This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/cgfGejDrVLaUqLSIzCYonqY6EL8.roa File: cgfGejDrVLaUqLSIzCYonqY6EL8.roa (raw, json) Hash identifier: Mq/JUvCV9dSTx3b4h/eSywAPXcHk8+Plfex5qUmVasE= Subject key identifier: 72:07:C6:7A:30:EB:54:B6:94:A8:B4:88:CC:26:28:9E:A6:3A:10:BF Certificate issuer: /CN=a7c7544e8b482d2311903706eed724049fe385bf Certificate serial: 019B7D5D06492BABA35DD9BAA6641EBD35FA Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/cgfGejDrVLaUqLSIzCYonqY6EL8.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33932 IP address blocks: 185.120.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:06:49:2b:ab:a3:5d:d9:ba:a6:64:1e:bd:35:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7207c67a30eb54b694a8b488cc26289ea63a10bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6a:c6:0c:65:df:02:f5:d3:f0:ec:f0:a7:44: 54:4b:f9:4b:b8:15:4f:28:b0:5c:e2:e2:76:29:bb: d8:9d:93:07:48:8b:c4:b8:a3:b6:4d:d7:15:e4:62: 19:92:4d:24:ea:72:a4:49:37:9f:29:3b:2b:61:c2: b9:57:b7:06:8c:b8:e6:a8:ca:20:ae:96:cd:fd:af: 4f:31:2a:11:9b:e5:5c:c2:28:2e:65:dd:63:e0:12: 59:91:4b:41:2c:15:23:de:ca:9f:e8:33:3d:d4:e5: e9:a8:0f:95:b6:7d:bd:67:58:c7:c8:ab:f7:af:b6: 10:fd:fb:c5:56:1f:20:f1:3f:7f:ef:39:53:f5:a3: 44:e5:e9:28:ba:a6:c3:3a:e4:4b:34:b4:85:08:5a: e7:29:d7:a6:a1:ae:a6:9f:2f:0d:96:a2:6b:0c:43: 3f:ef:41:1c:59:2f:0e:40:27:49:32:82:03:6e:2b: 5d:bb:ef:85:52:6b:6e:1e:2c:ae:35:d8:fb:d4:90: eb:bb:26:98:02:f2:89:d4:b8:cb:9c:d6:05:22:17: 42:dc:1c:8a:a1:fe:54:77:d3:69:68:69:ea:e2:1c: 03:b1:c5:88:80:9f:a1:fe:ec:7f:04:7a:b3:ee:f0: 60:60:b5:98:08:83:e8:e1:66:1d:79:65:e9:da:b1: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:07:C6:7A:30:EB:54:B6:94:A8:B4:88:CC:26:28:9E:A6:3A:10:BF X509v3 Authority Key Identifier: keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/cgfGejDrVLaUqLSIzCYonqY6EL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.182.0/24 Signature Algorithm: sha256WithRSAEncryption ae:97:0b:8b:6b:55:89:21:8a:1c:da:2d:86:af:3a:2a:3c:ea: 03:a0:5e:2d:79:49:7e:9a:7b:13:fc:75:5e:40:9a:25:bd:f3: e7:7a:42:36:4d:d6:82:ee:fd:fe:85:0d:c1:a2:21:24:65:21: 0a:98:3e:18:91:a7:40:8f:16:e9:75:ca:54:91:95:73:c9:a4: 7e:25:6a:16:f8:77:56:13:1e:f5:1d:35:15:40:31:51:44:a4: 11:88:7b:f9:f2:ff:eb:ff:03:2d:d5:51:83:1a:bc:0b:d4:5d: 9b:c7:cc:c3:88:f6:cd:b5:32:c4:e1:79:15:0b:b6:2e:b7:f3: d5:0c:0f:df:fe:3e:88:a3:5b:57:99:da:5b:3f:ef:bc:1a:fc: 1b:27:85:a2:a2:17:52:47:6c:47:26:5f:cf:a7:9b:f6:85:f3: 67:29:78:8a:7e:35:db:07:e8:5f:dc:34:5a:68:c1:5f:57:9f: 14:61:a7:22:f8:44:21:58:91:1b:4f:2e:34:ac:3a:fe:10:83: fd:6e:b5:d7:e7:75:56:fe:eb:07:e8:05:99:62:79:56:cd:36: 28:9d:da:89:9f:ef:f8:43:11:86:ce:a8:8b:90:72:e7:e4:50: 66:60:72:59:09:57:43:31:2a:b1:5e:a2:5f:75:a8:3c:44:17: c2:40:71:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQZJK6ujXdm6pmQevTX6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Yzc1NDRlOGI0ODJkMjMxMTkwMzcwNmVlZDcyNDA0OWZl Mzg1YmYwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjA3YzY3YTMwZWI1NGI2OTRhOGI0ODhjYzI2Mjg5ZWE2M2ExMGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mrGDGXfAvXT8Ozwp0RUS/lLuBVP KLBc4uJ2KbvYnZMHSIvEuKO2TdcV5GIZkk0k6nKkSTefKTsrYcK5V7cGjLjmqMog rpbN/a9PMSoRm+VcwiguZd1j4BJZkUtBLBUj3sqf6DM91OXpqA+Vtn29Z1jHyKv3 r7YQ/fvFVh8g8T9/7zlT9aNE5ekouqbDOuRLNLSFCFrnKdemoa6mny8NlqJrDEM/ 70EcWS8OQCdJMoIDbitdu++FUmtuHiyuNdj71JDruyaYAvKJ1LjLnNYFIhdC3ByK of5Ud9NpaGnq4hwDscWIgJ+h/ux/BHqz7vBgYLWYCIPo4WYdeWXp2rHSqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHIHxnow61S2lKi0iMwmKJ6mOhC/MB8GA1UdIwQY MBaAFKfHVE6LSC0jEZA3Bu7XJASf44W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDU5NjAtYzY2ZC00MmRmLTk1ZDIt NDA1MjQ1MGM5MGE5LzEvY2dmR2VqRHJWTGFVcUxTSXpDWW9ucVk2RUw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8yZDU5NjAtYzY2ZC00MmRmLTk1ZDItNDA1MjQ1MGM5MGE5 LzEvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXi2MA0G CSqGSIb3DQEBCwUAA4IBAQCulwuLa1WJIYoc2i2GrzoqPOoDoF4teUl+mnsT/HVe QJolvfPnekI2TdaC7v3+hQ3BoiEkZSEKmD4YkadAjxbpdcpUkZVzyaR+JWoW+HdW Ex71HTUVQDFRRKQRiHv58v/r/wMt1VGDGrwL1F2bx8zDiPbNtTLE4XkVC7Yut/PV DA/f/j6Io1tXmdpbP++8GvwbJ4WiohdSR2xHJl/Pp5v2hfNnKXiKfjXbB+hf3DRa aMFfV58UYaci+EQhWJEbTy40rDr+EIP9brXX53VW/usH6AWZYnlWzTYondqJn+/4 QxGGzqiLkHLn5FBmYHJZCVdDMSqxXqJfdag8RBfCQHEp -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:47 2026 by rpki-client