This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/aIn00fvfKzliXANh-C6PPZYS9Ok.roa File: aIn00fvfKzliXANh-C6PPZYS9Ok.roa (raw, json) Hash identifier: TraOgQuWpAARG27UmwJNvJB5NSHgGQ1+3Tn7sO48F7I= Subject key identifier: 68:89:F4:D1:FB:DF:2B:39:62:5C:03:61:F8:2E:8F:3D:96:12:F4:E9 Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Certificate serial: 019B7E3909AA89E0D02C5399E45E8746143D Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/aIn00fvfKzliXANh-C6PPZYS9Ok.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51396 IP address blocks: 176.65.132.0/24 maxlen: 24 176.65.148.0/24 maxlen: 24 176.65.149.0/24 maxlen: 24 176.65.150.0/24 maxlen: 24 176.65.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.mft rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:09:aa:89:e0:d0:2c:53:99:e4:5e:87:46:14:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6889f4d1fbdf2b39625c0361f82e8f3d9612f4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:50:81:46:b9:b7:8b:8a:51:46:7d:1a:7b:db: be:eb:48:ff:ff:35:c1:51:4d:e3:d4:93:06:95:93: 55:79:bf:c6:5d:4e:0e:e9:a1:4d:90:d3:cf:6d:a2: 54:93:7c:3f:9d:f9:8e:5b:54:5e:7b:d6:94:f4:dd: d5:65:f9:e2:78:3f:82:c0:0f:f1:e1:7c:fd:de:ca: 51:b9:12:a8:b6:5c:3d:d4:90:62:01:2b:be:e5:0b: 53:3a:d9:fd:05:9e:35:1a:e4:d4:ce:65:a0:20:37: 31:9c:14:4e:4e:ba:0c:7d:fb:d1:19:24:8c:d4:c0: 9f:60:83:0b:4d:92:88:b5:2a:f0:25:16:fa:4d:23: 20:8f:78:dc:f4:53:b1:4e:6a:ec:aa:25:99:f8:a8: 5d:32:e6:30:a1:69:54:e1:37:4f:73:75:d8:ea:b0: 0b:e7:73:3e:3e:7e:7e:97:ce:7b:34:30:4f:3a:59: d7:b8:8e:7d:83:12:22:b6:93:b6:aa:6f:ca:14:d0: 36:9e:06:b1:3c:a5:3b:f3:36:6f:ba:41:48:32:8f: a0:6e:63:c9:c8:79:a3:d1:06:bb:3a:12:f6:c6:1d: 46:e5:25:e5:fa:d4:fd:b8:1c:56:d4:a9:ac:65:5b: 3a:87:12:16:32:91:a8:d2:c7:94:23:8c:f8:9d:21: 64:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:89:F4:D1:FB:DF:2B:39:62:5C:03:61:F8:2E:8F:3D:96:12:F4:E9 X509v3 Authority Key Identifier: keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/aIn00fvfKzliXANh-C6PPZYS9Ok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.65.132.0/24 176.65.148.0/22 Signature Algorithm: sha256WithRSAEncryption 26:fb:b9:4e:99:7c:a4:e7:7b:c1:b4:bc:c1:cb:c4:7f:22:70: 50:0c:fa:7d:6d:96:c0:52:b4:e1:56:d9:1c:70:bb:ae:6b:e2: e4:94:39:a9:47:78:f3:88:8e:8f:66:95:b6:cb:57:48:1a:42: 88:44:39:18:fa:c3:90:c3:c4:6b:0a:2c:86:bd:b8:cd:68:2b: 3e:20:e7:83:4f:55:9a:63:5f:da:a5:57:57:92:a2:e8:89:e2: 8c:e4:0e:e9:29:d2:c5:b2:60:54:ca:f7:d3:81:2f:77:5c:9c: 95:9d:35:6d:33:20:56:bc:93:54:1a:59:28:33:1e:ec:f4:b9: 2c:e4:4c:a4:47:af:7e:86:e9:09:4b:90:3a:fd:e2:b3:96:d2: 73:16:a3:ea:2e:15:9f:0d:91:4a:bf:cb:e3:da:f5:32:a7:79: 96:8e:ef:06:37:e1:9c:d5:01:ce:47:93:7e:a2:07:60:59:46: f4:9a:0b:47:45:0f:36:c2:c6:40:9f:1e:65:fe:92:3f:39:45: 64:fe:c3:52:26:6a:8b:35:f4:7b:a7:02:e6:73:f4:f4:0c:b3: e8:07:77:2c:82:af:13:b3:0a:73:de:eb:9a:30:55:64:fa:ac: 49:6c:c0:09:22:31:58:4e:2c:98:7b:cc:19:98:f2:ff:3d:ac: a0:a1:7f:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OQmqieDQLFOZ5F6HRhQ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx MTI4YzMwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODg5ZjRkMWZiZGYyYjM5NjI1YzAzNjFmODJlOGYzZDk2MTJmNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1CBRrm3i4pRRn0ae9u+60j//zXB UU3j1JMGlZNVeb/GXU4O6aFNkNPPbaJUk3w/nfmOW1Ree9aU9N3VZfnieD+CwA/x 4Xz93spRuRKotlw91JBiASu+5QtTOtn9BZ41GuTUzmWgIDcxnBROTroMffvRGSSM 1MCfYIMLTZKItSrwJRb6TSMgj3jc9FOxTmrsqiWZ+KhdMuYwoWlU4TdPc3XY6rAL 53M+Pn5+l857NDBPOlnXuI59gxIitpO2qm/KFNA2ngaxPKU78zZvukFIMo+gbmPJ yHmj0Qa7OhL2xh1G5SXl+tT9uBxW1KmsZVs6hxIWMpGo0seUI4z4nSFkVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGiJ9NH73ys5YlwDYfgujz2WEvTpMB8GA1UdIwQY MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt MzE5YjBjODc0NDQwLzEvYUluMDBmdmZLemxpWEFOaC1DNlBQWllTOU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsEGEAwQC sEGUMA0GCSqGSIb3DQEBCwUAA4IBAQAm+7lOmXyk53vBtLzBy8R/InBQDPp9bZbA UrThVtkccLuua+LklDmpR3jziI6PZpW2y1dIGkKIRDkY+sOQw8RrCiyGvbjNaCs+ IOeDT1WaY1/apVdXkqLoieKM5A7pKdLFsmBUyvfTgS93XJyVnTVtMyBWvJNUGlko Mx7s9Lks5EykR69+hukJS5A6/eKzltJzFqPqLhWfDZFKv8vj2vUyp3mWju8GN+Gc 1QHOR5N+ogdgWUb0mgtHRQ82wsZAnx5l/pI/OUVk/sNSJmqLNfR7pwLmc/T0DLPo B3csgq8Tswpz3uuaMFVk+qxJbMAJIjFYTiyYe8wZmPL/PaygoX/2 -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:35 2026 by rpki-client