This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z5v76pcF3V40nP6iA8ACgraDpBg.roa File: z5v76pcF3V40nP6iA8ACgraDpBg.roa (raw, json) Hash identifier: AIuIbpRHYwTpBHvNEIl1eKHm9wdAO7GeaoR48Bce+hY= Subject key identifier: CF:9B:FB:EA:97:05:DD:5E:34:9C:FE:A2:03:C0:02:82:B6:83:A4:18 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD14A3C34AFEE85D3AAEC05789259 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z5v76pcF3V40nP6iA8ACgraDpBg.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213660 IP address blocks: 109.176.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d1:4a:3c:34:af:ee:85:d3:aa:ec:05:78:92:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf9bfbea9705dd5e349cfea203c00282b683a418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:86:13:6a:e8:ab:ed:81:a7:b6:88:95:ee: cb:92:7f:cc:be:66:42:5d:7a:98:14:1f:bd:83:60: d2:ca:e2:0e:1c:a1:48:92:1e:ce:33:51:74:f7:96: 17:fc:76:73:5a:cd:0d:5d:09:e8:b8:4d:b6:f6:b6: 08:d4:04:4a:bf:77:09:aa:e3:0a:46:ba:67:0e:b9: f3:d6:af:8e:4b:9e:07:87:61:95:50:78:d9:78:51: 38:f0:be:5e:66:79:17:e1:1e:08:e3:09:d7:0a:5f: cc:7e:0a:83:c6:ec:a6:74:60:f1:0e:7e:41:c0:2c: 45:a7:ba:6a:6f:fc:66:93:81:71:46:b2:04:d2:79: 1d:68:88:94:37:14:63:ba:09:6d:78:53:a9:71:a0: 77:59:b7:fe:88:d5:7d:29:24:ec:8b:03:54:44:e8: e8:b9:52:97:59:59:11:e8:85:a7:43:00:f9:9c:fc: 08:fc:79:79:b6:bd:23:3b:45:a1:e8:e5:0d:b9:29: ca:cf:59:9f:c7:4b:65:8b:13:8b:9e:37:71:73:fc: c7:cc:6b:84:7c:87:96:54:b0:55:95:89:2f:c1:d9: 3a:54:24:be:b5:bd:96:d8:f7:4e:6b:cf:9d:b7:97: 63:ae:04:cd:09:9f:bc:4b:eb:3b:0c:ac:c1:19:24: 97:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9B:FB:EA:97:05:DD:5E:34:9C:FE:A2:03:C0:02:82:B6:83:A4:18 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z5v76pcF3V40nP6iA8ACgraDpBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.214.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:17:97:7b:8c:03:31:06:b4:52:6e:9a:73:fd:4f:69:28:88: b2:d5:de:2d:dc:ed:e0:f9:e4:c6:64:07:e6:12:ad:00:5c:4f: 6a:96:1d:02:c8:67:5e:b4:ad:6a:0f:3a:ce:28:e9:69:a2:41: 08:c4:dd:3b:7d:77:fd:24:ad:86:12:f6:e6:6c:98:4e:42:45: 75:20:e9:81:ad:b2:a1:b6:2b:c8:20:02:2e:e8:32:10:c4:6a: bd:a6:dd:dd:50:4f:d9:7b:5a:d8:70:40:29:78:d5:ad:6f:70: ca:a4:84:21:f2:ac:7f:2f:4a:55:72:56:0e:41:44:70:0d:97: 5a:86:0d:b2:4a:5e:ad:44:f5:9d:f5:1b:a3:66:b5:67:c3:34: 07:6b:fe:44:6e:c1:93:59:f2:82:d6:43:86:24:69:00:74:44: ca:be:68:a7:a0:cd:53:d5:f5:c2:46:c9:53:74:c1:94:6d:ae: e3:f5:8b:00:b1:ad:fc:28:0f:d8:c3:62:93:04:9b:30:10:47: 82:ea:53:98:8f:a0:1f:6f:c5:16:de:0e:0e:c9:05:ea:84:aa: 11:2a:02:60:9b:a6:07:25:e0:b0:48:a6:54:bb:0c:c1:e8:43: d0:83:50:85:3d:aa:20:76:d0:1d:63:21:ff:24:2c:b8:69:08: cc:b2:43:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtFKPDSv7oXTquwFeJJZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjliZmJlYTk3MDVkZDVlMzQ5Y2ZlYTIwM2MwMDI4MmI2ODNhNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+KGE2roq+2Bp7aIle7Lkn/MvmZC XXqYFB+9g2DSyuIOHKFIkh7OM1F095YX/HZzWs0NXQnouE229rYI1ARKv3cJquMK RrpnDrnz1q+OS54Hh2GVUHjZeFE48L5eZnkX4R4I4wnXCl/MfgqDxuymdGDxDn5B wCxFp7pqb/xmk4FxRrIE0nkdaIiUNxRjuglteFOpcaB3Wbf+iNV9KSTsiwNUROjo uVKXWVkR6IWnQwD5nPwI/Hl5tr0jO0Wh6OUNuSnKz1mfx0tlixOLnjdxc/zHzGuE fIeWVLBVlYkvwdk6VCS+tb2W2PdOa8+dt5djrgTNCZ+8S+s7DKzBGSSXKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM+b++qXBd1eNJz+ogPAAoK2g6QYMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvejV2NzZwY0YzVjQwblA2aUE4QUNncmFEcEJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbDWMA0G CSqGSIb3DQEBCwUAA4IBAQCfF5d7jAMxBrRSbppz/U9pKIiy1d4t3O3g+eTGZAfm Eq0AXE9qlh0CyGdetK1qDzrOKOlpokEIxN07fXf9JK2GEvbmbJhOQkV1IOmBrbKh tivIIAIu6DIQxGq9pt3dUE/Ze1rYcEApeNWtb3DKpIQh8qx/L0pVclYOQURwDZda hg2ySl6tRPWd9RujZrVnwzQHa/5EbsGTWfKC1kOGJGkAdETKvminoM1T1fXCRslT dMGUba7j9YsAsa38KA/Yw2KTBJswEEeC6lOYj6Afb8UW3g4OyQXqhKoRKgJgm6YH JeCwSKZUuwzB6EPQg1CFPaogdtAdYyH/JCy4aQjMskMP -----END CERTIFICATE-----Generated at Sun Jan 25 08:49:33 2026 by rpki-client