This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa File: cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa (raw, json) Hash identifier: N0d6jFAymHdRViLXYwxHMPIvLpjH51TdzFY5Ek5D56g= Subject key identifier: 72:90:4B:7D:55:5B:1B:60:60:E1:30:3B:ED:4C:D3:E5:58:E1:81:11 Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61 Certificate serial: 019B79108132D6D079207B5889662EFBD9FE Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15422 IP address blocks: 193.104.231.0/24 maxlen: 24 195.24.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:81:32:d6:d0:79:20:7b:58:89:66:2e:fb:d9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61 Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72904b7d555b1b6060e1303bed4cd3e558e18111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:48:7f:f3:5a:9d:de:bd:d4:08:46:50:df:a7: f4:07:3b:f3:7f:e2:3b:da:be:83:27:1f:62:ba:69: 29:1e:b3:29:f8:8d:a9:e2:13:f4:c0:3c:d6:db:51: 3c:4e:8f:4c:2d:ce:d7:03:d0:e6:7a:40:8a:75:0c: e5:8c:06:67:52:c0:a9:fd:07:54:b3:66:5c:5c:e4: 76:da:3a:8c:ab:22:88:2a:34:b7:45:d6:6d:73:1c: 37:f1:90:9a:d6:e5:4f:7f:34:61:92:18:3d:d6:34: 21:2e:5a:1f:06:cb:ba:6f:85:05:7e:a9:8a:15:f9: 2e:17:67:8e:91:dd:a9:34:38:ee:3d:be:f0:82:c6: ea:2a:61:34:9a:ba:bb:64:cc:1f:53:e5:d0:03:01: ca:1a:5a:5e:b8:6b:0d:6c:e1:7b:79:b2:d4:1e:de: d9:a8:a1:6f:a4:3b:34:6a:30:76:91:dc:95:f7:8e: 90:88:b1:a5:64:4e:0f:eb:32:f4:c2:fe:5c:4b:89: d8:fe:9c:6a:83:49:22:0f:d9:9a:89:d1:9c:50:ab: 21:46:25:ee:d4:8f:dd:c1:0a:77:da:84:29:5d:04: 13:6e:24:38:60:b1:9c:ee:49:f0:89:b4:6d:41:ad: cc:9a:a8:ee:4e:4e:64:a2:12:79:0d:8e:e4:f3:e6: cb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:90:4B:7D:55:5B:1B:60:60:E1:30:3B:ED:4C:D3:E5:58:E1:81:11 X509v3 Authority Key Identifier: keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/cpBLfVVbG2Bg4TA77UzT5VjhgRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.231.0/24 195.24.246.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:1e:10:a1:85:35:36:54:f0:2e:61:e2:9e:df:94:fe:bd:f8: 0d:06:24:f0:4f:bc:ff:6e:df:c2:1b:f5:b0:b0:56:9e:be:40: 1c:b1:48:de:9e:76:12:83:ca:f6:96:ad:d1:96:60:19:ca:e8: f5:8c:4d:d2:8f:4f:b9:a9:aa:0e:77:a6:77:aa:f3:07:29:a5: b0:1a:b5:75:c5:18:b5:b0:32:21:8d:f1:23:59:c2:3b:d4:32: d2:d8:d5:66:e3:72:31:0b:74:c5:c5:ef:c4:ad:50:79:8e:41: 1b:a8:72:75:72:ab:cd:4c:30:32:4e:5d:87:1e:6a:fd:a2:cf: 3e:5a:de:25:83:15:b7:b5:7b:35:0f:07:0f:b4:6c:0d:49:61: dd:bc:4d:01:94:50:d7:bf:b2:1c:31:b1:79:55:d5:6c:b0:98: 82:40:ac:c2:e6:fa:29:0c:b9:c6:9c:02:a9:d5:dd:a1:d6:53: 81:7f:9c:f1:7f:c7:ee:fd:d2:15:51:d0:42:1f:be:ab:04:d7: 59:81:19:f3:26:f8:b3:23:fd:95:7d:8d:cd:08:b9:f5:f6:5e: 86:e5:06:5f:c3:4c:e5:c6:2a:4a:d3:85:fc:6d:ac:43:1f:38: 1c:3f:dc:4a:00:2e:01:32:5c:16:a9:02:b4:0b:55:9c:fc:88: fb:86:b7:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EIEy1tB5IHtYiWYu+9n+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm MDRmNjEwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjkwNGI3ZDU1NWIxYjYwNjBlMTMwM2JlZDRjZDNlNTU4ZTE4MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkh/81qd3r3UCEZQ36f0Bzvzf+I7 2r6DJx9iumkpHrMp+I2p4hP0wDzW21E8To9MLc7XA9DmekCKdQzljAZnUsCp/QdU s2ZcXOR22jqMqyKIKjS3RdZtcxw38ZCa1uVPfzRhkhg91jQhLlofBsu6b4UFfqmK FfkuF2eOkd2pNDjuPb7wgsbqKmE0mrq7ZMwfU+XQAwHKGlpeuGsNbOF7ebLUHt7Z qKFvpDs0ajB2kdyV946QiLGlZE4P6zL0wv5cS4nY/pxqg0kiD9maidGcUKshRiXu 1I/dwQp32oQpXQQTbiQ4YLGc7knwibRtQa3MmqjuTk5kohJ5DY7k8+bLKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHKQS31VWxtgYOEwO+1M0+VY4YERMB8GA1UdIwQY MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt MTcxZDlmMmNjZTNkLzEvY3BCTGZWVmJHMkJnNFRBNzdVelQ1VmpoZ1JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWjnAwQB wxj2MA0GCSqGSIb3DQEBCwUAA4IBAQCaHhChhTU2VPAuYeKe35T+vfgNBiTwT7z/ bt/CG/WwsFaevkAcsUjennYSg8r2lq3RlmAZyuj1jE3Sj0+5qaoOd6Z3qvMHKaWw GrV1xRi1sDIhjfEjWcI71DLS2NVm43IxC3TFxe/ErVB5jkEbqHJ1cqvNTDAyTl2H Hmr9os8+Wt4lgxW3tXs1DwcPtGwNSWHdvE0BlFDXv7IcMbF5VdVssJiCQKzC5vop DLnGnAKp1d2h1lOBf5zxf8fu/dIVUdBCH76rBNdZgRnzJvizI/2VfY3NCLn19l6G 5QZfw0zlxipK04X8baxDHzgcP9xKAC4BMlwWqQK0C1Wc/Ij7hrff -----END CERTIFICATE-----Generated at Sat Feb 7 16:30:21 2026 by rpki-client