This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/cXWbnmeg6t-kJSlSj2rRhdBCVuM.roa File: cXWbnmeg6t-kJSlSj2rRhdBCVuM.roa (raw, json) Hash identifier: bYbG/uapXVFMU/gkT+nefhH1EgS8R7G2uYxukKJjTSs= Subject key identifier: 71:75:9B:9E:67:A0:EA:DF:A4:25:29:52:8F:6A:D1:85:D0:42:56:E3 Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a Certificate serial: 019B7DCA16D562677134C86318B7C285BC81 Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/cXWbnmeg6t-kJSlSj2rRhdBCVuM.roa Signing time: Fri 02 Jan 2026 08:19:14 +0000 ROA not before: Fri 02 Jan 2026 08:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210779 IP address blocks: 176.105.253.0/24 maxlen: 24 176.105.255.0/24 maxlen: 24 217.13.109.0/24 maxlen: 24 2a0d:c740:a::/48 maxlen: 48 2a0d:c740:f::/48 maxlen: 48 2a0d:c740:2c::/48 maxlen: 48 2a0d:c740:3c::/48 maxlen: 48 2a0d:c740:4c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:16:d5:62:67:71:34:c8:63:18:b7:c2:85:bc:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a Validity Not Before: Jan 2 08:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71759b9e67a0eadfa42529528f6ad185d04256e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:37:22:28:41:e5:4d:6e:8e:63:1d:e9:d4:15: fb:c2:39:6e:9d:61:6e:c4:90:13:33:6f:33:ae:7e: ac:09:b5:72:85:71:a0:bd:99:17:b0:9e:2c:0a:bd: cc:ec:dd:63:0e:97:b0:df:7e:e2:58:01:79:99:50: aa:9f:bc:4d:8d:ff:7f:56:3d:35:5b:b0:cd:a9:ee: ec:2c:3f:48:e7:09:8f:86:94:55:97:e6:d3:d4:0b: 10:e8:f5:43:3e:ac:b2:92:d9:d2:5f:8f:d2:1d:73: ad:86:09:86:f8:75:7b:ee:1e:5d:fc:db:20:36:8d: f9:5c:fe:59:d9:6b:f5:ad:97:05:53:bd:5d:ce:0d: 83:a9:09:d0:77:f5:97:47:e2:c9:fe:bf:19:f9:32: df:5e:31:01:3a:f0:7d:d7:a6:5e:ba:56:09:1f:fd: ea:64:88:90:99:0e:df:40:b6:54:8d:c2:91:3e:78: ce:cc:40:8c:a0:8a:e8:86:45:e3:71:ec:46:9b:cb: 3b:cb:f4:7b:14:08:0b:de:a1:9c:e9:dc:f9:4b:2c: 6e:70:93:b0:79:fb:65:4b:bd:88:61:83:68:d1:48: 2f:94:2f:83:21:15:b7:76:fd:99:8b:6c:ae:16:3b: b0:49:19:17:0a:a2:99:63:ea:92:38:80:dc:b1:61: 02:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:75:9B:9E:67:A0:EA:DF:A4:25:29:52:8F:6A:D1:85:D0:42:56:E3 X509v3 Authority Key Identifier: keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/cXWbnmeg6t-kJSlSj2rRhdBCVuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.105.253.0/24 176.105.255.0/24 217.13.109.0/24 IPv6: 2a0d:c740:a::/48 2a0d:c740:f::/48 2a0d:c740:2c::/48 2a0d:c740:3c::/48 2a0d:c740:4c::/48 Signature Algorithm: sha256WithRSAEncryption 31:ab:bb:04:f5:0c:2e:1b:41:fc:4f:9e:47:08:26:a7:63:97: f3:d9:4d:a9:f0:86:26:f0:87:42:18:70:3f:fc:0c:a0:00:82: a5:ce:43:54:60:2d:25:61:05:df:d2:c6:04:1a:a2:c6:a3:07: 15:28:50:10:7a:d8:a6:68:89:e4:97:08:85:3c:0d:b4:16:4a: c7:12:30:17:de:c1:19:e2:b2:b1:3e:27:de:0e:2b:a8:c4:1e: ce:00:15:91:19:36:f4:ea:0c:b0:47:98:21:f5:63:a7:e5:13: 82:55:a2:9f:ac:31:8d:c0:64:4d:d5:11:f9:f1:91:c0:78:2e: 6d:34:49:6c:9b:52:2f:0e:b1:5b:e2:94:6e:7e:00:d0:2b:6c: 82:8c:c2:c8:9b:83:bd:15:d5:6f:9a:b0:d1:be:35:94:2b:d4: 16:8e:8d:86:b3:7d:a9:fb:6f:be:dd:98:26:8e:2d:98:5f:f3: 9c:a4:19:f4:6a:7d:2f:d4:77:37:ad:37:0d:df:33:bd:7b:ad: c8:2e:7f:47:78:89:82:bd:03:27:00:6a:b0:ff:b7:4c:a7:40: bd:d8:f2:02:da:08:a9:09:b1:6e:53:07:4b:e0:7a:c3:27:4d: 29:2a:59:22:49:4b:47:e7:de:cd:e4:58:f0:9c:e5:7f:ec:3f: f5:ee:6e:f5 -----BEGIN CERTIFICATE----- MIIFPjCCBCagAwIBAgISAZt9yhbVYmdxNMhjGLfChbyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYTI2YjU2Y2VlOTdmNjAyMDk0MWJiMTdjNmE3YzZjZWEw ZjgxNGEwHhcNMjYwMTAyMDgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTc1OWI5ZTY3YTBlYWRmYTQyNTI5NTI4ZjZhZDE4NWQwNDI1NmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDciKEHlTW6OYx3p1BX7wjlunWFu xJATM28zrn6sCbVyhXGgvZkXsJ4sCr3M7N1jDpew337iWAF5mVCqn7xNjf9/Vj01 W7DNqe7sLD9I5wmPhpRVl+bT1AsQ6PVDPqyyktnSX4/SHXOthgmG+HV77h5d/Nsg No35XP5Z2Wv1rZcFU71dzg2DqQnQd/WXR+LJ/r8Z+TLfXjEBOvB916ZeulYJH/3q ZIiQmQ7fQLZUjcKRPnjOzECMoIrohkXjcexGm8s7y/R7FAgL3qGc6dz5SyxucJOw eftlS72IYYNo0UgvlC+DIRW3dv2Zi2yuFjuwSRkXCqKZY+qSOIDcsWEC6wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHF1m55noOrfpCUpUo9q0YXQQlbjMB8GA1UdIwQY MBaAFGuia1bO6X9gIJQbsXxqfGzqD4FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYt MzY5MmY5NmUzM2E5LzEvY1hXYm5tZWc2dC1rSlNsU2oyclJoZEJDVnVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYtMzY5MmY5NmUzM2E5 LzEvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAYBAIAATASAwQAsGn9AwQA sGn/AwQA2Q1tMDMEAgACMC0DBwAqDcdAAAoDBwAqDcdAAA8DBwAqDcdAACwDBwAq DcdAADwDBwAqDcdAAEwwDQYJKoZIhvcNAQELBQADggEBADGruwT1DC4bQfxPnkcI Jqdjl/PZTanwhibwh0IYcD/8DKAAgqXOQ1RgLSVhBd/SxgQaosajBxUoUBB62KZo ieSXCIU8DbQWSscSMBfewRnisrE+J94OK6jEHs4AFZEZNvTqDLBHmCH1Y6flE4JV op+sMY3AZE3VEfnxkcB4Lm00SWybUi8OsVvilG5+ANArbIKMwsibg70V1W+asNG+ NZQr1BaOjYazfan7b77dmCaOLZhf85ykGfRqfS/UdzetNw3fM717rcguf0d4iYK9 AycAarD/t0ynQL3Y8gLaCKkJsW5TB0vgesMnTSkqWSJJS0fn3s3kWPCc5X/sP/Xu bvU= -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:38 2026 by rpki-client