This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/f9ERBjEpHbN1pfhl_nyFiocjtUM.roa File: f9ERBjEpHbN1pfhl_nyFiocjtUM.roa (raw, json) Hash identifier: eOOBr7U1g+HNywPWJzzBaEPCZoT5835M09OomcowoyQ= Subject key identifier: 7F:D1:11:06:31:29:1D:B3:75:A5:F8:65:FE:7C:85:8A:87:23:B5:43 Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Certificate serial: 019B7A5B6140F142806A0455C4141FB3F5AE Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/f9ERBjEpHbN1pfhl_nyFiocjtUM.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206810 IP address blocks: 176.124.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:61:40:f1:42:80:6a:04:55:c4:14:1f:b3:f5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fd1110631291db375a5f865fe7c858a8723b543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a0:30:f3:9f:2b:be:2f:f9:b2:f5:b7:02:fc: 39:ea:02:af:12:63:92:7c:7b:6e:d4:65:b8:40:3c: 90:06:f2:89:e9:e0:ed:34:46:11:c8:7d:76:84:2d: 1b:1a:7e:86:df:95:71:88:68:80:79:e7:b8:d7:ee: 04:d6:5d:0f:3a:10:c6:e7:16:56:94:0b:9e:46:69: 2d:53:e4:43:f4:e5:28:80:62:e0:89:78:09:11:71: 2c:01:58:d5:49:99:15:4d:81:27:6f:01:7d:d1:64: 28:27:15:65:f4:a1:4d:c3:9b:09:f7:ad:64:53:b4: 2c:e0:11:27:78:15:f9:4e:07:76:74:11:38:9f:8a: 8a:63:93:33:32:64:5f:3a:be:4f:a8:90:c5:4f:b6: 48:77:29:b5:84:21:8c:1f:a2:36:c6:fd:c1:48:bf: ae:87:b9:a7:c0:5f:9f:bb:20:89:5c:cf:5c:8c:54: c0:43:ad:a0:91:15:67:d4:be:3f:52:cb:e1:3f:19: 89:64:a1:df:b2:6b:ec:87:bf:04:9d:02:27:4b:d3: 2c:25:5d:2f:66:1d:f7:8e:6c:09:84:e6:26:74:83: 08:65:5d:33:9d:9e:8d:5b:ad:49:58:ad:06:d6:79: d1:69:d4:83:1a:28:ee:ba:d6:b2:9b:6c:78:ee:7e: 01:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D1:11:06:31:29:1D:B3:75:A5:F8:65:FE:7C:85:8A:87:23:B5:43 X509v3 Authority Key Identifier: keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/f9ERBjEpHbN1pfhl_nyFiocjtUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.22.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:5e:14:30:90:35:41:fd:b0:e4:51:62:97:c7:2c:8d:3d:d7: 97:3f:a9:d1:30:28:3a:24:7e:7e:af:83:23:e7:2a:8d:2e:bf: 65:ad:3c:39:26:8e:43:ff:16:a2:f8:2b:c5:2e:56:6f:7b:8c: 3d:48:6c:ef:d5:02:a1:8d:b1:65:66:39:9a:67:49:16:0c:ab: 33:70:b6:aa:9c:61:97:85:2c:6c:5a:54:13:65:40:52:bb:5e: a3:ec:0b:62:1d:6c:b5:ac:d1:36:99:29:20:9d:6f:34:d7:a2: 25:01:47:a0:96:7b:38:e6:14:67:90:ca:9b:f4:6c:0d:e0:f5: 69:01:15:50:61:d8:d1:ce:91:fc:0d:a2:b9:ca:54:28:f9:8d: 75:f0:5f:40:ef:31:7b:a5:20:12:d9:09:c4:fa:93:c7:5f:30: 48:14:57:b2:46:aa:9a:6a:87:17:cd:4f:30:49:4c:ac:7a:f7: e8:2e:f4:64:22:67:24:6d:d5:68:c4:28:99:be:69:ad:5a:b0: 05:c2:b8:15:1f:f5:20:03:d0:92:92:4c:2e:3f:99:81:21:25: a9:0d:9c:fa:f3:48:a5:60:f2:cd:a6:5e:63:bd:4c:77:40:95: 5a:8f:d6:04:36:f1:3c:bb:68:bf:d6:f8:b8:fd:10:3c:54:eb: 7f:c2:72:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W2FA8UKAagRVxBQfs/WuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh NTAyNTAwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmQxMTEwNjMxMjkxZGIzNzVhNWY4NjVmZTdjODU4YTg3MjNiNTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KAw858rvi/5svW3Avw56gKvEmOS fHtu1GW4QDyQBvKJ6eDtNEYRyH12hC0bGn6G35VxiGiAeee41+4E1l0POhDG5xZW lAueRmktU+RD9OUogGLgiXgJEXEsAVjVSZkVTYEnbwF90WQoJxVl9KFNw5sJ961k U7Qs4BEneBX5Tgd2dBE4n4qKY5MzMmRfOr5PqJDFT7ZIdym1hCGMH6I2xv3BSL+u h7mnwF+fuyCJXM9cjFTAQ62gkRVn1L4/UsvhPxmJZKHfsmvsh78EnQInS9MsJV0v Zh33jmwJhOYmdIMIZV0znZ6NW61JWK0G1nnRadSDGijuutaym2x47n4BgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/REQYxKR2zdaX4Zf58hYqHI7VDMB8GA1UdIwQY MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt YjY2ZmE0ZjQ3NjNhLzEvZjlFUkJqRXBIYk4xcGZobF9ueUZpb2NqdFVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHwWMA0G CSqGSIb3DQEBCwUAA4IBAQCaXhQwkDVB/bDkUWKXxyyNPdeXP6nRMCg6JH5+r4Mj 5yqNLr9lrTw5Jo5D/xai+CvFLlZve4w9SGzv1QKhjbFlZjmaZ0kWDKszcLaqnGGX hSxsWlQTZUBSu16j7AtiHWy1rNE2mSkgnW8016IlAUeglns45hRnkMqb9GwN4PVp ARVQYdjRzpH8DaK5ylQo+Y118F9A7zF7pSAS2QnE+pPHXzBIFFeyRqqaaocXzU8w SUysevfoLvRkImckbdVoxCiZvmmtWrAFwrgVH/UgA9CSkkwuP5mBISWpDZz680il YPLNpl5jvUx3QJVaj9YENvE8u2i/1vi4/RA8VOt/wnIs -----END CERTIFICATE-----Generated at Mon Jan 26 04:56:16 2026 by rpki-client