This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/cCLQDT_9t51iKlaGarf8PuI7ZuE.roa File: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (raw, json) Hash identifier: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8= Subject key identifier: 70:22:D0:0D:3F:FD:B7:9D:62:2A:56:86:6A:B7:FC:3E:E2:3B:66:E1 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019B7DCA409BF663EE4D68DA57C193015371 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/cCLQDT_9t51iKlaGarf8PuI7ZuE.roa Signing time: Fri 02 Jan 2026 08:19:25 +0000 ROA not before: Fri 02 Jan 2026 08:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39342 IP address blocks: 91.245.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:40:9b:f6:63:ee:4d:68:da:57:c1:93:01:53:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jan 2 08:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7022d00d3ffdb79d622a56866ab7fc3ee23b66e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:42:b7:b9:e5:70:32:34:72:77:23:f2:0d: 96:ef:94:07:b0:09:30:0a:11:18:05:17:d3:c8:73: 55:5e:30:ca:22:88:66:fe:c3:f2:bb:77:c4:98:55: fb:7c:26:e3:57:27:97:a8:f2:b7:b0:5b:4f:a2:82: e5:a6:aa:50:65:e4:62:7b:0e:43:22:dc:a6:f8:b8: 9e:96:74:8e:2b:05:59:81:7f:7c:26:cc:fe:e0:3a: 8c:96:92:cb:8d:5c:82:cb:8b:d9:03:92:ad:a9:13: f5:00:e8:df:29:8c:2c:d9:7a:3f:1c:9b:ed:45:f5: 31:51:24:99:95:3f:cf:a5:35:f3:75:3b:ea:d7:ec: b0:06:03:f3:b8:d7:20:56:6e:f8:59:b5:8a:58:12: c6:52:69:cf:a8:c8:34:6d:1d:43:a7:fa:25:7c:32: d3:cd:81:fb:34:0f:ca:39:cf:48:e1:9e:9f:dd:97: 0a:2f:ba:fe:ad:cd:85:46:c7:d3:03:85:20:5d:48: 1c:f6:7a:4f:1f:ef:71:5a:1d:a5:7a:06:af:56:18: de:0b:0b:81:d6:58:f2:c7:64:c1:8a:0c:ae:29:8f: 9a:a1:69:36:d4:46:b8:5c:66:2f:84:c1:a3:53:60: a4:8d:81:2e:ef:d6:f2:a6:b2:0e:87:11:07:6e:b0: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:22:D0:0D:3F:FD:B7:9D:62:2A:56:86:6A:B7:FC:3E:E2:3B:66:E1 X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/cCLQDT_9t51iKlaGarf8PuI7ZuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.232.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:62:36:90:b0:0f:1c:3d:03:51:69:5d:08:b4:a0:24:9c:6b: 64:f2:b6:f4:65:98:34:fc:5c:3b:ec:52:d9:af:67:f7:5e:b3: ad:3d:6b:4f:3f:19:01:1a:1e:72:39:b8:54:bd:d5:15:8d:ce: 88:36:cd:a2:b7:d3:20:3b:f1:32:1d:b8:0e:fc:e3:d9:60:ab: 8b:ef:d5:f7:9c:79:f1:41:d4:8c:12:cc:97:ee:04:5a:a4:ac: 95:d3:ca:b7:c1:d4:75:ee:0d:10:9b:4d:cb:cf:6f:6a:df:0a: 0a:a0:1e:94:75:2c:a1:c1:a2:09:14:d0:f6:00:34:f6:e2:b6: 35:3f:cf:f9:cc:62:32:76:9c:40:54:cb:3a:20:80:d3:7a:b6: a2:fc:33:c9:6c:fe:68:d2:48:23:ee:91:d7:e8:54:7e:14:11: 9d:bb:cf:65:f8:13:c3:c8:29:b1:f6:dc:0e:7a:c5:61:a0:d4: 65:46:7e:c5:2b:04:4c:70:2e:f4:d3:85:a2:98:9b:1e:5f:98: 13:cb:50:34:e7:f6:c7:ee:a9:eb:eb:1b:c4:5d:94:77:86:02: ef:2a:28:57:cb:0a:5a:cf:a0:15:4e:99:07:cb:32:f6:bc:90: 00:8d:1f:1a:85:60:e4:43:f8:15:f4:fd:6e:5b:33:f6:60:bd: f5:29:00:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykCb9mPuTWjaV8GTAVNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMTAyMDgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDIyZDAwZDNmZmRiNzlkNjIyYTU2ODY2YWI3ZmMzZWUyM2I2NmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC9Ct7nlcDI0cncj8g2W75QHsAkw ChEYBRfTyHNVXjDKIohm/sPyu3fEmFX7fCbjVyeXqPK3sFtPooLlpqpQZeRiew5D Itym+LielnSOKwVZgX98Jsz+4DqMlpLLjVyCy4vZA5KtqRP1AOjfKYws2Xo/HJvt RfUxUSSZlT/PpTXzdTvq1+ywBgPzuNcgVm74WbWKWBLGUmnPqMg0bR1Dp/olfDLT zYH7NA/KOc9I4Z6f3ZcKL7r+rc2FRsfTA4UgXUgc9npPH+9xWh2legavVhjeCwuB 1ljyx2TBigyuKY+aoWk21Ea4XGYvhMGjU2CkjYEu79byprIOhxEHbrD4zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAi0A0//bedYipWhmq3/D7iO2bhMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvY0NMUURUXzl0NTFpS2xhR2FyZjhQdUk3WnVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/XoMA0G CSqGSIb3DQEBCwUAA4IBAQALYjaQsA8cPQNRaV0ItKAknGtk8rb0ZZg0/Fw77FLZ r2f3XrOtPWtPPxkBGh5yObhUvdUVjc6INs2it9MgO/EyHbgO/OPZYKuL79X3nHnx QdSMEsyX7gRapKyV08q3wdR17g0Qm03Lz29q3woKoB6UdSyhwaIJFND2ADT24rY1 P8/5zGIydpxAVMs6IIDTerai/DPJbP5o0kgj7pHX6FR+FBGdu89l+BPDyCmx9twO esVhoNRlRn7FKwRMcC7004WimJseX5gTy1A05/bH7qnr6xvEXZR3hgLvKihXywpa z6AVTpkHyzL2vJAAjR8ahWDkQ/gV9P1uWzP2YL31KQD1 -----END CERTIFICATE-----Generated at Mon Jan 26 14:12:46 2026 by rpki-client