This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/i9cfjcmxIQ5keT-XGNUd1cKSj28.roa File: i9cfjcmxIQ5keT-XGNUd1cKSj28.roa (raw, json) Hash identifier: l6DsiyzQ+KGlq2WGHx3qPe6jIp7Y13b+nBCu4WWrVtg= Subject key identifier: 8B:D7:1F:8D:C9:B1:21:0E:64:79:3F:97:18:D5:1D:D5:C2:92:8F:6F Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758FDA11E41D35C6F5E4DE1077353A2 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/i9cfjcmxIQ5keT-XGNUd1cKSj28.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199371 IP address blocks: 178.16.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fd:a1:1e:41:d3:5c:6f:5e:4d:e1:07:73:53:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bd71f8dc9b1210e64793f9718d51dd5c2928f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:23:6f:5f:9a:af:97:e7:a7:72:c4:0a:04: ed:81:7a:7f:3c:50:ea:46:a5:96:1f:6e:af:45:e7: e2:dc:7c:d1:36:c7:16:76:d9:24:55:75:95:49:8d: c0:40:74:78:ee:9e:c2:c6:1d:b9:eb:c6:48:41:1a: b1:ad:70:a6:c1:85:3d:c2:9b:76:8a:84:49:83:33: af:c0:65:2b:71:55:68:1a:3d:f0:84:e4:26:25:2c: 09:08:69:b2:ba:5a:04:59:41:ad:8e:42:c0:29:cf: 46:55:0d:73:50:0d:38:1b:d4:b2:dd:27:a2:83:ed: da:87:9a:5a:6e:b3:91:2f:b9:2f:58:87:52:2c:53: 53:8c:64:0e:5a:f1:aa:7c:a4:0b:fd:d8:1c:ef:75: e6:48:c9:9c:a3:0d:09:dc:a6:c9:eb:9c:2d:7d:4d: a5:50:d2:ef:17:7b:d2:a4:f6:bf:53:cf:58:77:25: 7d:5e:82:56:df:66:69:14:5f:1f:38:5f:c5:5b:47: 4f:51:af:04:89:4f:37:cc:9b:73:5c:b2:1b:6e:0e: e3:34:b1:bc:d1:05:db:19:89:e6:11:06:38:1e:57: da:5f:9e:72:6c:b2:bd:1a:04:e4:70:50:72:98:5b: a7:61:d5:6f:92:12:97:e0:b1:80:7d:51:a5:06:c5: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D7:1F:8D:C9:B1:21:0E:64:79:3F:97:18:D5:1D:D5:C2:92:8F:6F X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/i9cfjcmxIQ5keT-XGNUd1cKSj28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.16.122.0/24 Signature Algorithm: sha256WithRSAEncryption 86:af:b3:13:69:d2:da:92:94:aa:cc:41:17:e2:5b:37:fa:52: 59:8e:3e:5b:42:9a:df:12:df:ab:0a:e4:be:39:b5:70:1e:52: c5:f4:02:3d:c4:19:db:0d:a5:59:09:c0:26:76:9e:12:e4:41: a5:cd:ec:10:fc:c6:84:4b:bd:b1:7a:1c:f4:d7:7d:10:a6:cc: 3f:3f:48:0d:78:2e:b8:8f:1c:fb:d5:40:2f:83:09:db:66:95: 17:9e:bd:40:b0:7e:b9:0a:0d:25:85:8e:18:46:19:dd:3e:38: 15:42:69:d1:62:22:33:bd:94:84:e8:ee:41:c3:ca:f9:4f:e9: f2:d7:cb:36:41:fc:e6:c3:dc:f5:ba:13:02:82:17:6a:76:a7: cc:be:99:f1:04:43:34:04:11:01:67:ea:98:b6:65:ec:ff:9c: 19:58:60:a4:2f:e3:4e:f7:09:02:da:d0:cf:28:ad:10:59:b4: 4d:38:e4:5f:b1:e1:41:e3:3c:95:47:89:de:eb:8c:88:60:51: 09:53:1f:93:b8:f7:fa:24:3b:1d:57:fa:ec:54:ab:83:34:52: 82:10:89:0c:f2:2e:0a:ba:ea:2d:5f:f0:97:05:02:ec:41:69: b6:51:6e:34:4e:f1:fc:79:9a:43:73:1b:4f:bd:d8:52:d8:9d: 00:46:56:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WP2hHkHTXG9eTeEHc1OiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmQ3MWY4ZGM5YjEyMTBlNjQ3OTNmOTcxOGQ1MWRkNWMyOTI4ZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxkjb1+ar5fnp3LECgTtgXp/PFDq RqWWH26vRefi3HzRNscWdtkkVXWVSY3AQHR47p7Cxh2568ZIQRqxrXCmwYU9wpt2 ioRJgzOvwGUrcVVoGj3whOQmJSwJCGmyuloEWUGtjkLAKc9GVQ1zUA04G9Sy3Sei g+3ah5pabrORL7kvWIdSLFNTjGQOWvGqfKQL/dgc73XmSMmcow0J3KbJ65wtfU2l UNLvF3vSpPa/U89YdyV9XoJW32ZpFF8fOF/FW0dPUa8EiU83zJtzXLIbbg7jNLG8 0QXbGYnmEQY4HlfaX55ybLK9GgTkcFBymFunYdVvkhKX4LGAfVGlBsWUTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIvXH43JsSEOZHk/lxjVHdXCko9vMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvaTljZmpjbXhJUTVrZVQtWEdOVWQxY0tTajI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshB6MA0G CSqGSIb3DQEBCwUAA4IBAQCGr7MTadLakpSqzEEX4ls3+lJZjj5bQprfEt+rCuS+ ObVwHlLF9AI9xBnbDaVZCcAmdp4S5EGlzewQ/MaES72xehz0130Qpsw/P0gNeC64 jxz71UAvgwnbZpUXnr1AsH65Cg0lhY4YRhndPjgVQmnRYiIzvZSE6O5Bw8r5T+ny 18s2Qfzmw9z1uhMCghdqdqfMvpnxBEM0BBEBZ+qYtmXs/5wZWGCkL+NO9wkC2tDP KK0QWbRNOORfseFB4zyVR4ne64yIYFEJUx+TuPf6JDsdV/rsVKuDNFKCEIkM8i4K uuotX/CXBQLsQWm2UW40TvH8eZpDcxtPvdhS2J0ARlbG -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:02 2026 by rpki-client