This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/Cnqe5cv9mrso-CM_LT3GA2G_6-Y.roa File: Cnqe5cv9mrso-CM_LT3GA2G_6-Y.roa (raw, json) Hash identifier: srt7eXLyW2rW7dmcsFP38hUiNjRVW1d3X72WjScYtng= Subject key identifier: 0A:7A:9E:E5:CB:FD:9A:BB:28:F8:23:3F:2D:3D:C6:03:61:BF:EB:E6 Certificate issuer: /CN=9bc350bc613d05de910a8da26c91c297171078b6 Certificate serial: 019B7F15AAFD383B8595A7EA341E863442FF Authority key identifier: 9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/Cnqe5cv9mrso-CM_LT3GA2G_6-Y.roa Signing time: Fri 02 Jan 2026 14:21:24 +0000 ROA not before: Fri 02 Jan 2026 14:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44424 IP address blocks: 92.43.56.0/21 maxlen: 24 92.43.56.0/22 maxlen: 22 92.43.60.0/22 maxlen: 22 92.43.62.0/23 maxlen: 23 2a03:76e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.mft rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:aa:fd:38:3b:85:95:a7:ea:34:1e:86:34:42:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc350bc613d05de910a8da26c91c297171078b6 Validity Not Before: Jan 2 14:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a7a9ee5cbfd9abb28f8233f2d3dc60361bfebe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:a0:d0:da:9f:cd:5f:0f:21:01:43:30:65: 06:34:e0:f1:5b:58:a3:64:ba:96:f1:cb:4e:d7:6d: bc:45:76:93:9b:7c:a2:7f:a6:1e:de:b7:03:bc:7d: 37:a8:92:57:57:0a:63:b2:5c:7a:de:05:9f:03:a8: 4c:45:fe:34:8d:61:10:d1:0c:38:a2:be:9a:b2:a5: 81:c0:26:bd:77:6f:c4:8a:71:14:24:36:6b:14:58: a2:7f:36:f7:27:aa:40:89:5b:2e:ef:12:43:90:a8: 67:b2:5e:13:4e:17:03:a7:05:4c:b8:c7:26:47:0f: 0d:aa:53:97:27:f9:27:1d:c9:dd:f5:22:4e:4f:29: ec:36:29:23:0c:17:32:36:4d:f1:6e:bb:1f:a6:f0: 3e:fd:b4:b9:38:9c:45:26:ef:09:63:6d:08:ea:09: 36:bb:71:d3:7c:4e:19:c7:80:8e:a6:fb:f0:70:32: df:7b:78:12:ec:26:f6:db:9b:3a:cb:53:92:b5:e8: 13:0a:da:a7:e4:ba:fc:ad:97:3c:62:40:e9:c5:f6: 64:98:60:eb:75:04:fc:4f:e1:04:b4:a7:e9:3d:84: 5f:b7:62:32:8f:d5:ba:03:ba:a4:60:82:97:4d:17: 80:1d:d9:08:2e:56:c4:50:42:33:84:75:a9:53:75: a4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7A:9E:E5:CB:FD:9A:BB:28:F8:23:3F:2D:3D:C6:03:61:BF:EB:E6 X509v3 Authority Key Identifier: keyid:9B:C3:50:BC:61:3D:05:DE:91:0A:8D:A2:6C:91:C2:97:17:10:78:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8NQvGE9Bd6RCo2ibJHClxcQeLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/Cnqe5cv9mrso-CM_LT3GA2G_6-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fe5041-d3f4-499c-9853-22d10635f0c4/1/m8NQvGE9Bd6RCo2ibJHClxcQeLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.43.56.0/21 IPv6: 2a03:76e0::/32 Signature Algorithm: sha256WithRSAEncryption 19:d6:e6:13:f7:98:a6:ca:03:3a:7e:be:ff:0c:a4:51:86:36: af:2f:ae:8d:d9:a9:d2:90:b3:42:d3:89:c1:47:60:c9:d3:dd: c7:eb:0d:40:6c:40:6a:81:f5:b3:10:59:fb:59:be:d9:e2:fb: 86:a6:ac:18:17:28:34:0c:2d:3f:25:39:6c:5a:a9:10:59:d5: c8:6a:cf:17:1a:26:44:06:4f:f1:97:f1:b5:ce:3b:0c:23:ef: fa:d8:c0:cb:ff:a1:da:a1:a2:c5:41:c9:78:4a:95:d9:ad:69: 6c:ff:46:fd:bb:e7:f2:3d:e2:dd:dd:d6:7f:ae:af:18:43:8f: 7c:32:15:8b:1d:80:ac:cd:ef:7c:9e:37:a7:ba:fe:bc:9c:f2: 24:d4:fd:cd:c9:8b:5f:ae:ca:eb:d9:48:18:c8:f7:3d:28:c9: 7d:98:2a:e1:05:df:e9:2c:80:99:dd:f2:c9:df:cd:e8:30:02: 3c:b0:73:1e:a0:5a:6d:b7:53:9e:e2:c5:14:2f:fa:58:05:20: 45:44:f0:cc:ab:e6:44:ef:68:75:67:81:ec:e7:1c:62:6e:31: 16:51:87:09:51:bc:15:7b:31:99:4b:0f:50:e4:e5:b6:c8:6d: 82:fa:38:58:d6:ca:bf:c3:a6:00:fa:da:20:f4:50:1c:30:6b: 3d:70:75:5f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/Far9ODuFlafqNB6GNEL/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzM1MGJjNjEzZDA1ZGU5MTBhOGRhMjZjOTFjMjk3MTcx MDc4YjYwHhcNMjYwMTAyMTQyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTdhOWVlNWNiZmQ5YWJiMjhmODIzM2YyZDNkYzYwMzYxYmZlYmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W2g0NqfzV8PIQFDMGUGNODxW1ij ZLqW8ctO1228RXaTm3yif6Ye3rcDvH03qJJXVwpjslx63gWfA6hMRf40jWEQ0Qw4 or6asqWBwCa9d2/EinEUJDZrFFiifzb3J6pAiVsu7xJDkKhnsl4TThcDpwVMuMcm Rw8NqlOXJ/knHcnd9SJOTynsNikjDBcyNk3xbrsfpvA+/bS5OJxFJu8JY20I6gk2 u3HTfE4Zx4COpvvwcDLfe3gS7Cb225s6y1OStegTCtqn5Lr8rZc8YkDpxfZkmGDr dQT8T+EEtKfpPYRft2Iyj9W6A7qkYIKXTReAHdkILlbEUEIzhHWpU3WkmQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAp6nuXL/Zq7KPgjPy09xgNhv+vmMB8GA1UdIwQY MBaAFJvDULxhPQXekQqNomyRwpcXEHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMt MjJkMTA2MzVmMGM0LzEvQ25xZTVjdjltcnNvLUNNX0xUM0dBMkdfNi1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9mZTUwNDEtZDNmNC00OTljLTk4NTMtMjJkMTA2MzVmMGM0 LzEvbThOUXZHRTlCZDZSQ28yaWJKSENseGNRZUxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDXCs4MA0E AgACMAcDBQAqA3bgMA0GCSqGSIb3DQEBCwUAA4IBAQAZ1uYT95imygM6fr7/DKRR hjavL66N2anSkLNC04nBR2DJ093H6w1AbEBqgfWzEFn7Wb7Z4vuGpqwYFyg0DC0/ JTlsWqkQWdXIas8XGiZEBk/xl/G1zjsMI+/62MDL/6HaoaLFQcl4SpXZrWls/0b9 u+fyPeLd3dZ/rq8YQ498MhWLHYCsze98njenuv68nPIk1P3NyYtfrsrr2UgYyPc9 KMl9mCrhBd/pLICZ3fLJ383oMAI8sHMeoFptt1Oe4sUUL/pYBSBFRPDMq+ZE72h1 Z4Hs5xxibjEWUYcJUbwVezGZSw9Q5OW2yG2C+jhY1sq/w6YA+tog9FAcMGs9cHVf -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:27 2026 by rpki-client