This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eskTPLjnuf76me4zRRAZwIP26aM.roa File: eskTPLjnuf76me4zRRAZwIP26aM.roa (raw, json) Hash identifier: wLhSRtbbVogzl0EFJH4fo8V1LXab7Q9bQ9w+JBPzuBo= Subject key identifier: 7A:C9:13:3C:B8:E7:B9:FE:FA:99:EE:33:45:10:19:C0:83:F6:E9:A3 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ACC9FD960BED400EC5831D49E6B57 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eskTPLjnuf76me4zRRAZwIP26aM.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212762 IP address blocks: 109.176.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cc:9f:d9:60:be:d4:00:ec:58:31:d4:9e:6b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ac9133cb8e7b9fefa99ee33451019c083f6e9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:05:44:d5:f9:75:54:44:95:16:2d:c5:05: ad:26:95:2b:32:93:1d:4d:30:2a:15:3a:34:d4:4c: 8b:06:48:ea:59:ce:2b:81:ba:3f:87:b3:65:2a:87: a0:1d:7d:c9:72:79:ef:87:80:33:f7:36:7b:6b:2c: e0:89:80:de:bf:5f:6e:31:31:fe:9f:84:fd:58:15: ce:e5:63:ef:30:68:02:5e:fc:a4:1a:76:1c:db:f4: 78:ab:a3:d4:75:a5:7a:13:a8:ca:14:df:2f:32:53: ea:5f:78:ed:20:d4:8a:02:6c:60:f5:80:88:b1:88: 05:47:0e:5a:76:0e:81:0b:57:c4:35:44:bc:28:65: 3e:84:b2:56:2f:4b:70:4a:4e:0a:3c:c2:48:61:c0: a4:ac:40:76:01:c3:2b:84:d5:e9:dd:6a:7d:06:a4: 41:7f:39:9b:61:57:ec:5c:77:f6:4a:f3:88:18:6e: 45:99:36:96:e5:c6:36:78:9b:a4:0a:9a:d8:16:05: da:65:66:7a:f8:df:81:18:ea:1b:3b:e0:7d:da:41: 32:ec:bd:0a:40:ee:cc:c2:42:3c:c8:75:42:9c:a7: bf:16:9e:18:08:7f:0a:36:2d:3e:79:9e:3b:01:8c: 80:d8:44:d3:44:1d:00:7e:42:7e:a9:ce:d8:5b:cb: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C9:13:3C:B8:E7:B9:FE:FA:99:EE:33:45:10:19:C0:83:F6:E9:A3 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eskTPLjnuf76me4zRRAZwIP26aM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.202.0/24 Signature Algorithm: sha256WithRSAEncryption ad:b9:e0:b1:e8:08:8b:1c:e0:a3:8f:a1:eb:0c:bc:0e:6b:cb: 55:c1:4e:e1:e9:1c:04:38:96:d1:c3:00:dc:d4:50:ba:ad:41: bd:59:21:93:32:da:45:96:c2:ab:4d:f9:a2:1e:8d:7f:47:26: 08:2a:e6:c8:c1:66:b6:c1:95:49:32:2e:c1:d5:3b:5c:0b:90: 1e:62:7b:70:0c:63:16:33:03:e4:16:80:2c:20:fb:22:88:d2: f3:3e:0c:98:a2:df:a5:9e:cb:28:61:86:1a:c6:75:56:c6:51: 33:22:a8:98:21:a7:90:04:0c:78:73:cd:be:0c:71:c3:5b:c1: 0b:e2:73:39:98:a8:38:aa:aa:60:cb:15:4f:01:a6:28:64:7c: 86:7a:21:d9:1a:52:21:6c:60:ed:ba:d2:6b:46:fd:7e:87:61: 92:54:5a:00:25:32:9e:74:46:be:84:db:c7:8b:e9:9f:18:f3: 96:9e:55:fb:e0:1c:c6:82:bd:9d:19:9f:0b:5b:cf:bc:54:33: 32:83:a0:5c:f8:c1:64:e4:f8:43:00:63:7b:d0:06:4d:6f:ed: 2f:e6:68:38:7b:09:2a:28:bd:10:5f:9b:cb:a2:0a:b4:22:69: bd:a5:18:23:18:95:ff:d7:f8:e6:d0:bb:26:3a:fa:04:6e:ce: aa:1a:7f:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wsyf2WC+1ADsWDHUnmtXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWM5MTMzY2I4ZTdiOWZlZmE5OWVlMzM0NTEwMTljMDgzZjZlOWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs8FRNX5dVRElRYtxQWtJpUrMpMd TTAqFTo01EyLBkjqWc4rgbo/h7NlKoegHX3Jcnnvh4Az9zZ7ayzgiYDev19uMTH+ n4T9WBXO5WPvMGgCXvykGnYc2/R4q6PUdaV6E6jKFN8vMlPqX3jtINSKAmxg9YCI sYgFRw5adg6BC1fENUS8KGU+hLJWL0twSk4KPMJIYcCkrEB2AcMrhNXp3Wp9BqRB fzmbYVfsXHf2SvOIGG5FmTaW5cY2eJukCprYFgXaZWZ6+N+BGOobO+B92kEy7L0K QO7MwkI8yHVCnKe/Fp4YCH8KNi0+eZ47AYyA2ETTRB0AfkJ+qc7YW8vIGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHrJEzy457n++pnuM0UQGcCD9umjMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZXNrVFBMam51Zjc2bWU0elJSQVp3SVAyNmFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbDKMA0G CSqGSIb3DQEBCwUAA4IBAQCtueCx6AiLHOCjj6HrDLwOa8tVwU7h6RwEOJbRwwDc 1FC6rUG9WSGTMtpFlsKrTfmiHo1/RyYIKubIwWa2wZVJMi7B1TtcC5AeYntwDGMW MwPkFoAsIPsiiNLzPgyYot+lnssoYYYaxnVWxlEzIqiYIaeQBAx4c82+DHHDW8EL 4nM5mKg4qqpgyxVPAaYoZHyGeiHZGlIhbGDtutJrRv1+h2GSVFoAJTKedEa+hNvH i+mfGPOWnlX74BzGgr2dGZ8LW8+8VDMyg6Bc+MFk5PhDAGN70AZNb+0v5mg4ewkq KL0QX5vLogq0Imm9pRgjGJX/1/jm0LsmOvoEbs6qGn9B -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:14 2026 by rpki-client