This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/cf9iPIW_GsIusX6exn4UcQDqlXA.roa File: cf9iPIW_GsIusX6exn4UcQDqlXA.roa (raw, json) Hash identifier: +sl5mxSac5pwNGhyHjQIWLaVU45RJstzc+muzKpJdFo= Subject key identifier: 71:FF:62:3C:85:BF:1A:C2:2E:B1:7E:9E:C6:7E:14:71:00:EA:95:70 Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292 Certificate serial: 019B7E3779493AA17643CEA5331579DDE02A Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/cf9iPIW_GsIusX6exn4UcQDqlXA.roa Signing time: Fri 02 Jan 2026 10:18:43 +0000 ROA not before: Fri 02 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215826 IP address blocks: 83.217.208.0/24 maxlen: 24 83.217.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:79:49:3a:a1:76:43:ce:a5:33:15:79:dd:e0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292 Validity Not Before: Jan 2 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71ff623c85bf1ac22eb17e9ec67e147100ea9570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e5:79:9b:94:e0:73:66:b5:47:a6:f9:57:81: 39:54:b0:30:12:bf:6d:6f:f9:cc:2f:31:f1:1b:22: 0a:6f:5c:f1:f6:4c:0c:29:bb:7d:ec:aa:47:09:00: 54:b5:04:1e:33:eb:36:46:04:06:68:28:ee:f1:8b: ff:63:23:ff:cf:89:52:5d:cf:5a:12:eb:f5:8f:8a: 9e:4b:8e:b5:79:a3:2d:f1:74:ae:e1:fc:a5:f1:d8: 3e:a7:e2:c3:9a:06:a7:07:33:3a:fb:d8:a0:60:e7: 2f:94:57:7f:4e:a2:12:5f:8f:02:6e:e9:a8:db:7f: a5:d7:91:50:97:e0:6c:8b:91:b1:91:18:bf:bd:19: ed:11:3b:a2:7d:bf:cc:3e:3a:35:08:7a:06:f5:10: 5d:f4:ea:7a:6d:63:b7:8e:5c:9d:a2:99:63:8e:6a: af:96:7e:9f:fc:ae:f0:eb:fb:45:36:77:01:1e:9b: 2e:50:b0:3e:1d:6a:4c:b1:85:c8:5f:a8:c1:91:f7: d0:3b:48:97:2b:11:f9:3c:9d:32:a7:21:cc:0d:c7: 0d:a7:cf:f5:8b:62:ef:2d:88:1e:da:6a:f7:1e:ce: 45:fa:cb:0a:9b:ce:fe:43:5b:b3:e3:3b:2a:a4:d5: 95:47:16:e6:e7:99:88:e1:d5:0f:14:8e:de:e6:13: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FF:62:3C:85:BF:1A:C2:2E:B1:7E:9E:C6:7E:14:71:00:EA:95:70 X509v3 Authority Key Identifier: keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/cf9iPIW_GsIusX6exn4UcQDqlXA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.217.208.0/23 Signature Algorithm: sha256WithRSAEncryption 35:ee:77:85:c6:dd:80:96:1f:a8:32:c5:e2:2b:1c:e1:7d:61: 69:ae:40:60:2f:10:3f:2b:bd:a6:25:23:aa:89:0e:07:62:db: 8f:6d:16:b9:7a:79:b2:b2:0d:2b:2a:83:be:3f:7e:3b:5c:d7: be:e8:19:a9:a7:a9:35:a0:1c:3c:17:d8:a8:c3:6c:90:5b:71: 61:bc:dc:db:95:dc:10:14:81:ec:db:29:5c:47:32:4d:50:69: 1c:30:6f:00:73:8e:40:39:36:8b:95:ba:5e:1b:17:d9:9a:2b: 29:f6:e1:a2:80:bc:9d:2c:bb:c3:cb:c7:2d:66:95:ec:f1:33: 36:08:66:d8:72:05:0f:62:f5:4a:c1:18:60:5d:fe:f6:0f:56: d1:1c:83:38:9f:4c:fd:e7:56:68:95:15:47:c3:48:06:df:90: 98:c2:d8:13:bc:15:62:a2:8e:8c:25:0a:07:dc:cc:4a:67:c3: ab:80:f1:89:27:b7:1c:37:a2:1e:a4:9a:ba:fe:91:75:c4:bf: ea:79:3a:5e:ed:dc:42:d0:66:b0:4b:e5:87:2a:39:9f:b1:73: 49:04:f0:33:ed:41:49:3f:99:a3:cf:10:63:9c:9f:8d:e1:6b: a3:39:ce:98:a3:d5:1e:95:a1:63:19:55:9b:91:1b:c8:59:d5: f5:7c:fb:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N3lJOqF2Q86lMxV53eAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDE1NTgxODFmNzg2MzExOWJmNGExNTU0Yzc1ZGFiMWY2 YzUyOTIwHhcNMjYwMTAyMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWZmNjIzYzg1YmYxYWMyMmViMTdlOWVjNjdlMTQ3MTAwZWE5NTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OV5m5Tgc2a1R6b5V4E5VLAwEr9t b/nMLzHxGyIKb1zx9kwMKbt97KpHCQBUtQQeM+s2RgQGaCju8Yv/YyP/z4lSXc9a Euv1j4qeS461eaMt8XSu4fyl8dg+p+LDmganBzM6+9igYOcvlFd/TqISX48Cbumo 23+l15FQl+Bsi5GxkRi/vRntETuifb/MPjo1CHoG9RBd9Op6bWO3jlydopljjmqv ln6f/K7w6/tFNncBHpsuULA+HWpMsYXIX6jBkffQO0iXKxH5PJ0ypyHMDccNp8/1 i2LvLYge2mr3Hs5F+ssKm87+Q1uz4zsqpNWVRxbm55mI4dUPFI7e5hPY8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHH/YjyFvxrCLrF+nsZ+FHEA6pVwMB8GA1UdIwQY MBaAFLVBVYGB94YxGb9KFVTHXasfbFKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMt NTcxYjZjNjEyYmVjLzEvY2Y5aVBJV19Hc0l1c1g2ZXhuNFVjUURxbFhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMtNTcxYjZjNjEyYmVj LzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU9nQMA0G CSqGSIb3DQEBCwUAA4IBAQA17neFxt2Alh+oMsXiKxzhfWFprkBgLxA/K72mJSOq iQ4HYtuPbRa5enmysg0rKoO+P347XNe+6Bmpp6k1oBw8F9iow2yQW3FhvNzbldwQ FIHs2ylcRzJNUGkcMG8Ac45AOTaLlbpeGxfZmisp9uGigLydLLvDy8ctZpXs8TM2 CGbYcgUPYvVKwRhgXf72D1bRHIM4n0z951ZolRVHw0gG35CYwtgTvBVioo6MJQoH 3MxKZ8OrgPGJJ7ccN6IepJq6/pF1xL/qeTpe7dxC0GawS+WHKjmfsXNJBPAz7UFJ P5mjzxBjnJ+N4WujOc6Yo9UelaFjGVWbkRvIWdX1fPv+ -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:53 2026 by rpki-client