This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/xAwC9v2pDzbNDsLMQHKskO70xoQ.roa File: xAwC9v2pDzbNDsLMQHKskO70xoQ.roa (raw, json) Hash identifier: pNouLSLbbOHtlI8iLu58m9dwfp4hUJRS+ezdGScljvg= Subject key identifier: C4:0C:02:F6:FD:A9:0F:36:CD:0E:C2:CC:40:72:AC:90:EE:F4:C6:84 Certificate issuer: /CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34 Certificate serial: 019B797E4FAA1DF841D2718BBEED4F1602C2 Authority key identifier: CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/xAwC9v2pDzbNDsLMQHKskO70xoQ.roa Signing time: Thu 01 Jan 2026 12:17:59 +0000 ROA not before: Thu 01 Jan 2026 12:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59444 IP address blocks: 176.121.80.0/22 maxlen: 22 176.121.84.0/24 maxlen: 24 176.121.85.0/24 maxlen: 24 176.121.86.0/24 maxlen: 24 176.121.87.0/24 maxlen: 24 195.64.174.0/24 maxlen: 24 195.64.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4f:aa:1d:f8:41:d2:71:8b:be:ed:4f:16:02:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbe9fc725b0c3ef10373460f9bf59bce3ed50a34 Validity Not Before: Jan 1 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c40c02f6fda90f36cd0ec2cc4072ac90eef4c684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:19:b8:37:29:93:7c:36:04:47:65:99:6b:57: f9:c4:29:31:83:06:31:2c:31:69:94:cc:66:ff:d3: d4:92:23:8e:5f:61:4f:c9:0b:4a:5f:0b:fb:d0:3a: 5a:d8:94:f0:f6:83:b3:a7:9d:6c:b5:0f:62:39:f6: 3c:45:2b:bf:7d:45:d5:dd:19:a4:c6:54:6b:08:d2: 9f:0d:7a:a4:25:18:a4:2a:65:a7:30:10:46:23:72: 39:d7:50:c5:dc:f2:61:f7:84:cc:78:5f:b6:84:2f: 07:2b:26:b3:20:13:87:56:30:a6:8c:e9:d7:ff:15: 46:5a:b6:22:4d:97:d1:7b:2e:80:4f:32:c7:70:63: bf:b6:29:d3:4d:e2:56:0f:7e:f4:25:31:06:7a:70: 14:49:fc:6b:8b:cd:53:e5:92:df:ee:26:31:02:54: ca:11:b4:e4:2d:6e:89:bf:a9:14:86:ca:70:6a:20: 0e:9a:98:59:98:ee:96:b0:65:40:ff:9a:aa:41:81: 30:2d:f1:50:b9:7a:23:3d:bb:57:6e:e3:f2:3c:16: 92:e3:e7:12:52:d0:8f:23:ee:f6:d5:af:d6:4c:4b: b0:9e:9f:e3:fe:ba:74:5e:78:a6:32:ba:a6:95:76: 41:9a:53:d2:40:a5:e1:34:39:54:94:8c:b2:45:97: 93:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:0C:02:F6:FD:A9:0F:36:CD:0E:C2:CC:40:72:AC:90:EE:F4:C6:84 X509v3 Authority Key Identifier: keyid:CB:E9:FC:72:5B:0C:3E:F1:03:73:46:0F:9B:F5:9B:CE:3E:D5:0A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/xAwC9v2pDzbNDsLMQHKskO70xoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e2bbf5-b336-4c09-ba42-55a54df1434e/1/y-n8clsMPvEDc0YPm_Wbzj7VCjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.121.80.0/21 195.64.174.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:39:f7:21:ce:93:22:fe:35:68:d0:36:25:bd:9a:da:0c:73: 04:31:b8:1f:01:df:76:5d:29:95:f0:ae:e8:3a:b2:f4:fc:09: 05:f4:84:ac:c2:a7:97:fc:53:bc:c0:5d:57:25:9f:1c:54:c9: 6b:ee:3b:55:b1:cf:e5:45:e7:17:c6:ed:3f:d9:de:aa:2f:41: ad:ac:c8:64:6d:8d:64:a0:1e:90:98:27:32:9c:b5:c2:9a:4b: f7:24:e9:95:e0:7e:9d:dd:3c:88:0f:0b:49:3c:60:09:6a:39: e2:23:e1:eb:12:43:61:3c:20:d4:18:bf:6b:6e:9b:18:d2:47: 5d:cc:3b:92:36:c1:1f:d9:08:a8:1f:27:34:00:6a:4d:34:03: 85:1c:8a:4f:f6:b4:90:4f:e5:79:0e:55:45:94:ac:63:67:97: 47:35:4d:c4:e7:3a:52:84:d5:40:c9:4b:80:84:11:88:27:3f: 49:39:dc:84:35:3c:b3:95:35:79:2c:2e:fc:de:25:d2:8c:a9: 0c:91:08:56:67:91:73:b6:f2:dc:95:86:41:a0:ce:fb:aa:1a: 7f:29:7d:0d:88:d3:08:69:70:9a:ea:e7:16:09:67:98:fa:80: 70:ad:58:33:80:b6:20:e5:a3:ca:1e:13:e0:23:6d:9b:81:2b: 2c:07:a9:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fk+qHfhB0nGLvu1PFgLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZTlmYzcyNWIwYzNlZjEwMzczNDYwZjliZjU5YmNlM2Vk NTBhMzQwHhcNMjYwMTAxMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDBjMDJmNmZkYTkwZjM2Y2QwZWMyY2M0MDcyYWM5MGVlZjRjNjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rm4NymTfDYER2WZa1f5xCkxgwYx LDFplMxm/9PUkiOOX2FPyQtKXwv70Dpa2JTw9oOzp51stQ9iOfY8RSu/fUXV3Rmk xlRrCNKfDXqkJRikKmWnMBBGI3I511DF3PJh94TMeF+2hC8HKyazIBOHVjCmjOnX /xVGWrYiTZfRey6ATzLHcGO/tinTTeJWD370JTEGenAUSfxri81T5ZLf7iYxAlTK EbTkLW6Jv6kUhspwaiAOmphZmO6WsGVA/5qqQYEwLfFQuXojPbtXbuPyPBaS4+cS UtCPI+721a/WTEuwnp/j/rp0XnimMrqmlXZBmlPSQKXhNDlUlIyyRZeTEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMQMAvb9qQ82zQ7CzEByrJDu9MaEMB8GA1UdIwQY MBaAFMvp/HJbDD7xA3NGD5v1m84+1Qo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDIt NTVhNTRkZjE0MzRlLzEveEF3Qzl2MnBEemJORHNMTVFIS3NrTzcweG9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9lMmJiZjUtYjMzNi00YzA5LWJhNDItNTVhNTRkZjE0MzRl LzEveS1uOGNsc01QdkVEYzBZUG1fV2J6ajdWQ2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDsHlQAwQB w0CuMA0GCSqGSIb3DQEBCwUAA4IBAQCcOfchzpMi/jVo0DYlvZraDHMEMbgfAd92 XSmV8K7oOrL0/AkF9ISswqeX/FO8wF1XJZ8cVMlr7jtVsc/lRecXxu0/2d6qL0Gt rMhkbY1koB6QmCcynLXCmkv3JOmV4H6d3TyIDwtJPGAJajniI+HrEkNhPCDUGL9r bpsY0kddzDuSNsEf2QioHyc0AGpNNAOFHIpP9rSQT+V5DlVFlKxjZ5dHNU3E5zpS hNVAyUuAhBGIJz9JOdyENTyzlTV5LC783iXSjKkMkQhWZ5FztvLclYZBoM77qhp/ KX0NiNMIaXCa6ucWCWeY+oBwrVgzgLYg5aPKHhPgI22bgSssB6nQ -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:05 2026 by rpki-client