This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/cdf_oOau2IwTEniIbpSFrqC94ak.roa File: cdf_oOau2IwTEniIbpSFrqC94ak.roa (raw, json) Hash identifier: d5GJct7BffuOPc3YRvAxL9qWxxxUlzPpaGeX5jw3vWw= Subject key identifier: 71:D7:FF:A0:E6:AE:D8:8C:13:12:78:88:6E:94:85:AE:A0:BD:E1:A9 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F5ADE9C478D371FA2608DFA8194E5 Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/cdf_oOau2IwTEniIbpSFrqC94ak.roa Signing time: Fri 02 Jan 2026 02:17:59 +0000 ROA not before: Fri 02 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198262 IP address blocks: 85.232.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:5a:de:9c:47:8d:37:1f:a2:60:8d:fa:81:94:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71d7ffa0e6aed88c131278886e9485aea0bde1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c9:12:95:a4:5d:42:fd:da:9d:6d:3d:0a:c6: a4:79:48:c6:74:16:76:eb:7d:78:bc:e9:1b:e4:4c: ab:b5:a7:23:14:26:1b:39:60:72:d0:af:6b:fc:61: ea:b3:45:91:e8:4a:10:b6:4c:43:d9:a8:f7:48:cb: 54:e0:e6:3f:0c:45:26:7f:f3:1e:4d:ed:32:96:1c: 76:0e:9d:d9:ee:ad:68:ae:98:79:a8:d8:b7:78:4e: 1e:4c:04:d4:51:62:34:bc:e0:06:6f:b2:87:28:42: 13:bb:8a:48:d2:9c:0c:6d:79:15:08:6b:43:d4:29: b6:69:1a:5b:f2:5e:2d:af:0e:86:f4:18:a7:50:0a: 0c:e9:19:f7:84:32:f2:c4:90:ee:82:31:40:32:c3: ff:4a:45:58:ba:a5:34:3e:7a:2a:ad:4f:c4:71:a8: 2c:4a:2f:25:d8:ec:24:d8:0c:63:00:b5:18:99:1c: 51:71:35:ad:e2:59:0f:4e:ff:58:88:11:db:b6:c6: 0f:d9:d1:76:f3:18:4b:b0:18:b5:a1:31:a8:43:11: 2b:a3:41:4c:3e:d4:3d:36:03:13:df:f3:c2:4d:ee: a7:fe:25:87:80:97:b3:99:aa:e0:01:88:de:73:e7: ce:fc:9a:44:0c:2d:12:fb:a1:00:21:5b:22:2e:08: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:FF:A0:E6:AE:D8:8C:13:12:78:88:6E:94:85:AE:A0:BD:E1:A9 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/cdf_oOau2IwTEniIbpSFrqC94ak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.232.227.0/24 Signature Algorithm: sha256WithRSAEncryption 67:4b:f8:b6:ee:d2:38:2b:3b:df:8d:15:fd:fe:64:a0:4f:49: 65:27:f0:0f:d8:40:ed:6c:a3:5a:8d:c4:1f:9d:4c:86:9a:22: d9:c4:3f:fb:ff:fc:0a:3f:4d:ba:9a:61:8b:c9:c7:2f:03:ab: d0:ba:12:91:d4:0b:44:7f:9e:90:bc:d2:4e:74:43:7a:70:9b: 71:4d:ce:1d:48:45:a5:ba:05:ee:2d:d4:93:0d:f0:76:84:db: 7a:bd:1a:1d:73:7a:dd:72:54:f3:76:de:fd:54:f6:ec:73:85: aa:a1:3f:e5:5b:32:b5:7a:b6:af:21:51:4e:04:c5:a6:11:1a: c5:34:ad:ac:e8:2b:b7:15:e6:5e:02:64:76:17:26:55:8d:4f: 44:8a:a9:5c:25:fd:87:16:b1:bc:54:93:b7:25:d7:e0:53:54: 3b:ff:fb:a1:40:aa:1f:f4:5d:a6:a3:20:33:77:a1:6f:5b:8d: aa:df:07:dc:1e:07:3e:48:69:d1:5f:95:37:27:cc:50:2e:b9: 7b:3a:37:e9:1f:00:30:d7:6c:f0:04:74:18:64:a8:7a:ed:bd: 83:c6:c5:39:ab:bf:49:ef:82:19:08:5a:0c:f8:2e:9a:7d:91: 90:04:9e:ba:31:51:79:11:97:d5:78:dd:dd:13:2f:96:c9:fb: d9:e2:d3:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f1renEeNNx+iYI36gZTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWQ3ZmZhMGU2YWVkODhjMTMxMjc4ODg2ZTk0ODVhZWEwYmRlMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAickSlaRdQv3anW09CsakeUjGdBZ2 6314vOkb5EyrtacjFCYbOWBy0K9r/GHqs0WR6EoQtkxD2aj3SMtU4OY/DEUmf/Me Te0ylhx2Dp3Z7q1orph5qNi3eE4eTATUUWI0vOAGb7KHKEITu4pI0pwMbXkVCGtD 1Cm2aRpb8l4trw6G9BinUAoM6Rn3hDLyxJDugjFAMsP/SkVYuqU0PnoqrU/Ecags Si8l2Owk2AxjALUYmRxRcTWt4lkPTv9YiBHbtsYP2dF28xhLsBi1oTGoQxEro0FM PtQ9NgMT3/PCTe6n/iWHgJezmargAYjec+fO/JpEDC0S+6EAIVsiLggDcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHHX/6DmrtiMExJ4iG6Uha6gveGpMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvY2RmX29PYXUySXdURW5pSWJwU0ZycUM5NGFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVejjMA0G CSqGSIb3DQEBCwUAA4IBAQBnS/i27tI4KzvfjRX9/mSgT0llJ/AP2EDtbKNajcQf nUyGmiLZxD/7//wKP026mmGLyccvA6vQuhKR1AtEf56QvNJOdEN6cJtxTc4dSEWl ugXuLdSTDfB2hNt6vRodc3rdclTzdt79VPbsc4WqoT/lWzK1eravIVFOBMWmERrF NK2s6Cu3FeZeAmR2FyZVjU9EiqlcJf2HFrG8VJO3JdfgU1Q7//uhQKof9F2moyAz d6FvW42q3wfcHgc+SGnRX5U3J8xQLrl7OjfpHwAw12zwBHQYZKh67b2DxsU5q79J 74IZCFoM+C6afZGQBJ66MVF5EZfVeN3dEy+WyfvZ4tO2 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:42 2026 by rpki-client