This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/CfZQ5f2U-PTexk4plOrVmUR8SVo.roa File: CfZQ5f2U-PTexk4plOrVmUR8SVo.roa (raw, json) Hash identifier: S+1++wq6+OUaKhTshD4b393Lz17gGEyD5GzsQU3qNMc= Subject key identifier: 09:F6:50:E5:FD:94:F8:F4:DE:C6:4E:29:94:EA:D5:99:44:7C:49:5A Certificate issuer: /CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7 Certificate serial: 019B7C80CDF3DFDBB3522993DA1AA3BDAEF2 Authority key identifier: 2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/CfZQ5f2U-PTexk4plOrVmUR8SVo.roa Signing time: Fri 02 Jan 2026 02:19:34 +0000 ROA not before: Fri 02 Jan 2026 02:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20724 IP address blocks: 193.109.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.mft rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:cd:f3:df:db:b3:52:29:93:da:1a:a3:bd:ae:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b4ddfa3bbf15bc1db85d83799a01b9869ad5ce7 Validity Not Before: Jan 2 02:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09f650e5fd94f8f4dec64e2994ead599447c495a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7f:29:b7:6a:60:c2:b3:71:1b:ce:1d:5f:55: 80:3d:7f:3b:41:b2:e8:96:99:bc:cb:7f:55:cb:7c: 56:6a:74:c4:cf:7f:d9:b8:d5:62:61:62:9b:e6:06: 88:e5:33:49:0d:fd:8e:07:bb:ac:70:9b:c9:0a:c1: cf:4d:7d:03:a7:54:8d:a8:95:20:bf:36:c2:40:8d: 52:fe:c7:43:1b:17:4a:a1:f0:ff:e4:7c:50:a4:9a: 36:27:0e:71:83:29:ea:82:fe:70:c4:39:3c:99:e4: 94:d9:02:b7:96:3d:a3:a2:0b:42:86:75:9c:5e:64: 33:b4:66:83:a4:87:d6:23:d7:f3:d8:b6:4b:93:05: ae:f0:d8:00:f6:ca:19:05:56:6c:29:cc:53:55:4f: 28:e6:9a:19:aa:9b:ea:6c:5a:15:1b:9a:0e:bf:cf: 22:1f:20:d1:85:e4:b1:4a:d2:15:8d:3e:de:3a:dc: 7a:69:b8:17:c7:ca:27:ea:94:09:fa:e7:68:62:b4: 96:a6:74:3f:9d:fe:a8:df:00:d4:c1:38:39:0b:80: fe:20:29:cb:90:27:56:69:66:2f:c9:0a:18:7e:24: c3:a6:74:94:9c:69:4b:e1:c0:1e:6c:6e:75:a3:bd: aa:1d:6f:4e:99:d4:e9:8e:c6:c0:40:0a:aa:da:ae: 85:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F6:50:E5:FD:94:F8:F4:DE:C6:4E:29:94:EA:D5:99:44:7C:49:5A X509v3 Authority Key Identifier: keyid:2B:4D:DF:A3:BB:F1:5B:C1:DB:85:D8:37:99:A0:1B:98:69:AD:5C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K03fo7vxW8Hbhdg3maAbmGmtXOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/CfZQ5f2U-PTexk4plOrVmUR8SVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a12116-223c-4311-821e-fe8aea5d40a7/1/K03fo7vxW8Hbhdg3maAbmGmtXOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:78:9d:6c:d1:57:9f:cb:ab:0b:58:29:92:cd:33:35:06:14: 56:2a:ec:b9:85:b8:08:00:38:28:1a:ef:73:c1:8c:86:2c:5c: 92:c6:5d:f7:04:ad:9b:e6:00:6e:a8:f1:42:51:58:68:fd:8f: d8:07:05:cc:9f:93:5b:2c:70:dd:4a:3d:2d:de:db:cb:28:32: 02:02:e3:97:fa:9d:b0:04:28:22:b1:10:06:2f:18:77:5f:5e: 2e:d6:ec:d0:79:88:60:a9:40:45:2f:3a:fc:09:f2:62:40:e8: bb:4d:ab:d6:8b:63:e0:78:21:9c:6b:69:34:00:e2:34:9d:28: 4f:85:51:b4:d3:01:d1:fd:96:f1:fc:ad:58:c6:e0:24:e6:ad: d7:22:9f:82:7e:b9:cc:d1:f7:08:40:54:3b:98:24:7a:d8:b7: 40:73:21:27:3e:da:35:06:53:71:14:67:b7:32:36:f8:50:9d: f7:72:3d:08:3d:ec:d6:57:4b:0b:30:a2:b6:6a:21:a0:67:69: 80:11:8b:bb:91:6a:dc:bc:8c:25:41:9c:cb:de:32:58:c7:db: 04:08:a0:a4:5b:60:5b:73:da:39:68:1c:7a:85:9e:0c:65:93: 94:e0:83:e7:cb:55:8c:14:25:69:6e:27:44:f6:ea:a3:33:ec: 36:fa:2a:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gM3z39uzUimT2hqjva7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNGRkZmEzYmJmMTViYzFkYjg1ZDgzNzk5YTAxYjk4Njlh ZDVjZTcwHhcNMjYwMTAyMDIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWY2NTBlNWZkOTRmOGY0ZGVjNjRlMjk5NGVhZDU5OTQ0N2M0OTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn8pt2pgwrNxG84dX1WAPX87QbLo lpm8y39Vy3xWanTEz3/ZuNViYWKb5gaI5TNJDf2OB7uscJvJCsHPTX0Dp1SNqJUg vzbCQI1S/sdDGxdKofD/5HxQpJo2Jw5xgynqgv5wxDk8meSU2QK3lj2jogtChnWc XmQztGaDpIfWI9fz2LZLkwWu8NgA9soZBVZsKcxTVU8o5poZqpvqbFoVG5oOv88i HyDRheSxStIVjT7eOtx6abgXx8on6pQJ+udoYrSWpnQ/nf6o3wDUwTg5C4D+ICnL kCdWaWYvyQoYfiTDpnSUnGlL4cAebG51o72qHW9OmdTpjsbAQAqq2q6F8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAn2UOX9lPj03sZOKZTq1ZlEfElaMB8GA1UdIwQY MBaAFCtN36O78VvB24XYN5mgG5hprVznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUt ZmU4YWVhNWQ0MGE3LzEvQ2ZaUTVmMlUtUFRleGs0cGxPclZtVVI4U1ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hMTIxMTYtMjIzYy00MzExLTgyMWUtZmU4YWVhNWQ0MGE3 LzEvSzAzZm83dnhXOEhiaGRnM21hQWJtR210WE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW39MA0G CSqGSIb3DQEBCwUAA4IBAQA8eJ1s0Vefy6sLWCmSzTM1BhRWKuy5hbgIADgoGu9z wYyGLFySxl33BK2b5gBuqPFCUVho/Y/YBwXMn5NbLHDdSj0t3tvLKDICAuOX+p2w BCgisRAGLxh3X14u1uzQeYhgqUBFLzr8CfJiQOi7TavWi2PgeCGca2k0AOI0nShP hVG00wHR/Zbx/K1YxuAk5q3XIp+CfrnM0fcIQFQ7mCR62LdAcyEnPto1BlNxFGe3 Mjb4UJ33cj0IPezWV0sLMKK2aiGgZ2mAEYu7kWrcvIwlQZzL3jJYx9sECKCkW2Bb c9o5aBx6hZ4MZZOU4IPny1WMFCVpbidE9uqjM+w2+ioE -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:50 2026 by rpki-client