This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/CPRW8P-dWt3q43tk8wC_BcQDCs8.roa File: CPRW8P-dWt3q43tk8wC_BcQDCs8.roa (raw, json) Hash identifier: FS0mv+wp+q+UW726jj+JxZBQxP4OfD+roz+I1dPg1uo= Subject key identifier: 08:F4:56:F0:FF:9D:5A:DD:EA:E3:7B:64:F3:00:BF:05:C4:03:0A:CF Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Certificate serial: 019B79ECD0727186AA61984589FAFFDE4B61 Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/CPRW8P-dWt3q43tk8wC_BcQDCs8.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42375 IP address blocks: 2a06:7840::/29 maxlen: 29 2a0b:2a80::/29 maxlen: 29 2a0d:4440::/29 maxlen: 29 2a0f:f02::/32 maxlen: 32 2a0f:f03::/32 maxlen: 32 2a0f:f04::/30 maxlen: 30 2a0f:59c0::/29 maxlen: 29 2a0f:a380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d0:72:71:86:aa:61:98:45:89:fa:ff:de:4b:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08f456f0ff9d5addeae37b64f300bf05c4030acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:9d:d3:ae:d4:73:6e:4e:36:7b:99:36:7e: 09:70:a5:dc:ba:1e:3d:08:c9:81:5e:9a:cf:5f:ce: a8:d9:40:5a:34:d9:b1:cc:d3:70:af:3d:a4:a0:0f: a9:1f:15:5d:5f:60:8d:79:4e:14:1b:32:df:a9:ab: 1c:a9:db:06:fd:42:a7:fe:96:93:d9:29:20:78:72: 3c:cf:16:ed:ff:32:95:96:7b:7f:c9:01:6d:ce:ce: d0:e7:9d:05:2c:61:3a:e0:8d:43:00:74:c2:a5:ac: 10:92:fc:84:1d:a4:16:2a:bd:ad:ed:5e:81:21:05: 18:6c:81:ce:11:95:56:41:ce:4b:cf:3b:19:99:82: 68:31:40:71:3d:d6:78:04:de:bb:e2:08:e4:59:01: 4a:d5:ad:1d:6a:40:22:f1:af:2a:62:f1:74:46:7b: 1d:b0:4d:a4:29:ad:b7:3a:55:6b:a4:78:a7:5b:03: 85:5c:08:6e:eb:34:d8:4c:1a:70:86:71:88:fa:98: 1e:7a:40:00:ed:8a:ed:e3:00:44:60:f1:b6:e6:a1: 98:f0:c7:45:57:8a:81:27:97:63:f4:92:f8:86:f7: cc:5e:d6:a7:20:47:5e:10:c3:da:d8:32:fa:15:24: c0:64:cd:1f:86:b4:3c:3f:82:2d:df:49:75:04:db: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F4:56:F0:FF:9D:5A:DD:EA:E3:7B:64:F3:00:BF:05:C4:03:0A:CF X509v3 Authority Key Identifier: keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/CPRW8P-dWt3q43tk8wC_BcQDCs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:7840::/29 2a0b:2a80::/29 2a0d:4440::/29 2a0f:f02::-2a0f:f07:ffff:ffff:ffff:ffff:ffff:ffff 2a0f:59c0::/29 2a0f:a380::/29 Signature Algorithm: sha256WithRSAEncryption 6a:37:e7:7c:8a:2a:ca:9f:fc:4a:c6:63:99:aa:da:0e:c4:77: 1e:5f:4c:56:ec:0f:9c:1d:7d:2f:d4:86:b8:3e:63:36:5f:be: 5a:5b:e5:dd:8b:61:7e:2b:40:b5:ba:8a:68:6e:55:94:bc:18: 12:a4:b1:e3:47:ed:01:74:34:7e:5f:c2:a5:07:41:85:f0:e3: f0:80:44:f5:ca:52:d9:7e:92:cb:f9:85:a2:02:f0:1c:f3:f7: 00:d0:7e:f1:92:40:2b:3d:37:e6:d8:24:68:58:eb:0f:81:07: 10:09:74:f3:eb:d4:ad:b9:73:65:dc:c3:8d:99:26:0f:1b:85: 5d:de:90:a9:a4:2f:1e:ba:7e:fc:9f:1b:aa:c1:68:03:da:9c: 82:79:da:5f:37:9a:23:df:8e:9d:60:f4:3a:60:80:c7:55:a8: 52:7b:e2:26:49:88:75:3e:3b:72:ad:26:3b:54:3a:92:83:ee: 43:9e:ae:53:81:27:9f:b7:62:dd:c6:ee:df:b0:79:b9:a8:83: 62:61:b5:80:05:14:b7:e5:10:1e:e1:66:57:e6:f9:b5:5f:8c: b0:b6:94:30:76:8f:cb:38:2c:15:67:74:3a:1a:e5:90:89:a0: 2d:39:6d:79:8b:1c:bd:c5:57:7b:05:e1:8d:c3:72:cc:78:f4: de:53:92:6b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt57NBycYaqYZhFifr/3kthMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3 ZWNiMGYwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGY0NTZmMGZmOWQ1YWRkZWFlMzdiNjRmMzAwYmYwNWM0MDMwYWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Gd067Uc25ONnuZNn4JcKXcuh49 CMmBXprPX86o2UBaNNmxzNNwrz2koA+pHxVdX2CNeU4UGzLfqascqdsG/UKn/paT 2SkgeHI8zxbt/zKVlnt/yQFtzs7Q550FLGE64I1DAHTCpawQkvyEHaQWKr2t7V6B IQUYbIHOEZVWQc5LzzsZmYJoMUBxPdZ4BN674gjkWQFK1a0dakAi8a8qYvF0Rnsd sE2kKa23OlVrpHinWwOFXAhu6zTYTBpwhnGI+pgeekAA7Yrt4wBEYPG25qGY8MdF V4qBJ5dj9JL4hvfMXtanIEdeEMPa2DL6FSTAZM0fhrQ8P4It30l1BNs1ZQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFAj0VvD/nVrd6uN7ZPMAvwXEAwrPMB8GA1UdIwQY MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt ZmQ3ZjE3YmIxYTVjLzEvQ1BSVzhQLWRXdDNxNDN0azh3Q19CY1FEQ3M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAAjAzAwUDKgZ4QAMF AyoLKoADBQMqDURAMA4DBQEqDw8CAwUDKg8PAAMFAyoPWcADBQMqD6OAMA0GCSqG SIb3DQEBCwUAA4IBAQBqN+d8iirKn/xKxmOZqtoOxHceX0xW7A+cHX0v1Ia4PmM2 X75aW+Xdi2F+K0C1uopoblWUvBgSpLHjR+0BdDR+X8KlB0GF8OPwgET1ylLZfpLL +YWiAvAc8/cA0H7xkkArPTfm2CRoWOsPgQcQCXTz69StuXNl3MONmSYPG4Vd3pCp pC8eun78nxuqwWgD2pyCedpfN5oj346dYPQ6YIDHVahSe+ImSYh1PjtyrSY7VDqS g+5Dnq5TgSeft2Ldxu7fsHm5qINiYbWABRS35RAe4WZX5vm1X4ywtpQwdo/LOCwV Z3Q6GuWQiaAtOW15ixy9xVd7BeGNw3LMePTeU5Jr -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:47 2026 by rpki-client