This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/crm5NGlj9UBvhtdc7rwx7uYgEK4.roa File: crm5NGlj9UBvhtdc7rwx7uYgEK4.roa (raw, json) Hash identifier: /WaelaooGSkLECOrVgVomhzyK4ipvEXkWosApEiQHPA= Subject key identifier: 72:B9:B9:34:69:63:F5:40:6F:86:D7:5C:EE:BC:31:EE:E6:20:10:AE Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E389F074ECD863EF15D8A7DFB640C6D Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/crm5NGlj9UBvhtdc7rwx7uYgEK4.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200682 IP address blocks: 84.207.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:55:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9f:07:4e:cd:86:3e:f1:5d:8a:7d:fb:64:0c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72b9b9346963f5406f86d75ceebc31eee62010ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:e6:d0:07:99:4b:14:3a:2d:95:de:5b:02: e1:d6:1a:2e:87:68:4a:1f:02:02:a0:86:43:c7:a2: df:e4:29:d8:bb:1b:72:c3:0f:ba:63:e6:99:5e:6c: 5f:f0:fa:e1:52:40:f2:50:76:1a:4a:ef:fc:89:32: 81:44:d4:e8:99:39:24:f8:9b:b6:81:d1:c8:f0:d3: 3b:90:23:49:55:5a:cb:65:e7:67:09:56:89:03:04: 7a:3a:f6:8c:c2:f6:c8:a8:50:f7:6d:3b:bf:63:9e: 62:cd:a8:94:3c:ed:52:e0:11:b3:9f:fb:01:07:2c: ed:fb:ce:4c:a9:a6:ca:49:06:f6:4b:91:c0:39:70: b1:d0:bc:77:11:44:41:8e:fc:7a:e6:7d:8c:08:34: b7:db:3d:b1:60:46:f6:b9:c8:d8:43:30:3d:24:13: 52:68:11:c7:da:cb:3b:73:bc:d8:ab:68:3b:21:ba: 5d:00:85:a5:be:aa:d8:2b:04:6d:69:45:e3:08:b4: 0a:09:8e:ee:7e:50:e3:fb:17:3e:77:ef:4e:08:b2: b9:3f:e3:95:37:4a:10:f1:95:58:bd:f9:e1:33:fa: 98:fe:de:28:d6:79:7e:53:b0:50:4a:16:e0:96:e7: 39:76:5f:d2:74:d5:30:3d:c1:2d:00:53:9d:b2:05: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B9:B9:34:69:63:F5:40:6F:86:D7:5C:EE:BC:31:EE:E6:20:10:AE X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/crm5NGlj9UBvhtdc7rwx7uYgEK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.207.247.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:e7:d5:22:9e:be:d8:5f:79:18:d6:38:9d:13:64:8d:44:e4: b9:b6:67:06:83:5b:f0:c8:b1:39:49:da:df:03:c2:a4:79:84: 55:21:45:89:46:ce:6b:b4:20:ee:3a:4d:72:64:28:ad:2b:0b: 7e:32:22:e4:15:3e:d3:c5:9c:a3:5f:e6:88:92:f1:f2:32:d1: 8b:03:ba:e2:cd:1e:44:35:6a:2e:9b:c4:67:fa:a0:cd:81:78: 21:b0:f2:8f:d8:9f:74:0a:31:8c:3f:76:64:7a:8f:a9:a0:c8: 1c:29:64:57:c0:7a:d6:a5:59:ec:59:80:cc:8b:85:ee:67:c4: d5:c9:46:66:b1:d6:c1:e0:32:8d:73:d4:75:95:f4:be:85:de: 18:38:d4:2b:81:f4:2b:bf:a6:23:37:f3:b8:d0:2e:7a:fb:b2: 8c:42:82:5d:07:36:c4:2d:2f:ef:8f:11:a9:10:41:6f:8c:17: 5d:df:04:9a:35:bb:78:2b:97:c7:00:97:1d:0b:1b:26:31:0f: 75:24:25:e7:7f:1d:cb:71:50:1e:84:a6:76:34:33:0f:be:f1: ea:e6:ce:b2:ca:d2:9d:c5:e7:1a:16:88:13:db:c9:12:92:f1: 35:cd:c1:91:98:e9:ed:54:89:3c:af:5a:24:ba:c5:d7:57:e1: 96:9d:2f:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJ8HTs2GPvFdin37ZAxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmI5YjkzNDY5NjNmNTQwNmY4NmQ3NWNlZWJjMzFlZWU2MjAxMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1I/m0AeZSxQ6LZXeWwLh1houh2hK HwICoIZDx6Lf5CnYuxtyww+6Y+aZXmxf8PrhUkDyUHYaSu/8iTKBRNTomTkk+Ju2 gdHI8NM7kCNJVVrLZednCVaJAwR6OvaMwvbIqFD3bTu/Y55izaiUPO1S4BGzn/sB Byzt+85MqabKSQb2S5HAOXCx0Lx3EURBjvx65n2MCDS32z2xYEb2ucjYQzA9JBNS aBHH2ss7c7zYq2g7IbpdAIWlvqrYKwRtaUXjCLQKCY7uflDj+xc+d+9OCLK5P+OV N0oQ8ZVYvfnhM/qY/t4o1nl+U7BQShbgluc5dl/SdNUwPcEtAFOdsgXLhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHK5uTRpY/VAb4bXXO68Me7mIBCuMB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvY3JtNU5HbGo5VUJ2aHRkYzdyd3g3dVlnRUs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVM/3MA0G CSqGSIb3DQEBCwUAA4IBAQBb59Uinr7YX3kY1jidE2SNROS5tmcGg1vwyLE5Sdrf A8KkeYRVIUWJRs5rtCDuOk1yZCitKwt+MiLkFT7TxZyjX+aIkvHyMtGLA7rizR5E NWoum8Rn+qDNgXghsPKP2J90CjGMP3Zkeo+poMgcKWRXwHrWpVnsWYDMi4XuZ8TV yUZmsdbB4DKNc9R1lfS+hd4YONQrgfQrv6YjN/O40C56+7KMQoJdBzbELS/vjxGp EEFvjBdd3wSaNbt4K5fHAJcdCxsmMQ91JCXnfx3LcVAehKZ2NDMPvvHq5s6yytKd xecaFogT28kSkvE1zcGRmOntVIk8r1okusXXV+GWnS+d -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:21 2026 by rpki-client