This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u7CdmscQ81JIfFaXpwMAToL5_Lc.roa File: u7CdmscQ81JIfFaXpwMAToL5_Lc.roa (raw, json) Hash identifier: R0lGnGB5D3qiWJ0AorAVBG+7KSmqh9nsPjCGOKtNcz0= Subject key identifier: BB:B0:9D:9A:C7:10:F3:52:48:7C:56:97:A7:03:00:4E:82:F9:FC:B7 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD4B7C67CC6F90951E10377337606 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u7CdmscQ81JIfFaXpwMAToL5_Lc.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214036 IP address blocks: 109.176.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d4:b7:c6:7c:c6:f9:09:51:e1:03:77:33:76:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbb09d9ac710f352487c5697a703004e82f9fcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:e8:3c:6c:e4:4c:a2:3f:2d:dd:f6:4b:a1: b1:f4:16:6b:0e:e0:d6:2d:33:b2:63:5c:8e:b0:d7: 7c:46:8c:9e:7e:81:d1:e4:6d:83:90:4d:eb:5b:4e: ce:21:28:23:bb:0e:24:44:f8:5d:17:a4:4c:5b:27: eb:89:90:cd:dc:58:cf:f2:ca:88:f4:22:8c:79:be: 38:b2:f9:70:3d:96:6e:6c:f5:3d:ee:eb:2a:1c:f8: 81:17:0e:6d:7b:64:b1:05:89:c0:4c:a0:0f:8f:9a: 62:e8:5f:8f:ee:46:ab:69:b9:59:29:69:59:de:a7: 07:98:50:ec:aa:74:a3:96:bd:9b:3f:0b:e1:b8:72: 2c:5b:dd:93:2d:d5:99:2d:e5:c8:0b:0b:98:5c:b3: fa:90:36:49:d1:b2:a3:71:86:b9:30:87:7d:fa:30: c7:ba:08:51:05:0f:3f:8a:c2:b9:1a:ae:e0:ad:b2: 0c:0f:89:d0:1a:9d:35:8c:cd:19:b5:f3:97:3c:20: d6:ff:f4:54:da:89:07:ff:67:26:d8:41:70:e6:39: 96:1f:94:d2:69:47:0d:7e:58:a9:b2:e6:7c:3c:0f: 9b:9b:65:3b:99:55:ae:7a:f3:4e:a6:9a:09:c3:b1: c3:a6:55:ff:f8:ee:14:8d:06:ed:51:5b:31:70:71: df:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:9D:9A:C7:10:F3:52:48:7C:56:97:A7:03:00:4E:82:F9:FC:B7 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/u7CdmscQ81JIfFaXpwMAToL5_Lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.207.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ab:9c:a9:d8:06:e6:85:06:ab:f8:4e:11:31:03:cb:a1:a1: 53:83:66:b3:ed:20:36:80:54:05:44:0d:b4:8c:3f:50:38:b7: 3a:f8:35:8d:dc:2a:41:65:69:35:2a:b5:03:11:bb:40:b9:fe: 84:61:0c:66:fe:86:37:33:4e:18:0d:29:ef:5e:1a:6f:9a:34: 6c:6a:ff:72:ff:b8:9f:89:a3:be:d5:78:37:d6:be:45:8a:27: a6:20:3a:37:33:21:00:33:84:7e:7f:96:07:33:45:a7:dc:7d: 18:89:cc:14:ed:0c:6f:44:73:1e:7f:e9:a7:6c:c5:06:8d:d3: 79:a2:74:8e:70:8b:ba:a2:1e:c5:7e:d5:e8:e6:2f:36:d7:dd: f7:42:2f:4e:1b:ee:16:43:ca:b2:3b:7e:9a:ef:29:ab:b2:75: 7e:c1:01:5b:93:4a:5f:4c:d4:83:09:16:b3:8f:38:ce:53:7b: 64:d0:44:89:7b:78:38:e5:8f:09:80:5d:f1:3e:0a:2e:bd:59: 26:1e:ac:4e:cb:8f:83:5d:3c:77:83:41:60:ed:6d:02:c8:ef: 37:ba:60:a7:f0:a7:41:a6:4c:5e:ce:da:1c:10:6c:44:23:a1: ce:26:4e:5c:5a:57:eb:27:83:b3:42:5c:fb:f2:aa:50:5f:cf: 93:43:58:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtS3xnzG+QlR4QN3M3YGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmIwOWQ5YWM3MTBmMzUyNDg3YzU2OTdhNzAzMDA0ZTgyZjlmY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWLoPGzkTKI/Ld32S6Gx9BZrDuDW LTOyY1yOsNd8RoyefoHR5G2DkE3rW07OISgjuw4kRPhdF6RMWyfriZDN3FjP8sqI 9CKMeb44svlwPZZubPU97usqHPiBFw5te2SxBYnATKAPj5pi6F+P7karablZKWlZ 3qcHmFDsqnSjlr2bPwvhuHIsW92TLdWZLeXICwuYXLP6kDZJ0bKjcYa5MId9+jDH ughRBQ8/isK5Gq7grbIMD4nQGp01jM0ZtfOXPCDW//RU2okH/2cm2EFw5jmWH5TS aUcNflipsuZ8PA+bm2U7mVWuevNOppoJw7HDplX/+O4UjQbtUVsxcHHfvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuwnZrHEPNSSHxWl6cDAE6C+fy3MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdTdDZG1zY1E4MUpJZkZhWHB3TUFUb0w1X0xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbDPMA0G CSqGSIb3DQEBCwUAA4IBAQAHq5yp2AbmhQar+E4RMQPLoaFTg2az7SA2gFQFRA20 jD9QOLc6+DWN3CpBZWk1KrUDEbtAuf6EYQxm/oY3M04YDSnvXhpvmjRsav9y/7if iaO+1Xg31r5FiiemIDo3MyEAM4R+f5YHM0Wn3H0YicwU7QxvRHMef+mnbMUGjdN5 onSOcIu6oh7FftXo5i821933Qi9OG+4WQ8qyO36a7ymrsnV+wQFbk0pfTNSDCRaz jzjOU3tk0ESJe3g45Y8JgF3xPgouvVkmHqxOy4+DXTx3g0Fg7W0CyO83umCn8KdB pkxeztocEGxEI6HOJk5cWlfrJ4OzQlz78qpQX8+TQ1gw -----END CERTIFICATE-----Generated at Sun Jan 25 11:39:56 2026 by rpki-client