This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/CNXF2SSWNpo_l9RHcQj_nTeKVNQ.roa File: CNXF2SSWNpo_l9RHcQj_nTeKVNQ.roa (raw, json) Hash identifier: EDn78xn+p6oMFAEmlxUOHaCSYp4j7S763nhsCUw2Kv4= Subject key identifier: 08:D5:C5:D9:24:96:36:9A:3F:97:D4:47:71:08:FF:9D:37:8A:54:D4 Certificate issuer: /CN=e83a2cce9083e8c15a1d325cf48767559f92b623 Certificate serial: 019B7D5CBC0CA4C000D24447FEB2B8A65EC5 Authority key identifier: E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/CNXF2SSWNpo_l9RHcQj_nTeKVNQ.roa Signing time: Fri 02 Jan 2026 06:19:47 +0000 ROA not before: Fri 02 Jan 2026 06:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34693 IP address blocks: 176.123.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.mft rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:bc:0c:a4:c0:00:d2:44:47:fe:b2:b8:a6:5e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e83a2cce9083e8c15a1d325cf48767559f92b623 Validity Not Before: Jan 2 06:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08d5c5d92496369a3f97d4477108ff9d378a54d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:e8:4a:22:b4:71:c5:21:83:6e:36:8f:62: f8:97:e9:9b:b8:68:e2:96:23:8f:64:64:88:63:a6: 2d:de:c4:d1:c7:48:7f:76:5b:a1:ce:a1:28:b8:fa: b3:54:38:8d:e8:bb:27:cc:d7:a5:73:22:26:50:d6: f1:4e:c0:6d:60:3f:c6:2c:c2:f8:d4:f8:d0:56:8b: f3:5b:3e:4a:48:85:94:50:b3:9a:29:e8:6b:bd:52: 0a:5f:0d:a1:7e:c3:83:3b:b8:a0:79:a2:64:29:1e: 01:fe:b1:ea:d6:96:21:d7:a5:03:1a:dd:41:0c:21: da:8a:a1:e2:c5:0d:4f:e1:0a:20:eb:60:74:da:d5: a4:a6:92:1e:a4:f5:98:07:0f:89:9b:f2:cb:5b:ff: cf:41:80:5a:18:76:fc:8d:75:48:06:74:bf:06:45: 2c:00:e5:86:61:9c:92:76:f6:de:35:9f:14:f4:0c: ea:5a:b8:66:84:fa:16:9f:94:5c:ad:5b:df:4d:9c: ae:47:1d:58:11:b1:4d:71:23:45:65:6b:d8:4b:73: 38:35:72:11:27:2e:7e:83:f7:f5:ed:b5:ea:04:5b: c0:79:59:fd:61:e7:3f:c6:5a:1f:a1:1c:2c:4f:08: 96:e3:80:91:a5:43:c1:fb:c5:0c:93:59:ec:80:03: 4e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D5:C5:D9:24:96:36:9A:3F:97:D4:47:71:08:FF:9D:37:8A:54:D4 X509v3 Authority Key Identifier: keyid:E8:3A:2C:CE:90:83:E8:C1:5A:1D:32:5C:F4:87:67:55:9F:92:B6:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DoszpCD6MFaHTJc9IdnVZ-StiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/CNXF2SSWNpo_l9RHcQj_nTeKVNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/eb422b-c79e-4fbe-ae8f-3563f9543487/1/6DoszpCD6MFaHTJc9IdnVZ-StiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.123.59.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ed:5f:f5:48:05:57:b0:2c:56:13:69:b2:49:9a:44:8a:0f: 42:9e:96:8a:a0:35:95:19:41:1e:f9:06:2e:02:fc:2d:d2:02: fc:62:7d:51:26:fa:0d:1d:f9:7e:c4:51:df:bf:03:2e:85:3c: 8a:51:3f:91:4c:5a:58:94:8b:72:cc:37:9c:ae:f9:b2:39:da: 3d:76:10:e9:52:3f:52:35:9b:2e:4e:1e:1a:50:51:e2:1b:19: b1:c1:42:18:28:dc:85:a2:90:7a:ad:99:25:20:79:8e:48:96: b4:9b:e5:5e:e8:c3:28:a3:75:40:ac:3b:5e:71:bb:41:66:51: 6d:97:ae:f3:b9:6e:70:f4:a3:07:d5:cc:06:1c:98:6d:fd:d0: ab:36:13:6d:64:d8:1b:5c:81:ea:a1:c4:0a:a2:9e:41:6a:b9: 0f:49:d2:f7:19:b3:38:3a:69:d5:30:cd:d6:32:ee:c4:85:72: 90:db:4a:44:ba:0c:4f:f3:2f:b6:cf:ce:f4:50:4c:d9:93:f4: db:7e:d0:52:1f:e4:2d:e9:e6:17:a8:9d:a0:19:12:e8:c6:8d: 8a:63:c6:ce:5a:b6:e9:93:d4:7a:7a:7e:9c:e1:c2:c3:fe:b9: 41:bc:36:a7:89:3f:80:80:da:f4:c7:9c:0c:87:60:f7:14:6d: ba:a6:88:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XLwMpMAA0kRH/rK4pl7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4M2EyY2NlOTA4M2U4YzE1YTFkMzI1Y2Y0ODc2NzU1OWY5 MmI2MjMwHhcNMjYwMTAyMDYxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGQ1YzVkOTI0OTYzNjlhM2Y5N2Q0NDc3MTA4ZmY5ZDM3OGE1NGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxLoSiK0ccUhg242j2L4l+mbuGji liOPZGSIY6Yt3sTRx0h/dluhzqEouPqzVDiN6LsnzNelcyImUNbxTsBtYD/GLML4 1PjQVovzWz5KSIWUULOaKehrvVIKXw2hfsODO7igeaJkKR4B/rHq1pYh16UDGt1B DCHaiqHixQ1P4Qog62B02tWkppIepPWYBw+Jm/LLW//PQYBaGHb8jXVIBnS/BkUs AOWGYZySdvbeNZ8U9AzqWrhmhPoWn5RcrVvfTZyuRx1YEbFNcSNFZWvYS3M4NXIR Jy5+g/f17bXqBFvAeVn9Yec/xlofoRwsTwiW44CRpUPB+8UMk1nsgANOjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjVxdkkljaaP5fUR3EI/503ilTUMB8GA1UdIwQY MBaAFOg6LM6Qg+jBWh0yXPSHZ1WfkrYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkRvc3pwQ0Q2TUZhSFRKYzlJZG5WWi1TdGlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lYjQyMmItYzc5ZS00ZmJlLWFlOGYt MzU2M2Y5NTQzNDg3LzEvQ05YRjJTU1dOcG9fbDlSSGNRal9uVGVLVk5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lYjQyMmItYzc5ZS00ZmJlLWFlOGYtMzU2M2Y5NTQzNDg3 LzEvNkRvc3pwQ0Q2TUZhSFRKYzlJZG5WWi1TdGlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHs7MA0G CSqGSIb3DQEBCwUAA4IBAQAS7V/1SAVXsCxWE2mySZpEig9CnpaKoDWVGUEe+QYu Avwt0gL8Yn1RJvoNHfl+xFHfvwMuhTyKUT+RTFpYlItyzDecrvmyOdo9dhDpUj9S NZsuTh4aUFHiGxmxwUIYKNyFopB6rZklIHmOSJa0m+Ve6MMoo3VArDtecbtBZlFt l67zuW5w9KMH1cwGHJht/dCrNhNtZNgbXIHqocQKop5BarkPSdL3GbM4OmnVMM3W Mu7EhXKQ20pEugxP8y+2z870UEzZk/TbftBSH+Qt6eYXqJ2gGRLoxo2KY8bOWrbp k9R6en6c4cLD/rlBvDaniT+AgNr0x5wMh2D3FG26poja -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:19 2026 by rpki-client