This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa File: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (raw, json) Hash identifier: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI= Subject key identifier: 70:53:64:A4:10:48:E9:08:31:9A:A5:DD:37:1C:84:E2:2D:D9:5A:74 Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Certificate serial: 019B77588C11250B5528BB55AEBC6C800EEB Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa Signing time: Thu 01 Jan 2026 02:17:30 +0000 ROA not before: Thu 01 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196716 IP address blocks: 91.213.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:8c:11:25:0b:55:28:bb:55:ae:bc:6c:80:0e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87 Validity Not Before: Jan 1 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=705364a41048e908319aa5dd371c84e22dd95a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:57:6e:7e:cb:86:19:75:fa:3a:32:e5:50:c7: 54:b3:f3:84:57:07:6b:bb:47:94:3f:17:50:98:89: 48:b3:0b:a0:4f:7d:40:a8:38:49:de:fc:14:a1:07: 87:38:36:a5:36:b1:b3:bc:70:cc:43:82:82:ac:c2: 45:3e:60:1c:85:f0:f6:45:e1:e5:40:25:92:23:6b: f9:e1:6c:fe:ba:c8:3c:2c:18:02:c1:b2:ca:58:4e: f0:20:8a:57:6f:48:2f:0e:78:21:d1:fc:e0:14:c9: 70:b0:2c:c5:c6:3a:ba:a7:1a:fb:09:fc:94:14:81: 9c:b0:9b:f6:04:8d:db:fe:45:08:b1:54:fd:96:bf: 70:88:2e:59:ce:57:1a:50:f8:83:83:23:92:74:4a: 22:96:d2:30:cb:a1:b0:13:f6:40:8f:0b:21:a6:ea: 16:ca:ea:ef:dc:72:8b:21:79:e0:8e:85:b2:d7:90: 85:b2:83:54:17:d0:16:e0:7c:f7:79:81:65:c8:48: dd:16:f5:2d:47:b3:39:e7:c5:c2:59:85:00:71:41: 8e:66:21:a4:4d:8a:e4:6f:e9:c0:ac:04:d5:4b:e3: 56:b8:03:2f:e5:c6:80:6c:07:3f:14:e2:87:04:12: 42:1e:7b:61:4f:8a:e3:29:7e:b7:83:b7:1a:32:7a: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:64:A4:10:48:E9:08:31:9A:A5:DD:37:1C:84:E2:2D:D9:5A:74 X509v3 Authority Key Identifier: keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.125.0/24 Signature Algorithm: sha256WithRSAEncryption 54:d9:42:20:40:41:b6:a4:fc:e8:26:d3:ba:57:53:85:f7:bf: fe:07:83:f8:16:b4:b9:5a:b9:26:cb:93:d3:a7:26:df:3a:92: c4:7c:f0:e8:95:33:24:38:bb:08:ff:fa:45:df:75:ba:7f:f6: 22:f2:cf:0b:dc:88:60:98:38:4e:8c:77:b4:88:b6:ef:cf:85: d5:00:28:71:7d:b6:fd:c8:d8:ce:8d:6c:b1:e6:84:8c:da:28: 4e:40:d0:16:ad:8f:1c:b6:a1:69:8b:e1:60:a2:b8:ba:d6:dd: f5:10:b5:e6:99:48:79:bb:d5:9a:1e:dc:9b:19:9a:85:9b:18: ad:7f:43:5b:a4:b7:55:c2:71:21:ed:70:03:6b:13:91:2e:0d: 79:52:aa:dd:eb:3f:31:63:22:20:67:d0:0b:68:4c:53:1a:ee: 80:31:42:f0:b4:1f:ff:f9:4c:0a:e3:b4:4f:d3:5a:62:42:f6: ce:bb:41:3f:77:68:76:63:0a:6c:d4:75:1e:db:28:da:51:c3: 56:c2:29:bc:31:53:8c:d6:dc:c5:40:01:74:4f:cc:4e:f5:a7: c0:49:d0:1f:07:20:26:2d:00:f4:49:4a:ad:da:15:c9:37:79: fe:6c:76:cb:e7:67:f2:f6:29:fd:3f:3e:d9:66:94:f0:5a:fc: 3f:58:89:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WIwRJQtVKLtVrrxsgA7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwOGUyMzhlMzBkY2I3NTk3NTlmYjhhMzk0ZDllMjExYTI4 YjlkODcwHhcNMjYwMTAxMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDUzNjRhNDEwNDhlOTA4MzE5YWE1ZGQzNzFjODRlMjJkZDk1YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVdufsuGGXX6OjLlUMdUs/OEVwdr u0eUPxdQmIlIswugT31AqDhJ3vwUoQeHODalNrGzvHDMQ4KCrMJFPmAchfD2ReHl QCWSI2v54Wz+usg8LBgCwbLKWE7wIIpXb0gvDngh0fzgFMlwsCzFxjq6pxr7CfyU FIGcsJv2BI3b/kUIsVT9lr9wiC5ZzlcaUPiDgyOSdEoiltIwy6GwE/ZAjwshpuoW yurv3HKLIXngjoWy15CFsoNUF9AW4Hz3eYFlyEjdFvUtR7M558XCWYUAcUGOZiGk TYrkb+nArATVS+NWuAMv5caAbAc/FOKHBBJCHnthT4rjKX63g7caMnq+jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHBTZKQQSOkIMZql3TcchOIt2Vp0MB8GA1UdIwQY MBaAFICOI44w3LdZdZ+4o5TZ4hGii52HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDkt Y2Q5NzQwNDI2NDlmLzEvY0ZOa3BCQkk2UWd4bXFYZE54eUU0aTNaV25RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83YjJjZDYtYjFmMy00M2ZjLTlmMDktY2Q5NzQwNDI2NDlm LzEvZ0k0ampqRGN0MWwxbjdpamxObmlFYUtMblljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9V9MA0G CSqGSIb3DQEBCwUAA4IBAQBU2UIgQEG2pPzoJtO6V1OF97/+B4P4FrS5Wrkmy5PT pybfOpLEfPDolTMkOLsI//pF33W6f/Yi8s8L3IhgmDhOjHe0iLbvz4XVAChxfbb9 yNjOjWyx5oSM2ihOQNAWrY8ctqFpi+Fgori61t31ELXmmUh5u9WaHtybGZqFmxit f0NbpLdVwnEh7XADaxORLg15Uqrd6z8xYyIgZ9ALaExTGu6AMULwtB//+UwK47RP 01piQvbOu0E/d2h2Ywps1HUe2yjaUcNWwim8MVOM1tzFQAF0T8xO9afASdAfByAm LQD0SUqt2hXJN3n+bHbL52fy9in9Pz7ZZpTwWvw/WIlt -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:40 2026 by rpki-client