This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/cFtA2whI-5eSAd_xz6FflVfrfcA.roa File: cFtA2whI-5eSAd_xz6FflVfrfcA.roa (raw, json) Hash identifier: rjwPdM8tVlnPByunwjAWM9HihlVqQjzJw824S3HbwPc= Subject key identifier: 70:5B:40:DB:08:48:FB:97:92:01:DF:F1:CF:A1:5F:95:57:EB:7D:C0 Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a Certificate serial: 019B7DCA99D1D6FBA3A5FCE21913D1826F13 Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/cFtA2whI-5eSAd_xz6FflVfrfcA.roa Signing time: Fri 02 Jan 2026 08:19:48 +0000 ROA not before: Fri 02 Jan 2026 08:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12570 IP address blocks: 193.17.248.0/22 maxlen: 22 195.78.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:99:d1:d6:fb:a3:a5:fc:e2:19:13:d1:82:6f:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a Validity Not Before: Jan 2 08:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=705b40db0848fb979201dff1cfa15f9557eb7dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8d:89:ad:e3:7f:fb:d5:29:44:41:1d:27:df: 03:0a:a7:e3:6e:51:3d:ca:87:2b:b1:8d:32:c3:21: b3:7e:4a:7d:c9:21:a4:35:c0:f1:7c:5b:a7:fc:37: 1f:51:96:e1:e0:76:d6:17:4b:56:8b:b5:08:b6:c3: bf:b3:19:ee:4b:a4:14:3f:fa:41:09:7d:50:12:c3: ad:9d:08:32:11:54:c0:dd:c2:4c:ad:ed:92:97:f0: 23:b7:60:28:49:66:ee:19:05:3b:c2:a9:52:3f:73: 59:6c:19:68:62:cc:95:14:98:a4:19:15:d9:d9:98: a1:b1:61:32:8e:a3:f7:3a:f9:ae:e1:f6:01:7a:5f: 15:f9:d5:3f:72:2f:71:a1:9f:c3:a2:cd:b4:64:0c: 3a:4b:07:22:9c:50:19:18:bd:10:56:1f:57:47:ef: 53:11:a1:32:a3:a6:96:cf:22:85:92:18:79:c7:2b: 3b:3f:6f:1e:b2:fa:65:7f:ab:cd:0b:3c:0b:e9:eb: ae:8b:f0:e0:9c:03:d9:e8:8f:92:26:d1:e1:c3:9a: 3b:db:94:59:31:5a:e7:d1:34:3a:37:87:c1:7d:2b: 8d:a3:6f:de:74:ac:d5:0f:56:4c:d4:cf:fd:72:9b: 51:96:1c:17:9d:46:89:15:3e:49:58:3a:0d:ba:45: 11:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5B:40:DB:08:48:FB:97:92:01:DF:F1:CF:A1:5F:95:57:EB:7D:C0 X509v3 Authority Key Identifier: keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/cFtA2whI-5eSAd_xz6FflVfrfcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.248.0/22 195.78.122.0/23 Signature Algorithm: sha256WithRSAEncryption 56:ab:dd:78:50:72:eb:33:8b:96:f2:48:d2:d0:0e:b7:bf:61: 15:f6:25:25:c5:0b:10:5e:e7:79:16:25:0f:36:cd:f1:81:33: 13:7a:80:e2:48:d8:4b:37:f2:8e:26:52:b3:99:7c:ec:df:cf: 42:80:29:2a:3d:fc:14:4a:2f:86:df:7f:80:b8:f8:29:6b:7f: ed:be:4d:7b:c4:61:e1:0d:81:40:0f:74:ea:41:e4:cf:cb:fc: 46:c0:b8:c4:c2:c4:fe:e2:5b:10:4e:6d:f9:91:1f:79:66:40: 7c:fb:95:ef:f8:4e:1b:da:6b:4e:67:1e:20:c6:16:a7:3f:a9: 97:17:8c:a5:50:77:3c:b1:0a:a0:af:a3:14:41:82:57:36:eb: bd:b7:a3:9f:08:f9:1b:a3:34:35:ab:14:b9:69:1f:ab:bb:b7: 69:07:03:62:61:b6:61:12:dc:aa:24:c6:c7:08:16:8d:36:f1: 79:ea:24:12:39:7d:d3:ac:50:4e:bb:51:80:e7:ed:fe:ba:58: 1b:c8:0c:1e:80:19:57:ad:51:ef:5a:bf:9d:c1:0a:90:bc:b6: 66:00:85:12:79:29:ae:27:89:8b:ee:5c:87:cd:7d:d2:40:22: 49:13:eb:85:83:85:24:ea:aa:63:22:80:f1:92:f6:bb:1f:57: b3:f4:7c:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ypnR1vujpfziGRPRgm8TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4N2QzMDExOTM1MTUwMGYyNTlhNTdlMmZmNjg1MDc5N2Qx YjRlMWEwHhcNMjYwMTAyMDgxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDViNDBkYjA4NDhmYjk3OTIwMWRmZjFjZmExNWY5NTU3ZWI3ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz42JreN/+9UpREEdJ98DCqfjblE9 yocrsY0ywyGzfkp9ySGkNcDxfFun/DcfUZbh4HbWF0tWi7UItsO/sxnuS6QUP/pB CX1QEsOtnQgyEVTA3cJMre2Sl/Ajt2AoSWbuGQU7wqlSP3NZbBloYsyVFJikGRXZ 2ZihsWEyjqP3Ovmu4fYBel8V+dU/ci9xoZ/Dos20ZAw6SwcinFAZGL0QVh9XR+9T EaEyo6aWzyKFkhh5xys7P28esvplf6vNCzwL6euui/DgnAPZ6I+SJtHhw5o725RZ MVrn0TQ6N4fBfSuNo2/edKzVD1ZM1M/9cptRlhwXnUaJFT5JWDoNukURtQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHBbQNsISPuXkgHf8c+hX5VX633AMB8GA1UdIwQY MBaAFIh9MBGTUVAPJZpX4v9oUHl9G04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDct Zjc0MDFiNGU0YjRhLzEvY0Z0QTJ3aEktNWVTQWRfeHo2RmZsVmZyZmNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDctZjc0MDFiNGU0YjRh LzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwRH4AwQB w056MA0GCSqGSIb3DQEBCwUAA4IBAQBWq914UHLrM4uW8kjS0A63v2EV9iUlxQsQ Xud5FiUPNs3xgTMTeoDiSNhLN/KOJlKzmXzs389CgCkqPfwUSi+G33+AuPgpa3/t vk17xGHhDYFAD3TqQeTPy/xGwLjEwsT+4lsQTm35kR95ZkB8+5Xv+E4b2mtOZx4g xhanP6mXF4ylUHc8sQqgr6MUQYJXNuu9t6OfCPkbozQ1qxS5aR+ru7dpBwNiYbZh EtyqJMbHCBaNNvF56iQSOX3TrFBOu1GA5+3+ulgbyAwegBlXrVHvWr+dwQqQvLZm AIUSeSmuJ4mL7lyHzX3SQCJJE+uFg4Uk6qpjIoDxkva7H1ez9Hxs -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:08 2026 by rpki-client