This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/cJF5A_gDXcusMmTN_YOw0UaFwN4.roa File: cJF5A_gDXcusMmTN_YOw0UaFwN4.roa (raw, json) Hash identifier: ZjhEvCJMp06qZY9/OCI+NL1nzY2YgF1mcLrDQRDzTXk= Subject key identifier: 70:91:79:03:F8:03:5D:CB:AC:32:64:CD:FD:83:B0:D1:46:85:C0:DE Certificate issuer: /CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Certificate serial: 019B7A5ABFF65A35939C73CDA94F4D7CB078 Authority key identifier: 29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/cJF5A_gDXcusMmTN_YOw0UaFwN4.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39305 IP address blocks: 216.87.54.0/24 maxlen: 24 2001:678:204::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bf:f6:5a:35:93:9c:73:cd:a9:4f:4d:7c:b0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296016ad64c22600acf3049f8758f53ebb1e57c4 Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70917903f8035dcbac3264cdfd83b0d14685c0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:3b:fd:09:bc:73:11:5f:f5:b0:92:39:e7: 40:2e:b8:98:49:7e:fa:ee:10:b5:8e:b1:69:aa:16: e2:3b:ad:17:fc:f7:6a:fb:cd:59:05:4d:46:de:b0: bc:3d:9d:99:7e:15:a0:4e:38:30:35:1c:79:7d:d2: 27:1f:86:8c:1d:8d:03:c3:2d:58:b1:80:20:a8:3a: c7:4b:02:2a:64:56:97:ac:7b:b7:a6:07:66:ff:21: 5d:c1:d9:42:d8:2f:05:9e:15:ea:64:ee:b9:09:95: 11:9a:a3:7e:ff:32:83:08:8a:f0:1b:b3:de:61:1a: 88:fc:28:5b:7b:f2:ae:9c:70:c5:cc:89:61:8e:a1: a5:48:ea:ef:5e:0c:15:3f:c8:31:2e:14:00:c6:ef: ef:7c:88:e6:08:17:9e:ce:2f:59:5b:b7:81:1b:9c: df:6b:c8:35:60:31:b3:bd:b0:1c:ad:50:76:d9:c7: 15:8a:93:3f:e5:4b:b4:f9:bc:ea:79:70:d4:f8:bb: 7e:ca:12:3e:2a:47:25:0b:d8:79:fb:04:e4:18:8a: 86:db:94:27:7f:18:ca:c9:80:ad:8d:cf:d4:f2:11: 6e:62:fd:d1:87:ad:36:46:9a:1b:d9:ed:d2:fb:d0: d6:73:3a:46:d8:2b:2d:fa:1d:44:d3:e3:26:74:71: 8d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:91:79:03:F8:03:5D:CB:AC:32:64:CD:FD:83:B0:D1:46:85:C0:DE X509v3 Authority Key Identifier: keyid:29:60:16:AD:64:C2:26:00:AC:F3:04:9F:87:58:F5:3E:BB:1E:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWAWrWTCJgCs8wSfh1j1PrseV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/cJF5A_gDXcusMmTN_YOw0UaFwN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b33481-6634-4d09-bf12-ab7f14daae4f/1/KWAWrWTCJgCs8wSfh1j1PrseV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.87.54.0/24 IPv6: 2001:678:204::/48 Signature Algorithm: sha256WithRSAEncryption 46:d5:f6:9b:ff:b7:bf:d3:16:51:6b:60:20:31:1d:18:fa:6b: e9:cf:84:b8:7c:26:58:c6:71:4b:ef:f9:db:2e:46:3d:56:de: f2:b1:30:d9:49:52:3c:f5:52:8e:9b:4e:1e:03:3b:72:b5:0c: 8a:9b:b2:35:ad:d6:97:88:ca:fe:c6:d8:be:09:a2:9d:7b:e7: 8e:29:f3:af:ad:10:7c:14:1d:45:6d:8a:94:52:5f:78:4d:06: 05:dc:fa:8d:23:e6:a0:36:cf:ed:72:51:a0:41:18:fc:ac:40: a5:56:60:e6:be:f5:20:63:5a:16:d3:08:c1:78:8c:73:9a:75: 79:a3:53:66:ff:a5:3d:31:7f:c0:62:73:c7:fb:03:d3:28:cb: 79:80:4e:32:11:c4:dd:97:45:8d:4d:f8:e8:4e:33:3a:6b:dc: fa:f6:1e:ff:71:96:b8:81:5f:4c:bb:d5:52:f2:3d:14:d4:63: 61:8e:9e:74:90:00:ef:9b:43:ef:0e:61:94:84:7a:8d:ee:7f: 38:c2:6b:a7:ba:e0:ac:3b:c7:6f:7e:e6:7d:96:fc:4c:c7:a2: 84:35:40:38:13:6a:42:6e:71:ee:48:2c:20:86:1e:24:68:83: c5:6d:57:0d:1f:1a:ed:6e:f3:d3:ef:d2:ee:e2:5f:ad:6c:44: b8:15:2e:89 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6Wr/2WjWTnHPNqU9NfLB4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjAxNmFkNjRjMjI2MDBhY2YzMDQ5Zjg3NThmNTNlYmIx ZTU3YzQwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDkxNzkwM2Y4MDM1ZGNiYWMzMjY0Y2RmZDgzYjBkMTQ2ODVjMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSc7/Qm8cxFf9bCSOedALriYSX76 7hC1jrFpqhbiO60X/Pdq+81ZBU1G3rC8PZ2ZfhWgTjgwNRx5fdInH4aMHY0Dwy1Y sYAgqDrHSwIqZFaXrHu3pgdm/yFdwdlC2C8FnhXqZO65CZURmqN+/zKDCIrwG7Pe YRqI/Chbe/KunHDFzIlhjqGlSOrvXgwVP8gxLhQAxu/vfIjmCBeezi9ZW7eBG5zf a8g1YDGzvbAcrVB22ccVipM/5Uu0+bzqeXDU+Lt+yhI+KkclC9h5+wTkGIqG25Qn fxjKyYCtjc/U8hFuYv3Rh602Rpob2e3S+9DWczpG2Cst+h1E0+MmdHGNqQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHCReQP4A13LrDJkzf2DsNFGhcDeMB8GA1UdIwQY MBaAFClgFq1kwiYArPMEn4dY9T67HlfEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTIt YWI3ZjE0ZGFhZTRmLzEvY0pGNUFfZ0RYY3VzTW1UTl9ZT3cwVWFGd040LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMzM0ODEtNjYzNC00ZDA5LWJmMTItYWI3ZjE0ZGFhZTRm LzEvS1dBV3JXVENKZ0NzOHdTZmgxajFQcnNlVjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2Fc2MA8E AgACMAkDBwAgAQZ4AgQwDQYJKoZIhvcNAQELBQADggEBAEbV9pv/t7/TFlFrYCAx HRj6a+nPhLh8JljGcUvv+dsuRj1W3vKxMNlJUjz1Uo6bTh4DO3K1DIqbsjWt1peI yv7G2L4Jop17544p86+tEHwUHUVtipRSX3hNBgXc+o0j5qA2z+1yUaBBGPysQKVW YOa+9SBjWhbTCMF4jHOadXmjU2b/pT0xf8Bic8f7A9Moy3mATjIRxN2XRY1N+OhO Mzpr3Pr2Hv9xlriBX0y71VLyPRTUY2GOnnSQAO+bQ+8OYZSEeo3ufzjCa6e64Kw7 x29+5n2W/EzHooQ1QDgTakJuce5ILCCGHiRog8VtVw0fGu1u89Pv0u7iX61sRLgV Lok= -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:21 2026 by rpki-client