This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Cp5yS6CVdtI_QBkILVp1ijYMyLE.roa File: Cp5yS6CVdtI_QBkILVp1ijYMyLE.roa (raw, json) Hash identifier: YPwRTq6Ianr0pyiyDMEVnQhaRfOWjLxD4nQBsuUMiJ8= Subject key identifier: 0A:9E:72:4B:A0:95:76:D2:3F:40:19:08:2D:5A:75:8A:36:0C:C8:B1 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED37D5CC9062200ECD856434504710 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Cp5yS6CVdtI_QBkILVp1ijYMyLE.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20853 IP address blocks: 194.29.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:37:d5:cc:90:62:20:0e:cd:85:64:34:50:47:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a9e724ba09576d23f4019082d5a758a360cc8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:b6:4b:b0:84:71:a8:07:87:4a:2c:19:17: ad:2f:b7:08:bf:98:4c:05:2e:82:9c:5a:df:c7:8a: 33:a5:71:fd:01:6e:fc:83:24:15:25:cc:38:f1:e8: fa:b1:d4:8f:72:d9:43:bb:8e:72:d6:f0:69:90:5e: 56:70:26:79:dc:52:54:1b:33:09:82:fd:44:6e:b0: 90:54:23:39:66:b6:a0:26:c8:c9:39:6d:ac:26:da: 6b:14:aa:31:01:5c:3a:f1:c2:15:88:a7:f5:1f:2e: 35:d9:86:e5:ac:6a:0a:0b:ea:83:47:06:53:00:29: 18:f7:16:64:a2:5f:94:e7:c9:1a:ca:ad:0d:c4:05: 8e:5a:dc:7a:6a:75:da:ef:46:be:44:00:46:a9:39: 14:7d:92:b3:bf:50:a1:fa:a5:46:84:a2:62:4d:a4: a9:82:35:34:94:12:6e:35:3d:06:dd:2c:01:e5:91: f2:d2:0a:ea:48:59:33:8a:2e:33:3f:10:9b:07:b2: e6:06:39:46:d8:c7:74:31:46:fe:13:f9:12:aa:44: a9:8a:8c:49:b5:f3:cc:3a:a0:b8:ea:8c:ce:cb:f1: 81:a8:78:f5:58:cc:b6:a7:e5:80:03:09:7e:0f:dc: ef:d0:9d:fa:e9:02:d9:84:32:35:72:79:93:17:53: c8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9E:72:4B:A0:95:76:D2:3F:40:19:08:2D:5A:75:8A:36:0C:C8:B1 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/Cp5yS6CVdtI_QBkILVp1ijYMyLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.29.67.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:da:f2:5f:57:2b:b5:cc:f8:95:5f:59:41:64:08:bd:39:4c: 77:1f:31:9f:c5:15:aa:9d:70:84:97:29:d2:80:ae:cd:99:75: 6d:72:6d:21:46:d5:e4:a5:47:1e:13:97:aa:0d:2f:3e:c8:00: c6:85:69:3a:9b:dc:fa:84:dd:af:98:fb:65:8f:5b:bb:a9:02: dd:8e:e3:60:8b:a1:ac:3e:59:4e:bf:65:24:b6:e9:d3:77:07: 6c:81:4c:6d:e8:ea:c3:8a:16:37:f2:1f:e3:9b:ac:66:4a:18: 94:06:48:05:58:ff:31:62:9d:8b:9f:b0:f1:e6:fb:97:d8:3d: 76:7a:51:6b:da:77:8d:fe:d9:2a:e3:d0:46:ca:1a:65:c4:83: a0:f5:90:c4:9f:e3:6a:4d:9d:ae:0f:2f:80:f5:f0:b9:eb:34: 2e:af:f5:66:ba:89:10:d8:09:cc:8d:74:1f:37:d7:c0:10:8a: 7a:c9:bf:15:96:b0:38:94:b9:69:85:5d:59:c0:59:56:82:cf: 5d:63:a4:53:4c:23:e9:42:45:d4:ac:fd:87:26:eb:ae:68:66: 12:24:47:f8:f0:6c:fa:5b:d1:1b:43:5f:03:81:00:3d:0d:6b: 11:fe:09:a9:7d:bd:24:63:d3:05:ee:02:d4:61:fd:71:d0:88: fd:e2:5a:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TfVzJBiIA7NhWQ0UEcQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTllNzI0YmEwOTU3NmQyM2Y0MDE5MDgyZDVhNzU4YTM2MGNjOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiW2S7CEcagHh0osGRetL7cIv5hM BS6CnFrfx4ozpXH9AW78gyQVJcw48ej6sdSPctlDu45y1vBpkF5WcCZ53FJUGzMJ gv1EbrCQVCM5ZragJsjJOW2sJtprFKoxAVw68cIViKf1Hy412YblrGoKC+qDRwZT ACkY9xZkol+U58kayq0NxAWOWtx6anXa70a+RABGqTkUfZKzv1Ch+qVGhKJiTaSp gjU0lBJuNT0G3SwB5ZHy0grqSFkzii4zPxCbB7LmBjlG2Md0MUb+E/kSqkSpioxJ tfPMOqC46ozOy/GBqHj1WMy2p+WAAwl+D9zv0J366QLZhDI1cnmTF1PIJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqeckuglXbSP0AZCC1adYo2DMixMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvQ3A1eVM2Q1ZkdElfUUJrSUxWcDFpallNeUxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh1DMA0G CSqGSIb3DQEBCwUAA4IBAQAv2vJfVyu1zPiVX1lBZAi9OUx3HzGfxRWqnXCElynS gK7NmXVtcm0hRtXkpUceE5eqDS8+yADGhWk6m9z6hN2vmPtlj1u7qQLdjuNgi6Gs PllOv2UktunTdwdsgUxt6OrDihY38h/jm6xmShiUBkgFWP8xYp2Ln7Dx5vuX2D12 elFr2neN/tkq49BGyhplxIOg9ZDEn+NqTZ2uDy+A9fC56zQur/VmuokQ2AnMjXQf N9fAEIp6yb8VlrA4lLlphV1ZwFlWgs9dY6RTTCPpQkXUrP2HJuuuaGYSJEf48Gz6 W9EbQ18DgQA9DWsR/gmpfb0kY9MF7gLUYf1x0Ij94loj -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:26 2026 by rpki-client