This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa File: cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa (raw, json) Hash identifier: HpbyUUXySxZasQuBBURj008LhTbNYYQxJ+uuJec1F1s= Subject key identifier: 71:DE:0F:47:FE:D9:C1:CF:89:BF:F8:77:7A:40:55:5A:2C:34:2B:ED Certificate issuer: /CN=961b9df745c32df27df33ebcfd536f19e13474fe Certificate serial: 019B7F156CC3BE9E417B4B0C5DC6D86F4540 Authority key identifier: 96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa Signing time: Fri 02 Jan 2026 14:21:09 +0000 ROA not before: Fri 02 Jan 2026 14:21:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.100.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.mft rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:6c:c3:be:9e:41:7b:4b:0c:5d:c6:d8:6f:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961b9df745c32df27df33ebcfd536f19e13474fe Validity Not Before: Jan 2 14:21:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71de0f47fed9c1cf89bff8777a40555a2c342bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:01:2d:8c:95:3e:04:1d:ad:bd:6d:a1:52: d6:54:b9:25:e4:ee:42:b5:5d:76:bc:c8:dc:50:6f: 14:0a:73:6e:76:41:52:a0:83:a8:19:eb:cb:67:3e: 0a:7f:3a:25:7c:3a:ac:d3:84:bc:86:e4:53:dd:2b: 4e:db:65:6f:a6:d6:69:2b:77:e6:36:f6:7f:ae:c8: 42:fe:d9:e2:bb:7f:d8:15:7a:4d:6c:d1:c8:19:bd: 8a:d9:b7:28:83:b8:0e:dc:b3:0a:be:93:3b:90:90: 87:7e:4e:e5:5a:f6:d7:ea:53:9d:39:da:11:13:da: fe:97:3f:d0:b4:65:ed:87:31:9c:8f:05:65:c4:1b: 72:9a:d6:8d:25:6a:e8:b4:68:3a:e1:a6:05:c7:30: 6f:3e:7c:a4:c6:dd:8f:15:f5:f2:c1:4a:3e:ce:96: 97:18:94:f8:9a:52:38:0a:e7:31:83:c6:81:5f:58: 1e:cc:5d:5d:9a:90:93:81:e0:fb:b6:5f:c0:bf:16: 42:04:24:2f:04:f9:2f:f8:43:99:48:26:d8:78:90: 76:8a:58:db:b2:32:4c:19:0a:18:3e:b4:14:c1:4c: 8b:39:b3:93:98:c3:a5:a5:48:8c:35:b6:a0:bf:98: 07:10:3b:ee:f4:f0:9b:57:e9:c1:8f:45:4d:53:e6: 97:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DE:0F:47:FE:D9:C1:CF:89:BF:F8:77:7A:40:55:5A:2C:34:2B:ED X509v3 Authority Key Identifier: keyid:96:1B:9D:F7:45:C3:2D:F2:7D:F3:3E:BC:FD:53:6F:19:E1:34:74:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhud90XDLfJ98z68_VNvGeE0dP4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/cd4PR_7Zwc-Jv_h3ekBVWiw0K-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e84920-f5cb-46d7-bc99-fe53210b57b6/1/lhud90XDLfJ98z68_VNvGeE0dP4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.100.64.0/24 Signature Algorithm: sha256WithRSAEncryption 69:ad:57:57:90:44:62:24:73:c2:36:79:39:8b:d2:e7:09:b4: 11:1e:74:65:8e:24:8f:46:82:a4:45:42:58:6f:ec:4b:aa:16: 6a:35:20:40:10:8d:3c:19:49:dc:cd:95:b9:ba:f6:89:b3:4a: b4:29:09:8c:f6:06:35:bc:34:19:c1:13:83:e6:41:62:90:92: 13:4b:27:6e:5f:e6:7e:44:0d:bb:da:e4:90:9f:d7:7b:d9:eb: 74:29:6f:d2:4d:1a:11:f1:79:1d:29:c0:68:b3:ae:14:0d:4c: 5f:8c:c4:6c:29:66:f0:ec:19:a3:a0:18:18:9b:d9:ea:f8:04: 8c:b8:47:89:7f:6f:3e:57:00:3d:0c:1f:4e:f3:28:c2:40:38: 63:40:6a:8b:61:d0:94:f4:3d:16:73:61:5a:a7:5d:bc:9a:43: 93:28:89:ef:4c:fd:37:d9:e2:bf:30:cf:cc:e8:b3:ff:2d:f0: e2:82:41:52:1e:a6:f8:57:54:4e:87:f3:df:03:37:24:c9:5d: 7a:0f:ca:44:91:94:aa:78:cf:60:b8:ac:0f:09:13:d6:c8:90: 96:f7:aa:2f:71:4e:b7:1b:fe:5d:56:fd:87:27:c3:89:c9:1f: 5f:03:67:66:17:86:52:f0:20:73:3a:a5:41:27:aa:f1:17:4a: b9:ed:89:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FWzDvp5Be0sMXcbYb0VAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MWI5ZGY3NDVjMzJkZjI3ZGYzM2ViY2ZkNTM2ZjE5ZTEz NDc0ZmUwHhcNMjYwMTAyMTQyMTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWRlMGY0N2ZlZDljMWNmODliZmY4Nzc3YTQwNTU1YTJjMzQyYmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPIBLYyVPgQdrb1toVLWVLkl5O5C tV12vMjcUG8UCnNudkFSoIOoGevLZz4KfzolfDqs04S8huRT3StO22VvptZpK3fm NvZ/rshC/tniu3/YFXpNbNHIGb2K2bcog7gO3LMKvpM7kJCHfk7lWvbX6lOdOdoR E9r+lz/QtGXthzGcjwVlxBtymtaNJWrotGg64aYFxzBvPnykxt2PFfXywUo+zpaX GJT4mlI4Cucxg8aBX1gezF1dmpCTgeD7tl/AvxZCBCQvBPkv+EOZSCbYeJB2iljb sjJMGQoYPrQUwUyLObOTmMOlpUiMNbagv5gHEDvu9PCbV+nBj0VNU+aXQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHHeD0f+2cHPib/4d3pAVVosNCvtMB8GA1UdIwQY MBaAFJYbnfdFwy3yffM+vP1TbxnhNHT+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9lODQ5MjAtZjVjYi00NmQ3LWJjOTkt ZmU1MzIxMGI1N2I2LzEvY2Q0UFJfN1p3Yy1Kdl9oM2VrQlZXaXcwSy0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9lODQ5MjAtZjVjYi00NmQ3LWJjOTktZmU1MzIxMGI1N2I2 LzEvbGh1ZDkwWERMZko5OHo2OF9WTnZHZUUwZFA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWRAMA0G CSqGSIb3DQEBCwUAA4IBAQBprVdXkERiJHPCNnk5i9LnCbQRHnRljiSPRoKkRUJY b+xLqhZqNSBAEI08GUnczZW5uvaJs0q0KQmM9gY1vDQZwROD5kFikJITSyduX+Z+ RA272uSQn9d72et0KW/STRoR8XkdKcBos64UDUxfjMRsKWbw7BmjoBgYm9nq+ASM uEeJf28+VwA9DB9O8yjCQDhjQGqLYdCU9D0Wc2Fap128mkOTKInvTP032eK/MM/M 6LP/LfDigkFSHqb4V1ROh/PfAzckyV16D8pEkZSqeM9guKwPCRPWyJCW96ovcU63 G/5dVv2HJ8OJyR9fA2dmF4ZS8CBzOqVBJ6rxF0q57Yma -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:35 2026 by rpki-client