This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/CG86pKUu_y2jdcDvGNLrjVfNuYw.roa File: CG86pKUu_y2jdcDvGNLrjVfNuYw.roa (raw, json) Hash identifier: 8UXLIyC5V8xl/dbxdW3uIxQsfpv3PqBesoY8agFjjgQ= Subject key identifier: 08:6F:3A:A4:A5:2E:FF:2D:A3:75:C0:EF:18:D2:EB:8D:57:CD:B9:8C Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d Certificate serial: 019AB575019A39F554CCA1EDDF6DDE2AF02B Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/CG86pKUu_y2jdcDvGNLrjVfNuYw.roa Signing time: Mon 24 Nov 2025 10:42:15 +0000 ROA not before: Mon 24 Nov 2025 10:42:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44606 IP address blocks: 2.56.80.0/24 maxlen: 24 45.156.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:75:01:9a:39:f5:54:cc:a1:ed:df:6d:de:2a:f0:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d Validity Not Before: Nov 24 10:42:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=086f3aa4a52eff2da375c0ef18d2eb8d57cdb98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:a9:82:89:a0:63:78:be:25:69:52:1f:0e: 3f:26:09:00:90:c5:61:c5:70:02:f6:49:03:08:ba: e5:86:20:bf:e5:c3:b6:ae:e4:08:9d:b9:f5:ca:c9: 1c:01:b8:fe:7b:58:ff:02:0b:a6:11:22:b6:f9:ae: 12:25:e7:aa:21:f7:90:c5:44:b6:98:a2:09:d6:23: d3:94:e9:ad:d7:06:31:0b:b4:e8:c0:e6:1e:fa:b2: 22:3b:9c:bf:c9:f9:38:9a:60:7b:a6:6e:2a:e2:06: 07:b7:b9:76:5b:b8:c2:fd:a2:70:3b:e3:34:ed:06: 92:76:d8:fb:4d:1f:46:8d:ab:72:30:81:b1:ce:f7: 26:9b:9f:7c:d3:1c:6f:57:c0:86:43:b7:6d:42:9c: 3f:37:f6:72:b1:3f:31:68:a3:d5:fa:f0:c6:f1:ce: 44:f5:f5:49:b1:1e:02:1c:eb:45:f5:fe:19:dd:26: 21:b6:6c:ad:29:37:fa:96:a8:d5:8c:ea:19:df:e8: b6:a4:75:22:5e:a1:b7:8e:06:fb:9b:f3:7a:37:43: 8a:28:27:23:d7:9f:0a:86:35:ac:19:5a:33:60:de: 4d:01:1f:22:39:6c:a8:e6:4e:15:e8:5b:6f:06:31: dd:3b:ab:5e:17:93:67:97:72:14:a0:9e:17:4b:32: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6F:3A:A4:A5:2E:FF:2D:A3:75:C0:EF:18:D2:EB:8D:57:CD:B9:8C X509v3 Authority Key Identifier: keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/CG86pKUu_y2jdcDvGNLrjVfNuYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.80.0/24 45.156.244.0/24 Signature Algorithm: sha256WithRSAEncryption de:d9:aa:ab:fb:fa:08:ca:62:c6:55:5e:67:83:6d:dc:ec:ab: 20:57:51:f2:be:b1:db:2b:6d:19:e5:14:8d:6f:df:03:52:8a: 1c:10:b3:b9:69:6c:f1:ea:b2:36:e4:97:e9:ed:9f:4a:76:dd: 31:0d:0f:7f:fe:55:d4:0d:8b:27:6d:3a:85:d7:0e:9c:bd:28: 48:32:b5:3d:21:5d:c8:45:85:1d:32:a9:c9:d7:e6:bb:29:25: 91:4f:e1:88:ae:11:ec:42:58:37:15:04:d7:53:64:74:5e:13: a4:31:bd:c0:94:e1:14:b2:fb:32:7d:bc:8e:bf:ff:2c:77:a0: e3:fd:bf:55:7a:da:99:71:c8:e8:14:45:78:0e:73:45:c3:6b: 24:75:2d:96:43:9f:9b:1b:85:8c:19:f3:e9:59:d4:42:e5:ab: 7d:4e:e8:81:db:1f:0b:b6:b0:e6:46:8c:14:0a:c1:f5:72:5e: b9:4f:67:6a:ed:73:1f:7d:bc:45:55:c6:7d:bd:e1:40:63:dd: de:6c:55:58:c5:90:bb:a2:7b:56:4d:a0:a9:11:34:69:87:01: 66:a9:3e:09:67:d3:c8:36:62:eb:5f:a9:77:9f:d1:8e:dc:6a: 51:3f:a6:50:1b:d4:4c:11:35:00:19:cc:dd:38:ed:bf:7f:2e: ea:eb:d5:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq1dQGaOfVUzKHt323eKvArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOWYxZTM4MjY1NDEwYjNjMmE5MjJkMzE2OWM0ZjI5OTUx NDFhMmQwHhcNMjUxMTI0MTA0MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODZmM2FhNGE1MmVmZjJkYTM3NWMwZWYxOGQyZWI4ZDU3Y2RiOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1qpgomgY3i+JWlSHw4/JgkAkMVh xXAC9kkDCLrlhiC/5cO2ruQInbn1yskcAbj+e1j/AgumESK2+a4SJeeqIfeQxUS2 mKIJ1iPTlOmt1wYxC7TowOYe+rIiO5y/yfk4mmB7pm4q4gYHt7l2W7jC/aJwO+M0 7QaSdtj7TR9GjatyMIGxzvcmm5980xxvV8CGQ7dtQpw/N/ZysT8xaKPV+vDG8c5E 9fVJsR4CHOtF9f4Z3SYhtmytKTf6lqjVjOoZ3+i2pHUiXqG3jgb7m/N6N0OKKCcj 158KhjWsGVozYN5NAR8iOWyo5k4V6FtvBjHdO6teF5Nnl3IUoJ4XSzJ+UwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAhvOqSlLv8to3XA7xjS641XzbmMMB8GA1UdIwQY MBaAFO+fHjgmVBCzwqki0xacTymVFBotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzU4ZU9DWlVFTFBDcVNMVEZweFBLWlVVR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNmZiMWMtOTVjMy00YmZmLTg1NTYt ODA1N2RhNzU0NDUyLzEvQ0c4NnBLVXVfeTJqZGNEdkdOTHJqVmZOdVl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kNmZiMWMtOTVjMy00YmZmLTg1NTYtODA1N2RhNzU0NDUy LzEvNzU4ZU9DWlVFTFBDcVNMVEZweFBLWlVVR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjhQAwQA LZz0MA0GCSqGSIb3DQEBCwUAA4IBAQDe2aqr+/oIymLGVV5ng23c7KsgV1HyvrHb K20Z5RSNb98DUoocELO5aWzx6rI25Jfp7Z9Kdt0xDQ9//lXUDYsnbTqF1w6cvShI MrU9IV3IRYUdMqnJ1+a7KSWRT+GIrhHsQlg3FQTXU2R0XhOkMb3AlOEUsvsyfbyO v/8sd6Dj/b9VetqZccjoFEV4DnNFw2skdS2WQ5+bG4WMGfPpWdRC5at9TuiB2x8L trDmRowUCsH1cl65T2dq7XMffbxFVcZ9veFAY93ebFVYxZC7ontWTaCpETRphwFm qT4JZ9PINmLrX6l3n9GO3GpRP6ZQG9RMETUAGczdOO2/fy7q69XB -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:34 2025 by rpki-client