This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa File: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (raw, json) Hash identifier: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI= Subject key identifier: 0A:79:4E:C4:2E:FF:BB:00:64:27:7B:F7:53:57:C7:40:14:48:76:3A Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Certificate serial: 019B79ECA534A687A582E98A9EE0ACD76BCF Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa Signing time: Thu 01 Jan 2026 14:18:30 +0000 ROA not before: Thu 01 Jan 2026 14:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39402 IP address blocks: 109.75.64.0/24 maxlen: 24 109.75.65.0/24 maxlen: 24 109.75.66.0/24 maxlen: 24 109.75.67.0/24 maxlen: 24 109.75.68.0/24 maxlen: 24 109.75.69.0/24 maxlen: 24 109.75.70.0/24 maxlen: 24 109.75.71.0/24 maxlen: 24 109.75.72.0/24 maxlen: 24 109.75.73.0/24 maxlen: 24 109.75.74.0/24 maxlen: 24 109.75.75.0/24 maxlen: 24 109.75.76.0/24 maxlen: 24 109.75.77.0/24 maxlen: 24 109.75.78.0/24 maxlen: 24 109.75.79.0/24 maxlen: 24 185.204.48.0/24 maxlen: 24 185.204.49.0/24 maxlen: 24 185.204.50.0/24 maxlen: 24 185.204.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a5:34:a6:87:a5:82:e9:8a:9e:e0:ac:d7:6b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a794ec42effbb0064277bf75357c7401448763a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9c:71:e5:eb:a8:cd:10:bc:83:f8:88:dd:ba: ff:ec:98:c3:85:ba:9d:e3:2c:e2:7d:86:d1:73:e4: 78:b2:a9:01:cd:83:77:36:3f:cb:e1:0c:d2:87:26: 5e:aa:40:54:7d:c4:aa:e6:65:4c:04:49:e7:b4:84: 5d:66:0e:f9:46:d5:9c:ec:e7:b5:c2:b4:7f:ad:97: 25:16:17:77:38:2a:40:49:fe:4c:16:a0:f4:83:55: c7:8a:b5:2e:e2:7c:c5:d2:b8:cc:b1:56:2b:88:d9: 42:60:6d:9e:8c:03:7e:f2:c4:2a:21:75:0a:c0:1a: dd:89:db:7d:fa:4a:f2:6b:7a:85:f6:57:4a:fd:c7: d9:03:0a:3a:66:2e:a1:37:5f:31:58:2e:53:c1:01: 19:bf:f2:54:96:9b:1c:db:53:ef:be:8c:86:37:97: 27:7c:f0:7e:b8:0b:88:1c:ca:8f:86:51:f8:24:83: 1e:b4:64:69:b0:fd:4d:8b:8e:32:0a:18:dc:e0:4a: c6:94:4a:23:3a:35:09:bd:4e:c5:f6:50:82:f7:8d: 2f:13:13:25:17:aa:5f:32:d2:c8:a1:a2:55:4a:48: 64:81:1b:db:1d:bd:e4:72:60:0e:56:15:7f:d1:44: d4:ff:3c:1d:24:85:4b:31:d9:5a:d3:b1:74:93:e1: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:79:4E:C4:2E:FF:BB:00:64:27:7B:F7:53:57:C7:40:14:48:76:3A X509v3 Authority Key Identifier: keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.75.64.0/20 185.204.48.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:22:cd:f3:6b:88:3d:45:08:51:ef:dc:42:ef:76:ef:0c:aa: d8:a7:24:39:1b:db:dd:ff:21:a3:bf:9b:94:d1:e0:3d:e0:09: 71:a2:12:52:87:0b:35:09:26:23:4b:28:97:31:fb:95:6d:9a: 79:ef:bb:74:5b:a5:3c:bd:06:15:dc:bf:06:2b:34:c0:15:a3: 82:2f:5d:63:56:a5:e5:2d:5e:d4:30:16:a2:1a:d9:19:31:b4: 9d:f8:e5:4d:ff:57:12:26:86:9a:55:57:ae:40:1e:7d:a7:44: 2c:a5:f7:e6:0c:29:9c:9f:9f:60:90:9f:9e:f2:f7:6f:d9:c8: 44:30:86:41:25:0e:da:3f:3d:a0:37:61:f5:cf:33:f0:84:39: c6:7b:dd:dc:c4:84:8a:10:4c:f7:95:42:11:92:92:a3:e0:16: be:25:d5:64:6b:76:96:15:62:d6:a3:2c:9f:64:d3:86:f2:9e: c2:ef:e0:9b:d1:18:6e:f5:07:e3:aa:48:00:36:74:2c:74:a1: 27:fc:a4:02:bb:36:8d:5c:bb:d2:1d:a2:2e:3d:c3:0a:45:13: 8e:da:a7:f2:40:94:97:0b:bb:88:95:03:13:63:7f:01:02:78: a2:fd:d0:90:52:f7:67:04:dd:bc:fb:e5:97:43:7d:93:93:18: 68:d9:b4:95 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57KU0poelgumKnuCs12vPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWYyZTdjYzJjNjg3ZjU4YzBkMWY2MTMyYmIyZGNmZGYz OGNiNjQwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTc5NGVjNDJlZmZiYjAwNjQyNzdiZjc1MzU3Yzc0MDE0NDg3NjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45xx5euozRC8g/iI3br/7JjDhbqd 4yzifYbRc+R4sqkBzYN3Nj/L4QzShyZeqkBUfcSq5mVMBEnntIRdZg75RtWc7Oe1 wrR/rZclFhd3OCpASf5MFqD0g1XHirUu4nzF0rjMsVYriNlCYG2ejAN+8sQqIXUK wBrdidt9+krya3qF9ldK/cfZAwo6Zi6hN18xWC5TwQEZv/JUlpsc21PvvoyGN5cn fPB+uAuIHMqPhlH4JIMetGRpsP1Ni44yChjc4ErGlEojOjUJvU7F9lCC940vExMl F6pfMtLIoaJVSkhkgRvbHb3kcmAOVhV/0UTU/zwdJIVLMdla07F0k+EXtwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAp5TsQu/7sAZCd791NXx0AUSHY6MB8GA1UdIwQY MBaAFN1fLnzCxof1jA0fYTK7Lc/fOMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMt OWRjZmQyZWYzMDIzLzEvQ25sT3hDN191d0JrSjN2M1UxZkhRQlJJZGpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMtOWRjZmQyZWYzMDIz LzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEbUtAAwQC ucwwMA0GCSqGSIb3DQEBCwUAA4IBAQAsIs3za4g9RQhR79xC73bvDKrYpyQ5G9vd /yGjv5uU0eA94AlxohJShws1CSYjSyiXMfuVbZp577t0W6U8vQYV3L8GKzTAFaOC L11jVqXlLV7UMBaiGtkZMbSd+OVN/1cSJoaaVVeuQB59p0QspffmDCmcn59gkJ+e 8vdv2chEMIZBJQ7aPz2gN2H1zzPwhDnGe93cxISKEEz3lUIRkpKj4Ba+JdVka3aW FWLWoyyfZNOG8p7C7+Cb0Rhu9QfjqkgANnQsdKEn/KQCuzaNXLvSHaIuPcMKRROO 2qfyQJSXC7uIlQMTY38BAnii/dCQUvdnBN28++WXQ32Tkxho2bSV -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:38 2026 by rpki-client