This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/CxN7huJiaKTfbN61kn_Ws0rde3s.roa File: CxN7huJiaKTfbN61kn_Ws0rde3s.roa (raw, json) Hash identifier: mJe0ydmDBggkld0RLjkFJN+3gsiDt8X95dpMffB1Pek= Subject key identifier: 0B:13:7B:86:E2:62:68:A4:DF:6C:DE:B5:92:7F:D6:B3:4A:DD:7B:7B Certificate issuer: /CN=6a6fdd2fd42fabf872720952468d29634c68c9dc Certificate serial: 019B7C805B418291F45BD7D35D57B61697AD Authority key identifier: 6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/CxN7huJiaKTfbN61kn_Ws0rde3s.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201118 IP address blocks: 185.85.120.0/24 maxlen: 24 185.85.121.0/24 maxlen: 24 185.85.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.mft rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5b:41:82:91:f4:5b:d7:d3:5d:57:b6:16:97:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a6fdd2fd42fabf872720952468d29634c68c9dc Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b137b86e26268a4df6cdeb5927fd6b34add7b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1f:bc:96:46:38:aa:3d:1a:65:0e:ca:9b:a7: 2f:be:5f:f4:e3:96:c5:e3:83:38:58:c7:26:41:63: b8:e2:3d:09:40:cc:79:ce:30:67:83:6b:32:45:53: ba:4f:d7:9d:40:7d:09:4c:39:28:a3:bd:85:c3:4f: 1d:d9:d5:b3:06:2d:96:98:f9:c7:81:69:13:99:bb: 10:c5:e8:32:f0:7f:ed:2e:9d:4b:37:e5:08:11:5b: 8a:e0:fa:d5:66:92:7e:5c:19:72:f2:52:35:4c:2e: d8:c2:8a:2d:69:16:39:5f:aa:39:20:55:71:f0:41: e4:98:dd:8f:27:15:f0:4d:14:34:b3:6f:6f:8c:ef: ce:d7:e4:0d:54:5f:d1:bf:16:2a:4d:a0:b7:be:83: aa:7b:79:5f:7f:45:22:bc:24:0b:fa:9c:e7:9d:a3: 67:78:84:35:d0:19:85:52:1b:00:a3:f1:54:78:42: 2d:a2:ab:d9:97:80:17:88:ae:4f:8e:93:b8:83:8f: fd:6c:f1:7d:31:ab:0e:82:94:03:43:44:05:6a:77: 4a:08:65:97:6b:97:78:51:59:47:cb:95:67:57:24: f3:3c:c4:37:38:f8:79:b9:18:1f:52:24:26:87:d1: 1a:07:e4:eb:9a:a4:fc:1f:58:b6:c7:6e:e5:93:76: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:13:7B:86:E2:62:68:A4:DF:6C:DE:B5:92:7F:D6:B3:4A:DD:7B:7B X509v3 Authority Key Identifier: keyid:6A:6F:DD:2F:D4:2F:AB:F8:72:72:09:52:46:8D:29:63:4C:68:C9:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/am_dL9Qvq_hycglSRo0pY0xoydw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/CxN7huJiaKTfbN61kn_Ws0rde3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d5cc4a-d266-40e6-88f9-d91484eb0c38/1/am_dL9Qvq_hycglSRo0pY0xoydw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.120.0/23 185.85.123.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:71:b7:f7:43:d3:ce:7b:88:88:d3:b1:eb:5b:b2:32:97:ac: ed:54:3c:5f:48:1a:e9:bb:5e:d5:45:05:e0:e9:43:4a:a0:04: a8:0b:c8:c9:d0:9c:69:bb:e3:c1:d9:33:12:a9:70:fa:e6:5f: 08:74:97:2c:8e:e5:3f:65:a9:1c:22:bf:b7:9c:40:e1:4e:cc: b1:8c:ee:5e:1a:20:f3:e5:16:71:c7:86:e4:4d:84:ba:3f:50: a1:3e:9b:e3:29:10:10:c8:3d:8b:c7:f1:4c:7d:bf:4b:2d:23: d3:8a:f3:3e:31:83:be:83:48:c9:54:25:c4:b7:0f:db:5d:4c: 3e:63:2f:56:80:ce:c8:af:cc:6d:65:bf:2a:9a:56:2b:3e:d9: 64:43:f0:70:af:6f:21:04:b6:58:5a:51:87:5a:90:ed:dc:60: db:3c:86:d9:b0:5c:e6:e3:e2:68:7f:22:29:a4:c6:55:63:d8: cc:21:f1:6e:ce:30:6a:eb:ed:af:d9:e6:2e:70:40:b9:48:0d: fb:7d:a9:07:f7:99:6d:a5:b0:2b:77:5f:af:95:2e:46:8e:ec: 80:55:89:ab:ef:85:2a:67:ad:7c:ff:50:09:d0:a4:6b:f2:6c: 77:79:4c:e5:b2:01:78:5d:ee:b1:55:21:ea:97:95:44:c4:05: e4:7f:22:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gFtBgpH0W9fTXVe2FpetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNmZkZDJmZDQyZmFiZjg3MjcyMDk1MjQ2OGQyOTYzNGM2 OGM5ZGMwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjEzN2I4NmUyNjI2OGE0ZGY2Y2RlYjU5MjdmZDZiMzRhZGQ3YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox+8lkY4qj0aZQ7Km6cvvl/045bF 44M4WMcmQWO44j0JQMx5zjBng2syRVO6T9edQH0JTDkoo72Fw08d2dWzBi2WmPnH gWkTmbsQxegy8H/tLp1LN+UIEVuK4PrVZpJ+XBly8lI1TC7YwootaRY5X6o5IFVx 8EHkmN2PJxXwTRQ0s29vjO/O1+QNVF/RvxYqTaC3voOqe3lff0UivCQL+pznnaNn eIQ10BmFUhsAo/FUeEItoqvZl4AXiK5PjpO4g4/9bPF9MasOgpQDQ0QFandKCGWX a5d4UVlHy5VnVyTzPMQ3OPh5uRgfUiQmh9EaB+TrmqT8H1i2x27lk3ai3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAsTe4biYmik32zetZJ/1rNK3Xt7MB8GA1UdIwQY MBaAFGpv3S/UL6v4cnIJUkaNKWNMaMncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNWNjNGEtZDI2Ni00MGU2LTg4Zjkt ZDkxNDg0ZWIwYzM4LzEvQ3hON2h1SmlhS1RmYk42MWtuX1dzMHJkZTNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kNWNjNGEtZDI2Ni00MGU2LTg4ZjktZDkxNDg0ZWIwYzM4 LzEvYW1fZEw5UXZxX2h5Y2dsU1JvMHBZMHhveWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuVV4AwQA uVV7MA0GCSqGSIb3DQEBCwUAA4IBAQBvcbf3Q9POe4iI07HrW7Iyl6ztVDxfSBrp u17VRQXg6UNKoASoC8jJ0Jxpu+PB2TMSqXD65l8IdJcsjuU/ZakcIr+3nEDhTsyx jO5eGiDz5RZxx4bkTYS6P1ChPpvjKRAQyD2Lx/FMfb9LLSPTivM+MYO+g0jJVCXE tw/bXUw+Yy9WgM7Ir8xtZb8qmlYrPtlkQ/Bwr28hBLZYWlGHWpDt3GDbPIbZsFzm 4+JofyIppMZVY9jMIfFuzjBq6+2v2eYucEC5SA37fakH95ltpbArd1+vlS5GjuyA VYmr74UqZ618/1AJ0KRr8mx3eUzlsgF4Xe6xVSHql5VExAXkfyLP -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:08 2026 by rpki-client