This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/CFiA9ts48FJD7FxMXnq2yBPpxUo.roa File: CFiA9ts48FJD7FxMXnq2yBPpxUo.roa (raw, json) Hash identifier: 0N4k8Pu9Li9wdDzVVf7qsFKX5AusWq9aMPBrYyncX/Y= Subject key identifier: 08:58:80:F6:DB:38:F0:52:43:EC:5C:4C:5E:7A:B6:C8:13:E9:C5:4A Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746 Certificate serial: 019B791121D3C075CF2C7862FC2A2F29FA5D Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/CFiA9ts48FJD7FxMXnq2yBPpxUo.roa Signing time: Thu 01 Jan 2026 10:18:44 +0000 ROA not before: Thu 01 Jan 2026 10:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204198 IP address blocks: 193.176.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:21:d3:c0:75:cf:2c:78:62:fc:2a:2f:29:fa:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746 Validity Not Before: Jan 1 10:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=085880f6db38f05243ec5c4c5e7ab6c813e9c54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:76:ba:85:34:27:bb:c8:06:7b:1a:f8:78:5a: e6:a1:ed:19:97:09:17:8b:15:e2:9f:91:ba:4e:4b: 33:bc:91:90:d0:b3:08:cf:e5:65:d2:84:7d:a3:c5: d4:32:16:7c:c3:20:ab:b3:6e:86:eb:da:6f:74:58: fb:b6:3a:3a:1e:a4:58:2a:1a:21:ca:09:0a:b5:48: d2:21:b1:98:77:7d:88:33:be:52:6d:80:31:77:c9: 87:35:64:3d:22:d5:4e:93:c5:fd:f0:84:00:17:05: fd:5f:13:6e:b1:e1:e9:f8:04:e4:38:bb:8f:c2:b7: 9d:5e:10:20:6d:7b:8f:1c:73:77:a9:51:66:4c:48: b3:7b:21:d0:e5:d1:d9:c1:12:a1:63:a9:36:c3:ac: 1d:ac:18:22:87:f4:0f:85:a5:2a:fd:6a:4c:04:59: 50:6d:89:41:ef:d7:fc:a1:4f:9f:23:e1:bf:13:2e: 9f:8f:19:8f:74:88:eb:fa:f1:f6:42:97:68:18:e0: 3a:79:fe:e6:9b:05:10:b1:79:56:01:bd:25:62:31: 81:fa:bd:98:cd:b5:9f:ed:c2:43:05:b4:1d:b4:1a: c7:c2:a1:3f:6f:db:e2:93:e0:c7:cc:cd:10:e8:a4: 47:98:3e:ef:b2:d8:1a:18:e8:bb:4e:1f:1f:67:40: b9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:58:80:F6:DB:38:F0:52:43:EC:5C:4C:5E:7A:B6:C8:13:E9:C5:4A X509v3 Authority Key Identifier: keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/CFiA9ts48FJD7FxMXnq2yBPpxUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.92.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:c3:b3:fd:be:02:8c:44:4c:13:b5:ac:fb:ef:30:a2:65:78: ca:57:f4:34:b1:45:ce:1a:8f:3e:71:53:b0:7d:57:94:87:e8: e1:32:dc:72:db:4a:a0:9e:4f:82:4a:6f:8a:d5:fc:5d:06:cb: fe:13:82:99:f5:56:ab:33:4c:36:b0:3c:fc:ec:5e:52:5a:f4: 9f:b7:b7:62:23:50:d3:b5:36:29:39:52:cf:da:a5:08:11:a9: ba:cc:e3:ca:85:8d:90:f3:1e:7f:66:1c:6f:ce:5c:84:66:36: f7:90:31:be:d7:eb:f1:39:1b:15:70:03:6e:5a:04:e7:47:11: 6d:58:13:b4:bf:a2:c2:58:e9:78:c3:1c:04:b3:5c:e4:57:24: eb:e4:6a:e3:69:e7:90:5f:94:56:f7:2e:fd:15:e9:8c:10:2f: 31:90:b9:2e:e9:c7:03:f7:8f:22:6a:5d:ca:cd:f4:cb:28:40: c4:f1:30:8a:e6:72:ed:83:b4:87:f7:17:7c:37:5f:40:7e:ab: f2:1a:18:8f:fe:46:5e:18:48:0a:78:a0:24:25:f8:66:2d:3f: e1:41:0d:5d:4c:64:48:60:2b:78:f8:79:ce:7e:c3:e8:db:77: 66:96:4c:07:5a:77:32:49:bc:67:48:c0:23:35:b0:bb:35:b8: 42:63:4d:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESHTwHXPLHhi/CovKfpdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzYjg1ZmUyYjJjMjY5OTFiMWYzMWM2NmZjNjdhYzBjOGEx MDk3NDYwHhcNMjYwMTAxMTAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODU4ODBmNmRiMzhmMDUyNDNlYzVjNGM1ZTdhYjZjODEzZTljNTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwna6hTQnu8gGexr4eFrmoe0ZlwkX ixXin5G6TkszvJGQ0LMIz+Vl0oR9o8XUMhZ8wyCrs26G69pvdFj7tjo6HqRYKhoh ygkKtUjSIbGYd32IM75SbYAxd8mHNWQ9ItVOk8X98IQAFwX9XxNuseHp+ATkOLuP wredXhAgbXuPHHN3qVFmTEizeyHQ5dHZwRKhY6k2w6wdrBgih/QPhaUq/WpMBFlQ bYlB79f8oU+fI+G/Ey6fjxmPdIjr+vH2QpdoGOA6ef7mmwUQsXlWAb0lYjGB+r2Y zbWf7cJDBbQdtBrHwqE/b9vik+DHzM0Q6KRHmD7vstgaGOi7Th8fZ0C5ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAhYgPbbOPBSQ+xcTF56tsgT6cVKMB8GA1UdIwQY MBaAFKO4X+KywmmRsfMcZvxnrAyKEJdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEt NzZiYjcxZWIwYTVhLzEvQ0ZpQTl0czQ4RkpEN0Z4TVhucTJ5QlBweFVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEtNzZiYjcxZWIwYTVh LzEvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbBcMA0G CSqGSIb3DQEBCwUAA4IBAQCbw7P9vgKMREwTtaz77zCiZXjKV/Q0sUXOGo8+cVOw fVeUh+jhMtxy20qgnk+CSm+K1fxdBsv+E4KZ9VarM0w2sDz87F5SWvSft7diI1DT tTYpOVLP2qUIEam6zOPKhY2Q8x5/ZhxvzlyEZjb3kDG+1+vxORsVcANuWgTnRxFt WBO0v6LCWOl4wxwEs1zkVyTr5GrjaeeQX5RW9y79FemMEC8xkLku6ccD948ial3K zfTLKEDE8TCK5nLtg7SH9xd8N19AfqvyGhiP/kZeGEgKeKAkJfhmLT/hQQ1dTGRI YCt4+HnOfsPo23dmlkwHWncySbxnSMAjNbC7NbhCY02q -----END CERTIFICATE-----Generated at Sun Jan 11 22:08:55 2026 by rpki-client