This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa File: cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa (raw, json) Hash identifier: jioy4y0gWPQQEn7QCTikqbEqNukHGaADZBFFgBQAWQI= Subject key identifier: 71:F3:00:86:9A:49:E4:2C:8A:5C:16:AA:3C:32:BF:27:B5:A6:73:BE Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006 Certificate serial: 019B78A34FA55CE068D53A0BD1EAA77A6D5B Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa Signing time: Thu 01 Jan 2026 08:18:47 +0000 ROA not before: Thu 01 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60908 IP address blocks: 88.84.48.0/20 maxlen: 24 88.84.48.0/21 maxlen: 21 88.84.56.0/21 maxlen: 21 185.9.90.0/23 maxlen: 24 185.9.90.0/24 maxlen: 24 185.9.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4f:a5:5c:e0:68:d5:3a:0b:d1:ea:a7:7a:6d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006 Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71f300869a49e42c8a5c16aa3c32bf27b5a673be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:eb:56:c8:94:72:52:dc:e4:4e:24:ed:2c: f6:ee:9d:e8:29:3f:75:17:d2:f3:6c:13:b6:32:d7: 25:fb:04:b9:94:e6:ab:23:db:51:70:77:a1:48:79: ab:ec:7c:af:3e:74:cb:95:4f:b6:7d:f7:7d:19:70: f6:e0:68:34:83:62:0f:fe:86:f6:06:89:ad:92:0f: e2:be:bd:a8:80:9b:dc:fc:28:ac:e8:ac:10:6d:51: 70:00:dd:17:19:af:60:50:ec:a2:e4:b5:e8:b1:2b: 3e:ef:22:d8:27:45:ad:e3:1d:d1:4a:24:12:e1:06: fb:77:bc:51:c7:2f:15:08:5f:65:81:b1:aa:cf:2e: 8f:61:78:fb:e4:2d:74:7f:cd:b2:db:7d:46:80:ba: 03:54:ea:83:f3:bc:4a:19:e4:76:7f:a2:3c:45:cc: 20:26:c5:be:89:39:47:b7:6b:ae:d5:c6:db:4b:8e: d0:d8:57:08:82:ba:61:af:4b:55:eb:1d:80:ff:42: bb:9d:c5:3c:e5:90:5c:37:fd:a7:2f:a4:b2:9b:f7: de:74:05:ec:78:a1:82:0f:65:8c:f6:45:35:53:83: 31:52:5e:2b:39:d3:44:e7:89:c8:be:29:fe:ee:04: 3e:0d:20:f2:67:a6:8b:90:17:67:36:31:eb:bc:97: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F3:00:86:9A:49:E4:2C:8A:5C:16:AA:3C:32:BF:27:B5:A6:73:BE X509v3 Authority Key Identifier: keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/cfMAhppJ5CyKXBaqPDK_J7Wmc74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.84.48.0/20 185.9.90.0/23 Signature Algorithm: sha256WithRSAEncryption 78:ed:29:be:2e:da:3e:74:f0:52:68:4f:cc:80:67:71:b9:6d: 44:f7:a2:35:eb:10:bf:b7:33:32:06:99:89:78:3a:0c:ee:fb: 1d:53:a3:d4:ea:90:8d:14:53:b8:0b:d3:c2:24:5c:48:14:87: 1e:fd:da:76:c7:26:86:cf:61:df:41:15:c5:08:d8:3a:45:75: e9:ee:22:73:02:cc:50:e2:01:84:d7:5f:fe:42:0f:a3:60:14: 6f:53:85:41:da:3f:68:3b:99:05:0d:13:ba:5d:d8:ff:30:b3: 1f:ef:b5:09:5f:85:03:f4:a4:fb:c2:2c:03:a1:62:cd:4f:e8: 00:e5:f2:4b:e3:94:a9:c6:84:d9:bf:78:9e:08:fd:d0:53:0b: 94:a5:9d:61:84:c4:08:6d:f2:b4:a5:65:05:ec:85:b0:e5:01: fd:c0:37:8a:fe:de:45:7e:63:ed:0a:b2:51:ca:05:4a:40:fe: 49:c4:6c:da:98:91:49:08:a0:9b:dc:7d:05:8a:0a:0e:75:7c: 39:e2:66:1e:66:68:cc:5a:b4:26:5a:a3:7d:d4:6f:4e:0b:cd: a3:98:70:03:7a:f1:2f:ac:7e:d4:6a:ef:af:6b:ac:4b:7a:16: 1a:91:59:56:62:9f:68:93:54:0f:49:c1:86:ad:8a:0f:0a:28: 0e:b6:73:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o0+lXOBo1ToL0eqnem1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm Y2QwMDYwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWYzMDA4NjlhNDllNDJjOGE1YzE2YWEzYzMyYmYyN2I1YTY3M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zrrVsiUclLc5E4k7Sz27p3oKT91 F9LzbBO2Mtcl+wS5lOarI9tRcHehSHmr7HyvPnTLlU+2ffd9GXD24Gg0g2IP/ob2 Bomtkg/ivr2ogJvc/Cis6KwQbVFwAN0XGa9gUOyi5LXosSs+7yLYJ0Wt4x3RSiQS 4Qb7d7xRxy8VCF9lgbGqzy6PYXj75C10f82y231GgLoDVOqD87xKGeR2f6I8Rcwg JsW+iTlHt2uu1cbbS47Q2FcIgrphr0tV6x2A/0K7ncU85ZBcN/2nL6Sym/fedAXs eKGCD2WM9kU1U4MxUl4rOdNE54nIvin+7gQ+DSDyZ6aLkBdnNjHrvJc8CQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHHzAIaaSeQsilwWqjwyvye1pnO+MB8GA1UdIwQY MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt NjdlYmJjOGM2ODYyLzEvY2ZNQWhwcEo1Q3lLWEJhcVBES19KN1dtYzc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEWFQwAwQB uQlaMA0GCSqGSIb3DQEBCwUAA4IBAQB47Sm+Lto+dPBSaE/MgGdxuW1E96I16xC/ tzMyBpmJeDoM7vsdU6PU6pCNFFO4C9PCJFxIFIce/dp2xyaGz2HfQRXFCNg6RXXp 7iJzAsxQ4gGE11/+Qg+jYBRvU4VB2j9oO5kFDRO6Xdj/MLMf77UJX4UD9KT7wiwD oWLNT+gA5fJL45SpxoTZv3ieCP3QUwuUpZ1hhMQIbfK0pWUF7IWw5QH9wDeK/t5F fmPtCrJRygVKQP5JxGzamJFJCKCb3H0FigoOdXw54mYeZmjMWrQmWqN91G9OC82j mHADevEvrH7Uau+va6xLehYakVlWYp9ok1QPScGGrYoPCigOtnO6 -----END CERTIFICATE-----Generated at Mon Jan 26 22:36:16 2026 by rpki-client