This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa File: cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa (raw, json) Hash identifier: IqlFBWiZvX+DZXZZbfb7qN9FDJR9IKeDzLOuL+Y7oLQ= Subject key identifier: 71:18:61:D9:AF:03:C9:2F:81:9E:A7:0F:4E:B1:10:1F:46:5B:0E:80 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC4CF8F68F9906C08074EF1E893BC1 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa Signing time: Thu 01 Jan 2026 14:18:07 +0000 ROA not before: Thu 01 Jan 2026 14:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215226 IP address blocks: 91.242.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4c:f8:f6:8f:99:06:c0:80:74:ef:1e:89:3b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=711861d9af03c92f819ea70f4eb1101f465b0e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:c1:55:c9:7c:01:d6:57:28:d5:57:11:7d: 5b:da:6d:1e:b1:70:9f:c4:31:21:0b:06:c3:6a:2f: a7:0b:53:db:8b:bc:9b:ea:c1:a3:12:f2:29:39:54: 10:0b:5c:f7:01:8a:86:e1:6e:0b:0f:6a:e8:3b:bb: e0:1c:c1:b8:f6:c7:53:60:a3:24:35:01:3f:0b:ff: 41:59:d8:c3:84:3b:cf:87:89:f2:9a:91:76:18:f7: 16:ff:84:94:e2:af:e6:8b:d3:31:96:36:6b:06:c1: c3:98:85:a9:a0:10:c4:e3:54:42:bb:60:20:c9:bf: e5:00:dd:f6:67:99:0e:c4:1e:09:87:59:1c:f3:10: 2f:93:b8:1b:a7:f4:9b:7e:58:19:3a:4d:ae:2a:bb: 93:2c:40:07:d5:88:b4:8f:51:de:c2:2e:b6:fe:07: cf:28:19:bb:6c:c5:d9:c7:2d:25:71:1b:2e:bf:c0: a3:8e:ec:bd:8c:eb:9e:40:9b:bc:6d:a2:c1:41:0e: 27:6c:d3:40:6e:f5:df:08:c8:75:39:0c:26:38:4e: f9:7f:44:e3:f5:23:3e:ee:a9:91:2e:b2:91:a9:64: 5e:e0:16:de:85:f8:71:27:b7:39:b9:50:27:5a:3f: a8:89:44:77:2a:8e:07:9d:36:70:26:5b:22:03:1a: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:18:61:D9:AF:03:C9:2F:81:9E:A7:0F:4E:B1:10:1F:46:5B:0E:80 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/cRhh2a8DyS-BnqcPTrEQH0ZbDoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.255.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:8a:f5:1a:61:61:95:00:fb:91:68:5e:e2:79:61:7c:95:7e: 92:48:08:88:dd:12:92:71:98:00:b5:b3:b6:e9:24:0c:0c:57: 81:d3:56:4d:ba:71:c4:cc:07:07:de:63:97:cd:6b:e6:3b:a7: 37:dd:21:f5:b5:b4:a0:e7:1c:02:bc:60:bb:56:54:a0:50:6d: a8:1a:d5:39:43:4f:d1:b1:4f:f1:54:68:71:ea:b1:db:e4:5d: 82:ff:5e:64:92:76:d6:7d:ac:80:1d:20:18:e3:e2:f7:79:fd: 16:34:60:9b:59:6e:17:56:bd:d1:c8:0e:26:11:7b:d2:48:62: 5b:30:3f:75:60:53:29:7d:dd:b6:a8:1b:5f:b0:9d:0f:40:49: 52:d7:73:85:c4:30:75:b9:11:d7:28:3a:ff:e1:be:d7:02:79: 3e:17:5c:18:62:d3:ef:08:22:5d:ba:8c:55:05:5a:29:17:e2: de:2a:3f:9d:d4:68:f7:70:5f:1e:21:ec:78:00:67:b8:99:4f: 81:01:95:26:69:5b:c8:dc:c9:29:47:f4:c5:c7:b7:3c:5b:bc: b1:28:eb:21:a2:50:e2:15:6c:f0:01:80:82:ee:f1:bc:5c:7e: b4:90:76:f7:6d:4a:ae:7e:f3:bd:86:f2:9d:f9:e1:e9:ef:86: 01:3d:c0:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ez49o+ZBsCAdO8eiTvBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTE4NjFkOWFmMDNjOTJmODE5ZWE3MGY0ZWIxMTAxZjQ2NWIwZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rHBVcl8AdZXKNVXEX1b2m0esXCf xDEhCwbDai+nC1Pbi7yb6sGjEvIpOVQQC1z3AYqG4W4LD2roO7vgHMG49sdTYKMk NQE/C/9BWdjDhDvPh4nympF2GPcW/4SU4q/mi9MxljZrBsHDmIWpoBDE41RCu2Ag yb/lAN32Z5kOxB4Jh1kc8xAvk7gbp/SbflgZOk2uKruTLEAH1Yi0j1Hewi62/gfP KBm7bMXZxy0lcRsuv8Cjjuy9jOueQJu8baLBQQ4nbNNAbvXfCMh1OQwmOE75f0Tj 9SM+7qmRLrKRqWRe4BbehfhxJ7c5uVAnWj+oiUR3Ko4HnTZwJlsiAxp35wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEYYdmvA8kvgZ6nD06xEB9GWw6AMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvY1JoaDJhOER5Uy1CbnFjUFRyRVFIMFpiRG9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/L/MA0G CSqGSIb3DQEBCwUAA4IBAQBPivUaYWGVAPuRaF7ieWF8lX6SSAiI3RKScZgAtbO2 6SQMDFeB01ZNunHEzAcH3mOXzWvmO6c33SH1tbSg5xwCvGC7VlSgUG2oGtU5Q0/R sU/xVGhx6rHb5F2C/15kknbWfayAHSAY4+L3ef0WNGCbWW4XVr3RyA4mEXvSSGJb MD91YFMpfd22qBtfsJ0PQElS13OFxDB1uRHXKDr/4b7XAnk+F1wYYtPvCCJduoxV BVopF+LeKj+d1Gj3cF8eIex4AGe4mU+BAZUmaVvI3MkpR/TFx7c8W7yxKOsholDi FWzwAYCC7vG8XH60kHb3bUqufvO9hvKd+eHp74YBPcCh -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:00 2026 by rpki-client