This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/CTL_XkMdcDz_-dbE2LKujOq_cPw.roa File: CTL_XkMdcDz_-dbE2LKujOq_cPw.roa (raw, json) Hash identifier: 0tP2+X0H7fwYa4FCqGt0jobEPqhB1skE7FCeOf0xvAQ= Subject key identifier: 09:32:FF:5E:43:1D:70:3C:FF:F9:D6:C4:D8:B2:AE:8C:EA:BF:70:FC Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Certificate serial: 019B77C669C7EF7B4884B04B49B0BC55D722 Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/CTL_XkMdcDz_-dbE2LKujOq_cPw.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21473 IP address blocks: 94.176.168.0/22 maxlen: 22 185.142.8.0/22 maxlen: 22 2a07:2800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:69:c7:ef:7b:48:84:b0:4b:49:b0:bc:55:d7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0932ff5e431d703cfff9d6c4d8b2ae8ceabf70fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:a8:27:f8:57:a0:3a:10:b5:a7:51:56:f2: 7a:91:dd:ec:67:53:72:da:d0:6d:37:0a:16:9a:75: 84:3b:74:d4:f2:24:76:ad:2c:be:51:d1:7a:db:17: ed:d2:71:c2:a4:aa:30:db:19:12:ec:11:e9:06:55: 0a:cd:79:77:f5:fc:fb:cf:6e:ef:f9:23:68:b7:23: b8:93:24:cb:de:bd:d3:5e:48:d7:0f:3f:c9:38:79: 05:77:91:62:f3:a5:d1:5f:55:90:4a:84:94:b6:e2: 47:0b:d3:36:78:a3:dd:b5:aa:85:58:fd:fe:87:49: 4a:4f:91:ef:4f:fd:8f:af:1e:53:9f:10:f5:6a:68: 2f:11:a1:c0:3a:ee:4f:24:9f:4b:72:1f:52:18:62: f7:b2:7c:84:6d:ad:0d:b0:c6:d1:96:42:58:80:8b: aa:dd:1a:df:61:dd:43:f8:bf:32:d6:f5:cb:b7:6d: 9d:6f:81:62:8c:92:b4:ca:7c:35:54:0d:ba:d5:56: ca:17:d6:26:40:6b:74:a5:1d:cb:63:1b:d7:db:cb: 8a:e2:bb:b3:ff:c0:67:20:92:75:ce:01:65:72:2f: ff:6a:65:04:f3:19:fa:43:cf:24:33:cd:c7:75:24: dd:80:2e:95:3b:98:cb:01:b0:43:1e:1d:99:5b:8e: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:32:FF:5E:43:1D:70:3C:FF:F9:D6:C4:D8:B2:AE:8C:EA:BF:70:FC X509v3 Authority Key Identifier: keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/CTL_XkMdcDz_-dbE2LKujOq_cPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.176.168.0/22 185.142.8.0/22 IPv6: 2a07:2800::/29 Signature Algorithm: sha256WithRSAEncryption 6a:63:0f:2c:44:48:aa:1e:08:ac:b7:2a:86:61:f2:dd:3b:c1: 19:ec:50:08:30:9b:53:d7:ca:b2:b4:46:1d:e3:1a:3f:ab:68: fb:1b:61:80:68:e0:f0:42:1b:5a:3c:4a:7b:52:1b:66:93:24: ee:c0:9b:e8:b0:87:5c:bf:8e:56:7f:ef:9e:c2:43:6c:60:03: 23:9b:3d:a7:44:5a:5d:a2:1d:22:ed:62:f3:ef:a6:b1:a0:00: c1:c2:df:8e:d9:e2:a9:72:a9:6c:f2:91:48:7f:d0:0f:11:a6: b4:dd:fd:13:de:58:46:34:1e:ae:88:59:c4:8b:fb:f1:53:08: db:63:0a:1b:04:cb:40:cb:f7:c3:56:66:f5:01:a8:64:03:9a: 80:81:40:f4:b2:b9:4b:fb:10:19:da:84:68:07:0a:1f:f6:e4: c8:11:37:28:52:0a:52:d0:4f:ab:6c:1b:94:3d:59:74:82:e8: 50:77:a7:d4:8e:a0:ff:73:1b:80:26:9a:8d:e7:3b:46:d6:2b: 85:0d:e2:7a:57:6f:e8:79:cc:67:a8:9c:1d:a8:27:67:90:62: 17:ac:45:9e:cf:b7:4d:da:90:11:8f:d3:1f:e2:0d:98:a2:5f: 75:7f:ac:45:dd:21:c2:dc:09:0a:5b:d4:69:ec:9c:45:4a:e1: 3d:4e:0e:65 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xmnH73tIhLBLSbC8VdciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx NGE0ZjAwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTMyZmY1ZTQzMWQ3MDNjZmZmOWQ2YzRkOGIyYWU4Y2VhYmY3MGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3moJ/hXoDoQtadRVvJ6kd3sZ1Ny 2tBtNwoWmnWEO3TU8iR2rSy+UdF62xft0nHCpKow2xkS7BHpBlUKzXl39fz7z27v +SNotyO4kyTL3r3TXkjXDz/JOHkFd5Fi86XRX1WQSoSUtuJHC9M2eKPdtaqFWP3+ h0lKT5HvT/2Prx5TnxD1amgvEaHAOu5PJJ9Lch9SGGL3snyEba0NsMbRlkJYgIuq 3RrfYd1D+L8y1vXLt22db4FijJK0ynw1VA261VbKF9YmQGt0pR3LYxvX28uK4ruz /8BnIJJ1zgFlci//amUE8xn6Q88kM83HdSTdgC6VO5jLAbBDHh2ZW47kYQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAky/15DHXA8//nWxNiyrozqv3D8MB8GA1UdIwQY MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt YTQxNTI1NThkMThjLzEvQ1RMX1hrTWRjRHpfLWRiRTJMS3VqT3FfY1B3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCXrCoAwQC uY4IMA0EAgACMAcDBQMqBygAMA0GCSqGSIb3DQEBCwUAA4IBAQBqYw8sREiqHgis tyqGYfLdO8EZ7FAIMJtT18qytEYd4xo/q2j7G2GAaODwQhtaPEp7UhtmkyTuwJvo sIdcv45Wf++ewkNsYAMjmz2nRFpdoh0i7WLz76axoADBwt+O2eKpcqls8pFIf9AP Eaa03f0T3lhGNB6uiFnEi/vxUwjbYwobBMtAy/fDVmb1AahkA5qAgUD0srlL+xAZ 2oRoBwof9uTIETcoUgpS0E+rbBuUPVl0guhQd6fUjqD/cxuAJpqN5ztG1iuFDeJ6 V2/oecxnqJwdqCdnkGIXrEWez7dN2pARj9Mf4g2Yol91f6xF3SHC3AkKW9Rp7JxF SuE9Tg5l -----END CERTIFICATE-----Generated at Mon Jan 26 02:32:09 2026 by rpki-client