This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/i_OPbLZjNGN-ng4eZFgq10xKI3A.roa File: i_OPbLZjNGN-ng4eZFgq10xKI3A.roa (raw, json) Hash identifier: 2cnUyItzsSqni18M5wS3dShPIxCduQXQO/+heYm5xcI= Subject key identifier: 8B:F3:8F:6C:B6:63:34:63:7E:9E:0E:1E:64:58:2A:D7:4C:4A:23:70 Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Certificate serial: 019B7C12D48C7CC14356D42BDFAA922E0F25 Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/i_OPbLZjNGN-ng4eZFgq10xKI3A.roa Signing time: Fri 02 Jan 2026 00:19:27 +0000 ROA not before: Fri 02 Jan 2026 00:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215714 IP address blocks: 176.32.48.0/23 maxlen: 23 176.32.48.0/24 maxlen: 24 176.32.49.0/24 maxlen: 24 176.32.52.0/23 maxlen: 23 176.32.52.0/24 maxlen: 24 176.32.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.mft rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d4:8c:7c:c1:43:56:d4:2b:df:aa:92:2e:0f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8 Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bf38f6cb66334637e9e0e1e64582ad74c4a2370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:7d:18:90:b9:f4:7e:c6:ec:6d:95:09:68: dc:e6:41:94:df:9f:30:70:ed:70:45:1c:b4:a1:01: 67:79:59:71:f5:29:37:e6:33:f8:2e:d3:77:5a:04: b9:ea:8c:7a:c6:b2:8f:07:af:93:2f:a9:c3:d2:2d: 33:db:96:31:bf:08:eb:63:9f:0a:e6:14:e9:43:df: ba:cd:fb:e8:98:77:bf:38:5e:ef:bc:15:ad:30:f2: 43:b6:f0:06:32:94:17:1b:c6:28:6d:41:a4:3d:ab: f3:e8:6b:90:9d:58:61:8a:16:a8:66:f0:e2:68:c5: 5d:d9:69:9f:64:20:a9:83:48:cb:3c:ae:9c:f8:1e: b3:a1:af:f0:f7:5c:49:fc:9e:44:50:07:32:c2:ea: 8b:8e:9f:5e:2e:a8:36:e8:5f:96:11:df:3d:ea:34: 15:d3:60:db:38:a1:8f:19:d5:4f:5f:64:fa:27:45: 6f:04:91:57:68:9c:68:04:b0:ea:78:07:96:94:06: df:77:15:db:24:88:84:da:8d:f9:ec:51:84:7c:d1: 8a:4a:b3:e3:99:36:08:ab:d9:c5:c7:da:21:f3:72: c4:fc:70:a9:07:2a:6d:93:42:76:47:79:7e:69:c4: 4a:d8:e4:86:c1:9d:46:47:91:b7:36:5f:d7:9a:53: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F3:8F:6C:B6:63:34:63:7E:9E:0E:1E:64:58:2A:D7:4C:4A:23:70 X509v3 Authority Key Identifier: keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/i_OPbLZjNGN-ng4eZFgq10xKI3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.32.48.0/23 176.32.52.0/23 Signature Algorithm: sha256WithRSAEncryption 88:0e:e0:0b:bb:32:3b:59:07:97:75:ab:fe:54:0a:86:cb:57: fe:40:04:71:86:93:59:c4:c2:89:5a:65:f2:90:d0:bc:42:16: 64:c9:23:33:56:8f:3e:69:8a:29:38:c2:c0:80:1e:b4:c0:a1: 36:3a:4d:37:2f:7f:f1:a2:84:9b:15:d7:04:73:a6:81:53:0d: fb:38:06:06:70:59:c5:4e:8c:44:bb:32:f6:50:09:26:a0:b3: 06:51:12:8e:c7:93:d4:46:49:d1:bd:8c:f7:5f:c4:82:d5:77: cc:e9:3b:2d:3a:7a:4b:fb:4f:90:d2:12:b1:57:f3:2f:9d:11: 1b:74:e4:63:d9:fe:9d:de:1a:c6:12:09:07:36:0a:e9:44:e1: 47:59:4e:a0:71:46:78:a7:67:9e:db:e8:49:8d:f9:e5:96:3f: 03:06:5b:4b:8d:97:5c:79:69:47:2a:66:44:a4:73:a9:6a:16: 3c:0a:f6:61:fd:5c:bf:1b:7a:03:f2:9e:c5:fa:3d:21:59:67: d0:35:b6:a5:2e:35:ab:bf:33:a2:7a:6e:4d:65:a2:d6:d6:4f: f0:95:c2:c8:da:75:10:e5:42:37:41:16:46:1a:db:37:37:5d: 8e:a3:f3:4a:85:ae:6e:6f:1b:de:97:d2:27:f7:03:f5:e9:22: c0:c2:58:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EtSMfMFDVtQr36qSLg8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhYWI2MTExZTAwNGMyYTA0NGYxNjhiOGQyODI3M2NmNjc0 NGYzYTgwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmYzOGY2Y2I2NjMzNDYzN2U5ZTBlMWU2NDU4MmFkNzRjNGEyMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KR9GJC59H7G7G2VCWjc5kGU358w cO1wRRy0oQFneVlx9Sk35jP4LtN3WgS56ox6xrKPB6+TL6nD0i0z25YxvwjrY58K 5hTpQ9+6zfvomHe/OF7vvBWtMPJDtvAGMpQXG8YobUGkPavz6GuQnVhhihaoZvDi aMVd2WmfZCCpg0jLPK6c+B6zoa/w91xJ/J5EUAcywuqLjp9eLqg26F+WEd896jQV 02DbOKGPGdVPX2T6J0VvBJFXaJxoBLDqeAeWlAbfdxXbJIiE2o357FGEfNGKSrPj mTYIq9nFx9oh83LE/HCpByptk0J2R3l+acRK2OSGwZ1GR5G3Nl/XmlNeKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIvzj2y2YzRjfp4OHmRYKtdMSiNwMB8GA1UdIwQY MBaAFKqrYRHgBMKgRPFouNKCc89nRPOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDkt ODJlZGVkYTdmZTdhLzEvaV9PUGJMWmpOR04tbmc0ZVpGZ3ExMHhLSTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNGFkMGYtMGIzMC00MWZmLWE4ZDktODJlZGVkYTdmZTdh LzEvcXF0aEVlQUV3cUJFOFdpNDBvSnp6MmRFODZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsCAwAwQB sCA0MA0GCSqGSIb3DQEBCwUAA4IBAQCIDuALuzI7WQeXdav+VAqGy1f+QARxhpNZ xMKJWmXykNC8QhZkySMzVo8+aYopOMLAgB60wKE2Ok03L3/xooSbFdcEc6aBUw37 OAYGcFnFToxEuzL2UAkmoLMGURKOx5PURknRvYz3X8SC1XfM6TstOnpL+0+Q0hKx V/MvnREbdORj2f6d3hrGEgkHNgrpROFHWU6gcUZ4p2ee2+hJjfnllj8DBltLjZdc eWlHKmZEpHOpahY8CvZh/Vy/G3oD8p7F+j0hWWfQNbalLjWrvzOiem5NZaLW1k/w lcLI2nUQ5UI3QRZGGts3N12Oo/NKha5ubxvel9In9wP16SLAwlgs -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:57 2026 by rpki-client