This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa File: cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa (raw, json) Hash identifier: iFLFl7A8YTDlZs6b2ZtDXNK2nv2uM/FdHMVOEy9wgkc= Subject key identifier: 71:D7:27:90:9F:7B:3E:DE:33:9B:4F:07:E7:0A:3A:93:B2:A3:D6:88 Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Certificate serial: 019B797E2AA17CC7D6295758924A010054EB Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa Signing time: Thu 01 Jan 2026 12:17:50 +0000 ROA not before: Thu 01 Jan 2026 12:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205086 IP address blocks: 109.234.84.0/24 maxlen: 24 213.162.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:2a:a1:7c:c7:d6:29:57:58:92:4a:01:00:54:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb Validity Not Before: Jan 1 12:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71d727909f7b3ede339b4f07e70a3a93b2a3d688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:3b:89:f4:3f:3b:43:d1:24:d4:6f:32:d5: 75:02:cc:d2:19:fe:71:7a:83:42:3a:08:a8:40:18: 51:a0:8e:41:af:ef:76:cb:70:75:8f:71:88:56:ae: 1b:1c:41:18:5f:6a:50:f0:0c:42:23:83:ec:59:2c: 8b:90:ef:a1:08:56:3d:4f:b3:66:84:9b:7d:2d:84: 41:77:27:cc:4e:b1:63:65:64:50:d4:8d:7a:2a:bd: f9:2b:70:0f:cb:ca:82:c7:9a:4a:4e:fe:48:4d:6f: 4b:43:21:fe:a3:c4:42:66:9e:30:f3:81:a2:e6:9e: 16:f4:8e:b4:4c:36:57:a6:ed:e2:c1:39:c7:80:77: 64:f6:94:2c:6c:fc:e4:9c:d1:e8:84:d7:f5:7b:bf: 3d:6f:48:9b:01:b9:85:b6:2b:c5:d1:ac:81:1d:b9: 81:ff:16:d4:02:e1:17:8a:5e:9c:01:c4:45:bd:95: 61:47:cd:48:5b:38:23:75:25:fe:a0:5b:06:48:95: 05:2e:d5:21:17:a7:0a:1e:c0:61:b5:75:07:7f:49: ec:e0:99:72:dd:20:fd:0f:2d:e4:9b:59:dc:86:d9: c9:dc:3a:a1:2a:02:a1:4f:c4:82:73:9f:35:c3:d9: 7a:92:43:c9:70:f6:90:50:a4:9f:32:cf:47:7b:15: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:27:90:9F:7B:3E:DE:33:9B:4F:07:E7:0A:3A:93:B2:A3:D6:88 X509v3 Authority Key Identifier: keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/cdcnkJ97Pt4zm08H5wo6k7Kj1og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.234.84.0/24 213.162.211.0/24 Signature Algorithm: sha256WithRSAEncryption 14:18:d1:33:f1:33:08:53:94:25:c3:ad:6d:ce:39:02:2d:56: 6a:24:2b:3c:1c:a3:fa:a3:bb:e8:62:d2:f6:42:a9:62:77:98: 3b:a3:2d:59:ff:cd:6a:0b:a7:a7:d3:9b:c2:59:fc:e3:ee:ea: 05:55:64:6a:bd:e3:1d:43:5f:c6:3c:30:a5:83:21:1e:3e:43: 90:34:c2:c6:a1:d5:6f:90:71:87:a7:99:58:92:63:b6:d6:c3: 39:21:fc:e0:ec:df:27:50:e3:6c:5f:a5:38:bd:2c:54:97:2b: 86:de:c7:70:54:25:ee:51:dc:d8:7e:47:8d:c8:4d:85:17:cf: 27:78:67:b3:f5:32:6c:19:bb:bf:e6:4e:dd:98:a2:40:94:81: ae:65:00:4f:ac:8c:b7:f9:f4:c1:50:1c:75:87:fd:cd:49:44: 04:07:b5:8e:0b:66:f0:76:64:df:35:ca:50:47:01:00:f7:e3: f5:5a:28:e4:ad:0e:b9:f5:b5:fb:7f:4d:8c:9d:53:49:13:fd: 79:5e:3f:5f:50:f3:ec:69:ad:03:ab:e6:66:00:fe:c8:e7:10: 25:6f:01:8d:4c:d4:4c:8d:a7:33:7b:98:f9:58:e3:21:e1:2f: cd:0c:ca:87:8c:87:f2:27:e8:15:31:51:a1:bd:e1:c3:55:9c: 73:92:91:91 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fiqhfMfWKVdYkkoBAFTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTRmZTgzMWI2YTcxOWY0MmU2Yzg0ODZmZDAzYjU1MGJl NzYxZmIwHhcNMjYwMTAxMTIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWQ3Mjc5MDlmN2IzZWRlMzM5YjRmMDdlNzBhM2E5M2IyYTNkNjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0w7ifQ/O0PRJNRvMtV1AszSGf5x eoNCOgioQBhRoI5Br+92y3B1j3GIVq4bHEEYX2pQ8AxCI4PsWSyLkO+hCFY9T7Nm hJt9LYRBdyfMTrFjZWRQ1I16Kr35K3APy8qCx5pKTv5ITW9LQyH+o8RCZp4w84Gi 5p4W9I60TDZXpu3iwTnHgHdk9pQsbPzknNHohNf1e789b0ibAbmFtivF0ayBHbmB /xbUAuEXil6cAcRFvZVhR81IWzgjdSX+oFsGSJUFLtUhF6cKHsBhtXUHf0ns4Jly 3SD9Dy3km1nchtnJ3DqhKgKhT8SCc581w9l6kkPJcPaQUKSfMs9HexU/9wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHHXJ5Cfez7eM5tPB+cKOpOyo9aIMB8GA1UdIwQY MBaAFKtU/oMbanGfQubISG/QO1UL52H7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYt NmZkOTc4OTIwNWJhLzEvY2RjbmtKOTdQdDR6bTA4SDV3bzZrN0tqMW9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS81ZWFhYTctMzEwNy00MjY4LWFhZDYtNmZkOTc4OTIwNWJh LzEvcTFULWd4dHFjWjlDNXNoSWI5QTdWUXZuWWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbepUAwQA 1aLTMA0GCSqGSIb3DQEBCwUAA4IBAQAUGNEz8TMIU5Qlw61tzjkCLVZqJCs8HKP6 o7voYtL2Qqlid5g7oy1Z/81qC6en05vCWfzj7uoFVWRqveMdQ1/GPDClgyEePkOQ NMLGodVvkHGHp5lYkmO21sM5Ifzg7N8nUONsX6U4vSxUlyuG3sdwVCXuUdzYfkeN yE2FF88neGez9TJsGbu/5k7dmKJAlIGuZQBPrIy3+fTBUBx1h/3NSUQEB7WOC2bw dmTfNcpQRwEA9+P1WijkrQ659bX7f02MnVNJE/15Xj9fUPPsaa0Dq+ZmAP7I5xAl bwGNTNRMjacze5j5WOMh4S/NDMqHjIfyJ+gVMVGhveHDVZxzkpGR -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:28 2026 by rpki-client