This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/CFgzsXECwMiDOwIfWrN0I3tIDWI.roa File: CFgzsXECwMiDOwIfWrN0I3tIDWI.roa (raw, json) Hash identifier: 4jxaJz34clPFCvVztYmXdTaBL83us4edb+/DIMlX2XY= Subject key identifier: 08:58:33:B1:71:02:C0:C8:83:3B:02:1F:5A:B3:74:23:7B:48:0D:62 Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0 Certificate serial: 019B7C131F8A867B1311314039927635010C Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/CFgzsXECwMiDOwIfWrN0I3tIDWI.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 185.184.172.0/23 maxlen: 23 185.184.172.0/24 maxlen: 24 185.184.173.0/24 maxlen: 24 185.184.174.0/23 maxlen: 23 185.191.252.0/23 maxlen: 23 185.191.254.0/23 maxlen: 23 185.236.244.0/24 maxlen: 24 185.236.245.0/24 maxlen: 24 185.236.246.0/24 maxlen: 24 185.236.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1f:8a:86:7b:13:11:31:40:39:92:76:35:01:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0 Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=085833b17102c0c8833b021f5ab374237b480d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:f5:8a:c1:d4:1c:f0:d0:06:26:71:4b:c0: 7f:9d:92:6b:4b:28:f0:17:b7:53:9f:b7:a4:b5:1d: 1c:b6:a8:c9:a4:c8:b1:db:be:81:9f:80:5f:93:25: 61:f8:15:89:11:5c:44:bd:ac:57:08:c9:35:8b:a0: f6:64:78:95:c6:78:60:5d:45:34:10:df:b7:00:00: 8a:1a:0a:ec:d8:37:ce:28:23:b8:e6:93:f6:a5:b2: 9d:9b:2a:c5:81:9b:18:52:4a:4a:50:52:8d:dd:35: 08:cb:5d:84:80:82:01:35:8c:c0:b3:b0:ee:30:d5: 6c:2f:98:11:6a:04:b6:69:a0:28:ac:6c:27:8a:87: ed:43:52:cd:07:e7:3d:c3:af:f2:12:fc:e7:32:18: b1:3c:76:6d:c7:a8:35:90:51:ad:ce:fa:b7:1d:ac: aa:2c:8b:72:f0:c8:0b:8d:b9:6f:74:a0:07:00:06: b3:75:e3:36:00:3d:cb:a7:a2:d5:30:0c:d3:63:65: 2f:6a:2b:c9:71:0d:f2:57:50:dc:28:35:3b:89:05: 59:2c:4d:28:eb:40:5a:46:26:1d:84:ff:8c:62:33: fa:2a:93:71:61:4b:9f:63:ee:a2:df:7c:7e:0a:cc: 6c:cc:11:05:32:b9:56:65:8b:e9:c7:1a:27:80:db: a3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:58:33:B1:71:02:C0:C8:83:3B:02:1F:5A:B3:74:23:7B:48:0D:62 X509v3 Authority Key Identifier: keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/CFgzsXECwMiDOwIfWrN0I3tIDWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.172.0/22 185.191.252.0/22 185.236.244.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:96:e0:d7:66:50:c3:6d:61:d4:5e:1e:e6:99:a0:54:0c:b3: b6:81:46:1d:91:4f:e1:b4:32:99:91:91:b8:7c:1f:d2:72:19: 73:7f:90:e4:7f:53:c2:f3:e2:7e:33:da:92:68:4e:21:85:41: 76:5b:4b:63:dd:88:6c:6f:24:6d:b7:74:e8:4a:b5:68:25:d8: cf:ca:bf:69:8f:75:02:6e:8f:db:27:9d:88:e0:54:8c:75:cb: 6e:71:7a:94:e5:a0:01:ce:2e:06:f3:db:bd:48:77:aa:7f:1d: 4d:52:79:82:c8:50:da:85:b7:ee:83:41:08:01:ac:b7:83:44: a3:7f:c5:b6:ef:89:54:74:52:d1:29:6a:f3:40:de:2d:29:5c: c5:ec:b2:2a:79:b5:24:91:42:92:5e:18:a8:4c:72:e4:99:d1: 96:d5:f7:b8:7e:0b:d2:d7:46:0d:46:72:ba:33:8d:6a:5e:16: 5b:94:40:44:09:1e:2f:b6:69:7e:ec:de:bd:65:27:98:73:f3: dc:87:9f:1b:48:56:86:b8:58:e4:57:0f:66:5a:74:97:5f:d7: 26:e8:76:fa:86:5a:77:d6:26:6b:00:7f:a9:84:ee:1d:2f:17: 62:78:38:13:ec:0a:26:a8:1d:cf:cf:37:40:8e:62:36:38:21: 7f:df:08:55 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8Ex+KhnsTETFAOZJ2NQEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGY4YmY4ZDAxMmEyNWNjY2VlMjEwNjgwM2Q3MDY0MzIw ZWQwZjAwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODU4MzNiMTcxMDJjMGM4ODMzYjAyMWY1YWIzNzQyMzdiNDgwZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRr1isHUHPDQBiZxS8B/nZJrSyjw F7dTn7ektR0ctqjJpMix276Bn4BfkyVh+BWJEVxEvaxXCMk1i6D2ZHiVxnhgXUU0 EN+3AACKGgrs2DfOKCO45pP2pbKdmyrFgZsYUkpKUFKN3TUIy12EgIIBNYzAs7Du MNVsL5gRagS2aaAorGwnioftQ1LNB+c9w6/yEvznMhixPHZtx6g1kFGtzvq3Hayq LIty8MgLjblvdKAHAAazdeM2AD3Lp6LVMAzTY2UvaivJcQ3yV1DcKDU7iQVZLE0o 60BaRiYdhP+MYjP6KpNxYUufY+6i33x+CsxszBEFMrlWZYvpxxongNujkwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAhYM7FxAsDIgzsCH1qzdCN7SA1iMB8GA1UdIwQY MBaAFCCPi/jQEqJczO4hBoA9cGQyDtDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEt ODA1NWVjMTBmZjBhLzEvQ0ZnenNYRUN3TWlET3dJZldyTjBJM3RJRFdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEtODA1NWVjMTBmZjBh LzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCubisAwQC ub/8AwQCuez0MA0GCSqGSIb3DQEBCwUAA4IBAQCLluDXZlDDbWHUXh7mmaBUDLO2 gUYdkU/htDKZkZG4fB/Schlzf5Dkf1PC8+J+M9qSaE4hhUF2W0tj3YhsbyRtt3To SrVoJdjPyr9pj3UCbo/bJ52I4FSMdctucXqU5aABzi4G89u9SHeqfx1NUnmCyFDa hbfug0EIAay3g0Sjf8W274lUdFLRKWrzQN4tKVzF7LIqebUkkUKSXhioTHLkmdGW 1fe4fgvS10YNRnK6M41qXhZblEBECR4vtml+7N69ZSeYc/Pch58bSFaGuFjkVw9m WnSXX9cm6Hb6hlp31iZrAH+phO4dLxdieDgT7AomqB3PzzdAjmI2OCF/3whV -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:35 2026 by rpki-client