This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/phc_rWomL_SloTsFG0Feb3oexB8.roa File: phc_rWomL_SloTsFG0Feb3oexB8.roa (raw, json) Hash identifier: vPwplBARp1RlzeoBKfqMgLEmEz1s7NkUpEh7QDk9mPM= Subject key identifier: A6:17:3F:AD:6A:26:2F:F4:A5:A1:3B:05:1B:41:5E:6F:7A:1E:C4:1F Certificate issuer: /CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Certificate serial: 019B7C8085A634FA508799151EEEA984D0EE Authority key identifier: C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/phc_rWomL_SloTsFG0Feb3oexB8.roa Signing time: Fri 02 Jan 2026 02:19:16 +0000 ROA not before: Fri 02 Jan 2026 02:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21005 IP address blocks: 176.122.210.0/23 maxlen: 23 176.122.210.0/24 maxlen: 24 176.122.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.mft rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:85:a6:34:fa:50:87:99:15:1e:ee:a9:84:d0:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4df0bd04aa843e68082f6dece0798732b6f8832 Validity Not Before: Jan 2 02:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6173fad6a262ff4a5a13b051b415e6f7a1ec41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:82:83:b3:ba:28:c8:0a:1b:97:a3:ea:55:0f: 9d:03:04:b7:fe:84:89:4e:e9:cf:b3:52:83:bd:ad: 71:99:3b:93:41:69:45:b5:27:ff:d4:fa:20:5d:77: 46:97:bc:50:68:8a:99:cf:fb:f6:ff:90:9b:c6:9c: bf:54:d6:e8:e2:94:e2:52:64:a4:40:47:01:ed:67: df:8d:c5:81:58:0f:ba:d5:60:5e:35:d1:fd:0a:bc: 5a:12:23:a6:f2:e1:4f:e3:a8:04:1a:fd:0d:39:4a: d6:6f:a2:5c:7f:81:c7:e9:eb:a7:fb:e3:cb:6b:ad: ed:0a:30:e2:3b:13:86:3f:ce:55:25:33:aa:74:b4: 95:56:19:62:75:72:47:f2:3e:c7:20:04:eb:52:99: 84:f0:2e:26:a3:a5:77:bb:46:08:c6:bd:41:05:10: 61:f9:ee:16:13:c6:cd:7b:80:5c:d4:dd:05:5e:29: f8:06:55:e0:49:c9:7a:32:92:c3:c7:41:a9:cc:47: 55:ed:bb:fa:8b:36:9a:1f:56:cb:74:93:39:90:35: 4a:78:a1:e2:20:98:56:bd:6b:b9:81:57:7a:7a:5b: ad:5a:12:18:0a:f6:9f:e4:2f:5f:b1:de:48:ea:5d: 48:7b:42:34:2d:10:e3:e1:57:71:32:3f:ad:1c:e2: 2f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:17:3F:AD:6A:26:2F:F4:A5:A1:3B:05:1B:41:5E:6F:7A:1E:C4:1F X509v3 Authority Key Identifier: keyid:C4:DF:0B:D0:4A:A8:43:E6:80:82:F6:DE:CE:07:98:73:2B:6F:88:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN8L0EqoQ-aAgvbezgeYcytviDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/phc_rWomL_SloTsFG0Feb3oexB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/95de21-0fbc-4d13-b6e0-cb9e1ed779ac/1/xN8L0EqoQ-aAgvbezgeYcytviDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.122.210.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:62:60:b1:b7:3f:6c:29:58:17:6c:88:ae:03:57:77:7f:08: 37:eb:1c:c2:09:02:44:cc:74:e9:79:bc:36:69:34:d8:10:15: b2:13:c0:da:9a:7f:be:11:34:db:7c:1e:54:34:ec:fa:86:bd: 73:2f:dd:32:8c:e2:2a:5e:06:ea:c5:95:e6:a6:84:d0:e2:f8: 9b:ff:78:65:bd:dc:db:3d:23:0c:c4:bf:a2:7b:ec:af:33:32: 8f:c0:a0:5a:ec:14:d5:ce:37:29:35:b7:10:d4:03:8b:bb:b2: 3d:6b:aa:e4:be:22:0a:1b:7e:c2:c1:97:88:79:bb:94:39:79: 51:89:bd:fe:2c:c0:7e:0f:96:29:d4:79:b8:30:ac:9e:d5:c4: 43:8a:fa:c7:b4:0e:cd:4f:17:cd:dc:8a:a7:c6:ee:80:51:b0: 24:5a:77:f7:ea:27:93:bb:1a:42:18:41:f2:66:bf:86:40:d4: ee:af:51:28:d4:91:10:8f:77:ab:a9:af:d1:56:08:e7:eb:74: 26:ea:e1:e8:39:c4:37:98:dd:92:cb:97:ec:54:bf:ac:69:87: 44:08:8b:99:9b:60:4e:86:98:12:30:d1:62:ba:54:bf:bb:1c: 9d:ce:5d:e9:a8:66:e2:7f:e5:f4:62:b3:04:8b:ef:4b:6a:9d: 58:76:80:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIWmNPpQh5kVHu6phNDuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZGYwYmQwNGFhODQzZTY4MDgyZjZkZWNlMDc5ODczMmI2 Zjg4MzIwHhcNMjYwMTAyMDIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjE3M2ZhZDZhMjYyZmY0YTVhMTNiMDUxYjQxNWU2ZjdhMWVjNDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYKDs7ooyAobl6PqVQ+dAwS3/oSJ TunPs1KDva1xmTuTQWlFtSf/1PogXXdGl7xQaIqZz/v2/5Cbxpy/VNbo4pTiUmSk QEcB7WffjcWBWA+61WBeNdH9CrxaEiOm8uFP46gEGv0NOUrWb6Jcf4HH6eun++PL a63tCjDiOxOGP85VJTOqdLSVVhlidXJH8j7HIATrUpmE8C4mo6V3u0YIxr1BBRBh +e4WE8bNe4Bc1N0FXin4BlXgScl6MpLDx0GpzEdV7bv6izaaH1bLdJM5kDVKeKHi IJhWvWu5gVd6elutWhIYCvaf5C9fsd5I6l1Ie0I0LRDj4VdxMj+tHOIvDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYXP61qJi/0paE7BRtBXm96HsQfMB8GA1UdIwQY MBaAFMTfC9BKqEPmgIL23s4HmHMrb4gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAt Y2I5ZTFlZDc3OWFjLzEvcGhjX3JXb21MX1Nsb1RzRkcwRmViM29leEI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85NWRlMjEtMGZiYy00ZDEzLWI2ZTAtY2I5ZTFlZDc3OWFj LzEveE44TDBFcW9RLWFBZ3ZiZXpnZVljeXR2aURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHrSMA0G CSqGSIb3DQEBCwUAA4IBAQBOYmCxtz9sKVgXbIiuA1d3fwg36xzCCQJEzHTpebw2 aTTYEBWyE8Damn++ETTbfB5UNOz6hr1zL90yjOIqXgbqxZXmpoTQ4vib/3hlvdzb PSMMxL+ie+yvMzKPwKBa7BTVzjcpNbcQ1AOLu7I9a6rkviIKG37CwZeIebuUOXlR ib3+LMB+D5Yp1Hm4MKye1cRDivrHtA7NTxfN3Iqnxu6AUbAkWnf36ieTuxpCGEHy Zr+GQNTur1Eo1JEQj3erqa/RVgjn63Qm6uHoOcQ3mN2Sy5fsVL+saYdECIuZm2BO hpgSMNFiulS/uxydzl3pqGbif+X0YrMEi+9Lap1YdoBZ -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:53 2026 by rpki-client