This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/CFbM3tq8MZeSVuH7ugpIBzoNXRk.roa File: CFbM3tq8MZeSVuH7ugpIBzoNXRk.roa (raw, json) Hash identifier: s53gGWNu/HIfCRikza+XEGXk3HsEV8bGTQkrZadSqJc= Subject key identifier: 08:56:CC:DE:DA:BC:31:97:92:56:E1:FB:BA:0A:48:07:3A:0D:5D:19 Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Certificate serial: 019B7E37D8BE7EE97EAED8C2499A3A14C2EB Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/CFbM3tq8MZeSVuH7ugpIBzoNXRk.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62442 IP address blocks: 95.38.45.0/24 maxlen: 24 95.38.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d8:be:7e:e9:7e:ae:d8:c2:49:9a:3a:14:c2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0856ccdedabc31979256e1fbba0a48073a0d5d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:83:87:31:ba:aa:4b:28:32:3d:47:a6:0c:40: 9c:8e:d0:af:79:92:3e:9e:e8:f3:35:10:d7:c6:08: b9:f1:ae:4b:e8:9d:45:5d:d3:90:07:4c:0f:26:29: dc:f4:3a:90:3d:48:5c:b2:c7:33:a8:a7:fc:ab:78: ce:70:4b:36:0c:b3:eb:05:60:44:11:34:9a:74:92: 04:b6:1f:ff:9e:ce:33:c0:f6:2e:00:a2:d8:d6:58: 61:8c:38:08:78:03:58:40:90:9b:80:a0:f1:c2:20: 7e:5a:54:75:cf:dd:8b:6e:de:c2:75:82:9a:c0:6d: 37:49:dc:5d:74:8e:7e:40:4b:40:53:b5:20:1f:fa: b3:05:e7:37:b5:62:2e:a1:c6:70:fa:97:b8:2b:50: 5a:18:d7:3a:dd:ef:7b:3a:1f:ae:f9:fa:d0:6b:a8: 6e:6a:5b:b3:4d:6b:ee:d8:0b:fb:ba:fd:52:61:f9: f4:29:0a:04:86:95:83:46:c4:26:eb:c1:d8:7b:a6: 59:4b:ab:d4:4f:1c:e5:49:4a:c8:1e:94:d8:48:63: 48:0b:05:77:2c:16:a0:eb:87:fe:83:9d:ad:f3:b8: f0:65:4d:94:9a:9d:91:09:df:f8:6f:28:e0:51:0a: a3:01:7e:47:a9:1a:03:32:3f:02:a8:07:f0:1d:01: c4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:56:CC:DE:DA:BC:31:97:92:56:E1:FB:BA:0A:48:07:3A:0D:5D:19 X509v3 Authority Key Identifier: keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/CFbM3tq8MZeSVuH7ugpIBzoNXRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.38.45.0/24 95.38.198.0/24 Signature Algorithm: sha256WithRSAEncryption 31:e5:c2:0f:cd:27:13:8b:ac:89:46:ef:8a:8b:d9:4d:1b:b1: 3b:50:95:97:1c:fa:9e:d4:93:42:39:67:dc:da:0b:1c:81:66: a2:59:1f:32:b9:3d:5f:c3:4c:95:89:6c:13:78:6b:30:87:8f: 6a:78:3b:29:ec:c4:76:63:7a:b2:e3:83:d6:e7:d1:9c:a2:57: 6e:1e:2e:f6:b7:12:93:bf:19:8a:d5:e6:a6:ea:a8:b7:7a:54: 4a:91:11:8c:2c:ab:53:b0:cf:ce:a8:b6:51:2b:e8:db:89:61: e4:97:b6:b7:34:aa:13:f3:5d:47:81:86:3f:d8:c2:31:de:d8: 8a:c0:7f:64:52:9c:d6:22:3f:e4:08:d2:cc:35:86:60:89:24: 7d:ab:b0:fa:62:49:63:69:4e:96:93:6e:af:f5:b5:a6:d2:d1: 69:f7:be:ec:f5:8a:87:41:75:03:99:2c:71:6a:67:7a:ec:6e: de:9d:5e:3e:fe:77:45:f7:91:b2:56:95:9c:42:fc:dd:60:e2: ce:56:66:4a:5f:0b:0d:30:73:fb:54:85:91:64:d3:3a:6e:8c: f5:f8:e6:95:ec:f3:b6:13:23:78:5b:ac:34:77:c9:ab:2a:70: 4d:d8:98:13:e8:1a:fd:85:fd:a3:23:2d:7c:7c:51:f8:eb:a5: 58:d5:5d:1e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N9i+ful+rtjCSZo6FMLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYzEwNDA0MTY5MWRjMzg0ZjNiMWE4Y2RmOTVjOTY2Mjhl YTZkYWYwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODU2Y2NkZWRhYmMzMTk3OTI1NmUxZmJiYTBhNDgwNzNhMGQ1ZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIOHMbqqSygyPUemDECcjtCveZI+ nujzNRDXxgi58a5L6J1FXdOQB0wPJinc9DqQPUhcssczqKf8q3jOcEs2DLPrBWBE ETSadJIEth//ns4zwPYuAKLY1lhhjDgIeANYQJCbgKDxwiB+WlR1z92Lbt7CdYKa wG03SdxddI5+QEtAU7UgH/qzBec3tWIuocZw+pe4K1BaGNc63e97Oh+u+frQa6hu aluzTWvu2Av7uv1SYfn0KQoEhpWDRsQm68HYe6ZZS6vUTxzlSUrIHpTYSGNICwV3 LBag64f+g52t87jwZU2Ump2RCd/4byjgUQqjAX5HqRoDMj8CqAfwHQHEkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAhWzN7avDGXklbh+7oKSAc6DV0ZMB8GA1UdIwQY MBaAFPDBBAQWkdw4TzsajN+VyWYo6m2vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQt NjkxNDIyMzExNzI5LzEvQ0ZiTTN0cThNWmVTVnVIN3VncElCem9OWFJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ODljYWYtYzhkMi00MTllLWFlMDQtNjkxNDIyMzExNzI5 LzEvOE1FRUJCYVIzRGhQT3hxTTM1WEpaaWpxYmE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXyYtAwQA XybGMA0GCSqGSIb3DQEBCwUAA4IBAQAx5cIPzScTi6yJRu+Ki9lNG7E7UJWXHPqe 1JNCOWfc2gscgWaiWR8yuT1fw0yViWwTeGswh49qeDsp7MR2Y3qy44PW59Gcoldu Hi72txKTvxmK1eam6qi3elRKkRGMLKtTsM/OqLZRK+jbiWHkl7a3NKoT811HgYY/ 2MIx3tiKwH9kUpzWIj/kCNLMNYZgiSR9q7D6YkljaU6Wk26v9bWm0tFp977s9YqH QXUDmSxxamd67G7enV4+/ndF95GyVpWcQvzdYOLOVmZKXwsNMHP7VIWRZNM6boz1 +OaV7PO2EyN4W6w0d8mrKnBN2JgT6Br9hf2jIy18fFH466VY1V0e -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:40 2026 by rpki-client