This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/CCfgr4eEdWWKXSmYk8750hTSQJY.roa File: CCfgr4eEdWWKXSmYk8750hTSQJY.roa (raw, json) Hash identifier: 28b5oMKVu7iwHMF/tBQt5wwDbO4pBQ9dtOPJ+Gi5j1E= Subject key identifier: 08:27:E0:AF:87:84:75:65:8A:5D:29:98:93:CE:F9:D2:14:D2:40:96 Certificate issuer: /CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Certificate serial: 019B7E38757F7D261C0AC561D380AE664228 Authority key identifier: 78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/CCfgr4eEdWWKXSmYk8750hTSQJY.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201027 IP address blocks: 185.238.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.mft rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:75:7f:7d:26:1c:0a:c5:61:d3:80:ae:66:42:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788f5b210f3c3eb42065960e85d061e9d9d63ab8 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0827e0af878475658a5d299893cef9d214d24096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3e:68:85:f9:9f:04:92:6f:17:73:9c:d1:d6: c8:f7:78:a6:1d:1c:df:38:33:d8:ca:c5:6c:6f:01: d9:3d:c4:21:7b:2e:f5:f6:35:df:77:a6:95:79:7e: 93:3d:58:90:39:95:76:0c:41:76:5d:e8:b4:28:c5: bb:bf:c6:44:83:9f:f0:9c:bc:9b:71:32:7d:fe:85: 89:10:38:f5:3e:86:c5:35:ad:70:27:ee:ca:b6:76: a9:5c:f5:a7:b3:ee:5c:d0:19:5f:95:30:c7:89:b0: bb:54:16:fd:c5:5f:7b:15:ac:d8:84:80:b9:72:fb: 5d:fd:29:d1:7e:24:38:dc:73:7e:c6:ba:df:b1:80: a4:13:9f:17:4a:41:73:65:db:b2:6e:b9:44:0b:a6: d8:7e:db:ca:44:bd:52:b8:b5:55:ba:94:e6:75:15: bd:01:3a:f4:8d:9e:6c:9e:2b:ef:b4:95:f0:a8:72: 75:83:96:5a:8f:1a:7f:f0:71:77:82:50:f7:f6:e4: 0c:98:d6:ee:47:b8:88:41:f2:17:b8:b7:9c:a9:59: 19:b2:66:cc:3c:d7:f3:12:36:59:30:cc:83:dc:c1: 2b:fb:11:b6:98:44:a8:c0:87:12:35:e8:40:80:4e: 4a:c9:0a:9b:10:b1:98:72:21:51:f6:46:2d:96:ca: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:27:E0:AF:87:84:75:65:8A:5D:29:98:93:CE:F9:D2:14:D2:40:96 X509v3 Authority Key Identifier: keyid:78:8F:5B:21:0F:3C:3E:B4:20:65:96:0E:85:D0:61:E9:D9:D6:3A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eI9bIQ88PrQgZZYOhdBh6dnWOrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/CCfgr4eEdWWKXSmYk8750hTSQJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e100b5-6f0a-4fe9-befb-c4acb8969c49/1/eI9bIQ88PrQgZZYOhdBh6dnWOrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.63.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:0e:11:3b:30:1f:e5:6b:18:dc:3b:66:62:6c:14:88:8a:96: e6:95:27:3d:4c:d9:ed:54:b1:cf:ca:27:25:9d:5e:f1:dc:ff: ce:09:ce:a7:fd:e9:ac:a0:e4:ee:fd:41:8c:69:bc:96:5e:3e: ad:26:a3:ac:87:06:89:fc:9d:07:ba:19:07:1f:35:34:12:77: 42:58:66:df:11:9b:c5:60:3c:77:7d:71:8f:e8:7d:db:1f:24: f3:af:6e:58:e4:e9:3f:83:e3:73:ed:b3:9b:eb:ef:6c:dc:cb: c2:9c:f6:cc:65:f2:46:df:b5:e1:f4:fd:7f:1a:30:0d:08:c8: a1:72:87:79:37:8a:9d:0f:e4:f7:53:cd:6c:69:16:7d:3d:bb: b9:1c:4e:c4:74:b4:f9:2d:4a:3c:8f:e3:ea:d4:2d:14:23:62: 29:fc:bd:2f:07:45:45:bc:e4:6d:b7:2a:cf:64:df:0d:af:6d: e1:d0:0a:2d:84:4f:dd:f0:aa:15:da:dc:ed:8e:58:d1:5f:3d: 54:56:bb:ed:8a:e2:f2:39:dd:d9:f7:07:71:94:5a:05:52:64: 14:0d:3b:5f:79:a8:aa:34:de:49:31:31:7c:8c:40:f7:29:82: 42:6c:9b:c3:0d:e6:00:71:55:61:5b:fa:d6:08:13:28:04:b2: 98:9e:16:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHV/fSYcCsVh04CuZkIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OGY1YjIxMGYzYzNlYjQyMDY1OTYwZTg1ZDA2MWU5ZDlk NjNhYjgwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODI3ZTBhZjg3ODQ3NTY1OGE1ZDI5OTg5M2NlZjlkMjE0ZDI0MDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj5ohfmfBJJvF3Oc0dbI93imHRzf ODPYysVsbwHZPcQhey719jXfd6aVeX6TPViQOZV2DEF2Xei0KMW7v8ZEg5/wnLyb cTJ9/oWJEDj1PobFNa1wJ+7KtnapXPWns+5c0BlflTDHibC7VBb9xV97FazYhIC5 cvtd/SnRfiQ43HN+xrrfsYCkE58XSkFzZduybrlEC6bYftvKRL1SuLVVupTmdRW9 ATr0jZ5snivvtJXwqHJ1g5Zajxp/8HF3glD39uQMmNbuR7iIQfIXuLecqVkZsmbM PNfzEjZZMMyD3MEr+xG2mESowIcSNehAgE5KyQqbELGYciFR9kYtlsq1vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAgn4K+HhHVlil0pmJPO+dIU0kCWMB8GA1UdIwQY MBaAFHiPWyEPPD60IGWWDoXQYenZ1jq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmIt YzRhY2I4OTY5YzQ5LzEvQ0NmZ3I0ZUVkV1dLWFNtWWs4NzUwaFRTUUpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lMTAwYjUtNmYwYS00ZmU5LWJlZmItYzRhY2I4OTY5YzQ5 LzEvZUk5YklRODhQclFnWlpZT2hkQmg2ZG5XT3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue4/MA0G CSqGSIb3DQEBCwUAA4IBAQAuDhE7MB/laxjcO2ZibBSIipbmlSc9TNntVLHPyicl nV7x3P/OCc6n/emsoOTu/UGMabyWXj6tJqOshwaJ/J0HuhkHHzU0EndCWGbfEZvF YDx3fXGP6H3bHyTzr25Y5Ok/g+Nz7bOb6+9s3MvCnPbMZfJG37Xh9P1/GjANCMih cod5N4qdD+T3U81saRZ9Pbu5HE7EdLT5LUo8j+Pq1C0UI2Ip/L0vB0VFvORttyrP ZN8Nr23h0AothE/d8KoV2tztjljRXz1UVrvtiuLyOd3Z9wdxlFoFUmQUDTtfeaiq NN5JMTF8jED3KYJCbJvDDeYAcVVhW/rWCBMoBLKYnhYz -----END CERTIFICATE-----Generated at Tue Jan 27 06:05:30 2026 by rpki-client