This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/cnEEhfNi0eqLNKuxpPzXptnWI8k.roa File: cnEEhfNi0eqLNKuxpPzXptnWI8k.roa (raw, json) Hash identifier: m9SOT0Ao58g7AMmX42Mi3/tMd3Z2BD9HxWvbKa+j8ZY= Subject key identifier: 72:71:04:85:F3:62:D1:EA:8B:34:AB:B1:A4:FC:D7:A6:D9:D6:23:C9 Certificate issuer: /CN=3e99534493cba9c89dbde262f87a1587a4aa99df Certificate serial: 019B79EBFBE84607961141C5F83F8D37896A Authority key identifier: 3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/cnEEhfNi0eqLNKuxpPzXptnWI8k.roa Signing time: Thu 01 Jan 2026 14:17:47 +0000 ROA not before: Thu 01 Jan 2026 14:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198022 IP address blocks: 194.36.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.mft rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:fb:e8:46:07:96:11:41:c5:f8:3f:8d:37:89:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e99534493cba9c89dbde262f87a1587a4aa99df Validity Not Before: Jan 1 14:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72710485f362d1ea8b34abb1a4fcd7a6d9d623c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:31:97:44:92:36:f8:25:ba:0e:26:47:54: 2d:ab:58:34:ca:73:89:8c:7b:9d:f8:b6:0b:ab:97: 80:f4:54:fb:91:62:33:c6:6d:91:06:f3:fc:9e:ed: b8:26:23:55:82:6b:39:4f:84:12:13:7b:93:20:72: f2:17:b5:d2:4d:9d:c3:00:7a:b0:6a:c6:71:5d:58: 95:e7:45:0d:55:9a:74:d5:f6:74:05:b1:ca:e5:08: f5:7d:69:d0:82:99:2b:7a:7d:b8:d2:02:1a:2f:58: b3:89:7d:6d:25:d6:e1:30:5e:d7:a6:4b:c0:db:89: 0d:bc:13:1e:b3:ba:9b:b7:ae:f6:be:ee:f4:68:31: f4:c5:36:5c:80:34:62:22:80:bc:72:71:7f:57:26: 7f:66:66:7b:82:5c:8b:ac:0e:fb:e5:bd:b9:82:83: 98:ff:35:f2:3f:79:3c:39:a4:61:77:c4:0a:c4:98: 7c:c4:14:3e:dd:97:e7:e4:f2:eb:8c:c8:0f:8b:68: 61:33:f9:85:97:49:4d:f8:4f:26:fc:83:47:b5:88: aa:6b:82:3d:21:e4:01:56:d9:ae:95:25:26:0a:83: ba:2a:73:43:ee:7d:45:9a:f5:05:7d:9f:8d:d3:d5: 8a:91:db:00:e9:82:dd:bd:9a:b0:2e:b5:eb:f4:69: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:71:04:85:F3:62:D1:EA:8B:34:AB:B1:A4:FC:D7:A6:D9:D6:23:C9 X509v3 Authority Key Identifier: keyid:3E:99:53:44:93:CB:A9:C8:9D:BD:E2:62:F8:7A:15:87:A4:AA:99:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PplTRJPLqcidveJi-HoVh6Sqmd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/cnEEhfNi0eqLNKuxpPzXptnWI8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/091641-55ed-403b-a687-5ed077eb8be0/1/PplTRJPLqcidveJi-HoVh6Sqmd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.36.60.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:eb:b5:a1:1a:7c:d1:0d:d7:cd:af:39:46:d1:25:38:63:41: 47:a6:e7:fd:4f:9b:d0:ab:41:9a:d0:ce:60:8c:ef:0e:ef:62: 98:04:96:77:12:9f:ae:af:87:b6:45:8a:ea:12:ed:5b:27:4b: 46:d0:53:f1:66:06:e6:bd:40:2d:da:38:03:ea:7b:4a:ca:9c: 90:74:84:ec:32:ac:36:4f:76:b3:14:2a:36:f6:d0:08:32:e1: 92:1e:62:27:d2:d4:bd:48:9b:f2:a3:c2:83:9c:84:50:61:05: 91:fb:db:75:47:eb:f1:b3:3a:fc:2a:82:f0:bb:13:a7:65:4f: 79:c5:06:6d:37:33:c7:19:e1:ad:bc:5d:fd:72:56:ce:93:48: e4:b6:7f:ad:e1:f5:54:f0:58:50:90:38:a7:31:40:4d:96:e0: ab:dd:54:be:e2:83:31:11:fe:20:e1:99:47:a0:86:c0:3b:ea: 7c:0f:8d:4c:24:4b:bb:7d:ef:62:40:7c:7e:89:bc:b6:d1:42: cf:15:5d:da:af:ae:36:73:9b:27:69:82:39:86:22:de:4c:1a: cf:3f:9c:ab:e8:d3:40:c2:a6:29:f1:d6:97:55:36:f7:bf:c6: 84:fb:73:b5:08:e3:bd:01:fc:33:84:bc:7a:2f:3c:89:46:b1: 00:1d:f3:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56/voRgeWEUHF+D+NN4lqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlOTk1MzQ0OTNjYmE5Yzg5ZGJkZTI2MmY4N2ExNTg3YTRh YTk5ZGYwHhcNMjYwMTAxMTQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjcxMDQ4NWYzNjJkMWVhOGIzNGFiYjFhNGZjZDdhNmQ5ZDYyM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZkxl0SSNvglug4mR1Qtq1g0ynOJ jHud+LYLq5eA9FT7kWIzxm2RBvP8nu24JiNVgms5T4QSE3uTIHLyF7XSTZ3DAHqw asZxXViV50UNVZp01fZ0BbHK5Qj1fWnQgpkren240gIaL1iziX1tJdbhMF7XpkvA 24kNvBMes7qbt672vu70aDH0xTZcgDRiIoC8cnF/VyZ/ZmZ7glyLrA775b25goOY /zXyP3k8OaRhd8QKxJh8xBQ+3Zfn5PLrjMgPi2hhM/mFl0lN+E8m/INHtYiqa4I9 IeQBVtmulSUmCoO6KnND7n1FmvUFfZ+N09WKkdsA6YLdvZqwLrXr9Gm0uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHJxBIXzYtHqizSrsaT816bZ1iPJMB8GA1UdIwQY MBaAFD6ZU0STy6nInb3iYvh6FYekqpnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wOTE2NDEtNTVlZC00MDNiLWE2ODct NWVkMDc3ZWI4YmUwLzEvY25FRWhmTmkwZXFMTkt1eHBQelhwdG5XSThrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wOTE2NDEtNTVlZC00MDNiLWE2ODctNWVkMDc3ZWI4YmUw LzEvUHBsVFJKUExxY2lkdmVKaS1Ib1ZoNlNxbWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiQ8MA0G CSqGSIb3DQEBCwUAA4IBAQB967WhGnzRDdfNrzlG0SU4Y0FHpuf9T5vQq0Ga0M5g jO8O72KYBJZ3Ep+ur4e2RYrqEu1bJ0tG0FPxZgbmvUAt2jgD6ntKypyQdITsMqw2 T3azFCo29tAIMuGSHmIn0tS9SJvyo8KDnIRQYQWR+9t1R+vxszr8KoLwuxOnZU95 xQZtNzPHGeGtvF39clbOk0jktn+t4fVU8FhQkDinMUBNluCr3VS+4oMxEf4g4ZlH oIbAO+p8D41MJEu7fe9iQHx+iby20ULPFV3ar642c5snaYI5hiLeTBrPP5yr6NNA wqYp8daXVTb3v8aE+3O1COO9AfwzhLx6LzyJRrEAHfOL -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:28 2026 by rpki-client