This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa File: Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa (raw, json) Hash identifier: q7wtyFFM/GxuRNYmPTO3dTsPt0PKaH+4FtRYA+CX4Dg= Subject key identifier: 0A:5F:4B:CF:99:C1:CF:FC:67:C6:E5:10:50:91:AE:05:1F:33:5B:D0 Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986 Certificate serial: 019B76EB4E90043B3DCE7BA89DFED222128A Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa Signing time: Thu 01 Jan 2026 00:18:11 +0000 ROA not before: Thu 01 Jan 2026 00:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208011 IP address blocks: 194.156.190.0/23 maxlen: 24 194.156.198.0/23 maxlen: 24 2a0f:43c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:4e:90:04:3b:3d:ce:7b:a8:9d:fe:d2:22:12:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986 Validity Not Before: Jan 1 00:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a5f4bcf99c1cffc67c6e5105091ae051f335bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bb:fc:2f:60:86:b0:b9:60:9d:00:65:fc:4b: a2:eb:71:77:4f:c9:df:51:37:59:f9:ab:f3:2d:66: a7:02:7e:6a:2b:e0:94:bf:67:3a:ea:fd:e1:77:61: 48:2c:e6:61:c3:7f:fb:9d:e7:af:60:37:95:23:b0: 37:2b:98:cb:46:19:f1:10:92:87:2c:c2:70:fc:b9: 39:75:d6:a9:86:5f:83:17:08:cd:fe:11:4e:35:d9: d8:d6:ea:b3:ba:05:ae:e8:02:aa:8c:60:98:2f:20: 29:23:24:c6:12:3a:46:29:5b:6a:92:65:c1:b4:60: 75:98:45:13:8f:9b:c8:03:2b:38:22:f7:4f:67:f4: ba:37:83:bd:9e:5f:92:cd:0a:81:a8:43:d1:9b:db: 6f:62:b8:92:7a:7e:67:01:14:fe:93:75:01:8e:d3: 81:02:36:59:a1:d8:6e:a3:68:af:c6:96:4c:7a:e1: 96:b2:4a:e7:f8:66:80:9f:d3:46:87:b3:fe:59:3c: 0e:33:80:81:1a:bd:78:51:83:b7:2f:bd:2a:d1:dd: 6d:9d:28:6e:03:c6:31:7c:b4:d5:05:94:dc:e7:b4: 32:5d:6e:41:c7:1e:19:db:db:7e:00:dc:f8:03:ba: f7:25:d1:1a:e8:8a:e7:5b:b3:56:2e:bd:83:6b:b5: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5F:4B:CF:99:C1:CF:FC:67:C6:E5:10:50:91:AE:05:1F:33:5B:D0 X509v3 Authority Key Identifier: keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/Cl9Lz5nBz_xnxuUQUJGuBR8zW9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.156.190.0/23 194.156.198.0/23 IPv6: 2a0f:43c0::/32 Signature Algorithm: sha256WithRSAEncryption 61:7b:a9:60:6a:77:b5:23:ef:ed:35:df:47:fc:95:5d:3a:7f: 66:f2:f4:9f:13:cc:57:38:81:b5:6d:9f:72:53:38:53:ad:65: fe:46:2d:c9:ba:12:d6:30:ee:26:f6:71:d4:34:95:fd:57:89: 51:3b:e8:80:3b:3c:19:e0:2b:5b:e9:fa:9d:69:9a:7c:73:9b: b3:72:db:40:89:0c:bd:e0:67:eb:46:d0:32:19:76:03:f8:03: 24:f7:fb:13:4c:7a:39:cd:21:60:10:5c:36:0e:94:1e:25:5a: 9b:f0:7f:89:52:57:1f:d6:ab:8e:f4:ce:dd:57:a6:b6:cd:f6: 2e:f7:a1:13:8d:f2:2d:a5:c7:f1:e6:c7:9b:34:44:4d:9e:c6: d2:f0:da:bc:26:6f:20:f9:69:b6:d0:c7:e3:e9:89:bb:e1:0e: d4:86:8c:76:db:46:77:4f:5d:2f:0f:6e:6c:af:6a:df:7b:57: ea:0b:54:3b:58:0c:16:21:38:42:e5:77:d1:bd:01:a9:66:11: 02:d5:9c:da:26:93:34:77:12:9b:dc:73:59:cb:53:c4:1e:1b: 88:16:3a:c5:07:57:e7:8f:0b:ce:12:92:9f:5b:64:7b:86:e2: 0d:b8:af:c5:90:fd:11:d1:64:e6:50:5e:0d:83:bd:27:9d:30: 99:f7:35:63 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt2606QBDs9znuonf7SIhKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMjZjOTFhZjBhYjI2NjhhMzYwMWIyZDk1N2RjNGNlMDAy ZDU5ODYwHhcNMjYwMTAxMDAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTVmNGJjZjk5YzFjZmZjNjdjNmU1MTA1MDkxYWUwNTFmMzM1YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7v8L2CGsLlgnQBl/Eui63F3T8nf UTdZ+avzLWanAn5qK+CUv2c66v3hd2FILOZhw3/7neevYDeVI7A3K5jLRhnxEJKH LMJw/Lk5ddaphl+DFwjN/hFONdnY1uqzugWu6AKqjGCYLyApIyTGEjpGKVtqkmXB tGB1mEUTj5vIAys4IvdPZ/S6N4O9nl+SzQqBqEPRm9tvYriSen5nART+k3UBjtOB AjZZodhuo2ivxpZMeuGWskrn+GaAn9NGh7P+WTwOM4CBGr14UYO3L70q0d1tnShu A8YxfLTVBZTc57QyXW5Bxx4Z29t+ANz4A7r3JdEa6IrnW7NWLr2Da7UfGQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFApfS8+Zwc/8Z8blEFCRrgUfM1vQMB8GA1UdIwQY MBaAFM8myRrwqyZoo2AbLZV9xM4ALVmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTkt NmJjODM5NDY1NmI3LzEvQ2w5THo1bkJ6X3hueHVVUVVKR3VCUjh6VzlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTktNmJjODM5NDY1NmI3 LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwpy+AwQB wpzGMA0EAgACMAcDBQAqD0PAMA0GCSqGSIb3DQEBCwUAA4IBAQBhe6lgane1I+/t Nd9H/JVdOn9m8vSfE8xXOIG1bZ9yUzhTrWX+Ri3JuhLWMO4m9nHUNJX9V4lRO+iA OzwZ4Ctb6fqdaZp8c5uzcttAiQy94GfrRtAyGXYD+AMk9/sTTHo5zSFgEFw2DpQe JVqb8H+JUlcf1quO9M7dV6a2zfYu96ETjfItpcfx5sebNERNnsbS8Nq8Jm8g+Wm2 0Mfj6Ym74Q7Uhox220Z3T10vD25sr2rfe1fqC1Q7WAwWIThC5XfRvQGpZhEC1Zza JpM0dxKb3HNZy1PEHhuIFjrFB1fnjwvOEpKfW2R7huINuK/FkP0R0WTmUF4Ng70n nTCZ9zVj -----END CERTIFICATE-----Generated at Tue Feb 10 01:28:15 2026 by rpki-client