This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/cfrZnlPG5kV-B-LGvN_WIWHqS4w.roa File: cfrZnlPG5kV-B-LGvN_WIWHqS4w.roa (raw, json) Hash identifier: PVHP4t1Ul4PgCzLB7W22P/P4WDxT70HX4ueJqp6VpmY= Subject key identifier: 71:FA:D9:9E:53:C6:E6:45:7E:07:E2:C6:BC:DF:D6:21:61:EA:4B:8C Certificate issuer: /CN=d8679f95ca9b656b7ca221be6eb24f95e328b010 Certificate serial: 019BE9C4D7D6D0E9DFF681B1AC28E8441B08 Authority key identifier: D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/cfrZnlPG5kV-B-LGvN_WIWHqS4w.roa Signing time: Fri 23 Jan 2026 07:32:30 +0000 ROA not before: Fri 23 Jan 2026 07:32:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15731 IP address blocks: 194.238.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.mft rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:c4:d7:d6:d0:e9:df:f6:81:b1:ac:28:e8:44:1b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8679f95ca9b656b7ca221be6eb24f95e328b010 Validity Not Before: Jan 23 07:32:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71fad99e53c6e6457e07e2c6bcdfd62161ea4b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c3:d6:87:d1:78:2d:88:eb:61:a2:f1:7c:3d: 25:6e:b1:ed:f4:54:ba:e2:9a:c7:a1:22:87:71:9f: bd:74:0a:09:cf:87:64:4a:40:dc:c4:09:7a:08:cf: 46:0c:92:23:24:6e:f4:3e:41:9b:8c:b2:4a:04:99: f7:7e:ef:ab:d5:a6:f4:d6:0c:06:8a:59:e4:fd:da: 4d:9d:fe:93:cb:e8:4e:15:3c:75:4f:3a:dd:f4:70: aa:f4:e7:39:33:d2:8a:20:cd:48:b8:b7:ce:c5:6d: 47:13:15:d8:12:ed:f9:26:9a:3b:b0:b5:5e:be:5c: 46:b3:a2:71:18:84:98:29:68:08:b7:ec:c1:c9:ba: 0e:19:6c:f4:a7:81:8d:2a:43:cf:68:17:54:0f:61: c8:67:8c:85:38:22:ba:bc:20:ba:13:2b:7a:e5:11: 16:a5:28:ab:b6:de:84:db:8e:a4:5c:55:0e:0d:f8: 02:4c:c8:c0:08:8a:67:71:e5:b8:61:a6:bf:a5:d8: 9d:5b:5c:ff:15:25:d8:d8:d6:64:84:cd:8d:ed:8a: 8e:4a:ed:18:0a:bc:1d:e8:09:ff:c8:1d:8c:2e:b0: 2a:02:94:50:7f:53:09:9b:9b:5f:d0:ca:24:e8:5e: bb:7a:86:81:fe:9f:0f:f0:62:99:8c:97:ca:6d:be: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FA:D9:9E:53:C6:E6:45:7E:07:E2:C6:BC:DF:D6:21:61:EA:4B:8C X509v3 Authority Key Identifier: keyid:D8:67:9F:95:CA:9B:65:6B:7C:A2:21:BE:6E:B2:4F:95:E3:28:B0:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GeflcqbZWt8oiG-brJPleMosBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/cfrZnlPG5kV-B-LGvN_WIWHqS4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/2GeflcqbZWt8oiG-brJPleMosBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.238.56.0/22 Signature Algorithm: sha256WithRSAEncryption 96:0f:f7:c1:b7:3a:c1:ce:ae:10:e0:ff:62:4b:98:40:c2:3f: 58:3a:f0:f4:c7:65:5e:eb:a5:e5:fe:6e:51:8b:ed:e9:8a:e4: f1:97:28:8d:5f:4c:58:37:54:c6:95:d3:fd:f1:97:4a:44:3e: f7:1a:97:e6:a5:66:42:7c:1d:9a:ca:e1:7a:2f:c0:0c:78:96: 17:91:7b:73:6e:55:4c:07:58:6f:6a:54:ac:ab:76:93:ed:80: 93:2c:ce:23:d0:e6:07:12:d4:d0:8b:04:5c:be:4e:45:22:a0: 98:d7:fc:7a:df:4c:25:2a:ab:e0:b8:90:53:72:2a:88:33:53: a7:d1:bc:1b:49:7e:7a:73:8a:b0:04:40:f2:15:9d:a9:74:58: a6:d8:aa:00:08:54:55:1c:06:14:c4:c1:44:43:18:c8:83:ac: 64:79:86:ad:5c:27:09:53:77:d6:a4:9a:6d:18:54:f2:7b:de: a9:4f:e2:08:cf:a7:01:cd:95:c7:cb:e3:00:c7:d0:cd:df:3d: bb:43:dd:a0:f1:3e:e8:77:e5:06:40:47:41:aa:b8:60:4d:0e: e3:87:e3:39:bb:e4:f3:eb:17:1a:2e:fe:fd:27:53:bb:2e:39: c0:c9:b7:68:6d:ae:9e:1a:3d:ea:e5:e5:ae:55:eb:65:23:96: 31:e8:3c:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvpxNfW0Onf9oGxrCjoRBsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4Njc5Zjk1Y2E5YjY1NmI3Y2EyMjFiZTZlYjI0Zjk1ZTMy OGIwMTAwHhcNMjYwMTIzMDczMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWZhZDk5ZTUzYzZlNjQ1N2UwN2UyYzZiY2RmZDYyMTYxZWE0YjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8PWh9F4LYjrYaLxfD0lbrHt9FS6 4prHoSKHcZ+9dAoJz4dkSkDcxAl6CM9GDJIjJG70PkGbjLJKBJn3fu+r1ab01gwG ilnk/dpNnf6Ty+hOFTx1Tzrd9HCq9Oc5M9KKIM1IuLfOxW1HExXYEu35Jpo7sLVe vlxGs6JxGISYKWgIt+zByboOGWz0p4GNKkPPaBdUD2HIZ4yFOCK6vCC6Eyt65REW pSirtt6E246kXFUODfgCTMjACIpnceW4Yaa/pdidW1z/FSXY2NZkhM2N7YqOSu0Y Crwd6An/yB2MLrAqApRQf1MJm5tf0Mok6F67eoaB/p8P8GKZjJfKbb4hTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHH62Z5TxuZFfgfixrzf1iFh6kuMMB8GA1UdIwQY MBaAFNhnn5XKm2VrfKIhvm6yT5XjKLAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzct ZTUyMjlhZDUyMTRlLzEvY2ZyWm5sUEc1a1YtQi1MR3ZOX1dJV0hxUzR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jNGQwNWYtMTBkNS00ZjhmLTlhMzctZTUyMjlhZDUyMTRl LzEvMkdlZmxjcWJaV3Q4b2lHLWJySlBsZU1vc0JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwu44MA0G CSqGSIb3DQEBCwUAA4IBAQCWD/fBtzrBzq4Q4P9iS5hAwj9YOvD0x2Ve66Xl/m5R i+3piuTxlyiNX0xYN1TGldP98ZdKRD73GpfmpWZCfB2ayuF6L8AMeJYXkXtzblVM B1hvalSsq3aT7YCTLM4j0OYHEtTQiwRcvk5FIqCY1/x630wlKqvguJBTciqIM1On 0bwbSX56c4qwBEDyFZ2pdFim2KoACFRVHAYUxMFEQxjIg6xkeYatXCcJU3fWpJpt GFTye96pT+IIz6cBzZXHy+MAx9DN3z27Q92g8T7od+UGQEdBqrhgTQ7jh+M5u+Tz 6xcaLv79J1O7LjnAybdoba6eGj3q5eWuVetlI5Yx6DzO -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:34 2026 by rpki-client