This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa File: CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa (raw, json) Hash identifier: /5wTY3Au8nodbJrzfE4opPFUcgrAfS3BmM1XuaMh8Fg= Subject key identifier: 09:F8:EA:42:AA:4F:0E:70:61:1F:EA:74:94:02:2B:04:88:4D:81:8F Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15 Certificate serial: 019B7A5B22282C8E0FA30A72398A68B3CA9D Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa Signing time: Thu 01 Jan 2026 16:19:11 +0000 ROA not before: Thu 01 Jan 2026 16:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35393 IP address blocks: 46.255.160.0/21 maxlen: 24 91.207.254.0/23 maxlen: 24 185.100.4.0/22 maxlen: 24 194.110.192.0/24 maxlen: 24 195.144.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:22:28:2c:8e:0f:a3:0a:72:39:8a:68:b3:ca:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15 Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09f8ea42aa4f0e70611fea7494022b04884d818f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:6b:5c:5f:bb:85:b4:18:86:50:07:bd:cd: d9:e2:c9:3f:30:c4:80:fd:ca:83:b5:1c:f3:01:82: 09:66:d5:a6:73:35:aa:19:f6:0f:d5:ec:eb:50:17: f8:cb:b0:99:f0:6a:30:53:e5:78:fc:aa:be:13:71: 1d:28:87:36:1e:73:22:71:29:f9:d1:0a:93:7b:c1: 62:4d:6a:18:b5:c4:87:7d:9e:5c:0e:9c:ef:a6:06: c8:eb:e9:bb:e3:d5:92:95:2e:d9:1b:b9:6e:56:b1: 84:3f:0a:90:8b:a8:88:49:19:04:8c:c1:5e:89:29: 35:b6:4f:53:51:6b:98:e0:48:34:80:6d:da:8b:90: f6:80:1e:ca:60:06:b3:1f:99:f6:06:d5:67:e3:2a: 3b:48:5c:1e:b4:86:2f:fa:b3:ef:ef:4e:11:be:66: dd:23:da:0a:93:f1:88:80:0e:f0:aa:17:55:bd:db: d7:22:84:f4:92:47:da:87:cb:da:86:3c:01:52:f2: 56:d6:6f:bb:25:c4:08:22:4c:bb:cc:d2:27:67:df: 8b:b9:8d:f1:8c:20:47:41:ee:d9:bb:0b:e8:66:cc: 0c:03:5e:06:91:eb:be:8e:6d:59:88:10:8e:6a:31: 78:a8:fb:3e:8d:96:cd:6f:c6:12:64:f0:95:91:87: 8b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F8:EA:42:AA:4F:0E:70:61:1F:EA:74:94:02:2B:04:88:4D:81:8F X509v3 Authority Key Identifier: keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.160.0/21 91.207.254.0/23 185.100.4.0/22 194.110.192.0/24 195.144.11.0/24 Signature Algorithm: sha256WithRSAEncryption 83:71:b3:60:36:aa:15:88:e1:d9:3f:6a:59:45:3a:55:d8:3d: 74:85:6c:d1:8b:60:e2:7c:e2:a5:f7:bd:a3:8a:8b:a1:3e:58: b1:a9:ac:c6:de:c5:95:ed:b9:5d:ac:b5:9c:7c:59:cf:20:93: fd:70:f3:13:8f:99:c8:9d:7f:91:84:57:6a:34:1a:7b:19:cf: 20:81:9c:89:c3:3e:09:b4:61:00:78:5a:02:d5:36:40:40:82: 91:c3:9a:ac:05:46:48:ec:94:9a:59:bc:25:28:e3:d5:d8:b7: a1:c7:5f:8e:f8:ed:90:ec:5a:31:7f:95:8b:1d:d5:bf:f5:e3: 79:e6:0c:b2:ff:b2:0c:17:ab:6b:32:d7:83:62:0c:f6:55:ba: 6b:34:17:60:19:bb:b7:83:fe:22:52:74:53:37:14:ba:92:75: 7b:ad:91:e7:6a:44:8f:6d:c1:50:a6:bd:17:85:f7:b4:c4:89: f9:97:be:bc:e2:ba:e9:79:89:84:49:f1:77:61:78:83:e3:c7: 2e:e3:4a:01:37:56:69:10:b2:8e:8f:ea:92:92:a7:98:f5:8f: c0:05:9a:7b:54:fc:dd:85:de:3e:d7:40:8d:e6:7c:27:80:8c: 7f:7d:80:09:0c:65:30:8a:ba:77:e6:97:36:87:54:1e:b7:3c: ec:bb:64:2f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6WyIoLI4PowpyOYpos8qdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MDk2MjAzNWM1ZTk1MTAxM2NhMDY3MGNhNTY5ZTc5Zjhk NjNjMTUwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWY4ZWE0MmFhNGYwZTcwNjExZmVhNzQ5NDAyMmIwNDg4NGQ4MThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8VrXF+7hbQYhlAHvc3Z4sk/MMSA /cqDtRzzAYIJZtWmczWqGfYP1ezrUBf4y7CZ8GowU+V4/Kq+E3EdKIc2HnMicSn5 0QqTe8FiTWoYtcSHfZ5cDpzvpgbI6+m749WSlS7ZG7luVrGEPwqQi6iISRkEjMFe iSk1tk9TUWuY4Eg0gG3ai5D2gB7KYAazH5n2BtVn4yo7SFwetIYv+rPv704Rvmbd I9oKk/GIgA7wqhdVvdvXIoT0kkfah8vahjwBUvJW1m+7JcQIIky7zNInZ9+LuY3x jCBHQe7ZuwvoZswMA14Gkeu+jm1ZiBCOajF4qPs+jZbNb8YSZPCVkYeL9wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAn46kKqTw5wYR/qdJQCKwSITYGPMB8GA1UdIwQY MBaAFNUJYgNcXpUQE8oGcMpWnnn41jwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kNGU4ZTktMGQ0Ny00MTliLWIzZTIt MDU0YTM2MzExNWY1LzEvQ2ZqcVFxcFBEbkJoSC1wMGxBSXJCSWhOZ1k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9kNGU4ZTktMGQ0Ny00MTliLWIzZTItMDU0YTM2MzExNWY1 LzEvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDLv+gAwQB W8/+AwQCuWQEAwQAwm7AAwQAw5ALMA0GCSqGSIb3DQEBCwUAA4IBAQCDcbNgNqoV iOHZP2pZRTpV2D10hWzRi2DifOKl972jiouhPlixqazG3sWV7bldrLWcfFnPIJP9 cPMTj5nInX+RhFdqNBp7Gc8ggZyJwz4JtGEAeFoC1TZAQIKRw5qsBUZI7JSaWbwl KOPV2Lehx1+O+O2Q7Foxf5WLHdW/9eN55gyy/7IMF6trMteDYgz2VbprNBdgGbu3 g/4iUnRTNxS6knV7rZHnakSPbcFQpr0Xhfe0xIn5l7684rrpeYmESfF3YXiD48cu 40oBN1ZpELKOj+qSkqeY9Y/ABZp7VPzdhd4+10CN5nwngIx/fYAJDGUwirp35pc2 h1Qetzzsu2Qv -----END CERTIFICATE-----Generated at Mon Jan 26 12:21:10 2026 by rpki-client