This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/cjZ33bD33v-eUIybd6UwPNRRpoQ.roa File: cjZ33bD33v-eUIybd6UwPNRRpoQ.roa (raw, json) Hash identifier: FLqtX2+FQiCXJcMBU06mRmURivJmg3QovEfaA3JnsmE= Subject key identifier: 72:36:77:DD:B0:F7:DE:FF:9E:50:8C:9B:77:A5:30:3C:D4:51:A6:84 Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Certificate serial: 019B7B36D2BED6F8313A7335D8F9F27E5168 Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/cjZ33bD33v-eUIybd6UwPNRRpoQ.roa Signing time: Thu 01 Jan 2026 20:19:09 +0000 ROA not before: Thu 01 Jan 2026 20:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 31.25.8.0/23 maxlen: 23 185.83.20.0/22 maxlen: 22 185.175.91.0/24 maxlen: 24 212.104.208.0/24 maxlen: 24 2a11:bd80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d2:be:d6:f8:31:3a:73:35:d8:f9:f2:7e:51:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df Validity Not Before: Jan 1 20:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=723677ddb0f7deff9e508c9b77a5303cd451a684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:2b:f6:c6:23:b0:1a:30:ca:e9:7d:d9:c0: 7a:87:73:2d:15:5c:96:52:1d:70:85:4c:06:2e:cf: 94:34:0a:e5:4f:e4:2f:21:09:55:20:2d:30:a4:98: b1:15:dc:40:20:a0:d7:3e:dd:2e:19:42:a3:cc:27: bb:b5:56:a9:0a:3b:d5:d2:ed:ab:46:d2:07:b3:2a: 8d:36:d0:b9:ea:1f:0a:ea:c8:45:a4:74:54:1e:2f: 64:16:7d:f1:af:f2:7d:0c:a5:78:e8:29:2b:d8:16: 13:c3:ee:6d:28:65:41:70:c4:7f:5b:0d:c4:ce:46: 21:e4:9c:4a:a8:8c:91:8b:68:74:d5:2f:00:45:0a: 61:57:9c:85:69:05:40:d5:31:b3:c7:fc:ed:44:e0: b6:b9:ec:2f:f9:b9:63:f6:15:ef:f9:17:c3:15:66: f9:aa:7c:3b:44:a4:b2:50:f6:b6:cb:b1:f6:53:56: d3:96:e5:9a:25:75:3e:fb:96:64:40:eb:c1:48:a2: a5:53:4e:de:d8:bc:5f:99:4b:6d:ee:0b:8e:76:49: 1a:67:2c:2b:08:d8:f8:fb:cb:36:93:96:e8:44:ce: f8:62:c9:02:88:9b:7b:a7:73:d5:70:6e:5b:18:8a: 12:6a:25:79:07:1e:cb:b9:90:1c:45:42:c6:72:c8: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:36:77:DD:B0:F7:DE:FF:9E:50:8C:9B:77:A5:30:3C:D4:51:A6:84 X509v3 Authority Key Identifier: keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/cjZ33bD33v-eUIybd6UwPNRRpoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.8.0/23 185.83.20.0/22 185.175.91.0/24 212.104.208.0/24 IPv6: 2a11:bd80::/32 Signature Algorithm: sha256WithRSAEncryption 5a:d2:da:f6:71:77:d2:0e:20:3a:02:42:a2:f6:4b:85:6f:dd: b4:d6:40:ee:53:7f:fd:ac:83:4e:86:bc:74:14:a8:aa:29:0e: d1:d6:37:f6:2c:67:63:30:d1:63:6d:de:70:1c:2f:31:e7:ba: d2:87:8f:15:49:d3:3f:9d:23:51:e4:e2:c5:5b:a9:17:5d:e7: 80:13:a9:d2:91:99:3b:47:24:01:61:cf:89:56:bf:70:20:14: 27:63:99:fb:d6:bd:91:59:88:95:73:b2:02:f4:40:04:ae:88: 48:cf:d6:7d:6f:ed:28:b9:94:2d:d3:d6:b1:3f:ae:c1:f4:3b: f6:f1:22:7c:4f:6a:96:91:80:41:d3:4a:a3:f9:41:9b:53:ac: ab:3d:86:dc:d0:bd:c8:2f:36:92:c2:da:77:7f:d2:60:3e:cb: 66:2c:a6:38:26:18:4e:9a:e2:f3:bf:51:63:5f:12:96:19:a8: 2a:40:60:0b:4e:8d:46:8c:86:7a:3a:0a:79:30:a1:a6:2f:63: 89:21:ad:ec:94:89:62:f2:27:a6:05:c4:4b:ab:e6:53:b3:b5: 17:cf:bf:0f:b5:81:89:ea:f1:ea:e3:7d:14:b0:ea:98:59:e4: 44:e0:0e:06:7a:86:f5:44:a6:34:e0:9a:df:d1:f2:aa:7c:b3: 3a:87:d6:26 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7NtK+1vgxOnM12PnyflFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGU4NWJiZDQ3OGY1ZTg0MmY0YzRmOGQ4NTIyNWQxMDBl MGY0ZGYwHhcNMjYwMTAxMjAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjM2NzdkZGIwZjdkZWZmOWU1MDhjOWI3N2E1MzAzY2Q0NTFhNjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQUr9sYjsBowyul92cB6h3MtFVyW Uh1whUwGLs+UNArlT+QvIQlVIC0wpJixFdxAIKDXPt0uGUKjzCe7tVapCjvV0u2r RtIHsyqNNtC56h8K6shFpHRUHi9kFn3xr/J9DKV46Ckr2BYTw+5tKGVBcMR/Ww3E zkYh5JxKqIyRi2h01S8ARQphV5yFaQVA1TGzx/ztROC2uewv+blj9hXv+RfDFWb5 qnw7RKSyUPa2y7H2U1bTluWaJXU++5ZkQOvBSKKlU07e2LxfmUtt7guOdkkaZywr CNj4+8s2k5boRM74YskCiJt7p3PVcG5bGIoSaiV5Bx7LuZAcRULGcsgzvwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHI2d92w997/nlCMm3elMDzUUaaEMB8GA1UdIwQY MBaAFM/ehbvUePXoQvTE+NhSJdEA4PTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgt ZjkzZDFmODE1YjdkLzEvY2paMzNiRDMzdi1lVUl5YmQ2VXdQTlJScG9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy81ZTI2MTktZDcyYi00MTBiLWI5ZTgtZjkzZDFmODE1Yjdk LzEvejk2RnU5UjQ5ZWhDOU1UNDJGSWwwUURnOU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBHxkIAwQC uVMUAwQAua9bAwQA1GjQMA0EAgACMAcDBQAqEb2AMA0GCSqGSIb3DQEBCwUAA4IB AQBa0tr2cXfSDiA6AkKi9kuFb9201kDuU3/9rINOhrx0FKiqKQ7R1jf2LGdjMNFj bd5wHC8x57rSh48VSdM/nSNR5OLFW6kXXeeAE6nSkZk7RyQBYc+JVr9wIBQnY5n7 1r2RWYiVc7IC9EAErohIz9Z9b+0ouZQt09axP67B9Dv28SJ8T2qWkYBB00qj+UGb U6yrPYbc0L3ILzaSwtp3f9JgPstmLKY4JhhOmuLzv1FjXxKWGagqQGALTo1GjIZ6 Ogp5MKGmL2OJIa3slIli8iemBcRLq+ZTs7UXz78PtYGJ6vHq430UsOqYWeRE4A4G eob1RKY04Jrf0fKqfLM6h9Ym -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:33 2026 by rpki-client