This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa File: CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa (raw, json) Hash identifier: omyqw+bz7nV39lBVXP33JrADRI4H4vosedUdoUfqv5Y= Subject key identifier: 0B:13:7A:66:20:6C:35:83:6F:03:04:95:DA:BD:7E:07:B6:FD:05:90 Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBBD9D65191E680779FDFAE7C3BCC8 Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa Signing time: Thu 01 Jan 2026 14:17:31 +0000 ROA not before: Thu 01 Jan 2026 14:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 193.56.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:bd:9d:65:19:1e:68:07:79:fd:fa:e7:c3:bc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b137a66206c35836f030495dabd7e07b6fd0590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:18:59:d4:fb:56:d2:25:d9:d7:02:4e:dd:3f: e5:b0:54:b0:bd:13:d1:3b:b7:c2:28:c9:38:02:c6: 0f:3f:f1:55:22:1c:e0:f0:ba:78:ed:4a:7b:6e:18: 79:b1:d7:67:a5:ab:7d:ec:e5:a3:47:92:58:be:35: 27:a4:cf:c8:d1:90:9f:37:d6:d4:43:42:64:fd:29: a0:b0:a8:99:5f:c3:15:09:d9:af:eb:9f:54:23:b4: 52:c3:d0:8c:9b:68:a0:2b:9f:53:dc:dc:a0:8f:ce: f0:87:3d:c5:f7:10:87:c8:fc:b3:0a:26:60:f6:f6: ea:f4:9e:35:67:cb:b0:53:fa:68:49:83:70:8d:5e: 7c:4e:a6:d2:8a:e0:3d:ac:bb:ba:38:62:fb:e5:91: 6f:03:cd:99:03:8a:23:10:90:b8:97:04:bc:bf:be: 07:77:14:59:01:3e:78:14:04:1a:ff:6d:31:2c:2e: fd:af:37:36:89:55:ff:79:7d:29:06:e4:ee:1f:ff: 3f:75:c9:14:9e:22:ba:2c:48:fe:79:fa:b1:3c:35: 14:b4:d8:1d:a6:e9:8c:c6:5c:e2:01:d2:eb:bf:99: 1e:b0:be:e9:8c:a3:9d:66:bd:44:b2:f6:43:20:08: 64:5e:8d:73:05:d0:8e:8d:b1:4f:7c:24:79:ad:8e: 73:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:13:7A:66:20:6C:35:83:6F:03:04:95:DA:BD:7E:07:B6:FD:05:90 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.144.0/24 Signature Algorithm: sha256WithRSAEncryption 43:b6:4f:67:a8:26:70:dc:06:fc:b7:ed:13:42:ae:16:d0:58: 44:81:fa:83:e1:ea:b7:3d:dc:c1:1c:ac:c0:80:58:da:8e:33: 12:f5:d5:8e:2c:5e:5f:99:71:f3:a2:49:fb:d4:31:27:44:29: b7:18:f0:91:0f:75:ce:0f:39:33:07:14:0b:8f:5e:17:d2:22: 75:64:e6:08:f8:47:78:d5:41:47:f7:10:ad:7e:e5:49:98:56: 88:1a:18:2f:42:1b:99:e7:bc:51:db:8b:b6:f6:b3:37:13:cd: 79:e0:df:a9:dd:88:e2:a2:46:6d:93:bd:56:b9:9f:53:0f:b1: 8e:c2:90:18:46:95:c9:1c:ef:45:18:82:f3:cb:e8:e4:22:75: 19:46:74:2c:27:05:10:26:b7:ff:c1:49:09:cd:02:7b:36:bb: ae:3d:9a:6c:e0:23:df:a6:e0:f3:91:af:88:fc:ac:f5:12:0d: 81:b8:ed:42:f3:2d:ab:3a:ab:62:a6:75:66:56:08:71:bc:ff: cf:c6:66:1d:9d:85:ea:8c:1e:d2:22:c5:aa:3c:56:4d:da:74: 9e:4d:ae:cc:54:94:b2:7f:4e:d2:b9:95:7b:59:b5:c9:4b:c2: b3:ee:6c:b5:1b:5e:0a:bc:9c:ff:34:f6:63:ca:bb:a4:3f:58: cd:a7:cd:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5672dZRkeaAd5/frnw7zIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjEzN2E2NjIwNmMzNTgzNmYwMzA0OTVkYWJkN2UwN2I2ZmQwNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xhZ1PtW0iXZ1wJO3T/lsFSwvRPR O7fCKMk4AsYPP/FVIhzg8Lp47Up7bhh5sddnpat97OWjR5JYvjUnpM/I0ZCfN9bU Q0Jk/SmgsKiZX8MVCdmv659UI7RSw9CMm2igK59T3Nygj87whz3F9xCHyPyzCiZg 9vbq9J41Z8uwU/poSYNwjV58TqbSiuA9rLu6OGL75ZFvA82ZA4ojEJC4lwS8v74H dxRZAT54FAQa/20xLC79rzc2iVX/eX0pBuTuH/8/dckUniK6LEj+efqxPDUUtNgd pumMxlziAdLrv5kesL7pjKOdZr1EsvZDIAhkXo1zBdCOjbFPfCR5rY5z0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAsTemYgbDWDbwMEldq9fge2/QWQMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvQ3hONlppQnNOWU52QXdTVjJyMS1CN2I5QlpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTiQMA0G CSqGSIb3DQEBCwUAA4IBAQBDtk9nqCZw3Ab8t+0TQq4W0FhEgfqD4eq3PdzBHKzA gFjajjMS9dWOLF5fmXHzokn71DEnRCm3GPCRD3XODzkzBxQLj14X0iJ1ZOYI+Ed4 1UFH9xCtfuVJmFaIGhgvQhuZ57xR24u29rM3E8154N+p3YjiokZtk71WuZ9TD7GO wpAYRpXJHO9FGILzy+jkInUZRnQsJwUQJrf/wUkJzQJ7NruuPZps4CPfpuDzka+I /Kz1Eg2BuO1C8y2rOqtipnVmVghxvP/PxmYdnYXqjB7SIsWqPFZN2nSeTa7MVJSy f07SuZV7WbXJS8Kz7my1G14KvJz/NPZjyrukP1jNp80P -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:00 2026 by rpki-client