This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/CnxrWW9MQbA3OxKH-Q8jpaMZj0Q.roa File: CnxrWW9MQbA3OxKH-Q8jpaMZj0Q.roa (raw, json) Hash identifier: I2lPd7hD8IUUjVTMDWiwz4fKXB1nPb5e6pLyv73hBK8= Subject key identifier: 0A:7C:6B:59:6F:4C:41:B0:37:3B:12:87:F9:0F:23:A5:A3:19:8F:44 Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c Certificate serial: 019B7F822E565052400ECA3D89321C3770C6 Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/CnxrWW9MQbA3OxKH-Q8jpaMZj0Q.roa Signing time: Fri 02 Jan 2026 16:19:56 +0000 ROA not before: Fri 02 Jan 2026 16:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205544 IP address blocks: 193.160.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:2e:56:50:52:40:0e:ca:3d:89:32:1c:37:70:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c Validity Not Before: Jan 2 16:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a7c6b596f4c41b0373b1287f90f23a5a3198f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:77:95:d5:83:75:ee:e3:ca:b8:70:ed:24:37: e3:70:85:32:d0:ad:17:4c:89:21:15:ce:30:bb:20: b0:a8:4f:f4:9c:c7:0f:3e:38:af:a7:b7:07:c1:44: 9c:37:3a:53:bc:85:09:8f:b8:9a:98:28:7e:50:62: 76:c7:30:75:b0:5c:a7:a4:bb:f9:a5:12:6b:7a:c9: 91:6f:cb:8b:a9:bb:63:9a:a9:45:3a:57:2b:c7:e2: 86:5c:3f:34:d2:83:b1:3c:75:71:33:95:9d:71:e8: b7:f6:72:71:b7:61:5f:e1:ec:0c:43:ce:df:df:96: d4:fa:66:32:3c:80:9e:68:f0:c1:e7:e2:d8:47:5e: 71:9a:34:fe:0d:42:b9:d3:98:51:f1:70:d4:1f:75: fc:77:f5:cf:50:be:7b:3f:5a:c3:8e:cc:5f:79:43: 92:88:fb:94:02:3e:b5:82:05:fb:aa:a4:eb:f5:9f: ec:10:9f:cd:d4:ce:1c:0a:14:e3:89:26:e7:88:dc: ea:8c:61:81:f5:0c:bc:46:59:8c:ce:4a:e1:90:52: 70:5d:39:c0:8a:72:34:d2:2d:92:92:8c:0a:09:43: 63:04:29:8d:0d:2b:a1:16:45:55:d6:78:a6:be:14: 52:26:2d:8c:96:ec:ab:c5:8e:8d:c1:bb:0f:d5:69: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7C:6B:59:6F:4C:41:B0:37:3B:12:87:F9:0F:23:A5:A3:19:8F:44 X509v3 Authority Key Identifier: keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/CnxrWW9MQbA3OxKH-Q8jpaMZj0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.76.0/22 Signature Algorithm: sha256WithRSAEncryption 19:5a:53:9f:59:14:cb:03:9b:cd:bd:ee:2a:17:06:22:0f:5e: 4c:81:07:e4:9b:94:6a:06:c7:79:4b:f8:72:44:ff:6d:65:22: c8:03:61:b6:24:2f:a6:77:3b:f5:4c:3a:d9:12:ff:db:f9:97: 6a:26:d1:88:a3:b3:cf:c3:bc:5a:8f:80:d1:d9:ff:97:6e:be: ba:c8:c1:8d:d4:76:7d:9b:61:cf:e1:61:fd:24:3a:2a:67:ea: 1c:2a:cc:1c:cc:d1:13:91:c9:1b:f6:3a:96:4c:4d:f0:fc:68: b8:de:53:b3:4c:c9:88:a3:ea:c1:80:08:8a:f1:c3:83:80:83: 65:57:bc:d5:59:42:f6:d4:e0:e4:4e:30:ff:08:6e:65:98:46: 3f:04:6a:b8:d2:5e:87:31:dd:ba:5c:13:b2:03:d8:dc:d1:4b: b6:06:d5:8f:45:62:4d:8a:b1:14:18:3b:f5:68:be:db:4e:3d: 72:d8:7d:fc:f9:10:d2:95:e9:c4:5b:76:aa:87:d2:f3:ac:16: 18:fb:0a:4a:64:f4:c5:52:d8:02:02:c0:a3:f6:f5:bc:18:f8: f0:8d:84:b7:ad:15:44:a1:cf:62:4f:48:bc:de:60:b1:d8:dc: 49:b4:b0:7d:de:b9:d0:ff:40:31:a9:f4:0f:18:68:06:2b:6e: 2e:a2:c8:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gi5WUFJADso9iTIcN3DGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4 OGU5MmMwHhcNMjYwMTAyMTYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTdjNmI1OTZmNGM0MWIwMzczYjEyODdmOTBmMjNhNWEzMTk4ZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXeV1YN17uPKuHDtJDfjcIUy0K0X TIkhFc4wuyCwqE/0nMcPPjivp7cHwUScNzpTvIUJj7iamCh+UGJ2xzB1sFynpLv5 pRJresmRb8uLqbtjmqlFOlcrx+KGXD800oOxPHVxM5Wdcei39nJxt2Ff4ewMQ87f 35bU+mYyPICeaPDB5+LYR15xmjT+DUK505hR8XDUH3X8d/XPUL57P1rDjsxfeUOS iPuUAj61ggX7qqTr9Z/sEJ/N1M4cChTjiSbniNzqjGGB9Qy8RlmMzkrhkFJwXTnA inI00i2SkowKCUNjBCmNDSuhFkVV1nimvhRSJi2MluyrxY6NwbsP1Wk6QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAp8a1lvTEGwNzsSh/kPI6WjGY9EMB8GA1UdIwQY MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt NjQ0YmQwZmM3ZjgwLzEvQ254cldXOU1RYkEzT3hLSC1ROGpwYU1aajBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwaBMMA0G CSqGSIb3DQEBCwUAA4IBAQAZWlOfWRTLA5vNve4qFwYiD15MgQfkm5RqBsd5S/hy RP9tZSLIA2G2JC+mdzv1TDrZEv/b+ZdqJtGIo7PPw7xaj4DR2f+Xbr66yMGN1HZ9 m2HP4WH9JDoqZ+ocKswczNETkckb9jqWTE3w/Gi43lOzTMmIo+rBgAiK8cODgINl V7zVWUL21ODkTjD/CG5lmEY/BGq40l6HMd26XBOyA9jc0Uu2BtWPRWJNirEUGDv1 aL7bTj1y2H38+RDSlenEW3aqh9LzrBYY+wpKZPTFUtgCAsCj9vW8GPjwjYS3rRVE oc9iT0i83mCx2NxJtLB93rnQ/0AxqfQPGGgGK24uosj6 -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:12 2026 by rpki-client