This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/1-MN9LsI_ApcBjUfCf7BZAYMymmI.roa File: 1-MN9LsI_ApcBjUfCf7BZAYMymmI.roa (raw, json) Hash identifier: bovj+Jqe6BlyPCl0kFgickpjRxIJvNEpYip/CdGpbQc= Subject key identifier: F8:C3:7D:2E:C2:3F:02:97:01:8D:47:C2:7F:B0:59:01:83:32:9A:62 Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Certificate serial: 019B7758A62AB3BE488F5C22B4DB1C2B3BDD Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/1-MN9LsI_ApcBjUfCf7BZAYMymmI.roa Signing time: Thu 01 Jan 2026 02:17:36 +0000 ROA not before: Thu 01 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398549 IP address blocks: 176.10.89.0/24 maxlen: 24 2a13:d8c1::/32 maxlen: 32 2a13:d8c2::/32 maxlen: 32 2a13:d8c3::/32 maxlen: 32 2a13:d8c3:5::/48 maxlen: 48 2a13:d8c3:7::/48 maxlen: 48 2a13:d8c5::/32 maxlen: 32 2a13:d8c6::/32 maxlen: 32 2a13:d8c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a6:2a:b3:be:48:8f:5c:22:b4:db:1c:2b:3b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8c37d2ec23f0297018d47c27fb0590183329a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cc:82:ba:c4:8f:f9:ca:4e:c1:df:a9:cb:93: 5a:4d:4b:41:ee:4e:5e:9e:7c:60:16:85:e6:77:c7: 42:9c:19:ae:d1:6c:61:41:17:ef:fe:a7:ac:23:63: 8f:ec:9d:bc:7b:f3:79:d5:86:83:1e:e7:3c:24:6b: 8e:2f:03:f9:99:2b:6d:e6:a5:c3:88:22:ef:f0:6b: 27:fa:fa:33:e8:50:1d:96:e5:34:0b:00:6c:38:33: 44:93:98:0e:35:96:fe:a8:6b:f8:0a:c0:60:86:a5: dc:97:a0:ee:05:c3:96:56:4e:b3:ac:e8:61:8a:42: 13:95:e9:17:09:58:c7:3d:d5:b4:f1:b9:9d:b5:8c: fc:8b:0b:c8:f6:df:1b:c9:0f:7f:e4:ca:2a:30:0a: 00:ec:02:24:f7:e1:6d:9d:39:68:56:a8:1d:c2:0c: 2e:1e:34:52:63:10:13:af:d9:9a:67:0c:80:6d:10: ed:99:53:e6:d4:09:02:73:10:77:55:ff:5a:c0:3f: f6:28:a5:5e:e0:c5:0d:5c:a2:1c:d7:37:4e:41:23: 23:1c:34:fc:61:25:30:51:2b:17:bb:f2:b6:c7:f9: 5e:7a:cf:b5:65:fe:26:65:96:e2:14:fc:fb:18:0e: 80:21:56:e6:e0:c5:13:d5:da:2a:96:3d:2a:40:ea: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C3:7D:2E:C2:3F:02:97:01:8D:47:C2:7F:B0:59:01:83:32:9A:62 X509v3 Authority Key Identifier: keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/1-MN9LsI_ApcBjUfCf7BZAYMymmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.10.89.0/24 IPv6: 2a13:d8c1::-2a13:d8c3:ffff:ffff:ffff:ffff:ffff:ffff 2a13:d8c5::-2a13:d8c7:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 45:d0:3d:0e:fc:bf:29:14:a2:5b:c5:db:6f:9a:ed:2b:95:bd: 98:a8:8d:a9:33:20:19:5a:51:c0:50:ad:2f:54:1c:56:43:29: f9:32:e5:74:0e:63:df:64:75:08:c5:4e:ca:42:c3:9f:41:3e: a8:96:f2:df:55:0b:cd:c6:ed:37:3c:d8:cf:84:2c:83:73:83: 57:cb:03:a7:66:4f:d9:52:bd:2c:1b:cc:37:f9:74:45:58:81: a8:48:77:4a:fe:88:d9:8d:4e:2f:90:75:3e:a9:b7:ba:fd:ab: e2:a2:4b:68:72:b3:5b:51:e1:fd:9f:b0:fa:1a:63:07:b1:73: 74:6e:12:26:b9:26:c0:34:ec:f9:1d:52:cd:a9:eb:ff:76:66: 71:f9:ef:e7:03:50:4f:99:40:87:06:e5:0b:b7:fc:56:3f:53: 2c:42:17:fe:3a:12:4f:a2:ce:ca:7e:5a:67:24:50:87:fc:9d: 0d:b9:dd:40:96:73:60:25:4c:16:04:40:f8:6d:90:29:34:a2: 1d:82:80:d3:c1:71:60:31:09:e2:b5:fe:26:e3:d2:f9:68:41: 52:45:2f:ac:9d:50:5f:9b:98:02:9e:f5:56:66:d5:fc:60:d3: da:24:f8:0e:bc:ca:ab:7d:37:d2:e9:24:87:d2:4e:5c:20:70: 64:15:0c:28 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt3WKYqs75Ij1witNscKzvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj NjgxMzcwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGMzN2QyZWMyM2YwMjk3MDE4ZDQ3YzI3ZmIwNTkwMTgzMzI5YTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0syCusSP+cpOwd+py5NaTUtB7k5e nnxgFoXmd8dCnBmu0WxhQRfv/qesI2OP7J28e/N51YaDHuc8JGuOLwP5mStt5qXD iCLv8Gsn+voz6FAdluU0CwBsODNEk5gONZb+qGv4CsBghqXcl6DuBcOWVk6zrOhh ikITlekXCVjHPdW08bmdtYz8iwvI9t8byQ9/5MoqMAoA7AIk9+FtnTloVqgdwgwu HjRSYxATr9maZwyAbRDtmVPm1AkCcxB3Vf9awD/2KKVe4MUNXKIc1zdOQSMjHDT8 YSUwUSsXu/K2x/lees+1Zf4mZZbiFPz7GA6AIVbm4MUT1doqlj0qQOqgnwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFPjDfS7CPwKXAY1Hwn+wWQGDMppiMB8GA1UdIwQY MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct OTBlYTM3MjljNTc0LzEvMS1NTjlMc0lfQXBjQmpVZkNmN0JaQVlNeW1tSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmQvM2MyMjdjLTQ3MDYtNDc4Ny05YTA3LTkwZWEzNzI5YzU3 NC8xL3h2VThBOUwwNV9CNmdlcVFQczd3SFdqR2dUYy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBHBggrBgEFBQcBBwEB/wQ4MDYwDAQCAAEwBgMEALAKWTAm BAIAAjAgMA4DBQAqE9jBAwUCKhPYwDAOAwUAKhPYxQMFAyoT2MAwDQYJKoZIhvcN AQELBQADggEBAEXQPQ78vykUolvF22+a7SuVvZiojakzIBlaUcBQrS9UHFZDKfky 5XQOY99kdQjFTspCw59BPqiW8t9VC83G7Tc82M+ELINzg1fLA6dmT9lSvSwbzDf5 dEVYgahId0r+iNmNTi+QdT6pt7r9q+KiS2hys1tR4f2fsPoaYwexc3RuEia5JsA0 7PkdUs2p6/92ZnH57+cDUE+ZQIcG5Qu3/FY/UyxCF/46Ek+izsp+WmckUIf8nQ25 3UCWc2AlTBYEQPhtkCk0oh2CgNPBcWAxCeK1/ibj0vloQVJFL6ydUF+bmAKe9VZm 1fxg09ok+A68yqt9N9LpJIfSTlwgcGQVDCg= -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:44 2026 by rpki-client