This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CfGokansXxKbPZepTouvIRXkL3Y.roa File: CfGokansXxKbPZepTouvIRXkL3Y.roa (raw, json) Hash identifier: 9OPeyA/bKZvjU8OU/JSOW/e+98Tm+89lrr5+5gsBrT8= Subject key identifier: 09:F1:A8:91:A9:EC:5F:12:9B:3D:97:A9:4E:8B:AF:21:15:E4:2F:76 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019AFE5F08680298BDC918EB052B293DDACA Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CfGokansXxKbPZepTouvIRXkL3Y.roa Signing time: Mon 08 Dec 2025 14:30:32 +0000 ROA not before: Mon 08 Dec 2025 14:30:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197901 IP address blocks: 95.46.74.0/23 maxlen: 24 146.120.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:5f:08:68:02:98:bd:c9:18:eb:05:2b:29:3d:da:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Dec 8 14:30:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=09f1a891a9ec5f129b3d97a94e8baf2115e42f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1b:4f:e1:e0:35:01:6c:15:2e:78:8d:3a:57: 7d:84:60:d8:21:62:24:a8:a2:5e:dd:b6:47:fa:3b: 9d:a9:55:2d:58:d2:d4:ed:c6:c6:d1:4c:62:6d:90: 79:a7:68:5a:2d:45:81:d7:a1:2d:8a:2e:eb:db:8f: 52:bb:13:22:9b:19:df:9b:7f:59:c2:26:fb:d0:aa: 57:0b:b0:dc:f0:30:36:56:e5:5e:4b:b1:7e:bf:14: c5:ed:f6:94:b4:b7:6c:97:60:04:a2:90:2a:0e:74: 85:7e:08:69:1c:e4:5c:13:7a:a8:81:b6:ec:14:d2: 9c:c6:da:ae:74:30:15:f3:77:34:01:a1:bf:13:e5: b8:eb:b2:0d:ca:e0:9f:c3:1f:6a:23:d8:da:b1:0a: ab:14:65:83:5a:ac:a7:f7:4d:0b:07:94:a5:bd:4f: d7:c9:ee:cd:39:ea:6e:45:b9:9f:9c:81:12:c4:63: d7:e2:2a:03:16:57:76:d7:fa:27:a4:6a:6a:99:ce: 5f:1c:59:c6:8b:9e:92:06:5d:00:86:9f:8a:84:cf: 25:59:55:ef:ed:46:2b:ad:83:3e:35:57:dc:da:e1: 2e:ff:66:e1:fb:dc:8a:d9:3b:15:eb:14:0e:bb:fd: c6:45:3b:3f:8a:d9:f6:e5:54:e5:a2:f1:6a:35:fc: bd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F1:A8:91:A9:EC:5F:12:9B:3D:97:A9:4E:8B:AF:21:15:E4:2F:76 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CfGokansXxKbPZepTouvIRXkL3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.74.0/23 146.120.24.0/24 Signature Algorithm: sha256WithRSAEncryption 69:81:06:e0:3d:fe:1a:6a:b8:b9:c3:6c:3e:82:f3:76:44:22: f0:98:20:bb:29:f0:8e:65:f8:2b:36:ac:6e:c8:1d:20:df:96: 04:03:bd:fc:80:90:c9:1d:7f:c1:87:cf:7d:e4:61:ae:24:5f: 81:8b:d6:c5:62:b7:8f:79:31:a8:e6:8f:3d:d9:43:a6:94:eb: 45:0a:c6:5c:47:11:39:9f:71:b8:ad:67:96:b9:15:0e:0f:f9: 05:0c:25:56:58:62:8e:c9:3c:67:19:55:78:79:84:e1:43:d1: 60:84:03:79:c7:0d:a8:32:30:38:4b:20:69:e9:34:2b:08:52: f6:44:9b:f4:e8:8e:2f:db:95:a9:5b:65:cd:d4:75:bf:cf:71: eb:32:0f:23:ba:85:cf:8b:f4:11:59:52:53:ac:3d:ff:d7:d6: b4:1d:00:2a:07:0f:40:02:24:19:b9:93:91:ad:cb:1c:1c:63: 2b:e0:d9:77:84:2e:73:08:ee:54:68:12:7d:4f:bb:68:98:0e: 11:5e:fa:43:f2:0c:aa:cd:e1:01:1e:a8:1c:56:42:45:9b:3f: 4e:74:9a:d2:91:72:45:13:78:8e:9b:d8:e8:a0:88:e2:f1:1a: 6e:c8:bb:9d:da:db:f5:66:1d:b0:8d:0d:f1:4a:de:0f:c8:f5: 52:eb:cc:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZr+XwhoApi9yRjrBSspPdrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjUxMjA4MTQzMDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWYxYTg5MWE5ZWM1ZjEyOWIzZDk3YTk0ZThiYWYyMTE1ZTQyZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BtP4eA1AWwVLniNOld9hGDYIWIk qKJe3bZH+judqVUtWNLU7cbG0UxibZB5p2haLUWB16Etii7r249SuxMimxnfm39Z wib70KpXC7Dc8DA2VuVeS7F+vxTF7faUtLdsl2AEopAqDnSFfghpHORcE3qogbbs FNKcxtqudDAV83c0AaG/E+W467INyuCfwx9qI9jasQqrFGWDWqyn900LB5SlvU/X ye7NOepuRbmfnIESxGPX4ioDFld21/onpGpqmc5fHFnGi56SBl0Ahp+KhM8lWVXv 7UYrrYM+NVfc2uEu/2bh+9yK2TsV6xQOu/3GRTs/itn25VTlovFqNfy91wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAnxqJGp7F8Smz2XqU6LryEV5C92MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvQ2ZHb2thbnNYeEtiUFplcFRvdXZJUlhrTDNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXy5KAwQA kngYMA0GCSqGSIb3DQEBCwUAA4IBAQBpgQbgPf4aari5w2w+gvN2RCLwmCC7KfCO ZfgrNqxuyB0g35YEA738gJDJHX/Bh8995GGuJF+Bi9bFYrePeTGo5o892UOmlOtF CsZcRxE5n3G4rWeWuRUOD/kFDCVWWGKOyTxnGVV4eYThQ9FghAN5xw2oMjA4SyBp 6TQrCFL2RJv06I4v25WpW2XN1HW/z3HrMg8juoXPi/QRWVJTrD3/19a0HQAqBw9A AiQZuZORrcscHGMr4Nl3hC5zCO5UaBJ9T7tomA4RXvpD8gyqzeEBHqgcVkJFmz9O dJrSkXJFE3iOm9jooIji8RpuyLud2tv1Zh2wjQ3xSt4PyPVS68w/ -----END CERTIFICATE-----Generated at Tue Dec 16 09:20:57 2025 by rpki-client