This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/CXQY42c6E3QD-iUCAsMMyQA81Sw.roa File: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (raw, json) Hash identifier: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g= Subject key identifier: 09:74:18:E3:67:3A:13:74:03:FA:25:02:02:C3:0C:C9:00:3C:D5:2C Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910F0ABD91A2D0269E071913F5D6472 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/CXQY42c6E3QD-iUCAsMMyQA81Sw.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50495 IP address blocks: 77.83.232.0/22 maxlen: 22 91.223.99.0/24 maxlen: 24 91.223.102.0/24 maxlen: 24 91.223.126.0/24 maxlen: 24 194.39.32.0/22 maxlen: 22 2a06:ef40::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 16:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f0:ab:d9:1a:2d:02:69:e0:71:91:3f:5d:64:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=097418e3673a137403fa250202c30cc9003cd52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:1b:d4:89:38:b1:87:e3:99:7d:b2:fa:c6: 80:ea:93:64:53:d2:cb:e2:6e:c4:82:ee:5b:84:6b: b8:38:ce:22:9e:40:fc:ac:89:78:0c:5f:f4:a7:61: 7c:65:82:0d:f5:4b:8d:d6:f6:b8:0f:75:af:8e:e8: 51:5d:b1:46:93:19:a9:f4:eb:74:4a:b7:aa:dd:8b: 8b:a0:8a:49:74:d1:2c:2e:9e:fa:9c:ea:4c:9b:7d: e6:53:ac:20:ca:c1:00:66:c2:b9:91:2b:46:0b:6b: 1b:f9:85:0a:e1:3d:95:05:14:d9:49:b2:d3:1b:08: 8e:00:6d:98:bf:7a:33:2c:26:a2:f9:87:a6:26:79: 07:48:f1:ae:af:a7:7c:af:36:fa:6a:55:5f:b7:19: 50:21:f5:97:6a:65:5f:d2:a9:ca:40:c9:71:7a:65: 8e:30:5e:a5:6e:49:8b:25:ab:f8:21:8e:47:33:54: a5:eb:52:45:33:b2:a9:3e:68:e1:e2:b0:82:15:72: 86:cb:cc:5a:4b:d9:68:69:c1:02:47:f4:ae:81:03: d6:e2:95:6e:77:6d:82:09:8a:01:72:30:0d:65:1f: 57:f8:3b:53:e6:b1:d2:72:1c:d9:b7:54:6e:94:10: b0:62:a4:36:82:90:1f:91:04:40:fa:38:f8:28:e6: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:74:18:E3:67:3A:13:74:03:FA:25:02:02:C3:0C:C9:00:3C:D5:2C X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/CXQY42c6E3QD-iUCAsMMyQA81Sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.232.0/22 91.223.99.0/24 91.223.102.0/24 91.223.126.0/24 194.39.32.0/22 IPv6: 2a06:ef40::/32 Signature Algorithm: sha256WithRSAEncryption 38:7e:90:10:07:fb:3c:18:bb:c4:25:88:20:6a:45:b6:be:a4: 54:3d:88:47:db:2c:ab:62:57:f2:cd:66:78:cf:2c:5d:23:dd: 00:44:7b:67:e2:fb:ac:0d:04:fc:05:c7:1e:9e:ad:c8:50:2d: 7f:f6:8d:c6:b7:96:bd:53:16:0d:d4:6a:e5:ad:a8:a3:68:c2: aa:94:ac:f9:34:f8:6e:93:5b:8e:67:19:9e:02:33:72:96:9e: bc:e3:f5:38:09:54:6e:26:64:6d:86:63:43:ff:98:90:3b:43: e1:da:df:83:f4:ae:d5:6f:5b:86:4f:9d:f8:b5:79:59:59:11: 2e:96:be:00:a8:f8:fa:65:37:ca:e0:2a:af:56:03:e9:09:20: b0:8e:4a:28:d8:22:c0:35:d2:e4:4d:72:63:fc:63:43:95:0e: af:86:ce:4f:80:d1:58:dc:da:c3:24:d5:d7:8f:c1:14:0f:d5: 88:26:87:c0:9c:5e:e6:fc:ca:c4:b2:40:60:af:b3:ee:f1:b6: 91:40:04:b7:64:59:22:31:22:cf:fa:cd:85:79:c1:74:28:a7: a4:11:ab:a2:be:b4:21:de:fb:b4:ea:24:93:3d:c2:ee:41:83: c5:2e:7b:96:64:74:d4:3e:a1:d3:08:68:fc:1b:6e:71:10:54: cd:37:75:78 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5EPCr2RotAmngcZE/XWRyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTc0MThlMzY3M2ExMzc0MDNmYTI1MDIwMmMzMGNjOTAwM2NkNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCUb1Ik4sYfjmX2y+saA6pNkU9LL 4m7Egu5bhGu4OM4inkD8rIl4DF/0p2F8ZYIN9UuN1va4D3WvjuhRXbFGkxmp9Ot0 Sreq3YuLoIpJdNEsLp76nOpMm33mU6wgysEAZsK5kStGC2sb+YUK4T2VBRTZSbLT GwiOAG2Yv3ozLCai+YemJnkHSPGur6d8rzb6alVftxlQIfWXamVf0qnKQMlxemWO MF6lbkmLJav4IY5HM1Sl61JFM7KpPmjh4rCCFXKGy8xaS9loacECR/SugQPW4pVu d22CCYoBcjANZR9X+DtT5rHSchzZt1RulBCwYqQ2gpAfkQRA+jj4KOa8+wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFAl0GONnOhN0A/olAgLDDMkAPNUsMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvQ1hRWTQyYzZFM1FELWlVQ0FzTU15UUE4MVN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCTVPoAwQA W99jAwQAW99mAwQAW99+AwQCwicgMA0EAgACMAcDBQAqBu9AMA0GCSqGSIb3DQEB CwUAA4IBAQA4fpAQB/s8GLvEJYggakW2vqRUPYhH2yyrYlfyzWZ4zyxdI90ARHtn 4vusDQT8Bccenq3IUC1/9o3Gt5a9UxYN1GrlraijaMKqlKz5NPhuk1uOZxmeAjNy lp684/U4CVRuJmRthmND/5iQO0Ph2t+D9K7Vb1uGT534tXlZWREulr4AqPj6ZTfK 4CqvVgPpCSCwjkoo2CLANdLkTXJj/GNDlQ6vhs5PgNFY3NrDJNXXj8EUD9WIJofA nF7m/MrEskBgr7Pu8baRQAS3ZFkiMSLP+s2FecF0KKekEauivrQh3vu06iSTPcLu QYPFLnuWZHTUPqHTCGj8G25xEFTNN3V4 -----END CERTIFICATE-----Generated at Sun Jan 25 03:15:02 2026 by rpki-client