This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa File: rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa (raw, json) Hash identifier: PMdlGjc9Af5sq4QJ2HwfDr1apnmai7YobB9Ga0B6v3c= Subject key identifier: AC:21:69:AA:71:74:4D:C8:F1:32:8D:18:D4:2E:46:47:8A:9C:E2:78 Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Certificate serial: 019B7BA4F1000B2E5A5EA0953640D267CA96 Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207270 IP address blocks: 85.117.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f1:00:0b:2e:5a:5e:a0:95:36:40:d2:67:ca:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac2169aa71744dc8f1328d18d42e46478a9ce278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a1:8b:0b:fd:01:67:00:0f:9d:d1:5b:52:50: 30:a0:59:ec:31:a2:f3:3a:c1:a5:ca:82:2f:ab:74: 92:e2:86:f0:48:ef:08:7d:b9:08:f5:f6:0f:31:4a: 50:ea:80:f3:fa:9b:70:d5:a8:55:58:b7:3f:53:7d: 7b:c8:c6:ed:d3:c8:84:f0:a2:3e:3d:97:3f:e1:7c: 17:3e:2d:66:b5:4c:78:e6:9d:bc:80:ab:62:cf:d3: ab:90:64:63:96:d4:81:be:9a:7f:fd:00:ec:b7:85: 0f:6b:0b:a9:6a:2c:5b:a5:90:a2:c4:d5:3e:09:bd: 60:1f:24:c3:58:5f:69:d6:bd:bf:1b:bb:70:d6:a8: 21:6c:1a:c2:39:86:1d:97:65:f9:d6:2e:a5:00:35: 7e:41:ce:7e:b6:61:0d:46:b9:60:85:69:0e:e0:24: bd:0d:08:7a:4b:9f:04:84:47:e3:db:43:00:68:25: b3:7a:8b:e0:da:09:c2:7c:01:86:34:dc:1f:f7:9f: 42:59:e6:15:36:38:8b:03:7f:9f:e5:68:dc:5f:6e: 00:ef:ea:b2:a3:4f:47:3d:90:94:1a:89:44:48:29: f7:28:eb:df:90:c2:bf:d8:ba:ec:3d:2d:41:2c:f2: bc:76:9e:46:3b:d5:ea:fa:5a:df:96:31:ce:36:e7: 25:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:21:69:AA:71:74:4D:C8:F1:32:8D:18:D4:2E:46:47:8A:9C:E2:78 X509v3 Authority Key Identifier: keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.117.41.0/24 Signature Algorithm: sha256WithRSAEncryption 13:b6:e4:2a:c2:6d:c9:31:ec:1f:0b:94:ee:8e:92:7a:49:4f: fd:af:bf:2f:cf:4f:62:3b:86:7c:64:7f:89:70:42:7b:a8:f0: ce:b5:92:59:e3:c2:3f:d9:83:89:78:3d:e6:4a:32:36:a4:0d: 7c:9c:d2:92:59:68:36:cc:96:a5:52:2f:c0:83:d4:ac:23:14: 9b:d7:b8:e5:74:47:0b:81:70:17:51:5a:d9:72:bb:3e:8f:eb: ab:84:73:b0:23:12:c7:de:03:56:59:bb:38:67:f4:70:c9:11: f8:ac:a2:e0:35:60:d2:56:5e:49:65:8b:53:04:84:9c:aa:22: 48:e8:dd:f4:51:7a:d6:df:10:1f:c2:13:f4:62:db:31:46:32: 0c:d2:1c:99:a2:fe:f7:61:db:ae:9c:78:28:ef:3d:4b:c3:e3: 06:98:d0:94:26:aa:72:21:85:62:d9:78:c0:35:56:e6:f1:71: 21:fb:d6:71:93:08:ba:b8:aa:d3:8d:85:28:da:a7:82:e2:7b: 6e:0d:7d:2f:7d:c6:b5:95:e0:d2:14:21:8b:72:cd:6c:2d:e8: 10:df:84:d0:56:40:43:c8:8b:68:6f:1e:aa:dd:2d:75:ee:d6: 3a:c7:a8:90:3d:f8:da:64:1d:71:51:93:81:6b:cd:c6:56:0c: 0a:8e:5a:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPEACy5aXqCVNkDSZ8qWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NjczOGE4ZGFkYWMyZDBkM2FlZGRiOTM0ZjgyMDA2NmI5 ZjVmZWIwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzIxNjlhYTcxNzQ0ZGM4ZjEzMjhkMThkNDJlNDY0NzhhOWNlMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KGLC/0BZwAPndFbUlAwoFnsMaLz OsGlyoIvq3SS4obwSO8IfbkI9fYPMUpQ6oDz+ptw1ahVWLc/U317yMbt08iE8KI+ PZc/4XwXPi1mtUx45p28gKtiz9OrkGRjltSBvpp//QDst4UPawupaixbpZCixNU+ Cb1gHyTDWF9p1r2/G7tw1qghbBrCOYYdl2X51i6lADV+Qc5+tmENRrlghWkO4CS9 DQh6S58EhEfj20MAaCWzeovg2gnCfAGGNNwf959CWeYVNjiLA3+f5WjcX24A7+qy o09HPZCUGolESCn3KOvfkMK/2LrsPS1BLPK8dp5GO9Xq+lrfljHONuclwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwhaapxdE3I8TKNGNQuRkeKnOJ4MB8GA1UdIwQY MBaAFNZnOKja2sLQ067duTT4IAZrn1/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQt NmExZTBlYzcxZGE4LzEvckNGcHFuRjBUY2p4TW8wWTFDNUdSNHFjNG5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQtNmExZTBlYzcxZGE4 LzEvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXUpMA0G CSqGSIb3DQEBCwUAA4IBAQATtuQqwm3JMewfC5TujpJ6SU/9r78vz09iO4Z8ZH+J cEJ7qPDOtZJZ48I/2YOJeD3mSjI2pA18nNKSWWg2zJalUi/Ag9SsIxSb17jldEcL gXAXUVrZcrs+j+urhHOwIxLH3gNWWbs4Z/RwyRH4rKLgNWDSVl5JZYtTBIScqiJI 6N30UXrW3xAfwhP0YtsxRjIM0hyZov73YduunHgo7z1Lw+MGmNCUJqpyIYVi2XjA NVbm8XEh+9Zxkwi6uKrTjYUo2qeC4ntuDX0vfca1leDSFCGLcs1sLegQ34TQVkBD yItobx6q3S117tY6x6iQPfjaZB1xUZOBa83GVgwKjlqz -----END CERTIFICATE-----Generated at Thu Jan 15 21:33:44 2026 by rpki-client