This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/cfuyV7WY5uCzefphkg9dkFiDF4o.roa File: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (raw, json) Hash identifier: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M= Subject key identifier: 71:FB:B2:57:B5:98:E6:E0:B3:79:FA:61:92:0F:5D:90:58:83:17:8A Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d Certificate serial: 019B7C80665C27B1DCAA3CBBF647B8F17DBB Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/cfuyV7WY5uCzefphkg9dkFiDF4o.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28878 IP address blocks: 193.30.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:66:5c:27:b1:dc:aa:3c:bb:f6:47:b8:f1:7d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71fbb257b598e6e0b379fa61920f5d905883178a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f3:74:1d:fb:b3:5e:b1:f2:5f:ff:02:42:a3: b8:bb:15:32:4f:22:9d:0e:91:c7:4a:b9:fc:6f:e4: d3:df:41:d8:3d:3d:57:a2:12:17:05:7c:fe:43:6c: 57:65:f2:d8:2b:64:16:9e:82:a8:90:c9:fc:56:c9: 08:ba:fe:74:58:62:a5:e9:fc:d3:33:32:96:d9:be: db:49:25:5d:3c:43:e8:47:b8:d4:37:e2:76:1f:08: db:69:38:bc:92:e0:63:12:01:11:dd:73:0c:13:4c: 64:8d:08:a9:32:58:e1:68:86:3f:6d:a5:6b:be:79: 11:71:40:73:f1:1e:9f:40:52:ce:8b:d7:68:16:e1: 90:d8:11:79:c2:9a:ba:09:20:40:85:d4:9a:5c:e8: aa:c5:5f:a2:8e:41:4f:57:66:8a:52:6a:b8:c1:b9: b6:74:45:c4:5f:af:58:de:ed:25:b2:a9:8c:df:ab: f6:61:7c:9a:5c:43:ec:2a:a5:f6:b7:b5:69:ff:09: 3b:79:e3:ec:91:8a:0d:51:7f:7a:31:3b:d5:65:24: bb:a3:5d:f8:ea:e7:88:e0:af:36:47:75:25:35:90: 5f:50:84:cf:a5:a4:7f:66:f9:91:60:ca:cb:2f:d8: ff:e1:94:a4:f5:fb:1c:1a:aa:a8:b3:f0:00:9a:17: ef:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FB:B2:57:B5:98:E6:E0:B3:79:FA:61:92:0F:5D:90:58:83:17:8A X509v3 Authority Key Identifier: keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/cfuyV7WY5uCzefphkg9dkFiDF4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.30.170.0/24 Signature Algorithm: sha256WithRSAEncryption a8:ff:d7:c1:48:bd:12:e4:e9:c9:5f:b2:45:ee:e4:03:e7:22: 18:07:25:35:cf:4f:4f:7f:11:62:41:3a:2f:0d:69:aa:86:34: 3b:58:df:e5:15:52:7b:81:07:e3:bd:8a:98:dd:d3:89:09:1b: 00:0a:e8:23:6d:6e:a9:1f:44:6b:13:c1:d6:0d:ee:a8:2f:de: b1:42:30:01:26:b8:f6:16:76:29:e2:b0:1f:bc:e3:93:d9:c8: c3:25:44:aa:e8:2e:e5:3a:81:c6:be:9b:92:ac:33:06:2f:b7: 6b:d3:0d:c2:e2:3c:51:b6:f7:7a:de:a1:6b:5b:75:8c:a7:78: cd:dc:2b:a5:72:4d:00:cb:e8:bc:a4:cf:41:53:b8:84:42:e5: a4:b7:91:29:f6:47:01:0a:ef:ca:cb:79:f1:7f:87:10:98:da: a9:44:5a:58:8e:bb:2e:47:74:d7:50:91:a9:2f:91:6f:85:4b: 4e:b1:c5:ea:cd:48:2b:93:7b:01:0a:7f:84:1b:4f:ae:78:ac: b0:19:fb:5a:23:d0:68:30:0b:dd:42:dd:6e:8a:eb:5d:11:7c: 33:94:2f:d2:f9:db:5b:8a:f9:3f:dd:5e:21:06:46:55:2e:b9: 41:5f:6a:32:5e:70:e7:9f:e3:7b:6a:b0:7e:3c:49:20:43:30: ea:79:7e:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gGZcJ7Hcqjy79ke48X27MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDEzNGZhZmJhNzJlMDYzMzljYWRjNTVkNWYxM2JhZTQ4 MmIxMmQwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWZiYjI1N2I1OThlNmUwYjM3OWZhNjE5MjBmNWQ5MDU4ODMxNzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvN0HfuzXrHyX/8CQqO4uxUyTyKd DpHHSrn8b+TT30HYPT1XohIXBXz+Q2xXZfLYK2QWnoKokMn8VskIuv50WGKl6fzT MzKW2b7bSSVdPEPoR7jUN+J2HwjbaTi8kuBjEgER3XMME0xkjQipMljhaIY/baVr vnkRcUBz8R6fQFLOi9doFuGQ2BF5wpq6CSBAhdSaXOiqxV+ijkFPV2aKUmq4wbm2 dEXEX69Y3u0lsqmM36v2YXyaXEPsKqX2t7Vp/wk7eePskYoNUX96MTvVZSS7o134 6ueI4K82R3UlNZBfUITPpaR/ZvmRYMrLL9j/4ZSk9fscGqqos/AAmhfvdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHH7sle1mObgs3n6YZIPXZBYgxeKMB8GA1UdIwQY MBaAFA4BNPr7py4GM5ytxV1fE7rkgrEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzct ZDEyNDZjYzJjMzRlLzEvY2Z1eVY3V1k1dUN6ZWZwaGtnOWRrRmlERjRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzctZDEyNDZjYzJjMzRl LzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR6qMA0G CSqGSIb3DQEBCwUAA4IBAQCo/9fBSL0S5OnJX7JF7uQD5yIYByU1z09PfxFiQTov DWmqhjQ7WN/lFVJ7gQfjvYqY3dOJCRsACugjbW6pH0RrE8HWDe6oL96xQjABJrj2 FnYp4rAfvOOT2cjDJUSq6C7lOoHGvpuSrDMGL7dr0w3C4jxRtvd63qFrW3WMp3jN 3Culck0Ay+i8pM9BU7iEQuWkt5Ep9kcBCu/Ky3nxf4cQmNqpRFpYjrsuR3TXUJGp L5FvhUtOscXqzUgrk3sBCn+EG0+ueKywGftaI9BoMAvdQt1uiutdEXwzlC/S+dtb ivk/3V4hBkZVLrlBX2oyXnDnn+N7arB+PEkgQzDqeX4c -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:24 2026 by rpki-client