This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/AOID4P2s4kmIpLeuQrmSX7BuoVk.roa File: AOID4P2s4kmIpLeuQrmSX7BuoVk.roa (raw, json) Hash identifier: u0WL6pN9csBi8Qv56wl5eyltstx+aXG/6DKlSguW1tY= Subject key identifier: 00:E2:03:E0:FD:AC:E2:49:88:A4:B7:AE:42:B9:92:5F:B0:6E:A1:59 Certificate issuer: /CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47 Certificate serial: 019B78A302E2E1738C2373022B1F7D5CBB66 Authority key identifier: 9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/AOID4P2s4kmIpLeuQrmSX7BuoVk.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44092 IP address blocks: 176.56.136.0/22 maxlen: 24 176.56.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.mft rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:02:e2:e1:73:8c:23:73:02:2b:1f:7d:5c:bb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5f0d912b5e747ae568d808a04029b4ebc66e47 Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00e203e0fdace24988a4b7ae42b9925fb06ea159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ff:bc:ac:fb:a3:42:ce:b7:de:ba:ae:01:d7: 0a:82:8c:63:91:0c:1a:f4:b0:8d:db:63:ce:e8:04: 21:79:c2:94:00:62:74:7d:81:b4:81:30:92:8c:10: 58:e1:e1:1d:c6:7c:22:1f:45:8d:8a:97:67:b7:89: 9e:e0:ed:66:c0:b9:dc:f8:e7:e7:3a:9d:2f:64:b0: ed:6e:09:3c:71:43:55:70:80:3b:c1:e4:4f:31:06: 65:4c:a0:ee:94:d8:10:79:07:d8:13:46:77:55:60: 5f:2f:5f:1e:20:45:0a:22:c8:b5:9e:c4:cb:34:7d: ee:99:68:85:f8:59:10:0e:11:0f:ed:bb:4c:4c:2c: ce:ed:38:10:db:a9:da:e7:18:e9:21:71:ba:88:d0: dd:a6:95:c2:16:6b:79:86:f6:3d:85:ff:30:a9:b0: 44:9c:9c:08:dc:94:d0:d8:b9:17:49:d8:00:28:7a: 3a:80:45:1c:09:01:2a:de:e2:34:2b:f0:b6:12:34: a8:77:33:69:e3:98:83:bf:8f:a3:36:93:8e:9c:a2: 48:49:f0:b7:71:d7:a7:7a:22:24:53:65:a5:2b:63: 3f:19:e3:64:cf:b7:75:53:14:a7:3b:3a:ae:f6:80: f5:63:1b:76:31:49:8d:87:5a:8b:92:61:a9:67:83: dc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E2:03:E0:FD:AC:E2:49:88:A4:B7:AE:42:B9:92:5F:B0:6E:A1:59 X509v3 Authority Key Identifier: keyid:9A:5F:0D:91:2B:5E:74:7A:E5:68:D8:08:A0:40:29:B4:EB:C6:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml8NkStedHrlaNgIoEAptOvGbkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/AOID4P2s4kmIpLeuQrmSX7BuoVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c533b2-ae9d-4470-b982-f540439a4ae2/1/ml8NkStedHrlaNgIoEAptOvGbkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.56.136.0/21 Signature Algorithm: sha256WithRSAEncryption b7:fa:28:a8:f5:de:7f:8f:c1:6d:80:2c:10:cd:09:0f:bc:42: 3d:d3:41:e3:61:84:2c:20:48:0b:f6:4f:37:34:a9:f0:bb:05: 83:46:83:d0:c1:46:98:59:1b:cb:6e:f5:52:37:f6:b1:b5:90: 0b:a9:35:91:00:5f:b1:cb:d1:f4:19:7d:1e:5a:ae:8b:21:7d: 8e:28:da:ea:48:8a:95:d2:d2:72:22:77:9b:ee:a4:81:cb:f9: b2:5c:e3:46:09:be:4b:11:f8:5f:8e:36:16:cb:d1:6b:db:99: 9b:b3:38:f4:ed:d6:29:f3:a4:db:27:34:d2:95:b6:db:23:f8: af:69:cb:9d:6a:a3:1e:ea:82:3c:5a:19:ba:4d:29:95:5d:d1: f3:31:30:db:3f:83:75:f9:07:fd:bf:89:d1:5f:f6:e8:32:04: e7:2a:f9:0e:7b:6b:be:3e:57:50:cc:af:ce:ee:91:43:e7:76: 72:d9:34:8e:24:18:50:43:df:c7:d7:2c:4d:1f:dd:f6:bd:3d: e9:83:24:de:2b:bb:be:d4:d3:76:e1:ff:94:81:7c:46:d4:e2: d4:ff:c1:f2:b8:9c:4d:dd:4e:e4:8f:86:44:0d:75:33:5c:ff: 0e:fc:fc:c8:d2:9f:dc:4f:fe:4a:8a:02:9f:53:0b:bb:29:2f: 13:d7:06:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owLi4XOMI3MCKx99XLtmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWYwZDkxMmI1ZTc0N2FlNTY4ZDgwOGEwNDAyOWI0ZWJj NjZlNDcwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGUyMDNlMGZkYWNlMjQ5ODhhNGI3YWU0MmI5OTI1ZmIwNmVhMTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP+8rPujQs633rquAdcKgoxjkQwa 9LCN22PO6AQhecKUAGJ0fYG0gTCSjBBY4eEdxnwiH0WNipdnt4me4O1mwLnc+Ofn Op0vZLDtbgk8cUNVcIA7weRPMQZlTKDulNgQeQfYE0Z3VWBfL18eIEUKIsi1nsTL NH3umWiF+FkQDhEP7btMTCzO7TgQ26na5xjpIXG6iNDdppXCFmt5hvY9hf8wqbBE nJwI3JTQ2LkXSdgAKHo6gEUcCQEq3uI0K/C2EjSodzNp45iDv4+jNpOOnKJISfC3 cdeneiIkU2WlK2M/GeNkz7d1UxSnOzqu9oD1Yxt2MUmNh1qLkmGpZ4PclwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFADiA+D9rOJJiKS3rkK5kl+wbqFZMB8GA1UdIwQY MBaAFJpfDZErXnR65WjYCKBAKbTrxm5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODIt ZjU0MDQzOWE0YWUyLzEvQU9JRDRQMnM0a21JcExldVFybVNYN0J1b1ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jNTMzYjItYWU5ZC00NDcwLWI5ODItZjU0MDQzOWE0YWUy LzEvbWw4TmtTdGVkSHJsYU5nSW9FQXB0T3ZHYmtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsDiIMA0G CSqGSIb3DQEBCwUAA4IBAQC3+iio9d5/j8FtgCwQzQkPvEI900HjYYQsIEgL9k83 NKnwuwWDRoPQwUaYWRvLbvVSN/axtZALqTWRAF+xy9H0GX0eWq6LIX2OKNrqSIqV 0tJyIneb7qSBy/myXONGCb5LEfhfjjYWy9Fr25mbszj07dYp86TbJzTSlbbbI/iv acudaqMe6oI8Whm6TSmVXdHzMTDbP4N1+Qf9v4nRX/boMgTnKvkOe2u+PldQzK/O 7pFD53Zy2TSOJBhQQ9/H1yxNH932vT3pgyTeK7u+1NN24f+UgXxG1OLU/8HyuJxN 3U7kj4ZEDXUzXP8O/PzI0p/cT/5KigKfUwu7KS8T1wYF -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:23 2026 by rpki-client