This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/cphFg1iNKGaqHHSqn4B1PMh4i3k.roa File: cphFg1iNKGaqHHSqn4B1PMh4i3k.roa (raw, json) Hash identifier: CS6t4yS3dAdL6oYmfo90GkG5Ay5V1qyLgzfsgwOA6Qg= Subject key identifier: 72:98:45:83:58:8D:28:66:AA:1C:74:AA:9F:80:75:3C:C8:78:8B:79 Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Certificate serial: 019BE56AA591AFF141098F04D4004A5B50A4 Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/cphFg1iNKGaqHHSqn4B1PMh4i3k.roa Signing time: Thu 22 Jan 2026 11:15:30 +0000 ROA not before: Thu 22 Jan 2026 11:15:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 86.109.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:6a:a5:91:af:f1:41:09:8f:04:d4:00:4a:5b:50:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Validity Not Before: Jan 22 11:15:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72984583588d2866aa1c74aa9f80753cc8788b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:d4:6e:e0:a5:63:91:05:25:c5:17:d7:e0: 06:25:44:89:2c:06:18:23:81:62:b3:78:b6:e8:04: f8:d8:96:10:66:f1:0f:10:45:5a:9f:93:4c:f9:fc: e2:94:18:79:68:6a:df:9f:5c:f5:14:ba:cb:81:04: af:4a:be:34:5d:7d:0b:af:c9:26:bc:6b:3b:56:cc: e6:6e:41:fc:d4:75:55:a3:0d:ab:11:ae:36:f9:ac: f1:26:59:bf:d0:a0:b7:54:19:3d:89:02:4e:bd:a2: 59:3e:df:6a:27:5e:fc:47:71:13:44:ea:8f:d5:06: d0:fe:ae:d1:c4:60:9a:32:14:cd:23:20:f4:67:d9: 1e:7f:37:27:6b:09:56:58:68:f0:60:c6:d1:da:4f: 10:52:d9:0d:c5:b0:78:fc:72:b8:5c:c1:d3:dd:78: c0:20:1a:06:89:5a:83:aa:38:81:f6:9b:56:ef:63: 52:c9:1f:b8:59:9f:db:6c:94:62:0c:f4:1e:9e:9b: cc:89:8b:3c:bf:48:c1:bf:30:32:30:a8:fd:4a:f9: 90:3d:80:0e:6f:5a:05:74:5f:f7:ba:db:c5:1a:fa: 97:0c:6f:bf:b3:a5:4e:d5:85:9d:c1:54:ae:04:13: d7:ce:f4:00:ca:f4:22:c6:77:7a:66:f4:40:01:b9: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:98:45:83:58:8D:28:66:AA:1C:74:AA:9F:80:75:3C:C8:78:8B:79 X509v3 Authority Key Identifier: keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/cphFg1iNKGaqHHSqn4B1PMh4i3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.109.74.0/24 Signature Algorithm: sha256WithRSAEncryption a7:9a:63:a1:71:b8:ed:e7:1e:0c:aa:84:a1:9d:7d:6d:8c:05: d1:0d:45:d4:49:1f:4c:02:16:17:7b:ef:89:ff:32:98:e7:48: e6:18:db:10:bd:71:32:04:41:26:96:27:33:02:24:6c:c1:3c: a9:a9:77:b9:69:7f:29:1c:ad:ea:03:e8:0c:ba:1e:d4:0a:cd: 64:6c:e4:bc:4c:24:9e:27:01:5c:a2:ff:27:74:19:ed:ff:f1: df:d9:a9:cc:f6:64:d8:28:9f:34:9e:ef:bd:c9:60:a8:c4:e3: 6d:6b:5f:22:19:28:12:02:2a:2c:46:e0:03:ad:7d:c1:30:3c: 85:ad:06:6b:05:13:a0:ee:89:89:41:6f:cd:38:1b:27:c5:05: 1e:8a:26:e2:91:da:bc:6b:3d:d5:74:be:0b:77:9e:b9:f8:b9: e2:35:73:f9:65:72:ac:64:b6:53:b8:15:74:31:78:5c:80:d7: 8a:1c:b5:e5:dd:1e:a7:cd:94:c3:85:a2:01:7d:3b:ab:28:88: 1a:d3:4f:07:34:a9:6b:eb:d4:18:c1:db:01:c9:20:13:f5:81: 9b:cc:0f:fe:9d:2c:f8:d7:32:9e:a6:b9:30:d5:3e:02:0c:59: b4:b0:c4:46:55:68:fd:f1:04:e2:bb:b5:f0:f0:e4:38:2e:f0: 06:24:ce:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvlaqWRr/FBCY8E1ABKW1CkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx ZDlkNjQwHhcNMjYwMTIyMTExNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjk4NDU4MzU4OGQyODY2YWExYzc0YWE5ZjgwNzUzY2M4Nzg4Yjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2/UbuClY5EFJcUX1+AGJUSJLAYY I4Fis3i26AT42JYQZvEPEEVan5NM+fzilBh5aGrfn1z1FLrLgQSvSr40XX0Lr8km vGs7VszmbkH81HVVow2rEa42+azxJlm/0KC3VBk9iQJOvaJZPt9qJ178R3ETROqP 1QbQ/q7RxGCaMhTNIyD0Z9kefzcnawlWWGjwYMbR2k8QUtkNxbB4/HK4XMHT3XjA IBoGiVqDqjiB9ptW72NSyR+4WZ/bbJRiDPQenpvMiYs8v0jBvzAyMKj9SvmQPYAO b1oFdF/3utvFGvqXDG+/s6VO1YWdwVSuBBPXzvQAyvQixnd6ZvRAAbm5GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHKYRYNYjShmqhx0qp+AdTzIeIt5MB8GA1UdIwQY MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut NDIyNTIzYzRlNjhiLzEvY3BoRmcxaU5LR2FxSEhTcW40QjFQTWg0aTNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm1KMA0G CSqGSIb3DQEBCwUAA4IBAQCnmmOhcbjt5x4MqoShnX1tjAXRDUXUSR9MAhYXe++J /zKY50jmGNsQvXEyBEEmliczAiRswTypqXe5aX8pHK3qA+gMuh7UCs1kbOS8TCSe JwFcov8ndBnt//Hf2anM9mTYKJ80nu+9yWCoxONta18iGSgSAiosRuADrX3BMDyF rQZrBROg7omJQW/NOBsnxQUeiibikdq8az3VdL4Ld565+LniNXP5ZXKsZLZTuBV0 MXhcgNeKHLXl3R6nzZTDhaIBfTurKIga008HNKlr69QYwdsBySAT9YGbzA/+nSz4 1zKeprkw1T4CDFm0sMRGVWj98QTiu7Xw8OQ4LvAGJM5g -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:27 2026 by rpki-client