This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x1jKAjYuNzNHQeGeV16BwKJT6y8.roa File: x1jKAjYuNzNHQeGeV16BwKJT6y8.roa (raw, json) Hash identifier: +BS14YufyzIPZk5HmTcQTsrMu5iF3jyuysIEhUmCEaY= Subject key identifier: C7:58:CA:02:36:2E:37:33:47:41:E1:9E:57:5E:81:C0:A2:53:EB:2F Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5A97D15E73B15881E829F0FA7FD1D1 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x1jKAjYuNzNHQeGeV16BwKJT6y8.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9318 IP address blocks: 109.176.10.0/24 maxlen: 24 109.176.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:97:d1:5e:73:b1:58:81:e8:29:f0:fa:7f:d1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c758ca02362e37334741e19e575e81c0a253eb2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:92:b8:f6:e8:bc:49:1a:5f:e5:12:66:87: c7:51:46:9c:eb:bf:97:10:57:59:24:61:b9:90:16: 5d:03:67:b1:eb:30:de:f4:d7:82:4d:bd:96:be:64: b6:09:56:89:c9:e6:e1:63:63:cd:f5:68:3d:59:03: b5:1c:f5:7a:62:8e:61:09:90:2f:ef:b4:46:0e:94: 9e:39:66:f2:b7:fc:cb:1a:ee:48:ce:5f:2f:ba:e5: 6f:4f:72:0f:1b:b1:af:18:91:e8:73:c3:9d:42:2c: ab:82:81:7b:98:8b:bf:fc:bf:e6:28:31:40:72:98: 33:56:75:30:c5:16:77:fa:39:f7:44:95:04:2b:52: 73:2d:71:69:b0:97:b0:79:2d:19:6f:ad:66:f3:37: 7f:23:ea:05:af:c0:75:6a:c9:c9:c3:bc:f7:3f:67: 4e:2f:17:d9:67:f5:e5:6d:f1:81:a3:90:79:4e:c2: f1:1c:e2:80:5c:15:b2:f7:f4:bf:21:3e:20:87:ea: 2d:91:15:b5:4c:39:2e:a5:2d:23:9f:1d:77:68:b9: 20:e6:d3:80:e0:0d:a1:05:73:53:62:87:f4:2a:31: c5:26:88:71:61:f8:ce:09:4c:a1:02:c6:c2:77:82: 94:1f:8a:65:83:7d:c3:63:46:69:5b:db:13:bb:96: c4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:58:CA:02:36:2E:37:33:47:41:E1:9E:57:5E:81:C0:A2:53:EB:2F X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/x1jKAjYuNzNHQeGeV16BwKJT6y8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.10.0/24 109.176.134.0/24 Signature Algorithm: sha256WithRSAEncryption 57:64:90:7f:4d:45:d1:15:b7:4a:1f:8d:82:de:6f:f9:88:c3: 91:40:d3:9f:c7:8a:32:2c:f9:c8:39:fb:04:b6:49:78:3b:39: 39:6d:fd:b5:49:37:c7:81:a0:11:68:3e:34:4a:dd:0a:2e:10: bd:27:88:95:c1:8e:43:1b:13:56:e8:18:c8:19:25:44:9c:1c: 95:47:6c:24:c5:c2:fe:15:9a:d0:7d:e7:3b:88:75:c8:4e:43: af:1e:c0:01:f2:59:d1:63:11:21:62:64:22:7d:0a:a8:09:b1: 1f:11:29:29:9a:fd:2f:41:ca:8c:a0:5c:21:fb:2c:3e:fd:9b: 26:2e:bb:b8:38:56:c9:e6:9b:b6:6f:33:62:82:a7:32:00:f9: 43:3b:a9:89:27:57:3e:33:d6:13:5f:02:41:ba:68:7a:07:3c: 6d:48:09:88:21:85:cb:aa:68:96:9e:ba:2a:97:04:a7:22:f9: 03:09:b1:d7:fc:0f:2e:a3:e7:b1:39:90:be:62:cf:f9:69:03: 05:41:23:32:b5:60:58:08:c0:88:87:a6:76:9d:66:61:2a:59: b0:8c:30:5e:6b:46:db:64:aa:5b:fa:20:e9:0a:e4:86:44:89: 4a:9b:44:91:13:de:36:4c:1c:10:2a:6d:0f:71:d3:c2:58:09: d3:a5:cb:d7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WpfRXnOxWIHoKfD6f9HRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzU4Y2EwMjM2MmUzNzMzNDc0MWUxOWU1NzVlODFjMGEyNTNlYjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8uSuPbovEkaX+USZofHUUac67+X EFdZJGG5kBZdA2ex6zDe9NeCTb2WvmS2CVaJyebhY2PN9Wg9WQO1HPV6Yo5hCZAv 77RGDpSeOWbyt/zLGu5Izl8vuuVvT3IPG7GvGJHoc8OdQiyrgoF7mIu//L/mKDFA cpgzVnUwxRZ3+jn3RJUEK1JzLXFpsJeweS0Zb61m8zd/I+oFr8B1asnJw7z3P2dO LxfZZ/XlbfGBo5B5TsLxHOKAXBWy9/S/IT4gh+otkRW1TDkupS0jnx13aLkg5tOA 4A2hBXNTYof0KjHFJohxYfjOCUyhAsbCd4KUH4plg33DY0ZpW9sTu5bE5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMdYygI2LjczR0HhnldegcCiU+svMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEveDFqS0FqWXVOek5IUWVHZVYxNkJ3S0pUNnk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbbAKAwQA bbCGMA0GCSqGSIb3DQEBCwUAA4IBAQBXZJB/TUXRFbdKH42C3m/5iMORQNOfx4oy LPnIOfsEtkl4Ozk5bf21STfHgaARaD40St0KLhC9J4iVwY5DGxNW6BjIGSVEnByV R2wkxcL+FZrQfec7iHXITkOvHsAB8lnRYxEhYmQifQqoCbEfESkpmv0vQcqMoFwh +yw+/ZsmLru4OFbJ5pu2bzNigqcyAPlDO6mJJ1c+M9YTXwJBumh6BzxtSAmIIYXL qmiWnroqlwSnIvkDCbHX/A8uo+exOZC+Ys/5aQMFQSMytWBYCMCIh6Z2nWZhKlmw jDBea0bbZKpb+iDpCuSGRIlKm0SRE942TBwQKm0PcdPCWAnTpcvX -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:21 2026 by rpki-client