This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa File: Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa (raw, json) Hash identifier: MobBhVq4hyLxQ20aOszGD0QH9pUdXdw1af7wh+y1S9w= Subject key identifier: 23:1D:60:B4:9A:90:2A:FD:99:FE:99:36:85:38:AA:0D:CF:AC:CB:73 Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 019B76EAB4E887C3AAF7EA070AE9FA6C9F4F Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa Signing time: Thu 01 Jan 2026 00:17:31 +0000 ROA not before: Thu 01 Jan 2026 00:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15461 IP address blocks: 176.120.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b4:e8:87:c3:aa:f7:ea:07:0a:e9:fa:6c:9f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Jan 1 00:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=231d60b49a902afd99fe99368538aa0dcfaccb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a7:cf:57:7d:f7:09:35:23:f4:a8:7c:f6:f7: cd:2d:fd:f4:15:81:01:2a:d6:10:e2:94:45:9e:c1: 0b:de:96:0a:f8:a7:cb:bb:49:72:8f:fb:01:75:57: 9e:24:be:40:e6:8a:ec:7a:da:ea:2a:ed:0c:f3:bc: 16:b8:87:64:b2:2b:07:79:82:dc:79:63:ac:70:e7: d2:56:40:d3:cb:de:3d:f6:60:26:77:49:66:0a:2b: 5f:90:87:43:55:a2:d6:37:21:68:8c:3c:93:0f:ef: 7b:a5:e7:ce:a6:fd:f8:3b:d3:0f:79:eb:ce:55:9f: 89:df:ce:ca:30:35:00:79:0d:22:ef:48:7c:c9:9d: bc:a7:e6:c1:e2:34:44:50:51:72:8a:11:40:f0:05: 70:c4:6a:da:b0:22:63:00:51:4a:c8:a5:df:ce:9f: bf:8c:c9:23:01:40:14:c8:93:01:be:35:7e:0b:f7: 3a:75:58:22:e4:f5:3e:45:14:f0:b1:87:7d:8f:8c: 01:18:e9:31:4c:03:d0:ee:92:ee:58:d1:56:b9:dd: d1:96:65:1a:af:bf:25:44:68:95:7e:06:ec:42:e4: 45:a9:b3:00:dc:da:1d:fc:40:f6:82:ad:be:82:7e: 25:8e:cf:2f:77:62:29:f3:2f:73:0a:f9:a0:62:f7: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1D:60:B4:9A:90:2A:FD:99:FE:99:36:85:38:AA:0D:CF:AC:CB:73 X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/Ix1gtJqQKv2Z_pk2hTiqDc-sy3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.120.102.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:8e:90:7c:42:eb:6d:e2:f7:f7:32:2a:08:e1:62:3b:97:14: 67:ad:7d:68:2f:eb:32:f4:f4:84:92:34:f2:94:c3:a6:82:d9: bb:69:6e:e7:68:92:6a:11:d6:77:b3:52:0c:c3:c9:53:bd:25: 5b:cc:0a:bc:25:76:f8:42:27:59:d4:d2:e4:05:b5:92:93:65: 71:7b:ff:83:60:c6:b3:d9:25:a9:56:5c:8d:c9:1b:71:e2:a6: 5f:89:65:27:a5:66:35:da:1e:48:b2:3b:ef:9b:96:94:df:e2: 82:25:47:23:80:4f:86:a8:e7:b8:5b:35:ac:b6:d8:bf:f0:da: e7:ac:25:fe:41:52:0f:7d:92:7d:02:b0:41:bd:78:92:67:53: 1d:76:fc:42:f4:fc:5a:69:5c:20:31:ff:a7:c3:3b:8c:f9:0e: bc:ea:31:c7:d7:3c:8d:3b:6f:e5:11:09:9d:54:56:1c:bd:16: c3:f8:83:b0:03:82:0a:01:9c:b1:75:66:07:47:59:03:8e:70: 02:57:5a:50:f1:d4:4c:c2:65:a8:17:ac:53:a7:87:3f:d9:f7: 21:a3:3d:e7:7a:a2:3c:69:2d:c2:88:78:24:6b:77:a0:cb:31: bf:5d:4d:30:12:03:d8:e4:c1:a6:00:06:d6:7f:66:2e:3f:b4: 74:9f:29:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rToh8Oq9+oHCun6bJ9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjYwMTAxMDAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzFkNjBiNDlhOTAyYWZkOTlmZTk5MzY4NTM4YWEwZGNmYWNjYjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqfPV333CTUj9Kh89vfNLf30FYEB KtYQ4pRFnsEL3pYK+KfLu0lyj/sBdVeeJL5A5orsetrqKu0M87wWuIdksisHeYLc eWOscOfSVkDTy9499mAmd0lmCitfkIdDVaLWNyFojDyTD+97pefOpv34O9MPeevO VZ+J387KMDUAeQ0i70h8yZ28p+bB4jREUFFyihFA8AVwxGrasCJjAFFKyKXfzp+/ jMkjAUAUyJMBvjV+C/c6dVgi5PU+RRTwsYd9j4wBGOkxTAPQ7pLuWNFWud3RlmUa r78lRGiVfgbsQuRFqbMA3Nod/ED2gq2+gn4ljs8vd2Ip8y9zCvmgYvfvowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCMdYLSakCr9mf6ZNoU4qg3PrMtzMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvSXgxZ3RKcVFLdjJaX3BrMmhUaXFEYy1zeTNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHhmMA0G CSqGSIb3DQEBCwUAA4IBAQCdjpB8Qutt4vf3MioI4WI7lxRnrX1oL+sy9PSEkjTy lMOmgtm7aW7naJJqEdZ3s1IMw8lTvSVbzAq8JXb4QidZ1NLkBbWSk2Vxe/+DYMaz 2SWpVlyNyRtx4qZfiWUnpWY12h5Isjvvm5aU3+KCJUcjgE+GqOe4WzWstti/8Nrn rCX+QVIPfZJ9ArBBvXiSZ1MddvxC9PxaaVwgMf+nwzuM+Q686jHH1zyNO2/lEQmd VFYcvRbD+IOwA4IKAZyxdWYHR1kDjnACV1pQ8dRMwmWoF6xTp4c/2fchoz3neqI8 aS3CiHgka3egyzG/XU0wEgPY5MGmAAbWf2YuP7R0nylE -----END CERTIFICATE-----Generated at Sun Jan 25 16:58:58 2026 by rpki-client