This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/CFO4FgEIRtMb5lyEJ7fTGNyKj1Q.roa File: CFO4FgEIRtMb5lyEJ7fTGNyKj1Q.roa (raw, json) Hash identifier: 811rgV28E1K97XcQlVBf+c8AkF0NnU7urjPyYJW2uoM= Subject key identifier: 08:53:B8:16:01:08:46:D3:1B:E6:5C:84:27:B7:D3:18:DC:8A:8F:54 Certificate issuer: /CN=1b6b943b9a3dff696801516be8471bc4588566e8 Certificate serial: 019B7C7F228756E5A723B25201F4993358F9 Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/CFO4FgEIRtMb5lyEJ7fTGNyKj1Q.roa Signing time: Fri 02 Jan 2026 02:17:45 +0000 ROA not before: Fri 02 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49114 IP address blocks: 185.220.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:22:87:56:e5:a7:23:b2:52:01:f4:99:33:58:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8 Validity Not Before: Jan 2 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0853b816010846d31be65c8427b7d318dc8a8f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:96:7d:f4:40:34:41:79:bb:fb:32:95:c6:df: c1:95:76:c5:21:9b:2f:ee:c5:24:38:fe:08:60:e3: 1a:47:d0:f5:30:21:04:80:f2:73:ec:6a:2c:56:ec: 5e:d9:a3:7d:35:e0:1d:17:a1:15:cb:41:bb:2d:d6: d1:67:7b:36:30:ce:59:42:f0:ab:78:1d:cc:98:19: 00:e9:45:e1:a9:64:06:9d:4e:35:70:eb:4f:76:72: 81:30:57:0b:dc:4b:51:f0:55:58:a4:e2:d8:e6:26: 86:0a:98:4d:18:34:26:d9:3e:17:11:0a:21:62:d6: ac:95:e1:9b:9a:9a:0a:e3:61:59:69:3b:0c:11:9b: 05:dd:48:26:04:b8:73:d8:1b:42:e8:92:c9:19:c6: 3f:72:9e:84:96:6b:88:da:50:fa:12:50:b3:de:02: c1:89:26:1d:b8:62:70:99:1d:6a:eb:7b:d3:e3:00: 84:3d:af:d7:7b:d5:5d:2f:20:2a:c2:ae:29:2d:31: 1f:3f:e3:8d:93:e8:94:b5:2a:26:9a:91:2f:ce:b7: 98:af:ad:1f:fd:42:08:e3:9f:30:be:61:10:e6:90: 27:b1:3a:73:0b:e7:ce:28:02:9d:1d:4d:d3:f2:74: ea:46:3d:b6:a6:c2:6d:89:12:9f:80:27:cb:d4:97: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:53:B8:16:01:08:46:D3:1B:E6:5C:84:27:B7:D3:18:DC:8A:8F:54 X509v3 Authority Key Identifier: keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/CFO4FgEIRtMb5lyEJ7fTGNyKj1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.81.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:88:20:a8:02:45:ea:30:50:cd:60:11:e1:04:34:83:98:e8: 8f:13:e4:0a:84:6f:d0:6c:8e:8d:80:71:b9:0f:5f:ff:40:20: 7e:86:05:d2:04:9f:d1:ca:38:0d:26:b0:45:b8:c1:a0:62:ce: 5b:95:74:f3:c6:ae:68:06:e6:ae:98:81:ff:ba:2d:47:a5:3e: 65:b0:7a:03:71:c8:d0:fa:4c:0e:ba:68:a7:ec:1b:23:c6:35: 8c:72:05:04:ca:e9:69:1e:5a:55:b0:42:e6:a2:ea:0b:db:64: 59:b2:ff:85:a5:d8:45:53:e3:cf:22:61:c1:b2:f1:ec:84:83: 1c:f3:d9:5c:28:bc:ee:07:6f:bb:3f:53:aa:b7:6d:c3:ef:a3: 8d:97:6f:d9:6c:11:24:22:9a:65:dc:b0:f2:3a:35:74:12:2a: 21:a7:f5:46:80:08:f2:d7:af:d2:c3:50:42:24:4b:98:0b:e3: 2d:9e:d9:f2:d6:71:6f:52:50:f4:57:bc:de:10:f2:31:39:96: ff:f6:f1:8f:1b:90:fc:bf:12:fc:85:dd:04:94:ca:8f:18:b2: c9:6f:85:23:f6:23:1e:9b:4b:15:06:7a:8f:06:c9:08:45:c2: d8:89:71:c5:de:f2:ef:7f:b5:fd:a7:5d:c4:8d:13:cc:ee:2c: dd:d9:f6:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fyKHVuWnI7JSAfSZM1j5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNmI5NDNiOWEzZGZmNjk2ODAxNTE2YmU4NDcxYmM0NTg4 NTY2ZTgwHhcNMjYwMTAyMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODUzYjgxNjAxMDg0NmQzMWJlNjVjODQyN2I3ZDMxOGRjOGE4ZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJZ99EA0QXm7+zKVxt/BlXbFIZsv 7sUkOP4IYOMaR9D1MCEEgPJz7GosVuxe2aN9NeAdF6EVy0G7LdbRZ3s2MM5ZQvCr eB3MmBkA6UXhqWQGnU41cOtPdnKBMFcL3EtR8FVYpOLY5iaGCphNGDQm2T4XEQoh YtasleGbmpoK42FZaTsMEZsF3UgmBLhz2BtC6JLJGcY/cp6ElmuI2lD6ElCz3gLB iSYduGJwmR1q63vT4wCEPa/Xe9VdLyAqwq4pLTEfP+ONk+iUtSommpEvzreYr60f /UII458wvmEQ5pAnsTpzC+fOKAKdHU3T8nTqRj22psJtiRKfgCfL1JcImQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAhTuBYBCEbTG+ZchCe30xjcio9UMB8GA1UdIwQY MBaAFBtrlDuaPf9paAFRa+hHG8RYhWboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAt MjJkMzcxZDZjZGVlLzEvQ0ZPNEZnRUlSdE1iNWx5RUo3ZlRHTnlLajFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAtMjJkMzcxZDZjZGVl LzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudxRMA0G CSqGSIb3DQEBCwUAA4IBAQBOiCCoAkXqMFDNYBHhBDSDmOiPE+QKhG/QbI6NgHG5 D1//QCB+hgXSBJ/RyjgNJrBFuMGgYs5blXTzxq5oBuaumIH/ui1HpT5lsHoDccjQ +kwOumin7BsjxjWMcgUEyulpHlpVsELmouoL22RZsv+FpdhFU+PPImHBsvHshIMc 89lcKLzuB2+7P1Oqt23D76ONl2/ZbBEkIppl3LDyOjV0Eiohp/VGgAjy16/Sw1BC JEuYC+Mtntny1nFvUlD0V7zeEPIxOZb/9vGPG5D8vxL8hd0ElMqPGLLJb4Uj9iMe m0sVBnqPBskIRcLYiXHF3vLvf7X9p13EjRPM7izd2faX -----END CERTIFICATE-----Generated at Thu Jan 8 11:28:22 2026 by rpki-client