This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/CxTPA5mUFSfM5zzjG_pBiZdndNM.roa File: CxTPA5mUFSfM5zzjG_pBiZdndNM.roa (raw, json) Hash identifier: +LuWTLTvb4XLHwaIc7XtaBKu05lC9tlVeMmuHJRwLok= Subject key identifier: 0B:14:CF:03:99:94:15:27:CC:E7:3C:E3:1B:FA:41:89:97:67:74:D3 Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Certificate serial: 019B77C6FCE469FA9FFB096CB129C57B069A Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/CxTPA5mUFSfM5zzjG_pBiZdndNM.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47167 IP address blocks: 195.216.224.0/24 maxlen: 24 2001:67c:294::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fc:e4:69:fa:9f:fb:09:6c:b1:29:c5:7b:06:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b14cf0399941527cce73ce31bfa4189976774d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:50:2a:78:67:54:d1:ca:14:74:de:24:84: 54:e4:d6:35:e3:ff:f5:04:74:de:b6:44:b3:86:1d: 03:ea:e9:de:7b:95:cb:0e:1d:97:92:29:28:d7:9e: 2f:7f:fa:d4:e5:52:45:b2:ce:3a:86:fc:42:a4:fe: 76:0e:b2:82:62:26:08:68:9e:48:14:1f:cc:38:c3: e6:d6:4c:58:ee:93:7b:24:ae:a0:3d:e0:15:ad:10: 03:fe:78:34:0f:9a:70:e3:e4:4e:0b:b7:de:bd:7f: 6f:d9:6d:ba:13:e3:52:9c:24:9e:b4:12:8d:43:21: 87:5d:36:d1:8d:bc:fb:fb:f2:ee:c7:c7:f3:d9:62: e8:55:2c:09:0a:76:2b:fc:35:50:dd:96:22:4b:8c: 9c:2f:ae:56:a5:33:46:2e:4a:f8:a8:86:71:39:2d: de:bf:db:3e:52:1c:7d:d6:c8:b4:a9:84:e8:4e:4f: 70:07:fd:2c:89:04:20:be:d5:0a:f4:57:44:ec:fc: cf:52:a1:a7:57:19:da:60:38:59:27:35:47:6c:08: 24:af:20:11:5c:8b:0b:85:39:07:25:5a:7d:0b:69: 02:57:b2:a2:c5:b9:50:c5:03:33:07:17:39:4a:f0: 32:98:f3:cb:f2:4d:4f:cd:e6:9b:26:4b:7c:4f:93: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:14:CF:03:99:94:15:27:CC:E7:3C:E3:1B:FA:41:89:97:67:74:D3 X509v3 Authority Key Identifier: keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/CxTPA5mUFSfM5zzjG_pBiZdndNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.224.0/24 IPv6: 2001:67c:294::/48 Signature Algorithm: sha256WithRSAEncryption 0b:40:43:31:7c:a3:b6:e8:aa:cf:1c:3e:dd:91:d5:95:06:a0: 49:7a:f2:9b:63:81:f9:30:27:35:d8:15:4a:94:fb:e1:02:8f: ce:2a:c0:aa:fe:a7:ea:10:7b:cb:71:46:c1:36:5d:2c:f5:2e: c2:87:5a:9c:0d:4c:3a:17:96:03:60:02:7a:a7:c6:3b:9f:8a: 48:cf:7a:24:a1:8f:00:4e:cf:33:99:2c:47:e4:b5:92:1c:61: 95:3e:47:be:a4:e6:43:55:3b:07:ad:f2:4c:55:09:07:43:09: e4:d9:16:c4:31:75:29:26:94:3a:12:eb:ab:0b:b4:26:d5:7e: 94:f4:4a:5c:0b:ac:e2:dd:2e:db:58:01:a8:63:30:bb:af:43: fb:53:46:d2:7e:7f:3b:82:21:ef:10:ae:9c:4c:f3:ba:be:51: f7:ea:89:b3:90:e8:79:a5:34:56:e8:d4:33:d8:7b:7f:18:8c: 3c:b1:de:e0:58:ed:da:99:b2:ab:18:f2:c0:50:cb:be:9e:04: 9a:fa:06:ca:7b:a0:db:95:e8:63:c6:31:48:82:b3:22:93:cc: 56:9c:22:7c:6b:48:97:13:3b:a3:69:35:ee:88:14:b2:9a:9b: 45:69:a2:bb:36:39:7c:80:03:e3:29:92:2c:aa:c1:06:b2:e4: 77:40:d1:a5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xvzkafqf+wlssSnFewaaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjU4MGUxOGFkNmZmOGRjOTQyYmU4ODNjMTZkZThiNzMx Zjk2MDUwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjE0Y2YwMzk5OTQxNTI3Y2NlNzNjZTMxYmZhNDE4OTk3Njc3NGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1ZQKnhnVNHKFHTeJIRU5NY14//1 BHTetkSzhh0D6unee5XLDh2Xkiko154vf/rU5VJFss46hvxCpP52DrKCYiYIaJ5I FB/MOMPm1kxY7pN7JK6gPeAVrRAD/ng0D5pw4+ROC7fevX9v2W26E+NSnCSetBKN QyGHXTbRjbz7+/Lux8fz2WLoVSwJCnYr/DVQ3ZYiS4ycL65WpTNGLkr4qIZxOS3e v9s+Uhx91si0qYToTk9wB/0siQQgvtUK9FdE7PzPUqGnVxnaYDhZJzVHbAgkryAR XIsLhTkHJVp9C2kCV7KixblQxQMzBxc5SvAymPPL8k1PzeabJkt8T5PiFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAsUzwOZlBUnzOc84xv6QYmXZ3TTMB8GA1UdIwQY MBaAFKhlgOGK1v+NyUK+iDwW3otzH5YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEt MjM2ZTkyZmM2YTU5LzEvQ3hUUEE1bVVGU2ZNNXp6akdfcEJpWmRuZE5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEtMjM2ZTkyZmM2YTU5 LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw9jgMA8E AgACMAkDBwAgAQZ8ApQwDQYJKoZIhvcNAQELBQADggEBAAtAQzF8o7boqs8cPt2R 1ZUGoEl68ptjgfkwJzXYFUqU++ECj84qwKr+p+oQe8txRsE2XSz1LsKHWpwNTDoX lgNgAnqnxjufikjPeiShjwBOzzOZLEfktZIcYZU+R76k5kNVOwet8kxVCQdDCeTZ FsQxdSkmlDoS66sLtCbVfpT0SlwLrOLdLttYAahjMLuvQ/tTRtJ+fzuCIe8QrpxM 87q+UffqibOQ6HmlNFbo1DPYe38YjDyx3uBY7dqZsqsY8sBQy76eBJr6Bsp7oNuV 6GPGMUiCsyKTzFacInxrSJcTO6NpNe6IFLKam0Vpors2OXyAA+MpkiyqwQay5HdA 0aU= -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:20 2026 by rpki-client