This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/CAK35QTuEq8p5pMHpRsy6hrVFwE.roa File: CAK35QTuEq8p5pMHpRsy6hrVFwE.roa (raw, json) Hash identifier: 8N51l78zHWxXNaX9bCrXu1hYb7x2qMh5r0r2xumunCQ= Subject key identifier: 08:02:B7:E5:04:EE:12:AF:29:E6:93:07:A5:1B:32:EA:1A:D5:17:01 Certificate issuer: /CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5 Certificate serial: 019B7EA68FFB7F31BB870BE8CC1F3E9F6995 Authority key identifier: FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/CAK35QTuEq8p5pMHpRsy6hrVFwE.roa Signing time: Fri 02 Jan 2026 12:20:03 +0000 ROA not before: Fri 02 Jan 2026 12:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8560 IP address blocks: 194.156.84.0/24 maxlen: 24 194.156.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.mft rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:8f:fb:7f:31:bb:87:0b:e8:cc:1f:3e:9f:69:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc4b8573ca0ebb478e008f70afa08ae58b7869a5 Validity Not Before: Jan 2 12:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0802b7e504ee12af29e69307a51b32ea1ad51701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:1c:27:55:73:38:03:93:4c:c9:cc:bb:51: 58:06:ac:25:a9:f9:d2:97:c1:fc:9a:82:80:b6:40: a9:e4:fc:6c:58:4a:2f:bf:20:18:7c:87:55:46:a8: f5:95:4d:a7:cb:1f:0e:15:20:8b:89:3d:82:0b:63: 57:33:27:18:44:4b:47:cd:70:9d:99:be:20:17:26: 37:e7:ef:e8:77:ed:3c:51:34:06:6a:e2:eb:2d:40: 28:ca:a4:5b:e5:d5:da:a1:6d:c4:06:96:25:79:95: 45:e2:99:66:9d:31:ae:c2:43:13:35:44:cf:dd:7a: f9:bf:0b:14:9a:25:50:d9:2c:62:97:df:f6:19:0c: f2:0d:1a:c3:40:c8:f8:f7:4d:b7:ad:82:7e:4c:56: 41:a4:7d:c2:2d:f8:3f:76:ea:75:e9:4e:99:f1:5c: 5b:15:6d:53:42:87:0b:79:62:13:02:8a:44:df:53: c7:4b:13:c2:6c:8b:8b:67:14:83:68:61:d6:f8:05: 6f:48:b6:94:3a:dc:00:a0:f9:df:0c:fc:2a:81:b1: 9a:00:42:8a:ea:63:d2:42:77:58:d1:80:c8:51:82: eb:ee:42:1a:9f:d0:3d:b9:6d:fc:91:72:f0:a8:01: 15:8d:e7:d1:43:b6:58:1b:ee:f6:2b:f4:f5:70:b1: 63:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:02:B7:E5:04:EE:12:AF:29:E6:93:07:A5:1B:32:EA:1A:D5:17:01 X509v3 Authority Key Identifier: keyid:FC:4B:85:73:CA:0E:BB:47:8E:00:8F:70:AF:A0:8A:E5:8B:78:69:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/CAK35QTuEq8p5pMHpRsy6hrVFwE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e892a1-cb5d-41d2-9078-a3900ff45451/1/_EuFc8oOu0eOAI9wr6CK5Yt4aaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.84.0/23 Signature Algorithm: sha256WithRSAEncryption b9:36:10:54:15:e4:15:2d:72:ae:62:b8:ee:1a:cf:42:bd:9b: 9a:16:a8:15:1e:a8:fe:e2:58:fd:6a:7d:db:c2:d7:e2:be:d0: 1e:14:7c:e0:1e:f7:41:2d:e0:12:cb:ac:cb:5d:de:4b:bc:43: 45:0c:8d:94:c0:97:ec:ce:3d:c2:44:0c:5c:be:98:fb:d0:f5: 64:d7:9d:4d:5b:92:df:17:de:d5:b7:05:51:4d:0f:5d:ca:09: d1:c5:d3:1c:26:33:f1:07:95:83:96:ca:8f:47:fc:5d:c4:c6: c6:f1:2c:35:68:d1:4d:46:61:92:80:98:f1:ee:7c:15:95:da: 93:2b:42:bf:e1:d5:e4:84:d8:29:0c:28:02:70:8a:1c:ef:ba: 3b:f4:65:9a:3d:fa:a1:ec:c3:06:1e:2f:e4:b3:3f:19:fc:ff: a7:44:a6:16:af:0c:d0:df:63:42:e7:27:07:dd:db:59:2a:f0: 22:f1:fd:2c:6e:ff:05:88:28:ce:1f:08:9e:fd:be:68:cb:ac: ee:eb:4b:c9:1f:0c:da:0d:0b:c2:4d:a5:2d:63:da:f8:3a:2d: 67:90:d2:82:9d:02:b3:7d:f7:b7:0a:fe:0e:b0:13:a7:84:ff: 5c:0a:20:20:8e:9b:5b:05:8a:0d:15:d5:26:cb:bc:3a:36:c6: 45:fd:b5:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+po/7fzG7hwvozB8+n2mVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNGI4NTczY2EwZWJiNDc4ZTAwOGY3MGFmYTA4YWU1OGI3 ODY5YTUwHhcNMjYwMTAyMTIyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODAyYjdlNTA0ZWUxMmFmMjllNjkzMDdhNTFiMzJlYTFhZDUxNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYQcJ1VzOAOTTMnMu1FYBqwlqfnS l8H8moKAtkCp5PxsWEovvyAYfIdVRqj1lU2nyx8OFSCLiT2CC2NXMycYREtHzXCd mb4gFyY35+/od+08UTQGauLrLUAoyqRb5dXaoW3EBpYleZVF4plmnTGuwkMTNUTP 3Xr5vwsUmiVQ2Sxil9/2GQzyDRrDQMj49023rYJ+TFZBpH3CLfg/dup16U6Z8Vxb FW1TQocLeWITAopE31PHSxPCbIuLZxSDaGHW+AVvSLaUOtwAoPnfDPwqgbGaAEKK 6mPSQndY0YDIUYLr7kIan9A9uW38kXLwqAEVjefRQ7ZYG+72K/T1cLFjtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgCt+UE7hKvKeaTB6UbMuoa1RcBMB8GA1UdIwQY MBaAFPxLhXPKDrtHjgCPcK+giuWLeGmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0V1RmM4b091MGVPQUk5d3I2Q0s1WXQ0YWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9lODkyYTEtY2I1ZC00MWQyLTkwNzgt YTM5MDBmZjQ1NDUxLzEvQ0FLMzVRVHVFcThwNXBNSHBSc3k2aHJWRndFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9lODkyYTEtY2I1ZC00MWQyLTkwNzgtYTM5MDBmZjQ1NDUx LzEvX0V1RmM4b091MGVPQUk5d3I2Q0s1WXQ0YWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpxUMA0G CSqGSIb3DQEBCwUAA4IBAQC5NhBUFeQVLXKuYrjuGs9CvZuaFqgVHqj+4lj9an3b wtfivtAeFHzgHvdBLeASy6zLXd5LvENFDI2UwJfszj3CRAxcvpj70PVk151NW5Lf F97VtwVRTQ9dygnRxdMcJjPxB5WDlsqPR/xdxMbG8Sw1aNFNRmGSgJjx7nwVldqT K0K/4dXkhNgpDCgCcIoc77o79GWaPfqh7MMGHi/ksz8Z/P+nRKYWrwzQ32NC5ycH 3dtZKvAi8f0sbv8FiCjOHwie/b5oy6zu60vJHwzaDQvCTaUtY9r4Oi1nkNKCnQKz ffe3Cv4OsBOnhP9cCiAgjptbBYoNFdUmy7w6NsZF/bXq -----END CERTIFICATE-----Generated at Tue Jan 27 16:05:12 2026 by rpki-client