This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/cFUEIWQu7qe64nrzejsq3hzv3fw.roa File: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (raw, json) Hash identifier: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c= Subject key identifier: 70:55:04:21:64:2E:EE:A7:BA:E2:7A:F3:7A:3B:2A:DE:1C:EF:DD:FC Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715 Certificate serial: 019B7DCB2EE4C07B8EDC456B0E54F94E56FD Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/cFUEIWQu7qe64nrzejsq3hzv3fw.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31287 IP address blocks: 85.187.192.0/21 maxlen: 21 151.237.41.204/32 maxlen: 32 151.237.80.0/22 maxlen: 22 151.237.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2e:e4:c0:7b:8e:dc:45:6b:0e:54:f9:4e:56:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70550421642eeea7bae27af37a3b2ade1cefddfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:5e:84:8a:94:0c:6a:09:8d:58:ec:fe:64: c6:20:2e:d0:a2:56:cc:fb:60:68:b0:72:f1:88:e3: eb:95:c4:83:7b:21:a4:24:28:ab:7b:8f:bb:b5:16: f4:8d:b7:85:eb:6a:21:04:3b:8f:41:e9:d0:cb:dc: e3:ed:1c:20:55:96:0c:9d:cc:6d:0f:22:c4:4b:a5: 86:4a:47:8e:cd:ab:a1:8b:94:1d:e5:73:68:6d:39: 1b:b1:39:7e:58:fc:30:dd:5c:35:1f:2c:a9:87:9e: 17:25:c3:c1:c4:d3:8a:a0:d4:77:7b:5e:6c:30:78: 6a:38:e0:66:55:c8:4e:a4:08:43:fb:5d:e9:b4:34: 47:1f:fa:f4:a0:78:69:db:ef:e0:8b:0d:bc:1a:1d: 02:8c:0c:5c:01:da:ee:7f:81:d1:1b:33:e4:75:69: 33:ba:de:55:d8:a4:b2:8a:63:d1:e8:04:36:06:6d: 6a:7c:31:37:dd:30:9d:ea:ad:c8:19:a9:1f:02:82: 29:9b:0f:a9:c6:5f:c0:8b:e7:d1:90:ab:8c:41:9a: 34:4b:4f:41:b7:35:30:f6:81:06:a0:8c:aa:52:fc: 67:09:67:1a:9d:cc:76:d0:e3:7a:26:c2:b4:0a:61: 75:61:76:15:e6:cb:46:9f:b4:2d:44:91:96:75:84: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:55:04:21:64:2E:EE:A7:BA:E2:7A:F3:7A:3B:2A:DE:1C:EF:DD:FC X509v3 Authority Key Identifier: keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/cFUEIWQu7qe64nrzejsq3hzv3fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.187.192.0/21 151.237.41.204/32 151.237.80.0/21 Signature Algorithm: sha256WithRSAEncryption 81:0a:74:33:10:41:05:1a:31:2b:cf:c1:1d:2c:77:b1:0c:3b: b0:3e:66:5f:6a:ee:c1:fc:4a:d1:dc:a7:f2:d8:f4:75:ca:2c: 2d:50:61:47:99:78:25:73:ee:c3:eb:6c:03:f5:a2:46:e9:70: c5:4f:1f:5f:c6:3f:42:b1:45:e6:fb:d6:89:c2:74:a6:b0:87: 9c:80:8a:37:7f:f4:d9:e7:15:34:f0:f0:da:c8:d4:5d:27:38: 37:ba:a6:b7:ba:7d:0c:1f:78:16:16:39:fc:e1:8f:b3:2f:1e: 72:74:8e:be:e3:c7:86:64:e2:58:f5:5a:62:d9:41:81:85:8c: 57:46:43:54:73:1a:05:16:14:34:27:7d:e1:10:ad:e8:2f:22: 81:53:27:b5:0f:80:21:e2:71:6c:99:e0:1c:6f:b4:36:78:cc: 20:01:25:33:65:f7:34:6a:2b:b7:0c:fb:1a:22:52:5b:27:b7: d3:6a:d0:3c:e4:3c:62:c8:21:7c:4c:b5:b0:34:29:7a:82:74: 52:8b:e1:b1:c3:e2:60:3d:7e:19:e6:27:41:8c:af:2d:dc:cd: a8:1c:cc:6c:ad:78:b7:78:4b:0e:3a:4e:f6:81:da:bf:df:d7: 2d:5f:0b:f5:0c:81:d3:7b:ca:60:07:f4:8c:86:b5:76:ff:57: 66:c7:e3:32 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt9yy7kwHuO3EVrDlT5Tlb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNjIyZmRlYzhmYWRmY2E1OGU3NTc1YzI5ZjEwZTczYWU3 NzU3MTUwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDU1MDQyMTY0MmVlZWE3YmFlMjdhZjM3YTNiMmFkZTFjZWZkZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7lehIqUDGoJjVjs/mTGIC7QolbM +2BosHLxiOPrlcSDeyGkJCire4+7tRb0jbeF62ohBDuPQenQy9zj7RwgVZYMncxt DyLES6WGSkeOzauhi5Qd5XNobTkbsTl+WPww3Vw1Hyyph54XJcPBxNOKoNR3e15s MHhqOOBmVchOpAhD+13ptDRHH/r0oHhp2+/giw28Gh0CjAxcAdruf4HRGzPkdWkz ut5V2KSyimPR6AQ2Bm1qfDE33TCd6q3IGakfAoIpmw+pxl/Ai+fRkKuMQZo0S09B tzUw9oEGoIyqUvxnCWcancx20ON6JsK0CmF1YXYV5stGn7QtRJGWdYTaFwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFHBVBCFkLu6nuuJ683o7Kt4c7938MB8GA1UdIwQY MBaAFNJiL97I+t/KWOdXXCnxDnOud1cVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWIt ZjA1YWEyMjlkNjM4LzEvY0ZVRUlXUXU3cWU2NG5yemVqc3EzaHp2M2Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWItZjA1YWEyMjlkNjM4 LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQDVbvAAwUA l+0pzAMEA5ftUDANBgkqhkiG9w0BAQsFAAOCAQEAgQp0MxBBBRoxK8/BHSx3sQw7 sD5mX2ruwfxK0dyn8tj0dcosLVBhR5l4JXPuw+tsA/WiRulwxU8fX8Y/QrFF5vvW icJ0prCHnICKN3/02ecVNPDw2sjUXSc4N7qmt7p9DB94FhY5/OGPsy8ecnSOvuPH hmTiWPVaYtlBgYWMV0ZDVHMaBRYUNCd94RCt6C8igVMntQ+AIeJxbJngHG+0NnjM IAElM2X3NGortwz7GiJSWye302rQPOQ8YsghfEy1sDQpeoJ0UovhscPiYD1+GeYn QYyvLdzNqBzMbK14t3hLDjpO9oHav9/XLV8L9QyB03vKYAf0jIa1dv9XZsfjMg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:53:59 2026 by rpki-client