This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa File: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (raw, json) Hash identifier: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs= Subject key identifier: 70:C7:FD:8B:9B:90:FD:6F:30:E1:E6:25:3E:E0:AE:0C:65:69:2A:7C Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 019B78A37AA74978C6531E6035701F229421 Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa Signing time: Thu 01 Jan 2026 08:18:58 +0000 ROA not before: Thu 01 Jan 2026 08:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201340 IP address blocks: 194.170.8.0/24 maxlen: 24 194.170.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7a:a7:49:78:c6:53:1e:60:35:70:1f:22:94:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: Jan 1 08:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70c7fd8b9b90fd6f30e1e6253ee0ae0c65692a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d2:8e:2b:53:76:11:8b:d7:df:a1:9e:0b:f9: 70:3a:73:b4:d3:88:64:79:7f:90:38:20:6d:4b:87: d1:61:c6:82:53:d5:fe:a8:3b:51:29:4f:a9:60:be: 20:a8:2d:40:4d:5c:ec:d7:c1:c1:10:b5:78:24:96: 12:7f:49:d4:07:57:cc:fd:82:0a:43:09:1d:1f:2b: c7:3a:10:07:94:dd:0f:6d:4b:4e:7c:e8:5e:db:48: 59:c0:9a:72:9b:30:3f:c3:19:4d:25:9e:66:ab:05: ed:37:7e:9f:c9:55:0c:0b:92:06:d3:21:63:52:55: 46:15:12:84:b3:01:6d:79:3a:96:36:9e:52:6b:1c: 9e:8a:a7:09:cb:ae:d9:fd:46:54:6e:da:02:28:77: 54:e8:6c:23:5e:8c:b0:eb:73:84:96:54:9f:48:e6: 81:2d:56:36:d6:5b:96:b1:67:e0:0c:7b:54:da:2f: 63:40:26:78:38:e5:86:ec:9b:43:9a:ab:19:37:d1: 8c:ee:8f:20:06:b6:83:7b:78:98:1a:73:2f:40:57: 0c:df:90:5e:88:00:1a:e3:48:7d:dc:0d:f9:60:d9: 5f:81:08:de:d7:a2:c0:47:d3:71:99:bf:e5:22:0a: 9a:5d:f6:66:58:82:08:c7:de:c5:81:08:28:e1:87: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C7:FD:8B:9B:90:FD:6F:30:E1:E6:25:3E:E0:AE:0C:65:69:2A:7C X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.170.8.0/24 194.170.245.0/24 Signature Algorithm: sha256WithRSAEncryption 06:3b:2a:f1:f5:8e:74:9b:c5:0d:e6:79:43:8b:cd:17:3f:7b: 69:0c:24:14:2e:e9:71:a2:40:60:9f:6b:24:05:bf:fa:2d:73: 78:8b:91:8d:03:55:42:30:2b:30:ff:bc:29:19:d7:3d:a3:b0: 54:b6:48:b3:bc:d8:48:3e:9d:1d:b2:84:2a:03:9e:1e:e5:61: 46:f3:68:dc:d3:06:ac:cf:c8:f1:52:9f:36:59:79:44:34:b3: 44:c8:32:ec:66:20:49:5f:f5:aa:3a:4c:83:85:73:51:34:f9: 63:87:ce:2a:4e:7e:1b:17:6c:d0:b8:9a:5e:63:20:bf:89:9d: f8:c6:05:f5:db:08:8c:0e:e8:b9:9e:c5:4e:5b:c4:05:ed:b5: 76:c1:ab:ef:35:bf:68:a5:24:9f:d1:13:a0:d1:2d:c5:2e:e7: 3e:73:f9:17:ae:7d:4b:28:2c:71:a4:d8:f7:0c:7f:a7:36:7d: fb:92:8e:33:50:1c:82:d6:13:19:e1:c4:32:5a:93:60:cb:0b: ce:c8:5d:c7:f6:20:6f:d0:68:7b:d9:54:ac:08:c0:c5:cc:d3: de:17:58:90:d9:c1:9a:26:08:4d:51:3e:4f:9b:4a:8c:f5:a8: 8a:06:06:9a:ed:c9:ea:43:53:a3:89:0a:67:65:91:ee:4f:db: 09:85:97:fe -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o3qnSXjGUx5gNXAfIpQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjYwMTAxMDgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGM3ZmQ4YjliOTBmZDZmMzBlMWU2MjUzZWUwYWUwYzY1NjkyYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtKOK1N2EYvX36GeC/lwOnO004hk eX+QOCBtS4fRYcaCU9X+qDtRKU+pYL4gqC1ATVzs18HBELV4JJYSf0nUB1fM/YIK QwkdHyvHOhAHlN0PbUtOfOhe20hZwJpymzA/wxlNJZ5mqwXtN36fyVUMC5IG0yFj UlVGFRKEswFteTqWNp5SaxyeiqcJy67Z/UZUbtoCKHdU6GwjXoyw63OEllSfSOaB LVY21luWsWfgDHtU2i9jQCZ4OOWG7JtDmqsZN9GM7o8gBraDe3iYGnMvQFcM35Be iAAa40h93A35YNlfgQje16LAR9Nxmb/lIgqaXfZmWIIIx97FgQgo4YetCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHDH/YubkP1vMOHmJT7grgxlaSp8MB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvY01mOWk1dVFfVzh3NGVZbFB1Q3VER1ZwS253LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwqoIAwQA wqr1MA0GCSqGSIb3DQEBCwUAA4IBAQAGOyrx9Y50m8UN5nlDi80XP3tpDCQULulx okBgn2skBb/6LXN4i5GNA1VCMCsw/7wpGdc9o7BUtkizvNhIPp0dsoQqA54e5WFG 82jc0wasz8jxUp82WXlENLNEyDLsZiBJX/WqOkyDhXNRNPljh84qTn4bF2zQuJpe YyC/iZ34xgX12wiMDui5nsVOW8QF7bV2wavvNb9opSSf0ROg0S3FLuc+c/kXrn1L KCxxpNj3DH+nNn37ko4zUByC1hMZ4cQyWpNgywvOyF3H9iBv0Gh72VSsCMDFzNPe F1iQ2cGaJghNUT5Pm0qM9aiKBgaa7cnqQ1OjiQpnZZHuT9sJhZf+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:13 2026 by rpki-client