This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/_Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa File: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (raw, json) Hash identifier: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ= Subject key identifier: FC:2C:7A:C7:A3:98:23:40:04:0E:19:6C:71:DF:07:C9:63:F1:24:54 Certificate issuer: /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Certificate serial: 019B7834AE0F0CBD9233153915B74F68C72C Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/_Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa Signing time: Thu 01 Jan 2026 06:17:56 +0000 ROA not before: Thu 01 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205766 IP address blocks: 185.139.156.0/22 maxlen: 24 2a0b:20c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:ae:0f:0c:bd:92:33:15:39:15:b7:4f:68:c7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248 Validity Not Before: Jan 1 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc2c7ac7a3982340040e196c71df07c963f12454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f4:5c:29:58:35:c2:92:a4:01:45:90:1a:b4: 66:64:3f:92:4a:05:57:55:cd:7e:2a:b3:2e:78:1a: 89:60:19:15:8d:2b:c0:9d:17:75:c7:f5:fe:5c:ce: 69:8f:d6:49:4d:6c:1e:fb:67:0e:b5:b8:1e:fe:a1: 37:98:3d:b9:d5:a4:a4:ef:6f:71:2e:49:91:51:2d: 8f:95:8f:3e:d8:83:3e:30:bd:73:df:fc:fb:d8:13: 06:7d:7e:a5:41:e5:b9:28:ec:a3:88:e3:1a:0d:b2: a9:71:60:a4:ea:d0:52:35:1f:67:04:1b:e1:81:60: c8:39:c0:6b:b3:6b:a3:73:a9:d3:1d:b6:20:d5:9b: b6:ff:5a:b1:3e:c1:c8:ec:54:16:4f:17:20:ff:c7: a0:d1:49:b2:09:28:33:07:ca:bd:ca:fa:2b:ce:e2: 41:f1:12:e0:d9:a8:44:a5:a2:e9:11:fc:29:47:4d: 2a:b1:5a:e8:87:77:9b:b7:56:a7:05:76:f1:ca:3c: 8d:39:c7:a5:26:fc:e5:07:ae:fc:85:56:8c:8f:5b: 6d:e5:80:e0:35:ad:e9:38:89:f8:33:c5:ef:53:9f: 2f:ef:22:33:b5:05:b1:6a:57:28:44:ca:e0:3f:c4: 3b:42:24:40:92:97:93:62:98:3e:fc:e3:23:61:c4: 89:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2C:7A:C7:A3:98:23:40:04:0E:19:6C:71:DF:07:C9:63:F1:24:54 X509v3 Authority Key Identifier: keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/_Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.156.0/22 IPv6: 2a0b:20c0::/32 Signature Algorithm: sha256WithRSAEncryption 58:64:8b:e5:8d:c1:d9:27:12:9d:3b:95:28:7e:7e:f0:d7:2c: e8:d5:8d:38:bd:bc:bd:e5:bc:3b:c5:bd:23:1b:79:d4:d1:7b: 77:7f:dc:ff:34:d5:28:d6:f7:d4:6c:d8:3d:59:d6:a7:bd:35: 49:d1:96:dc:50:e4:21:46:45:b8:bc:d9:58:ff:52:22:f7:1c: 18:cb:b2:01:fe:f0:5c:6c:d1:85:35:98:f3:8a:b1:4b:50:a3: 9e:24:3d:6e:d1:01:10:d3:7b:6c:18:87:c0:45:25:4b:6e:af: 44:0c:49:c0:29:d9:27:7a:cc:7d:e8:a7:ef:c0:15:38:aa:63: a7:da:2d:87:f5:c1:1a:b7:7d:05:99:05:ae:bf:ee:7b:dd:51: 27:35:2c:7b:8d:0e:8a:e3:a4:a3:4b:f6:5b:1a:66:7e:a7:99: 62:1c:10:e9:7b:be:c0:e9:5e:26:ba:b3:cb:19:83:48:88:73: 54:c4:52:b9:32:c8:c4:70:87:5d:0b:9f:9b:07:85:cb:6a:44: 78:83:4b:1f:95:8e:27:e5:74:ed:fd:4c:db:73:a4:55:1d:0c: 7f:39:a2:21:d8:61:3c:cc:fd:75:79:b5:63:9e:9f:46:e9:04: 03:79:fd:a1:1c:a1:89:94:fc:75:cb:d0:8a:87:38:ab:58:97: cb:e2:26:e2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NK4PDL2SMxU5FbdPaMcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Zjk0YWI5MzUwNTRiODZkY2I1ZDZhZGJhZDJkZmRiNTY0 YjUyNDgwHhcNMjYwMTAxMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzJjN2FjN2EzOTgyMzQwMDQwZTE5NmM3MWRmMDdjOTYzZjEyNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvRcKVg1wpKkAUWQGrRmZD+SSgVX Vc1+KrMueBqJYBkVjSvAnRd1x/X+XM5pj9ZJTWwe+2cOtbge/qE3mD251aSk729x LkmRUS2PlY8+2IM+ML1z3/z72BMGfX6lQeW5KOyjiOMaDbKpcWCk6tBSNR9nBBvh gWDIOcBrs2ujc6nTHbYg1Zu2/1qxPsHI7FQWTxcg/8eg0UmyCSgzB8q9yvorzuJB 8RLg2ahEpaLpEfwpR00qsVroh3ebt1anBXbxyjyNOcelJvzlB678hVaMj1tt5YDg Na3pOIn4M8XvU58v7yIztQWxalcoRMrgP8Q7QiRAkpeTYpg+/OMjYcSJlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPwsesejmCNABA4ZbHHfB8lj8SRUMB8GA1UdIwQY MBaAFKf5Srk1BUuG3LXWrbrS39tWS1JIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2Et N2QyNThiNjIwMTY5LzEvX0N4Nng2T1lJMEFFRGhsc2NkOEh5V1B4SkZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy83ZTM4YjItYmVjMS00NDY0LWEwY2EtN2QyNThiNjIwMTY5 LzEvcF9sS3VUVUZTNGJjdGRhdHV0TGYyMVpMVWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYucMA0E AgACMAcDBQAqCyDAMA0GCSqGSIb3DQEBCwUAA4IBAQBYZIvljcHZJxKdO5Uofn7w 1yzo1Y04vby95bw7xb0jG3nU0Xt3f9z/NNUo1vfUbNg9WdanvTVJ0ZbcUOQhRkW4 vNlY/1Ii9xwYy7IB/vBcbNGFNZjzirFLUKOeJD1u0QEQ03tsGIfARSVLbq9EDEnA Kdknesx96KfvwBU4qmOn2i2H9cEat30FmQWuv+573VEnNSx7jQ6K46SjS/ZbGmZ+ p5liHBDpe77A6V4murPLGYNIiHNUxFK5MsjEcIddC5+bB4XLakR4g0sflY4n5XTt /Uzbc6RVHQx/OaIh2GE8zP11ebVjnp9G6QQDef2hHKGJlPx1y9CKhzirWJfL4ibi -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:40 2026 by rpki-client