This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa File: aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa (raw, json) Hash identifier: Xqrg7NBvSV9yvVpUUwp51n6WbUWMsfHL/0GgkjRTj1U= Subject key identifier: 68:28:C4:57:E4:27:3A:4F:0B:38:5E:4C:CC:30:34:F9:49:05:B8:AE Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Certificate serial: 019B7C808662CC63769CCF5EBD6726ADB897 Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47796 IP address blocks: 176.122.210.0/24 maxlen: 24 176.122.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:86:62:cc:63:76:9c:cf:5e:bd:67:26:ad:b8:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6828c457e4273a4f0b385e4ccc3034f94905b8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:04:63:42:7f:a7:9b:a2:80:52:b7:23:6b: 1b:01:45:ee:8f:13:61:70:b2:5c:45:df:06:fb:9e: 90:07:77:18:c1:6f:67:38:eb:f1:46:19:6b:23:31: f5:c3:34:31:6f:a0:a1:56:52:db:32:46:35:93:32: 56:e0:12:60:1c:ad:55:48:73:68:a8:8d:2f:b9:79: 22:30:1d:83:96:49:c1:84:73:30:58:fe:ac:d0:85: 33:f0:67:ac:7a:9f:5f:3f:72:6f:da:49:26:23:9f: 92:bf:95:ff:d1:a7:ef:ad:a8:d5:c3:98:7e:f1:c3: 66:f3:36:d0:0a:81:1b:fc:64:3b:27:f2:16:c7:9f: 1d:4e:da:50:c8:b5:18:7c:fe:79:e0:e3:83:d0:77: ef:ab:77:69:60:10:2c:eb:41:62:ff:20:47:13:7c: e2:05:62:7f:e7:e7:36:0d:93:52:c1:15:4e:4d:ec: ad:e0:c9:6e:0a:a6:a5:b1:0d:4d:b6:29:d9:29:d7: 11:75:77:f9:74:b4:c9:68:fc:b6:0c:88:fc:a8:f9: 58:ce:be:cd:48:6f:52:26:c2:bf:57:4f:1b:83:41: 9d:c7:01:7f:92:89:26:0a:26:31:60:03:be:81:07: fe:56:17:2e:9d:d4:6d:4c:76:55:d2:55:ca:3d:83: 30:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:28:C4:57:E4:27:3A:4F:0B:38:5E:4C:CC:30:34:F9:49:05:B8:AE X509v3 Authority Key Identifier: keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/aCjEV-QnOk8LOF5MzDA0-UkFuK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.122.210.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:28:78:47:ee:5d:f1:4a:4b:4a:8c:46:fa:64:85:75:91:1c: 3c:b2:fe:e3:99:6e:59:2d:32:15:bc:04:ae:96:bc:58:77:e4: 9c:ff:8b:07:49:17:ae:ab:82:b6:d7:c7:b5:6d:9b:90:64:a6: 01:04:d2:6f:f8:8e:b3:6c:9b:fa:60:19:08:31:c2:20:7e:c1: f2:eb:76:17:e5:a7:8d:72:af:9b:eb:95:cc:de:c7:6f:a3:38: 5f:6d:82:59:23:b9:06:28:ce:27:f9:d9:ce:14:2e:6a:ef:ff: 18:76:f7:fa:6c:95:16:66:a3:86:b6:42:87:19:80:fa:c2:30: 57:83:b5:fb:1d:0b:c3:39:60:fe:1d:ad:19:f6:55:6a:1d:fa: 89:cb:0d:5f:c7:b4:d5:e3:fb:83:43:8c:89:f6:81:8e:a4:17: 63:24:53:a2:1a:b1:2b:67:ea:7f:70:9e:69:f9:30:73:7d:f4: c4:d1:46:54:f3:ea:39:c5:7a:e2:90:b9:70:7a:66:c7:98:d3: a5:11:5c:81:ff:48:c5:b2:23:02:cb:0d:08:74:fc:8d:1a:82: eb:3a:07:68:9b:01:bf:e9:b3:15:b7:de:ac:dd:d6:0e:29:0f: fd:a5:bc:f5:a2:44:c1:d9:90:cb:a5:d1:b0:41:00:10:8f:ee: b1:65:74:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIZizGN2nM9evWcmrbiXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2 Zjg4MzIwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODI4YzQ1N2U0MjczYTRmMGIzODVlNGNjYzMwMzRmOTQ5MDViOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOAEY0J/p5uigFK3I2sbAUXujxNh cLJcRd8G+56QB3cYwW9nOOvxRhlrIzH1wzQxb6ChVlLbMkY1kzJW4BJgHK1VSHNo qI0vuXkiMB2DlknBhHMwWP6s0IUz8Gesep9fP3Jv2kkmI5+Sv5X/0afvrajVw5h+ 8cNm8zbQCoEb/GQ7J/IWx58dTtpQyLUYfP554OOD0Hfvq3dpYBAs60Fi/yBHE3zi BWJ/5+c2DZNSwRVOTeyt4MluCqalsQ1NtinZKdcRdXf5dLTJaPy2DIj8qPlYzr7N SG9SJsK/V08bg0GdxwF/kokmCiYxYAO+gQf+VhcundRtTHZV0lXKPYMwCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgoxFfkJzpPCzheTMwwNPlJBbiuMB8GA1UdIwQY MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt Y2I5ZTFlZDc3OWFjLzEvYUNqRVYtUW5PazhMT0Y1TXpEQTAtVWtGdUs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHrSMA0G CSqGSIb3DQEBCwUAA4IBAQA7KHhH7l3xSktKjEb6ZIV1kRw8sv7jmW5ZLTIVvASu lrxYd+Sc/4sHSReuq4K218e1bZuQZKYBBNJv+I6zbJv6YBkIMcIgfsHy63YX5aeN cq+b65XM3sdvozhfbYJZI7kGKM4n+dnOFC5q7/8Ydvf6bJUWZqOGtkKHGYD6wjBX g7X7HQvDOWD+Ha0Z9lVqHfqJyw1fx7TV4/uDQ4yJ9oGOpBdjJFOiGrErZ+p/cJ5p +TBzffTE0UZU8+o5xXrikLlwembHmNOlEVyB/0jFsiMCyw0IdPyNGoLrOgdomwG/ 6bMVt96s3dYOKQ/9pbz1okTB2ZDLpdGwQQAQj+6xZXRL -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:41 2026 by rpki-client