This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/cnqrVuurtzefRH7SXfJZEmIqN0c.roa File: cnqrVuurtzefRH7SXfJZEmIqN0c.roa (raw, json) Hash identifier: Vh3D8b6qjUnsJyNx9UNrDRqqXIGsiNFhU3lLE/75w7s= Subject key identifier: 72:7A:AB:56:EB:AB:B7:37:9F:44:7E:D2:5D:F2:59:12:62:2A:37:47 Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb Certificate serial: 019B7EA5855E693F15BA86D0ACE19FCFAAAE Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/cnqrVuurtzefRH7SXfJZEmIqN0c.roa Signing time: Fri 02 Jan 2026 12:18:55 +0000 ROA not before: Fri 02 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57837 IP address blocks: 84.201.98.0/24 maxlen: 24 2a00:1348:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.mft rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:85:5e:69:3f:15:ba:86:d0:ac:e1:9f:cf:aa:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb Validity Not Before: Jan 2 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=727aab56ebabb7379f447ed25df25912622a3747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:26:fb:26:96:45:96:f4:80:4a:02:21:e8: b6:9e:ea:e5:a4:ae:18:ee:22:52:8d:d8:a8:59:f7: d7:80:48:ea:2c:2b:31:5b:39:5b:88:98:54:55:eb: cc:e0:c8:8b:b5:35:f9:18:5e:3e:7b:80:71:12:1d: a3:76:18:02:33:59:19:b6:f6:ef:10:25:7f:1b:e9: 60:19:26:97:90:05:fa:32:24:08:2b:b0:f5:69:d1: b1:fb:f8:ac:e6:26:41:35:b9:05:9c:ba:97:05:e7: 36:59:79:f3:d2:1b:af:d2:1e:10:a5:49:73:a0:f0: 36:f0:54:2a:05:df:54:cd:92:88:f2:ee:a9:93:5f: 99:81:30:6b:a2:28:1a:62:dc:44:ed:a9:3b:88:3a: 1c:dc:4b:5c:07:65:a5:f4:7e:77:47:5d:fa:46:6b: 27:a7:5f:9c:a7:7e:66:21:41:b1:01:f7:81:cb:f9: 98:05:0e:91:fc:25:db:6c:4b:a0:1d:e3:13:e6:db: 85:be:10:bc:fe:e8:d6:2d:e2:98:65:93:dd:1e:af: a3:80:ae:6a:d4:5a:2a:5b:72:9d:e8:f0:04:45:9c: 82:35:c0:88:40:b8:c4:6c:ae:f2:b6:10:d8:8e:de: 50:81:95:dd:74:b2:e4:56:a7:9c:de:26:dd:94:e1: 80:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7A:AB:56:EB:AB:B7:37:9F:44:7E:D2:5D:F2:59:12:62:2A:37:47 X509v3 Authority Key Identifier: keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/cnqrVuurtzefRH7SXfJZEmIqN0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.201.98.0/24 IPv6: 2a00:1348:10::/48 Signature Algorithm: sha256WithRSAEncryption 89:e4:50:38:4a:a0:58:e7:81:e7:5d:e6:60:39:12:2b:87:b2: 7c:d2:3f:ce:ea:93:2a:ef:8a:e1:f7:47:82:8e:ae:3b:85:07: 86:80:38:cc:a3:ef:ea:51:3e:05:dc:8a:e1:54:15:49:88:3a: 20:5a:32:9e:bb:48:08:63:83:78:f3:e0:a4:d3:a0:16:78:2c: 5b:63:20:38:d1:fe:49:2c:41:6d:e0:05:57:c6:9b:e8:9c:41: 7c:4f:80:21:10:15:58:49:74:53:fb:5f:8d:64:2e:71:36:d4: 57:6b:9e:2d:d5:87:db:e9:ae:d6:9c:44:a2:68:10:b1:21:00: 37:df:de:89:57:b8:2c:51:de:b8:4b:15:0b:58:08:33:8d:01: c9:95:44:8e:82:6a:95:5b:a2:62:6a:b3:a0:ee:12:54:bd:da: 15:2b:77:4c:4b:5c:16:0b:6a:4c:71:d7:e2:c3:75:d6:95:d2: ce:d1:0f:84:b6:32:ab:d9:28:8e:15:29:6a:6c:c1:56:47:25: 53:d6:e9:21:df:82:db:f3:d4:5f:68:e0:27:10:20:98:a0:92: 95:7d:82:8f:c9:f4:98:73:f9:13:2f:6a:fc:a1:d0:76:b2:12: dd:4b:11:86:d3:20:f8:42:b3:d2:5c:03:aa:f3:a4:e0:f6:78: c1:65:54:99 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pYVeaT8VuobQrOGfz6quMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNjMyZWRiNjM1YWE4ZjljNDBhMDQ5NWE3YTYzYmI2NTM5 NTgwYmIwHhcNMjYwMTAyMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjdhYWI1NmViYWJiNzM3OWY0NDdlZDI1ZGYyNTkxMjYyMmEzNzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2Qm+yaWRZb0gEoCIei2nurlpK4Y 7iJSjdioWffXgEjqLCsxWzlbiJhUVevM4MiLtTX5GF4+e4BxEh2jdhgCM1kZtvbv ECV/G+lgGSaXkAX6MiQIK7D1adGx+/is5iZBNbkFnLqXBec2WXnz0huv0h4QpUlz oPA28FQqBd9UzZKI8u6pk1+ZgTBroigaYtxE7ak7iDoc3EtcB2Wl9H53R136Rmsn p1+cp35mIUGxAfeBy/mYBQ6R/CXbbEugHeMT5tuFvhC8/ujWLeKYZZPdHq+jgK5q 1FoqW3Kd6PAERZyCNcCIQLjEbK7ythDYjt5QgZXddLLkVqec3ibdlOGAoQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHJ6q1brq7c3n0R+0l3yWRJiKjdHMB8GA1UdIwQY MBaAFJtjLttjWqj5xAoElaemO7ZTlYC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUt ZThjOWFkNWYwNTFhLzEvY25xclZ1dXJ0emVmUkg3U1hmSlpFbUlxTjBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9kMDI5ODMtYjExYy00YmY3LWI0YjUtZThjOWFkNWYwNTFh LzEvbTJNdTIyTmFxUG5FQ2dTVnA2WTd0bE9WZ0xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAVMliMA8E AgACMAkDBwAqABNIABAwDQYJKoZIhvcNAQELBQADggEBAInkUDhKoFjngedd5mA5 EiuHsnzSP87qkyrviuH3R4KOrjuFB4aAOMyj7+pRPgXciuFUFUmIOiBaMp67SAhj g3jz4KTToBZ4LFtjIDjR/kksQW3gBVfGm+icQXxPgCEQFVhJdFP7X41kLnE21Fdr ni3Vh9vprtacRKJoELEhADff3olXuCxR3rhLFQtYCDONAcmVRI6CapVbomJqs6Du ElS92hUrd0xLXBYLakxx1+LDddaV0s7RD4S2MqvZKI4VKWpswVZHJVPW6SHfgtvz 1F9o4CcQIJigkpV9go/J9Jhz+RMvavyh0HayEt1LEYbTIPhCs9JcA6rzpOD2eMFl VJk= -----END CERTIFICATE-----Generated at Mon Feb 9 18:37:53 2026 by rpki-client