This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zAJRCPndZBhcPWtxGeeGEkKz0nM.roa File: zAJRCPndZBhcPWtxGeeGEkKz0nM.roa (raw, json) Hash identifier: bif/cb47ldwNSEohbgxk3TrJnZVYjaiLGqmi3C8evog= Subject key identifier: CC:02:51:08:F9:DD:64:18:5C:3D:6B:71:19:E7:86:12:42:B3:D2:73 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ABBFD20C171CFC8A5E1C3BBFCD809 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zAJRCPndZBhcPWtxGeeGEkKz0nM.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204770 IP address blocks: 109.176.236.0/24 maxlen: 24 109.176.237.0/24 maxlen: 24 109.176.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bb:fd:20:c1:71:cf:c8:a5:e1:c3:bb:fc:d8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc025108f9dd64185c3d6b7119e7861242b3d273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dc:b3:b6:1a:32:79:d5:e3:39:5d:ce:e7:5d: 59:a5:61:73:2a:dc:3a:fd:f4:79:d1:ca:42:5e:02: 2e:e8:91:5c:50:0f:6b:a3:1e:f1:b1:87:dc:9e:60: df:d7:e5:8c:b6:8b:c4:c4:48:1b:20:39:b3:7f:89: 73:36:bb:25:2f:ea:0c:f3:18:06:92:4e:45:7a:3a: 2b:ed:03:32:66:b2:40:09:d0:f9:c3:ec:78:b4:3e: de:88:a8:25:73:2e:34:14:7e:4d:2a:e6:59:a6:13: 59:74:fc:f6:ee:0f:8c:5b:44:d9:00:d5:31:be:f4: ac:ee:3a:30:2a:b0:87:e7:4f:28:dd:e0:78:3f:61: 01:5b:6c:a0:e6:f4:a9:fb:a8:0f:f3:cf:e3:a7:de: 60:6b:2c:11:de:15:7b:ae:4e:6d:0c:6e:79:85:bf: 16:95:85:a3:a6:8f:0c:f2:21:6d:0a:fb:f7:35:53: f6:ae:06:89:15:34:cb:ac:96:5f:de:85:c7:2f:1e: b3:40:22:59:0c:5f:b2:7b:2f:45:2d:62:9e:39:8d: 31:15:fc:4e:e4:1e:75:8b:73:e4:54:cd:85:86:5c: cb:d8:a3:df:cc:31:f2:dd:87:e9:2d:67:28:c8:52: 79:98:71:9a:49:47:e8:8d:78:e0:c3:49:8c:c9:4d: 3e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:02:51:08:F9:DD:64:18:5C:3D:6B:71:19:E7:86:12:42:B3:D2:73 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/zAJRCPndZBhcPWtxGeeGEkKz0nM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.236.0-109.176.238.255 Signature Algorithm: sha256WithRSAEncryption 7e:a6:bf:9c:ed:25:af:32:04:cd:c7:78:8d:0a:db:bc:1d:d8: 3d:c3:a8:89:f0:d6:9b:6f:c3:2a:ef:bc:2e:b6:b5:07:7f:b0: 31:e0:b1:6c:fd:e8:c2:ba:4b:ab:c0:12:b9:40:da:67:63:e1: 8f:f3:cc:95:24:d4:10:53:05:6c:91:ed:7d:ef:55:0c:c3:1f: d3:67:72:93:ea:06:ed:0f:37:75:71:be:23:97:9d:30:46:d4: 41:80:66:86:ff:f8:99:9d:91:b4:38:d1:4e:f4:b1:ea:ea:2c: fa:75:92:dd:9e:42:f4:20:c3:ff:f3:78:e6:a7:ed:05:13:76: b0:3f:5d:8a:b3:87:b7:fb:bf:17:1f:32:db:12:7f:7a:2b:40: 7d:47:e9:9b:64:21:8d:28:88:b9:e6:77:0a:2f:e7:29:28:0e: b3:99:84:78:c6:96:27:3e:7d:20:29:bd:4a:c4:b6:1b:fb:1a: 5b:92:b2:7a:e2:9d:16:85:f9:0f:0c:ba:ad:7a:02:dc:42:c6: 71:61:b1:74:ea:f9:ac:20:24:e1:ab:a7:ca:31:b5:28:63:90: fa:2f:0e:b9:c9:cc:12:ca:6e:ef:08:9c:07:ac:33:97:0d:58: 51:3b:01:94:fe:df:fa:36:c9:ea:4a:ae:e2:a6:da:23:d9:48: 4c:c1:e5:cf -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6Wrv9IMFxz8il4cO7/NgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzAyNTEwOGY5ZGQ2NDE4NWMzZDZiNzExOWU3ODYxMjQyYjNkMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAityzthoyedXjOV3O511ZpWFzKtw6 /fR50cpCXgIu6JFcUA9rox7xsYfcnmDf1+WMtovExEgbIDmzf4lzNrslL+oM8xgG kk5Fejor7QMyZrJACdD5w+x4tD7eiKglcy40FH5NKuZZphNZdPz27g+MW0TZANUx vvSs7jowKrCH508o3eB4P2EBW2yg5vSp+6gP88/jp95gaywR3hV7rk5tDG55hb8W lYWjpo8M8iFtCvv3NVP2rgaJFTTLrJZf3oXHLx6zQCJZDF+yey9FLWKeOY0xFfxO 5B51i3PkVM2FhlzL2KPfzDHy3YfpLWcoyFJ5mHGaSUfojXjgw0mMyU0+VQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMwCUQj53WQYXD1rcRnnhhJCs9JzMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvekFKUkNQbmRaQmhjUFd0eEdlZUdFa0t6MG5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJtsOwD BABtsO4wDQYJKoZIhvcNAQELBQADggEBAH6mv5ztJa8yBM3HeI0K27wd2D3DqInw 1ptvwyrvvC62tQd/sDHgsWz96MK6S6vAErlA2mdj4Y/zzJUk1BBTBWyR7X3vVQzD H9NncpPqBu0PN3VxviOXnTBG1EGAZob/+JmdkbQ40U70serqLPp1kt2eQvQgw//z eOan7QUTdrA/XYqzh7f7vxcfMtsSf3orQH1H6ZtkIY0oiLnmdwov5ykoDrOZhHjG lic+fSApvUrEthv7GluSsnrinRaF+Q8Muq16AtxCxnFhsXTq+awgJOGrp8oxtShj kPovDrnJzBLKbu8InAesM5cNWFE7AZT+3/o2yepKruKm2iPZSEzB5c8= -----END CERTIFICATE-----Generated at Sun Jan 25 08:51:03 2026 by rpki-client