This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/rM2i7X4i-xTENkByKDGS_394QYY.roa File: rM2i7X4i-xTENkByKDGS_394QYY.roa (raw, json) Hash identifier: jSokmetv8aQ+53gcEJLpoqZU+R8uF/gkAzUpvjkIlBM= Subject key identifier: AC:CD:A2:ED:7E:22:FB:14:C4:36:40:72:28:31:92:FF:7F:78:41:86 Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Certificate serial: 019B76EAB7E94EDDDF455507FC91AF237618 Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/rM2i7X4i-xTENkByKDGS_394QYY.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209806 IP address blocks: 176.120.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b7:e9:4e:dd:df:45:55:07:fc:91:af:23:76:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=accda2ed7e22fb14c4364072283192ff7f784186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9d:a0:fb:be:b6:77:2e:d9:7e:7f:55:20:6d: 06:e2:16:b5:06:13:96:57:dd:71:59:0f:8f:ad:87: e5:ae:6b:10:79:60:6d:b6:76:d1:79:ba:98:24:3d: 38:24:73:71:ef:f2:d2:ad:ae:f8:13:41:b5:22:58: b7:95:e7:0f:8a:2d:86:53:55:2c:93:12:2d:00:c6: 0b:fa:40:c3:7b:cc:72:fa:09:0c:0e:85:40:e9:46: 0d:45:7a:0d:57:c0:49:02:b3:97:ed:2f:66:b8:81: 7a:68:e1:83:d3:68:79:5c:8b:42:eb:0c:66:60:1b: a7:94:f6:d2:29:fe:db:92:b6:a1:f9:50:01:e3:6a: be:e4:57:55:05:8b:22:61:d5:3d:63:fd:f7:66:b1: ce:85:bd:80:8f:47:c3:24:af:08:16:25:77:62:92: d9:41:44:b3:20:fd:a5:e3:8e:f6:eb:79:2d:f0:4b: 7d:08:21:60:b0:5d:af:ab:dc:7f:ed:aa:3f:5c:ba: a5:4e:8f:10:83:99:8c:b6:20:36:a0:c8:41:3b:78: 4f:0d:4f:32:11:d6:a9:1a:44:02:cd:4e:9c:b2:11: c2:bf:97:17:cb:a2:ff:a7:aa:48:2d:a1:4d:ff:96: 34:f8:ae:6b:f3:2f:b6:0b:26:f4:26:ca:f4:61:da: 8b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CD:A2:ED:7E:22:FB:14:C4:36:40:72:28:31:92:FF:7F:78:41:86 X509v3 Authority Key Identifier: keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/rM2i7X4i-xTENkByKDGS_394QYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.120.99.0/24 Signature Algorithm: sha256WithRSAEncryption a3:90:7c:ee:11:af:a4:32:4d:86:b4:ba:8a:50:7a:cd:a2:67: a2:42:a2:3b:a5:32:87:d2:e1:5f:22:0a:a5:7d:b3:e9:00:55: dc:aa:76:13:c3:f6:37:f1:b6:01:70:63:b4:88:b9:76:9b:ff: 43:58:b2:7d:35:79:1e:2b:64:01:73:61:e6:53:cc:de:df:58: ca:86:3f:7d:cf:84:c0:96:04:0d:26:6b:2c:a1:48:12:42:b7: 4a:e3:9d:fe:ef:35:38:03:36:21:f1:81:e3:62:b9:b3:f1:45: 28:d1:59:be:70:fa:d4:7f:e4:19:4b:1d:fa:94:70:e3:ba:6b: 61:81:a7:d2:85:cf:8b:b0:62:33:01:b3:9e:62:3f:06:03:ec: 0f:bc:86:4e:6d:c2:d8:64:50:dc:7f:7d:0a:1c:d7:3f:b3:a4: 52:43:f6:eb:21:a5:d4:2e:c3:15:c0:a2:34:63:8d:79:c6:1f: 57:e9:35:5c:1b:57:ba:17:f4:ad:e6:55:a2:ee:ae:cc:da:ea: c4:91:e7:6c:15:97:b2:cd:3b:e2:38:3f:47:20:70:1e:aa:0f: eb:3d:92:00:ff:d0:cc:fd:a2:f2:0d:24:82:da:cb:28:83:7c: 45:af:e3:dd:56:c0:00:73:b9:e6:dd:bc:ae:89:ce:e2:cf:ee: f2:fe:5e:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26rfpTt3fRVUH/JGvI3YYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmODEwY2MzZmQyMjgzMzhkOWI5Njk3MjVkOTViYjMzYzRl NjVhNDgwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2NkYTJlZDdlMjJmYjE0YzQzNjQwNzIyODMxOTJmZjdmNzg0MTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ2g+762dy7Zfn9VIG0G4ha1BhOW V91xWQ+PrYflrmsQeWBttnbRebqYJD04JHNx7/LSra74E0G1Ili3lecPii2GU1Us kxItAMYL+kDDe8xy+gkMDoVA6UYNRXoNV8BJArOX7S9muIF6aOGD02h5XItC6wxm YBunlPbSKf7bkrah+VAB42q+5FdVBYsiYdU9Y/33ZrHOhb2Aj0fDJK8IFiV3YpLZ QUSzIP2l447263kt8Et9CCFgsF2vq9x/7ao/XLqlTo8Qg5mMtiA2oMhBO3hPDU8y EdapGkQCzU6cshHCv5cXy6L/p6pILaFN/5Y0+K5r8y+2Cyb0Jsr0YdqLEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKzNou1+IvsUxDZAcigxkv9/eEGGMB8GA1UdIwQY MBaAFB+BDMP9IoM42blpcl2VuzPE5lpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUt ZjljMTgwYmE0ODAxLzEvck0yaTdYNGkteFRFTmtCeUtER1NfMzk0UVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8wZjA5MjctYzI5Yi00Njk4LTg1OWUtZjljMTgwYmE0ODAx LzEvSDRFTXdfMGlnempadVdseVhaVzdNOFRtV2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHhjMA0G CSqGSIb3DQEBCwUAA4IBAQCjkHzuEa+kMk2GtLqKUHrNomeiQqI7pTKH0uFfIgql fbPpAFXcqnYTw/Y38bYBcGO0iLl2m/9DWLJ9NXkeK2QBc2HmU8ze31jKhj99z4TA lgQNJmssoUgSQrdK453+7zU4AzYh8YHjYrmz8UUo0Vm+cPrUf+QZSx36lHDjumth gafShc+LsGIzAbOeYj8GA+wPvIZObcLYZFDcf30KHNc/s6RSQ/brIaXULsMVwKI0 Y415xh9X6TVcG1e6F/St5lWi7q7M2urEkedsFZeyzTviOD9HIHAeqg/rPZIA/9DM /aLyDSSC2ssog3xFr+PdVsAAc7nm3byuic7iz+7y/l4o -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:37 2026 by rpki-client