This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/CxlxSB7tcWfBem6YW61R44h6GhE.roa File: CxlxSB7tcWfBem6YW61R44h6GhE.roa (raw, json) Hash identifier: BHIL6DBpe/hobhcIvwtijWBrf1OIrw1UVNWnYFympy8= Subject key identifier: 0B:19:71:48:1E:ED:71:67:C1:7A:6E:98:5B:AD:51:E3:88:7A:1A:11 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC83351D9B8E90C8E26B2AD51E53D56 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/CxlxSB7tcWfBem6YW61R44h6GhE.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214238 IP address blocks: 2.58.124.0/24 maxlen: 24 2.58.125.0/24 maxlen: 24 2.58.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:33:51:d9:b8:e9:0c:8e:26:b2:ad:51:e5:3d:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b1971481eed7167c17a6e985bad51e3887a1a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:95:fb:7a:95:86:5b:3b:13:dd:4b:37:65: 03:05:b6:dd:44:46:1b:12:1f:b0:fc:1d:e2:18:24: 60:5c:3b:b4:dd:c8:c0:e5:5d:2e:06:4f:b7:f0:23: 86:53:c9:2d:c4:38:61:5e:b4:d8:90:f8:1f:28:d9: 58:f7:b3:de:93:f1:10:a3:34:f4:b8:9d:48:5a:ef: d1:99:86:3f:6e:ec:04:8d:6a:2c:b6:a7:8f:2f:40: a2:c2:93:85:55:d4:4e:43:84:f9:ce:db:ac:b9:11: ae:05:4c:06:af:e6:00:09:62:2f:54:4d:94:08:e4: 7b:0c:d8:3a:a9:9a:5c:3a:04:8e:50:c7:01:ac:49: f5:85:9a:db:f7:2a:f7:67:30:73:97:62:c8:d5:ff: 5b:8f:29:1a:79:17:8f:95:ad:ef:4e:5a:56:7b:9c: 47:a4:39:10:7d:d1:23:aa:88:a4:80:d8:27:39:96: c2:0f:82:50:ee:19:7e:a8:ab:d6:7b:75:43:dd:7b: 89:a8:76:38:9c:18:04:5b:64:d4:92:c7:71:7d:8b: a2:0e:e3:bb:8f:61:19:ea:f1:51:e8:22:cc:6e:a3: 62:04:2d:ed:1d:36:ea:b1:ef:ad:a6:e3:f3:86:d8: a3:b4:bf:d1:33:70:7c:99:05:89:2d:55:c6:14:b8: 91:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:19:71:48:1E:ED:71:67:C1:7A:6E:98:5B:AD:51:E3:88:7A:1A:11 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/CxlxSB7tcWfBem6YW61R44h6GhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.124.0-2.58.126.255 Signature Algorithm: sha256WithRSAEncryption 76:bd:4a:11:e6:af:68:d1:df:2f:57:58:58:2f:21:d3:51:1a: 36:87:ce:53:c8:e7:d3:88:10:f6:4d:06:42:50:01:53:a8:50: ce:ff:f8:c0:47:7c:22:b5:74:b9:2d:0e:4d:2a:77:4a:6e:c8: e2:e8:da:75:b9:84:f3:c4:5b:71:02:18:6b:74:7a:87:81:d2: eb:ab:42:c4:39:c4:f0:b8:3a:d7:2e:11:c8:1e:f9:f7:39:48: df:fb:26:d2:83:c4:fc:3d:c5:a5:7c:78:7c:99:de:de:44:4b: 14:4c:b2:64:da:ee:54:f5:d1:fb:ff:a8:a1:d8:83:e4:39:c7: cc:20:19:b4:22:3c:e3:a4:70:b8:f4:78:8f:9e:c3:7d:19:75: 98:7f:99:b6:af:fb:40:90:78:a2:3f:e7:6c:da:68:c1:7d:67: e7:97:f7:61:ed:25:01:f2:ba:17:d0:c1:35:1d:b1:fc:c6:e2: 0a:6c:57:22:2e:3f:21:67:91:29:c3:ef:1c:ef:6b:eb:fb:c0: b0:72:4d:1c:71:37:c1:bc:70:06:3f:04:91:95:8a:3c:14:56: 00:cc:4b:ff:99:9e:e2:26:6c:2f:b4:1a:0f:8f:9f:90:f9:1f: ba:b5:ff:cc:f7:36:ed:1c:cb:aa:97:67:52:53:62:79:20:39: a6:12:8a:b3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6yDNR2bjpDI4msq1R5T1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjE5NzE0ODFlZWQ3MTY3YzE3YTZlOTg1YmFkNTFlMzg4N2ExYTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbeV+3qVhls7E91LN2UDBbbdREYb Eh+w/B3iGCRgXDu03cjA5V0uBk+38COGU8ktxDhhXrTYkPgfKNlY97Pek/EQozT0 uJ1IWu/RmYY/buwEjWostqePL0CiwpOFVdROQ4T5ztusuRGuBUwGr+YACWIvVE2U COR7DNg6qZpcOgSOUMcBrEn1hZrb9yr3ZzBzl2LI1f9bjykaeRePla3vTlpWe5xH pDkQfdEjqoikgNgnOZbCD4JQ7hl+qKvWe3VD3XuJqHY4nBgEW2TUksdxfYuiDuO7 j2EZ6vFR6CLMbqNiBC3tHTbqse+tpuPzhtijtL/RM3B8mQWJLVXGFLiRLQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAsZcUge7XFnwXpumFutUeOIehoRMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvQ3hseFNCN3RjV2ZCZW02WVc2MVI0NGg2R2hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAICOnwD BAACOn4wDQYJKoZIhvcNAQELBQADggEBAHa9ShHmr2jR3y9XWFgvIdNRGjaHzlPI 59OIEPZNBkJQAVOoUM7/+MBHfCK1dLktDk0qd0puyOLo2nW5hPPEW3ECGGt0eoeB 0uurQsQ5xPC4OtcuEcge+fc5SN/7JtKDxPw9xaV8eHyZ3t5ESxRMsmTa7lT10fv/ qKHYg+Q5x8wgGbQiPOOkcLj0eI+ew30ZdZh/mbav+0CQeKI/52zaaMF9Z+eX92Ht JQHyuhfQwTUdsfzG4gpsVyIuPyFnkSnD7xzva+v7wLByTRxxN8G8cAY/BJGVijwU VgDMS/+ZnuImbC+0Gg+Pn5D5H7q1/8z3Nu0cy6qXZ1JTYnkgOaYSirM= -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:28 2026 by rpki-client