This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa File: cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa (raw, json) Hash identifier: 8t1u0wHQqLOP5QRswUwGb0F26EqFaE1jpZ2Y496m/4o= Subject key identifier: 72:38:13:ED:BE:CB:61:E3:69:E2:02:4D:72:7F:AD:F8:92:AC:BE:4C Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb Certificate serial: 019B775962B751083438C97521B85DD7F58E Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20677 IP address blocks: 46.17.244.0/22 maxlen: 22 185.38.52.0/22 maxlen: 22 185.113.148.0/22 maxlen: 22 185.113.152.0/22 maxlen: 22 185.145.220.0/22 maxlen: 22 212.87.128.0/19 maxlen: 19 2a00:fac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:62:b7:51:08:34:38:c9:75:21:b8:5d:d7:f5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=723813edbecb61e369e2024d727fadf892acbe4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:68:3e:d6:7d:13:9d:01:46:3f:ed:94:62:0b: 68:8f:44:6e:e1:68:86:d4:b5:3d:a5:14:c6:40:4b: 03:3e:61:36:3c:9f:6d:d7:99:8a:01:00:94:9a:26: 90:61:4d:ec:37:2c:3b:7d:9a:50:07:71:8d:fb:df: be:ae:76:47:cc:35:27:8a:67:7b:18:28:62:c8:ee: cf:7e:b4:18:50:04:43:f0:6c:0f:55:5e:74:81:fa: 80:b0:e9:47:36:ab:c3:9c:0e:e8:71:70:3a:13:a5: f9:4b:df:52:67:65:20:3e:16:8e:01:7c:56:cf:2c: 32:17:e5:ab:b4:c1:fa:1d:46:c0:fe:91:7a:85:35: 6d:56:00:a9:19:0d:f5:99:93:e7:53:bd:46:93:fa: 7d:f6:27:a9:07:15:db:f5:c6:2e:52:fa:c9:be:7f: 42:85:dd:33:b2:37:93:07:fc:20:8f:b6:8b:14:7b: 32:49:90:b4:f2:3d:53:c7:ea:b7:d8:50:8e:d0:ad: 25:f3:f6:c7:a1:48:7b:a8:72:fa:f6:98:16:73:89: 19:6f:9c:a3:b4:f4:5d:1a:6e:45:56:14:fe:47:f3: 78:95:55:2f:a9:dc:bb:d4:d9:74:4a:45:70:fb:a1: f8:31:f0:5d:24:c0:1f:08:18:4f:35:3e:43:83:10: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:38:13:ED:BE:CB:61:E3:69:E2:02:4D:72:7F:AD:F8:92:AC:BE:4C X509v3 Authority Key Identifier: keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/cjgT7b7LYeNp4gJNcn-t-JKsvkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.244.0/22 185.38.52.0/22 185.113.148.0-185.113.155.255 185.145.220.0/22 212.87.128.0/19 IPv6: 2a00:fac0::/32 Signature Algorithm: sha256WithRSAEncryption 76:a0:48:56:68:b3:04:1f:95:c1:bb:be:7e:50:5d:85:47:e7: 45:3f:10:0b:b3:7a:9a:65:24:8d:c3:61:d0:d0:f4:64:df:3e: b6:7f:3d:4d:db:be:cc:d2:43:7b:89:7b:07:ea:3a:d5:6f:f5: 43:80:5f:7e:b6:9c:b1:97:77:02:18:44:08:4a:20:6f:dc:21: ad:d0:c9:8f:c3:df:19:60:3e:82:cb:c8:f0:87:99:0b:88:ed: 5e:69:73:ab:56:a4:59:5a:06:1e:11:0f:22:0e:3d:4c:9f:36: 5b:48:a1:28:e1:38:3d:a2:4d:27:92:68:b5:ea:1e:d2:81:cb: 2b:99:44:a7:ba:a8:2d:3f:94:74:0f:d7:b9:00:36:b5:85:91: a5:d1:a2:dd:12:69:00:5e:f7:15:20:db:a9:36:5b:d7:a6:f9: e4:8e:c2:88:3e:13:c1:2b:10:76:ec:17:dc:a5:14:da:a9:7b: 64:41:30:80:24:35:4d:1f:80:65:a9:89:d7:88:e9:d9:be:4e: ee:d1:e5:b7:cb:3b:fc:71:24:9a:13:e1:2d:4f:82:6b:5d:05: 37:04:b8:9a:32:e8:56:71:aa:f6:ae:7f:9c:23:a9:2d:25:be: 32:d3:56:f3:29:0e:e6:b6:a5:68:69:68:e8:6f:8e:8e:b6:13: 42:ba:6c:22 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt3WWK3UQg0OMl1Ibhd1/WOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx MTA2YmIwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjM4MTNlZGJlY2I2MWUzNjllMjAyNGQ3MjdmYWRmODkyYWNiZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2g+1n0TnQFGP+2UYgtoj0Ru4WiG 1LU9pRTGQEsDPmE2PJ9t15mKAQCUmiaQYU3sNyw7fZpQB3GN+9++rnZHzDUnimd7 GChiyO7PfrQYUARD8GwPVV50gfqAsOlHNqvDnA7ocXA6E6X5S99SZ2UgPhaOAXxW zywyF+WrtMH6HUbA/pF6hTVtVgCpGQ31mZPnU71Gk/p99iepBxXb9cYuUvrJvn9C hd0zsjeTB/wgj7aLFHsySZC08j1Tx+q32FCO0K0l8/bHoUh7qHL69pgWc4kZb5yj tPRdGm5FVhT+R/N4lVUvqdy71Nl0SkVw+6H4MfBdJMAfCBhPNT5DgxDF3QIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFHI4E+2+y2HjaeICTXJ/rfiSrL5MMB8GA1UdIwQY MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt MGZlODM5OWRlNzI3LzEvY2pnVDdiN0xZZU5wNGdKTmNuLXQtSktzdmt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3 LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQCLhH0AwQC uSY0MAwDBAK5cZQDBAK5cZgDBAK5kdwDBAXUV4AwDQQCAAIwBwMFACoA+sAwDQYJ KoZIhvcNAQELBQADggEBAHagSFZoswQflcG7vn5QXYVH50U/EAuzepplJI3DYdDQ 9GTfPrZ/PU3bvszSQ3uJewfqOtVv9UOAX362nLGXdwIYRAhKIG/cIa3QyY/D3xlg PoLLyPCHmQuI7V5pc6tWpFlaBh4RDyIOPUyfNltIoSjhOD2iTSeSaLXqHtKByyuZ RKe6qC0/lHQP17kANrWFkaXRot0SaQBe9xUg26k2W9em+eSOwog+E8ErEHbsF9yl FNqpe2RBMIAkNU0fgGWpideI6dm+Tu7R5bfLO/xxJJoT4S1PgmtdBTcEuJoy6FZx qvauf5wjqS0lvjLTVvMpDua2pWhpaOhvjo62E0K6bCI= -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:21 2026 by rpki-client