This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cxNCuO-FM51ZWU9oI6VXYA4l7MQ.roa File: cxNCuO-FM51ZWU9oI6VXYA4l7MQ.roa (raw, json) Hash identifier: 77bqcV7BHy5gB3KLw3pDcrTzOJJxiRhNgENBilhqcuc= Subject key identifier: 73:13:42:B8:EF:85:33:9D:59:59:4F:68:23:A5:57:60:0E:25:EC:C4 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA74A938FFB0BD0B31FCA05CC1C189E Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cxNCuO-FM51ZWU9oI6VXYA4l7MQ.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 2a06:e881:7700::/40 maxlen: 48 2a0a:79c0:d00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4a:93:8f:fb:0b:d0:b3:1f:ca:05:cc:1c:18:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=731342b8ef85339d59594f6823a557600e25ecc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:7e:4b:51:4c:37:57:7d:e8:63:14:0b:9e: 17:06:bf:05:67:19:0e:18:c4:4b:58:d4:0c:bc:83: 2a:16:f2:79:7e:87:56:8d:d9:1a:eb:27:03:47:cf: ed:39:dc:e6:f4:b7:12:44:21:a0:55:70:a1:23:55: 4c:a8:91:b8:c2:68:2e:3c:75:7e:fb:f3:32:b4:ba: 14:f2:fe:d2:3d:6e:e4:f8:bf:e7:ad:93:ea:af:a5: 35:9a:01:24:c6:aa:43:23:4d:dc:cd:f0:73:45:60: 52:4e:a6:cd:50:d2:10:36:84:02:58:2b:dd:16:bd: ce:23:a6:69:49:b0:ed:5b:35:d3:aa:fc:f3:d4:7c: ed:2c:98:cd:fb:23:07:ec:14:27:a1:29:64:68:4d: 11:07:3a:aa:42:a6:73:a3:a1:5e:dc:cb:b7:cd:a0: 35:36:f9:0b:7c:29:b3:98:3b:38:2f:fc:07:f2:f1: df:73:0c:89:44:f4:55:95:9a:bd:3f:51:61:d9:c8: bb:61:e6:b2:f0:b4:af:5b:82:da:7a:08:9a:a5:42: ce:fa:de:62:26:01:2d:9c:2d:2a:9a:fc:ee:0f:55: 18:de:17:49:41:58:f7:c8:d8:71:0a:d5:5d:92:99: 0b:b0:32:ea:e6:4f:91:6b:73:20:a2:7c:9f:64:8e: b2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:13:42:B8:EF:85:33:9D:59:59:4F:68:23:A5:57:60:0E:25:EC:C4 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/cxNCuO-FM51ZWU9oI6VXYA4l7MQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:7700::/40 2a0a:79c0:d00::/44 Signature Algorithm: sha256WithRSAEncryption 33:f4:cf:e7:15:89:e7:e5:d2:06:25:2d:70:c3:d3:21:14:1d: 7c:9a:35:26:d1:33:72:0c:5a:b8:65:f6:32:a6:96:a0:5f:b6: 9a:d1:2a:d2:bb:50:d1:97:af:bf:59:67:18:53:45:18:69:9e: ee:7b:0b:e3:b1:58:de:6f:b4:7a:2c:7c:a3:1e:c7:81:2a:06: 65:36:67:69:97:07:7c:47:39:c7:98:fd:03:ba:90:74:77:ca: 6d:76:54:1f:02:0d:18:36:10:cd:31:fa:ee:6e:42:7d:23:1f: 2d:20:97:72:76:22:d9:30:63:3c:0f:f1:31:25:ec:42:35:4f: 6b:04:03:30:a9:45:af:5c:e4:b3:90:1c:cb:ff:a5:48:4b:cc: 1e:d8:42:f6:38:ea:35:5e:e3:bb:0a:92:44:f2:17:8f:17:59: 41:95:21:99:10:3d:95:ba:1d:db:9f:aa:cc:55:dd:ba:56:59: 3e:54:95:2a:b7:c3:d6:b1:cb:89:24:81:c2:af:a9:51:c5:b2: 22:33:c9:c8:5b:1f:6b:9a:99:96:e4:74:6f:02:9a:3e:ed:ba: 29:b7:00:e9:b6:37:1e:fc:e0:19:83:72:5d:f7:05:26:8f:50: dd:42:ec:ec:e9:ab:91:55:7c:4c:b5:31:c8:7b:43:cc:27:6b: 77:f9:ab:8d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt+p0qTj/sL0LMfygXMHBieMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzEzNDJiOGVmODUzMzlkNTk1OTRmNjgyM2E1NTc2MDBlMjVlY2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrt+S1FMN1d96GMUC54XBr8FZxkO GMRLWNQMvIMqFvJ5fodWjdka6ycDR8/tOdzm9LcSRCGgVXChI1VMqJG4wmguPHV+ +/MytLoU8v7SPW7k+L/nrZPqr6U1mgEkxqpDI03czfBzRWBSTqbNUNIQNoQCWCvd Fr3OI6ZpSbDtWzXTqvzz1HztLJjN+yMH7BQnoSlkaE0RBzqqQqZzo6Fe3Mu3zaA1 NvkLfCmzmDs4L/wH8vHfcwyJRPRVlZq9P1Fh2ci7Yeay8LSvW4LaegiapULO+t5i JgEtnC0qmvzuD1UY3hdJQVj3yNhxCtVdkpkLsDLq5k+Ra3MgonyfZI6ykQIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFHMTQrjvhTOdWVlPaCOlV2AOJezEMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvY3hOQ3VPLUZNNTFaV1U5b0k2VlhZQTRsN01RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYAKgbogXcD BwQqCnnADQAwDQYJKoZIhvcNAQELBQADggEBADP0z+cViefl0gYlLXDD0yEUHXya NSbRM3IMWrhl9jKmlqBftprRKtK7UNGXr79ZZxhTRRhpnu57C+OxWN5vtHosfKMe x4EqBmU2Z2mXB3xHOceY/QO6kHR3ym12VB8CDRg2EM0x+u5uQn0jHy0gl3J2Itkw YzwP8TEl7EI1T2sEAzCpRa9c5LOQHMv/pUhLzB7YQvY46jVe47sKkkTyF48XWUGV IZkQPZW6HdufqsxV3bpWWT5UlSq3w9axy4kkgcKvqVHFsiIzychbH2uamZbkdG8C mj7tuim3AOm2Nx784BmDcl33BSaPUN1C7Ozpq5FVfEy1Mch7Q8wna3f5q40= -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:26 2026 by rpki-client