This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sYq84XN1Qx1WJyADlh3Mcb6exg0.roa File: sYq84XN1Qx1WJyADlh3Mcb6exg0.roa (raw, json) Hash identifier: 7NVi4MsGyd6fsgd4rY/uJx289nGGknKUP4vEdkZ/xMU= Subject key identifier: B1:8A:BC:E1:73:75:43:1D:56:27:20:03:96:1D:CC:71:BE:9E:C6:0D Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ABFE339CAAEAF312F09CBC5B594B4 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sYq84XN1Qx1WJyADlh3Mcb6exg0.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208024 IP address blocks: 109.176.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bf:e3:39:ca:ae:af:31:2f:09:cb:c5:b5:94:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b18abce17375431d56272003961dcc71be9ec60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:6b:5f:d8:c6:18:3a:1c:3f:1e:96:c3:14: 47:c9:23:b5:68:ff:23:57:15:40:c7:38:eb:10:db: 20:ac:5e:3c:e6:49:70:36:9f:05:91:77:e2:e4:5d: a9:3d:a5:6f:a3:73:9f:96:a8:bd:2b:d2:ec:8c:f6: 3f:fa:58:ce:58:53:f6:83:a2:8c:2e:11:5a:78:50: 92:56:d4:0e:c6:6e:98:03:c0:7d:c1:3a:08:8f:19: dc:d1:00:b3:9a:2c:34:51:60:0c:a4:e5:9f:dd:b9: f2:30:19:08:c4:9b:ec:76:72:72:a4:89:c4:1a:2b: 03:76:dd:9f:ab:ec:c1:6f:87:56:6c:78:d9:df:99: b1:ed:d9:04:d9:78:d5:49:0c:16:35:96:52:dd:57: 90:4c:68:a3:91:e3:4c:d6:07:15:73:cd:5b:ed:0f: 45:78:64:56:19:fc:23:14:b1:51:14:2d:e9:cd:9d: 08:32:fc:56:79:1d:02:a3:f7:dd:54:55:01:06:f3: 04:f5:99:cf:94:5f:d2:8c:4b:7a:f5:42:2d:fb:f8: 73:2a:7f:18:e5:ec:7d:a9:0c:01:fc:df:89:b9:b6: 0f:4b:64:04:b5:f6:10:4d:da:ad:a4:da:09:35:94: 84:ad:57:7d:8a:23:22:7a:e4:89:6a:8b:44:5d:94: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8A:BC:E1:73:75:43:1D:56:27:20:03:96:1D:CC:71:BE:9E:C6:0D X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/sYq84XN1Qx1WJyADlh3Mcb6exg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.250.0/24 Signature Algorithm: sha256WithRSAEncryption 20:8a:b9:22:5a:c4:ca:1c:3d:e3:f4:17:57:12:57:4e:82:26: 10:ac:7f:ae:42:30:e7:2b:21:d7:ee:14:bc:9e:a2:f4:55:91: a8:db:d1:13:bb:23:6e:ad:ca:b1:4b:c9:2e:0b:40:b4:8b:86: c6:be:5c:ce:11:cf:db:cd:4a:6b:1c:f0:54:c3:0a:f8:be:82: d7:b4:f8:92:05:93:95:1a:b0:96:e2:2c:82:f6:fd:7e:eb:7a: 34:ce:27:6a:39:67:ec:5a:55:7a:2f:f0:50:4d:fb:dc:4e:56: 48:aa:26:48:87:43:d0:15:60:87:4d:bf:17:96:ac:95:d1:19: 31:72:ac:66:07:97:cd:1f:f6:7e:d6:59:65:19:b6:6f:42:7f: 5b:6d:85:48:45:d7:39:e7:7c:7e:15:42:4e:ca:62:bb:37:3d: 14:ad:fc:d4:e4:d9:a6:6d:28:f0:a5:07:95:6f:57:70:4c:c4: 80:08:56:f0:67:f7:f3:ac:ae:34:a6:66:bf:8f:ae:a2:b3:2e: df:9a:23:9c:57:9e:df:d8:10:a0:6a:7c:c0:bf:e8:de:21:25: d4:18:55:08:db:87:d1:45:6b:70:5f:ef:52:d2:38:e3:ba:1b: 0a:ae:0e:ae:bb:33:57:6c:53:40:8b:56:46:64:e2:32:72:e8: 20:80:85:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wr/jOcqurzEvCcvFtZS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMThhYmNlMTczNzU0MzFkNTYyNzIwMDM5NjFkY2M3MWJlOWVjNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs49rX9jGGDocPx6WwxRHySO1aP8j VxVAxzjrENsgrF485klwNp8FkXfi5F2pPaVvo3Oflqi9K9LsjPY/+ljOWFP2g6KM LhFaeFCSVtQOxm6YA8B9wToIjxnc0QCzmiw0UWAMpOWf3bnyMBkIxJvsdnJypInE GisDdt2fq+zBb4dWbHjZ35mx7dkE2XjVSQwWNZZS3VeQTGijkeNM1gcVc81b7Q9F eGRWGfwjFLFRFC3pzZ0IMvxWeR0Co/fdVFUBBvME9ZnPlF/SjEt69UIt+/hzKn8Y 5ex9qQwB/N+JubYPS2QEtfYQTdqtpNoJNZSErVd9iiMieuSJaotEXZTWiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGKvOFzdUMdVicgA5YdzHG+nsYNMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvc1lxODRYTjFReDFXSnlBRGxoM01jYjZleGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbD6MA0G CSqGSIb3DQEBCwUAA4IBAQAgirkiWsTKHD3j9BdXEldOgiYQrH+uQjDnKyHX7hS8 nqL0VZGo29ETuyNurcqxS8kuC0C0i4bGvlzOEc/bzUprHPBUwwr4voLXtPiSBZOV GrCW4iyC9v1+63o0zidqOWfsWlV6L/BQTfvcTlZIqiZIh0PQFWCHTb8XlqyV0Rkx cqxmB5fNH/Z+1lllGbZvQn9bbYVIRdc553x+FUJOymK7Nz0UrfzU5NmmbSjwpQeV b1dwTMSACFbwZ/fzrK40pma/j66isy7fmiOcV57f2BCganzAv+jeISXUGFUI24fR RWtwX+9S0jjjuhsKrg6uuzNXbFNAi1ZGZOIycugggIUW -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:19 2026 by rpki-client