This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/cEnFQpKL_n3Pi1rsfRDV7oBVtt0.roa File: cEnFQpKL_n3Pi1rsfRDV7oBVtt0.roa (raw, json) Hash identifier: FYYQsqM4KNdf8MSB3ff4z41RrQKEvyE2KHfpzGu82Ow= Subject key identifier: 70:49:C5:42:92:8B:FE:7D:CF:8B:5A:EC:7D:10:D5:EE:80:55:B6:DD Certificate issuer: /CN=c9b232958097b5863eafd047bb315171eaa01fb7 Certificate serial: 019B7DCACC8AD3EBE4446A39C3A74B8EAF2E Authority key identifier: C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/cEnFQpKL_n3Pi1rsfRDV7oBVtt0.roa Signing time: Fri 02 Jan 2026 08:20:01 +0000 ROA not before: Fri 02 Jan 2026 08:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42890 IP address blocks: 178.255.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.mft rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:cc:8a:d3:eb:e4:44:6a:39:c3:a7:4b:8e:af:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b232958097b5863eafd047bb315171eaa01fb7 Validity Not Before: Jan 2 08:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7049c542928bfe7dcf8b5aec7d10d5ee8055b6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:bb:ff:66:45:26:a7:2d:db:c7:4d:62:09: 41:44:70:fd:49:64:8c:74:fc:85:69:1a:1d:b6:e6: 07:f7:5c:cc:79:af:9e:f5:ff:fa:b9:e1:34:6f:ed: ee:2f:c9:40:c9:c5:0a:73:00:7b:ea:2a:20:d1:1c: bb:29:98:64:a5:58:4a:22:45:a4:c7:02:7a:f9:72: 50:a2:67:37:93:18:6c:be:3a:4c:c4:e9:01:fe:81: 40:3c:94:bb:1c:69:9e:3a:44:63:73:fc:f1:57:09: bf:24:20:f0:34:b7:cc:26:74:b2:95:f6:55:c2:17: 26:80:c2:13:d6:52:1d:2e:0b:3b:21:78:8f:4b:09: de:60:8a:59:70:52:de:4c:ae:fa:d6:33:81:c8:6e: 6e:85:be:88:a5:00:d7:83:7a:1c:51:8a:85:8b:71: 03:09:61:5a:cd:1c:77:3a:dc:6d:dc:c6:73:34:03: f7:47:47:df:c2:21:74:3a:6d:01:7d:e3:8d:e6:d7: 61:9a:9b:ba:1d:8d:78:07:87:1f:70:8b:2c:f9:5e: ef:2e:e5:64:fe:9f:24:92:2e:f5:8b:15:a2:b5:45: 64:55:7b:9c:7e:8d:ed:81:c8:39:7b:e9:c6:d3:d8: 7f:42:2d:0b:ec:40:c5:72:1d:86:cd:ad:26:b5:27: 76:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:49:C5:42:92:8B:FE:7D:CF:8B:5A:EC:7D:10:D5:EE:80:55:B6:DD X509v3 Authority Key Identifier: keyid:C9:B2:32:95:80:97:B5:86:3E:AF:D0:47:BB:31:51:71:EA:A0:1F:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybIylYCXtYY-r9BHuzFRceqgH7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/cEnFQpKL_n3Pi1rsfRDV7oBVtt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f35432-cf99-4f19-a76e-07b7fef0858f/1/ybIylYCXtYY-r9BHuzFRceqgH7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.32.0/22 Signature Algorithm: sha256WithRSAEncryption 62:a1:f2:1e:89:a6:ff:63:72:78:9f:40:4b:d9:8c:f5:f8:19: ef:09:ca:e6:3a:10:01:d5:6c:77:9e:f9:e0:92:43:1c:49:00: 37:15:26:7d:52:cf:7a:cd:1d:24:72:c3:f8:38:80:6f:b7:9b: e7:4b:04:3c:8e:0f:bb:2e:e3:f0:3b:b9:16:1a:09:28:1b:98: 7f:56:d7:17:d1:42:b7:e6:dd:16:16:95:04:f1:28:f2:c7:4e: 58:89:99:de:c6:39:da:6e:cb:3b:92:80:eb:ec:e9:e9:68:cc: 22:68:ac:51:2d:8f:ec:2b:71:89:15:77:1b:98:00:80:d5:81: 8f:50:c6:34:a6:f5:e5:01:6c:10:c1:3a:ee:47:ee:11:1e:cf: 3b:cd:88:8d:e7:6f:f4:fe:db:d0:ec:aa:4c:49:71:36:8f:20: 15:11:ed:e3:40:a1:06:8f:e3:8d:70:bc:06:fe:e4:7b:ea:ce: 26:7c:de:dd:d7:d9:77:f7:a0:e5:f5:ea:23:54:1b:90:f5:99: 8a:24:6a:e8:8e:73:ba:17:f7:c2:d1:d0:a4:8e:11:fb:36:aa: 3c:cd:56:bd:80:78:ad:da:9e:aa:0f:f4:5b:b4:a8:c0:5c:cc: 9d:ca:87:e0:7a:85:2b:bd:16:53:f5:00:7a:bd:38:55:7a:de: 5f:1f:e8:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ysyK0+vkRGo5w6dLjq8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjIzMjk1ODA5N2I1ODYzZWFmZDA0N2JiMzE1MTcxZWFh MDFmYjcwHhcNMjYwMTAyMDgyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDQ5YzU0MjkyOGJmZTdkY2Y4YjVhZWM3ZDEwZDVlZTgwNTViNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpS7/2ZFJqct28dNYglBRHD9SWSM dPyFaRodtuYH91zMea+e9f/6ueE0b+3uL8lAycUKcwB76iog0Ry7KZhkpVhKIkWk xwJ6+XJQomc3kxhsvjpMxOkB/oFAPJS7HGmeOkRjc/zxVwm/JCDwNLfMJnSylfZV whcmgMIT1lIdLgs7IXiPSwneYIpZcFLeTK761jOByG5uhb6IpQDXg3ocUYqFi3ED CWFazRx3Otxt3MZzNAP3R0ffwiF0Om0BfeON5tdhmpu6HY14B4cfcIss+V7vLuVk /p8kki71ixWitUVkVXucfo3tgcg5e+nG09h/Qi0L7EDFch2Gza0mtSd2UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBJxUKSi/59z4ta7H0Q1e6AVbbdMB8GA1UdIwQY MBaAFMmyMpWAl7WGPq/QR7sxUXHqoB+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUt MDdiN2ZlZjA4NThmLzEvY0VuRlFwS0xfbjNQaTFyc2ZSRFY3b0JWdHQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMzU0MzItY2Y5OS00ZjE5LWE3NmUtMDdiN2ZlZjA4NThm LzEveWJJeWxZQ1h0WVktcjlCSHV6RlJjZXFnSDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsv8gMA0G CSqGSIb3DQEBCwUAA4IBAQBiofIeiab/Y3J4n0BL2Yz1+BnvCcrmOhAB1Wx3nvng kkMcSQA3FSZ9Us96zR0kcsP4OIBvt5vnSwQ8jg+7LuPwO7kWGgkoG5h/VtcX0UK3 5t0WFpUE8Sjyx05YiZnexjnabss7koDr7OnpaMwiaKxRLY/sK3GJFXcbmACA1YGP UMY0pvXlAWwQwTruR+4RHs87zYiN52/0/tvQ7KpMSXE2jyAVEe3jQKEGj+ONcLwG /uR76s4mfN7d19l396Dl9eojVBuQ9ZmKJGrojnO6F/fC0dCkjhH7Nqo8zVa9gHit 2p6qD/RbtKjAXMydyofgeoUrvRZT9QB6vThVet5fH+j2 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:07 2026 by rpki-client