This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/cPf8LTmHuQNpFCebW57DX4X7lVg.roa File: cPf8LTmHuQNpFCebW57DX4X7lVg.roa (raw, json) Hash identifier: EC/kmKIvEJeWcU36Llbivi0e5yeWXS5Hz9Nq+HvVB00= Subject key identifier: 70:F7:FC:2D:39:87:B9:03:69:14:27:9B:5B:9E:C3:5F:85:FB:95:58 Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Certificate serial: 019B7EA71F31010FE095929D8086F2692E4A Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/cPf8LTmHuQNpFCebW57DX4X7lVg.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207021 IP address blocks: 193.46.128.0/24 maxlen: 24 193.46.129.0/24 maxlen: 24 193.46.130.0/24 maxlen: 24 193.46.131.0/24 maxlen: 24 193.46.132.0/24 maxlen: 24 193.46.133.0/24 maxlen: 24 193.46.134.0/24 maxlen: 24 193.46.135.0/24 maxlen: 24 194.0.24.0/24 maxlen: 24 194.0.25.0/24 maxlen: 24 194.0.26.0/24 maxlen: 24 2001:678:20::/48 maxlen: 48 2001:678:24::/48 maxlen: 48 2001:67c:1bc::/48 maxlen: 48 2a02:850:ffe0::/48 maxlen: 48 2a02:850:ffe1::/48 maxlen: 48 2a02:850:ffe2::/48 maxlen: 48 2a02:850:ffe3::/48 maxlen: 48 2a02:850:ffe4::/48 maxlen: 48 2a02:850:ffe5::/48 maxlen: 48 2a02:850:ffe6::/48 maxlen: 48 2a02:850:ffe7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1f:31:01:0f:e0:95:92:9d:80:86:f2:69:2e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70f7fc2d3987b9036914279b5b9ec35f85fb9558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bc:42:96:fc:14:49:14:cb:5b:9e:96:07:7e: d8:98:0c:b3:20:d3:5f:19:4b:76:24:10:ef:b7:7d: 09:fa:2e:3b:b9:66:6d:d6:63:08:94:e7:0a:35:06: a8:92:0c:67:fc:6f:9c:61:6a:46:bb:19:5a:ad:ce: ef:91:31:8a:08:bb:49:ad:57:0a:fc:cd:4f:65:d2: 97:ac:25:d5:d7:87:b1:fc:29:d6:92:d8:10:e8:f2: 30:d0:12:07:72:6a:00:d3:1c:9f:3e:3a:65:a6:87: ec:b4:2c:c3:63:1c:6c:1b:2a:a2:09:cf:72:13:74: cd:09:8c:b8:5a:eb:21:62:e6:48:8c:60:29:ad:dc: 97:15:be:74:71:ba:39:4f:6e:8f:01:1b:b7:78:0c: d9:dd:7c:fd:8a:07:68:a6:ed:e0:59:aa:5e:3d:15: 85:18:8f:09:e3:e8:ab:49:be:66:86:e3:7e:da:b3: d0:e6:e5:a7:8d:f1:8f:46:ac:76:48:f9:a3:8f:2c: 94:de:88:00:b4:c6:05:7b:4c:57:60:13:7f:34:d0: 0c:9c:4e:b0:29:27:fe:ea:ac:f8:d7:57:55:d1:8d: f8:bb:88:0d:38:e3:61:0f:ae:55:a6:a9:1b:e3:dc: e0:33:54:06:78:5e:84:67:60:d1:c2:92:a8:17:ee: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F7:FC:2D:39:87:B9:03:69:14:27:9B:5B:9E:C3:5F:85:FB:95:58 X509v3 Authority Key Identifier: keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/cPf8LTmHuQNpFCebW57DX4X7lVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.128.0/21 194.0.24.0-194.0.26.255 IPv6: 2001:678:20::/48 2001:678:24::/48 2001:67c:1bc::/48 2a02:850:ffe0::/45 Signature Algorithm: sha256WithRSAEncryption 13:97:b3:ef:da:89:9f:1c:eb:0b:e5:f7:88:e5:85:2f:1d:bc: 4b:b0:7a:54:2e:f3:bc:3a:7b:d6:1b:c9:1b:e9:5d:c7:e2:92: 98:ba:e5:c5:e5:e4:7e:44:98:dd:23:d6:6e:c0:f8:f6:6d:b9: 1a:39:d9:d7:04:de:9e:8f:e7:20:f3:c1:24:5c:da:e7:d4:b8: 57:c7:47:9c:6e:17:ee:f1:de:71:f1:c8:f2:62:33:0f:a4:69: 53:bc:f2:6b:84:e5:14:0f:d1:6f:ea:5a:be:af:9d:a1:7c:95: e9:e4:d7:b1:00:03:7b:c9:25:27:c8:8c:b2:21:7c:da:77:76: 95:04:66:eb:a4:b1:e0:98:fd:26:76:78:7f:1e:88:de:ff:da: d5:41:a7:60:c9:9b:76:17:21:80:24:5b:57:50:2b:07:0e:4f: 6e:21:d9:f2:36:66:00:77:25:94:bc:57:e6:ee:91:d6:e5:45: 2c:09:82:cc:35:21:ed:be:c1:cf:e3:07:f9:cd:60:12:44:8b: bf:42:e4:3c:2d:7c:bd:ff:64:df:9f:3c:47:ec:d1:40:45:78: 7b:25:3c:d7:46:35:fa:f1:16:14:6d:4a:4e:b7:1f:ab:42:d8: dc:0a:38:ad:c0:a3:7b:b9:66:47:f9:b5:63:e6:4b:7d:4b:12: 56:ab:65:fe -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt+px8xAQ/glZKdgIbyaS5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzkwYmZmNjVkY2VkY2E4MTNkN2ExMGQ3ZWMzMjhjMmY2 ZWFjMzQwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGY3ZmMyZDM5ODdiOTAzNjkxNDI3OWI1YjllYzM1Zjg1ZmI5NTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLxClvwUSRTLW56WB37YmAyzINNf GUt2JBDvt30J+i47uWZt1mMIlOcKNQaokgxn/G+cYWpGuxlarc7vkTGKCLtJrVcK /M1PZdKXrCXV14ex/CnWktgQ6PIw0BIHcmoA0xyfPjplpofstCzDYxxsGyqiCc9y E3TNCYy4WushYuZIjGAprdyXFb50cbo5T26PARu3eAzZ3Xz9igdopu3gWapePRWF GI8J4+irSb5mhuN+2rPQ5uWnjfGPRqx2SPmjjyyU3ogAtMYFe0xXYBN/NNAMnE6w KSf+6qz411dV0Y34u4gNOONhD65Vpqkb49zgM1QGeF6EZ2DRwpKoF+67+QIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFHD3/C05h7kDaRQnm1uew1+F+5VYMB8GA1UdIwQY MBaAFBw5C/9l3O3KgT16ENfsMowvbqw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt YTk3NjVlZGM3OTVjLzEvY1BmOExUbUh1UU5wRkNlYlc1N0RYNFg3bFZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj LzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAaBAIAATAUAwQDwS6AMAwD BAPCABgDBADCABowKgQCAAIwJAMHACABBngAIAMHACABBngAJAMHACABBnwBvAMH AyoCCFD/4DANBgkqhkiG9w0BAQsFAAOCAQEAE5ez79qJnxzrC+X3iOWFLx28S7B6 VC7zvDp71hvJG+ldx+KSmLrlxeXkfkSY3SPWbsD49m25GjnZ1wTeno/nIPPBJFza 59S4V8dHnG4X7vHecfHI8mIzD6RpU7zya4TlFA/Rb+pavq+doXyV6eTXsQADe8kl J8iMsiF82nd2lQRm66Sx4Jj9JnZ4fx6I3v/a1UGnYMmbdhchgCRbV1ArBw5PbiHZ 8jZmAHcllLxX5u6R1uVFLAmCzDUh7b7Bz+MH+c1gEkSLv0LkPC18vf9k3588R+zR QEV4eyU810Y1+vEWFG1KTrcfq0LY3Ao4rcCje7lmR/m1Y+ZLfUsSVqtl/g== -----END CERTIFICATE-----Generated at Tue Jan 27 07:12:20 2026 by rpki-client