This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa File: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (raw, json) Hash identifier: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc= Subject key identifier: 73:1D:A1:35:C5:2A:79:C4:84:26:A7:B7:9F:6C:87:D6:76:E4:CD:C4 Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Certificate serial: 019B7E38B8631C72ED1AC6BB2A586AE37435 Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31404 IP address blocks: 217.179.128.0/18 maxlen: 24 217.180.64.0/18 maxlen: 24 217.181.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 10:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b8:63:1c:72:ed:1a:c6:bb:2a:58:6a:e3:74:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=731da135c52a79c48426a7b79f6c87d676e4cdc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:42:3e:17:32:d5:6e:a9:6a:01:75:27:b3:d0: 07:b0:1d:5b:9f:0d:03:be:fe:fe:3b:dc:fe:b7:14: cb:d9:87:40:d2:10:ec:d4:25:f7:1a:1a:41:49:77: cb:f7:2b:3f:bc:ea:57:09:80:80:b6:01:81:ab:07: e0:00:51:e5:43:72:fa:bc:7e:09:ee:4b:1d:17:a0: 1f:a1:75:f7:e1:b5:f5:a5:91:91:a5:16:6c:fa:53: 75:0b:05:5f:b4:35:92:26:39:bf:a9:4e:37:5a:99: c0:3d:cc:21:c2:40:f6:5d:c1:ab:cf:e1:1b:6b:a2: f9:8c:26:67:e0:24:6e:ea:a8:31:07:f6:82:65:64: a0:5a:f0:5b:fd:9a:86:d3:2d:38:52:65:51:2c:8a: a2:81:a2:15:fd:9a:06:f8:64:65:b0:f7:ba:bb:48: 35:1f:1c:10:06:28:92:52:45:4b:c7:47:48:94:16: e9:c3:cf:ce:ee:ec:67:d5:40:8d:21:0f:d5:1c:bf: 2f:fd:b3:50:9a:95:8c:b7:59:cf:83:66:e0:fb:bf: ff:c9:8e:67:ee:fa:8b:61:fe:2f:4e:0d:0a:4f:de: e0:af:c2:2d:8f:a9:7e:bb:b9:85:33:7c:90:85:b5: 2b:08:5e:e3:25:9b:ba:6d:d2:85:fa:0e:d2:1f:f4: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1D:A1:35:C5:2A:79:C4:84:26:A7:B7:9F:6C:87:D6:76:E4:CD:C4 X509v3 Authority Key Identifier: keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.179.128.0/18 217.180.64.0/18 217.181.96.0/19 Signature Algorithm: sha256WithRSAEncryption 8f:7d:a7:81:7f:27:23:a3:3f:1d:c5:3f:82:d1:f2:c7:42:ce: df:6d:03:52:e6:c8:39:ec:4a:50:22:b1:43:4f:98:a8:86:f4: 7b:d4:5e:ff:0c:24:ef:24:13:b0:61:9f:52:86:5d:64:97:46: c2:02:5d:cc:4f:d1:f6:55:0d:c4:88:5e:a7:fd:01:2a:bd:33: 3a:9d:28:a3:38:01:d2:e5:94:49:bd:06:b1:76:94:61:9a:aa: f4:f9:9a:69:37:5d:c6:4c:1f:5c:42:b8:90:ce:38:d1:83:a4: 3c:44:41:82:a4:0c:27:4a:ed:87:31:6d:19:05:78:e6:29:fb: fb:bd:33:f8:34:d9:a4:3b:2e:48:4a:37:b3:9b:59:6b:86:94: 0b:08:2c:b8:98:79:b7:66:a8:d8:f8:54:d9:13:94:71:46:d5: 31:bf:2b:95:06:59:76:85:81:a8:1c:7a:d4:72:83:c0:17:11: a2:50:ed:86:3f:36:71:5c:58:81:fc:6c:67:34:a8:18:71:60: 9b:cb:c7:3c:cc:1b:7b:17:48:3e:ee:65:c0:41:18:f5:c7:ce: c3:11:85:6a:c2:8a:23:07:01:e7:54:7c:66:8d:76:d8:59:e5: 37:5c:c7:58:2f:30:df:92:4e:10:6c:2f:f4:49:99:46:b1:11: 67:31:55:9e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OLhjHHLtGsa7Klhq43Q1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNTgzNmRkZTliOWRhZWYzNWE4YTdmNzRkNjMyNmY2YjQy ZGE3NGQwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzFkYTEzNWM1MmE3OWM0ODQyNmE3Yjc5ZjZjODdkNjc2ZTRjZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kI+FzLVbqlqAXUns9AHsB1bnw0D vv7+O9z+txTL2YdA0hDs1CX3GhpBSXfL9ys/vOpXCYCAtgGBqwfgAFHlQ3L6vH4J 7ksdF6AfoXX34bX1pZGRpRZs+lN1CwVftDWSJjm/qU43WpnAPcwhwkD2XcGrz+Eb a6L5jCZn4CRu6qgxB/aCZWSgWvBb/ZqG0y04UmVRLIqigaIV/ZoG+GRlsPe6u0g1 HxwQBiiSUkVLx0dIlBbpw8/O7uxn1UCNIQ/VHL8v/bNQmpWMt1nPg2bg+7//yY5n 7vqLYf4vTg0KT97gr8Itj6l+u7mFM3yQhbUrCF7jJZu6bdKF+g7SH/Q4IQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHMdoTXFKnnEhCant59sh9Z25M3EMB8GA1UdIwQY MBaAFGpYNt3pudrvNain901jJva0LadNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUt YzE5OTQyNzM3ZTZkLzEvY3gyaE5jVXFlY1NFSnFlM24yeUgxbmJremNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi84MzgwMzItZGI5Ny00OTdmLThjOTUtYzE5OTQyNzM3ZTZk LzEvYWxnMjNlbTUydTgxcUtmM1RXTW05clF0cDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQG2bOAAwQG 2bRAAwQF2bVgMA0GCSqGSIb3DQEBCwUAA4IBAQCPfaeBfycjoz8dxT+C0fLHQs7f bQNS5sg57EpQIrFDT5iohvR71F7/DCTvJBOwYZ9Shl1kl0bCAl3MT9H2VQ3EiF6n /QEqvTM6nSijOAHS5ZRJvQaxdpRhmqr0+ZppN13GTB9cQriQzjjRg6Q8REGCpAwn Su2HMW0ZBXjmKfv7vTP4NNmkOy5ISjezm1lrhpQLCCy4mHm3ZqjY+FTZE5RxRtUx vyuVBll2hYGoHHrUcoPAFxGiUO2GPzZxXFiB/GxnNKgYcWCby8c8zBt7F0g+7mXA QRj1x87DEYVqwoojBwHnVHxmjXbYWeU3XMdYLzDfkk4QbC/0SZlGsRFnMVWe -----END CERTIFICATE-----Generated at Fri Jan 2 15:33:52 2026 by rpki-client