This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/canLnJd_jCaH_72Oj6UCIKIOE58.roa File: canLnJd_jCaH_72Oj6UCIKIOE58.roa (raw, json) Hash identifier: /cGlqxOKpBrPfukC3P3Q0OKrmNXwEAQ9aDsDAL44JQs= Subject key identifier: 71:A9:CB:9C:97:7F:8C:26:87:FF:BD:8E:8F:A5:02:20:A2:0E:13:9F Certificate issuer: /CN=d7a665342090952f207d08a23dc8b6c377674927 Certificate serial: 019BFA567B4D3E575348E8FFB2806B60571D Authority key identifier: D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/canLnJd_jCaH_72Oj6UCIKIOE58.roa Signing time: Mon 26 Jan 2026 12:45:30 +0000 ROA not before: Mon 26 Jan 2026 12:45:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 91.208.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.mft rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:56:7b:4d:3e:57:53:48:e8:ff:b2:80:6b:60:57:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7a665342090952f207d08a23dc8b6c377674927 Validity Not Before: Jan 26 12:45:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71a9cb9c977f8c2687ffbd8e8fa50220a20e139f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:7a:62:f9:7a:61:a8:b7:b0:d7:bf:33:c5: af:2f:83:01:35:4e:cc:fa:9d:84:7c:73:96:58:ae: 2f:25:4d:c2:24:7b:7f:85:07:32:68:51:cb:87:6e: d0:0b:36:c4:32:9c:79:24:b3:8a:02:be:3e:4f:79: e5:4b:6d:b1:d8:09:4c:06:f7:74:03:1a:09:17:e8: 39:12:69:12:d7:f7:5e:18:14:1a:92:1f:38:eb:f4: 32:f0:6b:e8:76:ea:eb:87:87:3e:0d:28:04:b2:67: 92:13:a2:3d:b1:94:ff:89:9d:46:25:ae:e4:b0:1b: de:cf:d2:cf:0a:25:c5:99:84:50:62:f5:b4:11:50: c1:f1:18:31:10:67:54:78:e6:84:b2:a5:2e:c7:f7: 11:ea:bf:ac:45:f9:8c:81:62:0a:00:3b:9f:64:c4: 92:d2:7b:28:fa:40:04:f8:16:ed:b6:fd:f4:c4:6c: 0d:f5:88:59:26:7e:c3:5c:26:39:bf:d0:ff:5f:46: 00:a8:6a:8a:4b:d3:b4:fa:62:34:40:c2:ff:85:33: 52:ad:e6:eb:61:4f:3a:d3:78:ff:b8:3d:7d:38:29: 14:cc:71:65:37:12:2f:ec:6d:6c:77:a0:71:8e:16: 10:3a:49:9b:7d:5f:d0:95:7a:75:ec:d8:ad:6f:95: 88:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A9:CB:9C:97:7F:8C:26:87:FF:BD:8E:8F:A5:02:20:A2:0E:13:9F X509v3 Authority Key Identifier: keyid:D7:A6:65:34:20:90:95:2F:20:7D:08:A2:3D:C8:B6:C3:77:67:49:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16ZlNCCQlS8gfQiiPci2w3dnSSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/canLnJd_jCaH_72Oj6UCIKIOE58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c601d7-1f51-480c-b9fc-dc8268eb2718/1/16ZlNCCQlS8gfQiiPci2w3dnSSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.193.0/24 Signature Algorithm: sha256WithRSAEncryption b4:ba:bc:44:3b:c9:8f:2e:a4:7d:30:37:23:66:e4:c2:a6:df: 30:73:b3:8c:05:05:23:df:e5:10:80:a3:8e:e3:d3:82:17:20: 29:a8:6c:e5:8c:12:ea:8d:17:80:f3:fb:7a:a4:de:ed:d4:99: f5:e9:23:2f:bb:7d:ee:17:78:98:3d:cc:9d:07:58:ed:76:2e: a0:b9:f7:4e:08:03:26:8e:11:15:73:d9:ad:ff:9f:79:9b:49: aa:b5:60:e5:9c:70:dc:48:61:05:14:a6:02:41:55:53:92:f7: cf:bd:b3:99:9e:e8:5d:81:9a:46:96:d1:04:a0:b0:47:fc:eb: 14:74:09:d4:29:e9:b2:74:24:87:a5:8c:dc:69:b1:9b:f8:af: 40:20:71:9f:c9:0f:b8:a2:63:b9:dc:8d:6a:24:1d:41:df:4c: ee:3d:cc:c8:58:f4:2c:2d:4d:36:cc:5b:76:2c:41:d2:b8:5f: 21:0a:02:66:0a:20:c3:a0:be:8a:0d:cf:38:36:47:61:a9:0a: 9a:8f:4d:9b:81:cc:e1:c6:39:20:31:a4:79:e9:d7:b3:88:2c: 9c:da:01:5b:d3:3a:63:c0:b6:ae:0b:ab:2e:3a:06:3e:31:d8: ce:d5:31:35:ba:b9:7f:73:aa:bb:ff:3b:79:62:65:cc:b4:d6: e0:66:56:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6VntNPldTSOj/soBrYFcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YTY2NTM0MjA5MDk1MmYyMDdkMDhhMjNkYzhiNmMzNzc2 NzQ5MjcwHhcNMjYwMTI2MTI0NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWE5Y2I5Yzk3N2Y4YzI2ODdmZmJkOGU4ZmE1MDIyMGEyMGUxMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ap6Yvl6Yai3sNe/M8WvL4MBNU7M +p2EfHOWWK4vJU3CJHt/hQcyaFHLh27QCzbEMpx5JLOKAr4+T3nlS22x2AlMBvd0 AxoJF+g5EmkS1/deGBQakh846/Qy8Gvodurrh4c+DSgEsmeSE6I9sZT/iZ1GJa7k sBvez9LPCiXFmYRQYvW0EVDB8RgxEGdUeOaEsqUux/cR6r+sRfmMgWIKADufZMSS 0nso+kAE+Bbttv30xGwN9YhZJn7DXCY5v9D/X0YAqGqKS9O0+mI0QML/hTNSrebr YU8603j/uD19OCkUzHFlNxIv7G1sd6BxjhYQOkmbfV/QlXp17Nitb5WIOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHGpy5yXf4wmh/+9jo+lAiCiDhOfMB8GA1UdIwQY MBaAFNemZTQgkJUvIH0Ioj3ItsN3Z0knMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNjAxZDctMWY1MS00ODBjLWI5ZmMt ZGM4MjY4ZWIyNzE4LzEvY2FuTG5KZF9qQ2FIXzcyT2o2VUNJS0lPRTU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jNjAxZDctMWY1MS00ODBjLWI5ZmMtZGM4MjY4ZWIyNzE4 LzEvMTZabE5DQ1FsUzhnZlFpaVBjaTJ3M2RuU1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DBMA0G CSqGSIb3DQEBCwUAA4IBAQC0urxEO8mPLqR9MDcjZuTCpt8wc7OMBQUj3+UQgKOO 49OCFyApqGzljBLqjReA8/t6pN7t1Jn16SMvu33uF3iYPcydB1jtdi6gufdOCAMm jhEVc9mt/595m0mqtWDlnHDcSGEFFKYCQVVTkvfPvbOZnuhdgZpGltEEoLBH/OsU dAnUKemydCSHpYzcabGb+K9AIHGfyQ+4omO53I1qJB1B30zuPczIWPQsLU02zFt2 LEHSuF8hCgJmCiDDoL6KDc84NkdhqQqaj02bgczhxjkgMaR56deziCyc2gFb0zpj wLauC6suOgY+MdjO1TE1url/c6q7/zt5YmXMtNbgZlbT -----END CERTIFICATE-----Generated at Mon Jan 26 21:33:21 2026 by rpki-client