This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/CXq1ehXWNMHefU8KADZSUiW5JNQ.roa File: CXq1ehXWNMHefU8KADZSUiW5JNQ.roa (raw, json) Hash identifier: IQLBY624JMgfLXTy5NdATSOazp1jTQpenvXMhkZX3P0= Subject key identifier: 09:7A:B5:7A:15:D6:34:C1:DE:7D:4F:0A:00:36:52:52:25:B9:24:D4 Certificate issuer: /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827 Certificate serial: 019B775878DAFF01F646FB729206B1812AFB Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/CXq1ehXWNMHefU8KADZSUiW5JNQ.roa Signing time: Thu 01 Jan 2026 02:17:25 +0000 ROA not before: Thu 01 Jan 2026 02:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 134.76.0.0/16 maxlen: 16 195.12.38.0/24 maxlen: 24 2a06:93c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:78:da:ff:01:f6:46:fb:72:92:06:b1:81:2a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827 Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=097ab57a15d634c1de7d4f0a0036525225b924d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:2a:4c:b3:c8:ab:49:d9:1a:bd:0f:0a:b5: d2:b9:aa:08:56:ae:9f:eb:01:29:6f:6d:a8:36:6a: 53:5d:66:c5:8c:fe:f0:6b:2f:80:66:de:c2:05:7d: 8b:ca:98:4d:cb:e6:4b:24:75:07:71:df:e8:4d:e2: 89:30:d7:f7:7c:c4:43:90:83:74:84:f3:dd:6f:f4: 31:6a:8b:31:70:22:09:6c:3c:bd:84:47:2f:c4:c3: 01:19:6a:ae:f4:ed:d8:df:9b:cd:28:33:9c:b5:55: 08:5b:62:b4:33:ab:d5:23:84:b6:b6:cd:47:06:05: 71:94:c5:57:12:95:d7:43:3f:27:62:c7:1d:77:19: 09:b6:5b:1d:6f:d0:ca:0e:39:3c:93:ac:d7:fa:6e: 09:d6:dc:af:97:c1:a5:49:dc:27:09:d6:38:84:53: c3:05:d8:6f:f8:fb:ac:bd:e1:bb:58:ef:9d:d1:db: 64:3a:e1:d8:cb:30:1a:ef:f6:a5:07:a6:2c:d8:17: b9:b1:bd:c6:34:b6:b8:9a:ca:4a:27:ee:a8:a9:37: 13:ec:2a:ca:b9:75:ad:e3:01:18:8d:74:d6:7a:5d: 03:a9:d3:c0:2e:23:97:91:2d:3c:d1:8c:bc:0d:00: c3:c1:c5:d0:3e:55:ae:e2:f9:1d:37:b4:b1:86:eb: 2e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7A:B5:7A:15:D6:34:C1:DE:7D:4F:0A:00:36:52:52:25:B9:24:D4 X509v3 Authority Key Identifier: keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/CXq1ehXWNMHefU8KADZSUiW5JNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.76.0.0/16 195.12.38.0/24 IPv6: 2a06:93c0::/29 Signature Algorithm: sha256WithRSAEncryption ae:6e:28:a9:d6:f6:5b:ee:f4:d2:6c:9b:8d:20:a7:4b:e1:5f: a7:27:fa:7c:7c:a9:40:37:79:4c:fa:71:48:de:cd:c0:47:81: 3a:eb:ba:23:fb:4a:56:fd:0f:e4:ab:e9:84:a0:d0:1b:3b:89: b7:10:cf:5d:5d:56:06:a9:42:3d:12:c8:1b:6b:88:e8:89:7c: d7:2c:a4:21:c6:78:92:65:06:e3:a5:81:70:83:42:c8:50:2f: 0f:e5:27:ff:b5:30:98:63:d1:2a:8c:d9:a2:0c:a0:26:4f:b6: 4d:46:2c:48:31:e3:79:f3:75:4c:3a:05:22:57:73:11:14:fe: 28:de:2c:bb:8a:da:b9:83:fa:ae:98:77:56:ba:db:8f:df:2b: fd:7c:ac:4a:4c:f7:d6:c0:4a:28:5b:2f:08:d5:e3:9d:fe:fd: 78:be:f9:69:ee:e9:bd:95:e4:34:4b:04:e4:a8:4d:d2:6a:89: a1:12:89:29:75:06:13:ef:58:d0:91:9b:4e:eb:9c:28:6f:83: 3c:2c:04:2d:9f:53:d3:9e:0c:71:b2:80:77:c9:9a:fb:d2:3b: 4e:6a:4b:08:1d:26:af:14:cd:66:9c:39:79:64:89:12:41:29: 4c:76:e4:98:b5:d9:bf:00:93:ee:3c:8a:03:62:19:0d:11:9f: 46:bd:53:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt3WHja/wH2RvtykgaxgSr7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjZmZmU5NmNkYzQxZWZhYThiZmIzMTI1ODYyZDY1OTRi ZTk4MjcwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTdhYjU3YTE1ZDYzNGMxZGU3ZDRmMGEwMDM2NTI1MjI1YjkyNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsssqTLPIq0nZGr0PCrXSuaoIVq6f 6wEpb22oNmpTXWbFjP7way+AZt7CBX2LyphNy+ZLJHUHcd/oTeKJMNf3fMRDkIN0 hPPdb/QxaosxcCIJbDy9hEcvxMMBGWqu9O3Y35vNKDOctVUIW2K0M6vVI4S2ts1H BgVxlMVXEpXXQz8nYscddxkJtlsdb9DKDjk8k6zX+m4J1tyvl8GlSdwnCdY4hFPD Bdhv+PusveG7WO+d0dtkOuHYyzAa7/alB6Ys2Be5sb3GNLa4mspKJ+6oqTcT7CrK uXWt4wEYjXTWel0DqdPALiOXkS080Yy8DQDDwcXQPlWu4vkdN7Sxhusu5wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFAl6tXoV1jTB3n1PCgA2UlIluSTUMB8GA1UdIwQY MBaAFPgm/+ls3EHvqov7MSWGLWWUvpgnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DYl82V3pjUWUtcWlfc3hKWVl0WlpTLW1DYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNmY2ODI2LTFhYWQtNGMzYy1iZDkx LWNjYTM3ZTJmMjcyOS8xL0NYcTFlaFhXTk1IZWZVOEtBRFpTVWlXNUpOUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjIvNmY2ODI2LTFhYWQtNGMzYy1iZDkxLWNjYTM3ZTJmMjcy OS8xLzEtQ2JfNld6Y1FlLXFpX3N4SllZdFpaUy1tQ2MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMBEEAgABMAsDAwCGTAME AMMMJjANBAIAAjAHAwUDKgaTwDANBgkqhkiG9w0BAQsFAAOCAQEArm4oqdb2W+70 0mybjSCnS+Ffpyf6fHypQDd5TPpxSN7NwEeBOuu6I/tKVv0P5KvphKDQGzuJtxDP XV1WBqlCPRLIG2uI6Il81yykIcZ4kmUG46WBcINCyFAvD+Un/7UwmGPRKozZogyg Jk+2TUYsSDHjefN1TDoFIldzERT+KN4su4rauYP6rph3Vrrbj98r/XysSkz31sBK KFsvCNXjnf79eL75ae7pvZXkNEsE5KhN0mqJoRKJKXUGE+9Y0JGbTuucKG+DPCwE LZ9T054McbKAd8ma+9I7TmpLCB0mrxTNZpw5eWSJEkEpTHbkmLXZvwCT7jyKA2IZ DRGfRr1Tgg== -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:55 2026 by rpki-client