This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/M9SkjzKgp0C1w36F_3V-rwxzPrM.roa File: M9SkjzKgp0C1w36F_3V-rwxzPrM.roa (raw, json) Hash identifier: NOgmWBFIBR8qfeBLcrBHcBrGBBxychhI5zlw8nvAaeE= Subject key identifier: 33:D4:A4:8F:32:A0:A7:40:B5:C3:7E:85:FF:75:7E:AF:0C:73:3E:B3 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6CC224641BCDB951296836BD3ECC6 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/M9SkjzKgp0C1w36F_3V-rwxzPrM.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207300 IP address blocks: 164.215.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cc:22:46:41:bc:db:95:12:96:83:6b:d3:ec:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33d4a48f32a0a740b5c37e85ff757eaf0c733eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:14:5b:40:9a:db:61:36:40:7f:13:95:ac:73: 08:e2:34:fe:ba:6d:a6:49:2b:40:ab:03:9c:23:40: c6:94:b4:c5:ba:8e:54:87:57:52:33:31:43:d5:96: 61:9a:8b:5c:9c:38:b2:5b:6a:7b:62:67:98:c7:ab: 12:f6:07:a6:24:a6:f2:75:1b:8c:d3:3f:6c:0e:47: 72:79:cf:b8:3a:5b:c1:b7:09:30:d8:82:db:26:09: 0a:39:43:3b:e7:6a:ff:5c:36:d0:9f:13:37:5a:a5: eb:18:ec:79:43:33:2e:36:c2:07:ea:12:2f:fc:92: 97:d1:18:29:60:6b:ae:9a:fa:dc:07:a8:63:10:f3: a5:91:69:64:e4:f4:6f:c3:c6:b6:06:20:f4:ae:ab: c1:a2:7f:3a:db:cd:44:b4:cd:ed:ef:7f:59:14:ac: ba:3f:59:04:39:52:87:e0:74:fb:3a:60:ba:c5:d3: f9:72:67:c2:cc:34:ac:e9:99:ce:d9:53:42:f3:7e: d4:b0:8b:f2:72:43:8a:29:77:e3:bf:3f:0d:43:8f: db:47:10:e3:71:ba:f7:f8:1f:51:e1:3a:d8:88:10: cb:ae:af:e4:48:34:ad:97:0f:dd:d3:7f:5e:01:03: cd:10:bd:f1:df:da:49:47:64:38:1b:1d:38:ef:6f: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D4:A4:8F:32:A0:A7:40:B5:C3:7E:85:FF:75:7E:AF:0C:73:3E:B3 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/M9SkjzKgp0C1w36F_3V-rwxzPrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.215.102.0/24 Signature Algorithm: sha256WithRSAEncryption c9:b7:23:29:b7:34:30:65:a2:11:2b:7c:67:50:30:f1:72:8d: e8:c3:8e:07:2c:d7:98:3d:bd:db:f3:ed:8c:b9:a7:61:87:05: 40:98:17:62:e6:d2:74:0f:99:fd:a7:50:1c:f1:11:4e:81:53: ad:44:a8:3e:41:cc:37:ff:f2:39:bb:ad:60:82:31:8b:0e:9c: f4:f2:91:51:02:9a:cf:ee:34:da:fd:fd:d9:7d:87:36:1e:8e: 1b:ba:da:cc:56:4f:96:1c:83:48:fc:5c:b0:db:5a:fe:ab:52: f8:dd:25:51:b2:3d:b0:d4:1f:6e:ae:13:7a:de:2a:e2:f3:0e: 7a:06:0d:b9:27:4c:a3:8f:73:fb:d3:d8:c9:f0:a8:32:3e:9d: a5:4c:d1:37:b1:65:e4:de:8e:30:4f:3a:a4:e9:d9:0c:89:b2: 3f:98:31:3a:94:17:16:ad:48:3e:4e:93:e3:3c:27:ca:d3:b4: a2:af:7e:ff:02:30:47:85:e1:72:f8:20:51:0e:da:80:46:07: 8e:bb:4c:2c:38:e5:c2:38:62:b6:c8:c7:11:9d:36:a2:1f:30: d8:28:36:4a:d3:fd:7b:e4:7c:fe:8a:2e:1b:23:97:b5:47:3d: 46:a7:fc:c1:86:ec:db:e0:de:03:2b:e6:72:18:c0:86:57:75: 47:a6:e1:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xswiRkG825USloNr0+zGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2Q0YTQ4ZjMyYTBhNzQwYjVjMzdlODVmZjc1N2VhZjBjNzMzZWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRRbQJrbYTZAfxOVrHMI4jT+um2m SStAqwOcI0DGlLTFuo5Uh1dSMzFD1ZZhmotcnDiyW2p7YmeYx6sS9gemJKbydRuM 0z9sDkdyec+4OlvBtwkw2ILbJgkKOUM752r/XDbQnxM3WqXrGOx5QzMuNsIH6hIv /JKX0RgpYGuumvrcB6hjEPOlkWlk5PRvw8a2BiD0rqvBon86281EtM3t739ZFKy6 P1kEOVKH4HT7OmC6xdP5cmfCzDSs6ZnO2VNC837UsIvyckOKKXfjvz8NQ4/bRxDj cbr3+B9R4TrYiBDLrq/kSDStlw/d039eAQPNEL3x39pJR2Q4Gx0472/0VQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPUpI8yoKdAtcN+hf91fq8Mcz6zMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvTTlTa2p6S2dwMEMxdzM2Rl8zVi1yd3h6UHJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApNdmMA0G CSqGSIb3DQEBCwUAA4IBAQDJtyMptzQwZaIRK3xnUDDxco3ow44HLNeYPb3b8+2M uadhhwVAmBdi5tJ0D5n9p1Ac8RFOgVOtRKg+Qcw3//I5u61ggjGLDpz08pFRAprP 7jTa/f3ZfYc2Ho4butrMVk+WHINI/Fyw21r+q1L43SVRsj2w1B9urhN63iri8w56 Bg25J0yjj3P709jJ8KgyPp2lTNE3sWXk3o4wTzqk6dkMibI/mDE6lBcWrUg+TpPj PCfK07Sir37/AjBHheFy+CBRDtqARgeOu0wsOOXCOGK2yMcRnTaiHzDYKDZK0/17 5Hz+ii4bI5e1Rz1Gp/zBhuzb4N4DK+ZyGMCGV3VHpuG9 -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:00 2026 by rpki-client