This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/CXD8wfMhKiKiO997lKcwfqvgnd4.roa File: CXD8wfMhKiKiO997lKcwfqvgnd4.roa (raw, json) Hash identifier: GXzecNWlAWU/oBfDZ4cMgGfToo/UFOLMCS/xikLLiZA= Subject key identifier: 09:70:FC:C1:F3:21:2A:22:A2:3B:DF:7B:94:A7:30:7E:AB:E0:9D:DE Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Certificate serial: 019B7D5C439077D34549CBC8DDF798CD5030 Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/CXD8wfMhKiKiO997lKcwfqvgnd4.roa Signing time: Fri 02 Jan 2026 06:19:17 +0000 ROA not before: Fri 02 Jan 2026 06:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210835 IP address blocks: 89.150.36.0/24 maxlen: 24 89.150.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:43:90:77:d3:45:49:cb:c8:dd:f7:98:cd:50:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45 Validity Not Before: Jan 2 06:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0970fcc1f3212a22a23bdf7b94a7307eabe09dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b5:57:ba:95:f1:fd:a5:54:a4:7a:22:f9:92: df:cd:fa:7e:4f:8a:c2:bb:27:3c:e0:5c:72:5c:2c: 47:5e:6b:d3:34:96:74:f9:b1:bc:bb:ac:ae:24:3e: 52:e0:75:06:f9:f3:3f:b5:8a:2e:bf:76:0d:0a:5e: dd:f2:d7:1c:1c:c0:ba:04:e5:78:0b:5b:57:20:39: 18:6f:fd:0e:93:cd:b4:de:77:a9:94:a7:11:b3:9e: 07:0b:08:b5:70:ce:26:02:7d:e6:eb:36:b2:e4:67: 09:9c:32:88:62:f9:8f:0a:7c:19:5f:76:a7:1c:01: 4c:15:dd:a8:b7:e7:51:7d:79:10:1d:1a:15:c2:7c: 67:80:22:b0:5c:5a:ef:cb:d2:11:f6:43:e7:5d:17: d4:7d:7a:14:d6:32:5b:bc:1d:18:eb:7b:fa:0d:0f: 6b:a5:ba:ad:e5:27:c7:67:84:ad:21:3a:f9:8b:f8: 4c:30:36:f1:f2:ad:d2:be:6a:a9:eb:57:2e:c2:60: 5e:9d:1d:82:6f:48:48:8f:de:d2:cb:70:e5:53:d5: 5c:32:7a:af:17:55:bd:8f:da:ce:85:e4:7d:72:bd: b7:09:6a:93:a9:2f:a3:01:2c:7a:be:1f:f4:b4:ce: 2f:ce:9f:20:6a:11:31:64:af:87:83:3b:a4:22:3e: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:70:FC:C1:F3:21:2A:22:A2:3B:DF:7B:94:A7:30:7E:AB:E0:9D:DE X509v3 Authority Key Identifier: keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/CXD8wfMhKiKiO997lKcwfqvgnd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.36.0/24 89.150.38.0/24 Signature Algorithm: sha256WithRSAEncryption 08:cb:e3:db:d9:68:70:48:6f:2d:a6:06:bb:4f:b7:2e:67:1a: 34:ae:02:06:76:43:83:a3:64:c6:e6:13:a0:92:2e:bf:1d:0d: be:78:b9:f3:70:32:3e:58:1d:29:16:d2:05:b8:33:8e:5a:5c: be:f2:f3:30:e3:70:92:76:5a:11:68:79:f3:31:f6:01:01:36: 70:cf:f6:0c:32:e6:b1:37:43:50:07:40:92:49:de:60:c6:90: a2:26:9e:ff:60:46:4b:7a:03:44:24:f7:34:7a:ff:c7:92:06: e9:69:fc:d4:39:4b:f6:a4:61:c3:ce:73:16:b0:02:b8:8a:33: 02:9a:c1:4a:4e:fd:90:65:ee:c4:55:b2:a3:69:e7:e2:69:50: 32:ef:df:95:2f:45:53:9a:56:ef:d6:fd:ba:fb:aa:71:b0:86: 1f:26:f4:20:e3:10:1b:75:49:24:be:a1:87:4f:f2:9d:c9:b2: 88:c9:89:0b:ec:85:34:43:a0:68:7e:21:8b:db:3a:ed:59:bf: 00:33:8e:6c:a5:ba:23:73:a7:c1:1e:57:ff:7b:df:70:fd:8e: 41:c4:47:ca:7d:94:6e:2a:67:68:f1:a6:40:58:92:bf:b7:73: 41:da:8a:d0:42:37:41:9e:95:a8:fe:48:f1:e7:43:53:12:f0: 35:ec:1e:e7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XEOQd9NFScvI3feYzVAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2 NWRhNDUwHhcNMjYwMTAyMDYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTcwZmNjMWYzMjEyYTIyYTIzYmRmN2I5NGE3MzA3ZWFiZTA5ZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rVXupXx/aVUpHoi+ZLfzfp+T4rC uyc84FxyXCxHXmvTNJZ0+bG8u6yuJD5S4HUG+fM/tYouv3YNCl7d8tccHMC6BOV4 C1tXIDkYb/0Ok8203neplKcRs54HCwi1cM4mAn3m6zay5GcJnDKIYvmPCnwZX3an HAFMFd2ot+dRfXkQHRoVwnxngCKwXFrvy9IR9kPnXRfUfXoU1jJbvB0Y63v6DQ9r pbqt5SfHZ4StITr5i/hMMDbx8q3Svmqp61cuwmBenR2Cb0hIj97Sy3DlU9VcMnqv F1W9j9rOheR9cr23CWqTqS+jASx6vh/0tM4vzp8gahExZK+HgzukIj5ujwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAlw/MHzISoiojvfe5SnMH6r4J3eMB8GA1UdIwQY MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt NTU1ZjNmMThlNTRmLzEvQ1hEOHdmTWhLaUtpTzk5N2xLY3dmcXZnbmQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZYkAwQA WZYmMA0GCSqGSIb3DQEBCwUAA4IBAQAIy+Pb2WhwSG8tpga7T7cuZxo0rgIGdkOD o2TG5hOgki6/HQ2+eLnzcDI+WB0pFtIFuDOOWly+8vMw43CSdloRaHnzMfYBATZw z/YMMuaxN0NQB0CSSd5gxpCiJp7/YEZLegNEJPc0ev/HkgbpafzUOUv2pGHDznMW sAK4ijMCmsFKTv2QZe7EVbKjaefiaVAy79+VL0VTmlbv1v26+6pxsIYfJvQg4xAb dUkkvqGHT/KdybKIyYkL7IU0Q6BofiGL2zrtWb8AM45spbojc6fBHlf/e99w/Y5B xEfKfZRuKmdo8aZAWJK/t3NB2orQQjdBnpWo/kjx50NTEvA17B7n -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:57 2026 by rpki-client