gKAZfRncy6gAGZfCdqRSsPRcFHgATP jnnl4FWqs6UmoH5M3qS5AEmHWEwt0ysUNUSKhgFPV1AC -----END CERTIFICATE-----Generated at Mon Jan 26 10:25:01 2026 by rpki-client