This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/814WTzXBXOIciV517t_FSJpheFU.roa File: 814WTzXBXOIciV517t_FSJpheFU.roa (raw, json) Hash identifier: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE= Subject key identifier: F3:5E:16:4F:35:C1:5C:E2:1C:89:5E:75:EE:DF:C5:48:9A:61:78:55 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019B7D5CA7187746286AFF4C3B8C768D2345 Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/814WTzXBXOIciV517t_FSJpheFU.roa Signing time: Fri 02 Jan 2026 06:19:42 +0000 ROA not before: Fri 02 Jan 2026 06:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39838 IP address blocks: 176.57.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:a7:18:77:46:28:6a:ff:4c:3b:8c:76:8d:23:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Jan 2 06:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f35e164f35c15ce21c895e75eedfc5489a617855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:b7:9a:c2:bc:20:71:0b:d5:96:b7:7d:63: da:7c:53:37:33:44:98:c6:f9:91:5e:87:4b:f5:2c: 78:b1:7e:8c:a7:bc:5d:90:fd:63:15:ac:a5:68:4b: db:0c:f1:fd:c0:df:99:aa:f4:f2:4b:da:b3:8a:2f: ce:4a:2a:da:ae:9b:2d:ee:a3:3b:36:65:dd:99:38: a5:f4:52:27:94:f3:03:5b:3e:3c:eb:b2:e7:6b:01: 10:76:56:a4:d0:37:15:7f:5e:5f:82:b6:0e:24:56: 26:38:dd:b9:b8:92:ee:67:74:94:c3:44:d5:27:6a: d9:94:8b:0a:42:82:1d:ec:4b:2d:fe:e4:86:b3:a1: 19:a9:79:fc:d8:b8:90:ce:b4:c4:40:f4:ee:45:bc: 8a:36:b5:56:cf:b5:0b:b4:b8:6a:ab:a6:4e:ce:42: d4:79:b2:8c:76:21:14:c6:33:fa:57:dc:01:ef:24: eb:38:1c:f7:f1:01:2e:b8:8f:b5:f5:31:41:7d:25: 22:09:2e:ed:18:3c:4d:08:c4:40:7a:79:38:74:12: 57:d4:27:ec:5b:cd:39:0a:f4:b8:cd:21:a5:a2:e8: 1d:4a:b7:86:95:f7:60:c8:da:d6:97:c3:3a:eb:43: cb:81:b4:9c:e1:67:c8:81:c8:3f:a7:d8:7e:17:ce: 73:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5E:16:4F:35:C1:5C:E2:1C:89:5E:75:EE:DF:C5:48:9A:61:78:55 X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/814WTzXBXOIciV517t_FSJpheFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.202.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:7b:a9:ef:2c:50:6d:4b:c2:e7:a2:92:3e:b9:16:46:4e:37: 95:9e:5a:aa:3a:6a:50:dd:6a:06:f6:d4:7a:28:b1:b4:ed:af: 01:51:e3:9f:4d:d1:57:8a:61:71:2b:a0:d0:40:08:b6:83:07: 15:9a:14:2b:06:bc:c7:83:06:de:0e:c8:f8:51:8c:73:07:00: 7f:ab:28:10:20:cc:fa:66:8a:5e:61:73:a0:32:e9:94:af:68: 8f:10:b9:74:c1:41:73:73:60:ca:3f:38:f5:91:f6:fe:e4:c5: af:31:4a:56:c8:c9:5b:ab:46:74:51:51:78:69:8a:a3:c2:68: 6e:f7:8c:1a:76:e7:02:8e:17:4f:94:59:e1:a3:a1:b7:cb:51: 78:eb:3d:16:d6:54:e0:d1:3e:9e:e0:60:e7:66:d4:d8:d1:4c: 9c:75:62:77:63:76:b6:49:a9:84:ec:b8:b9:34:d8:d6:e8:6c: 54:58:47:9f:8d:a9:a1:94:c5:d3:e7:2d:0b:db:51:9f:b5:3f: 84:67:ff:e3:c7:4e:57:4e:32:96:34:d6:1d:26:dd:72:27:0e: 32:8e:01:cd:4c:65:bb:93:97:9d:42:f2:73:43:92:c8:94:fe: 7d:f5:8d:5a:5e:b0:e2:be:6a:fa:0f:45:6b:5d:20:5b:11:12: 83:f3:08:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKcYd0Yoav9MO4x2jSNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwMTAyMDYxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzVlMTY0ZjM1YzE1Y2UyMWM4OTVlNzVlZWRmYzU0ODlhNjE3ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr63msK8IHEL1Za3fWPafFM3M0SY xvmRXodL9Sx4sX6Mp7xdkP1jFaylaEvbDPH9wN+ZqvTyS9qzii/OSirarpst7qM7 NmXdmTil9FInlPMDWz4867LnawEQdlak0DcVf15fgrYOJFYmON25uJLuZ3SUw0TV J2rZlIsKQoId7Est/uSGs6EZqXn82LiQzrTEQPTuRbyKNrVWz7ULtLhqq6ZOzkLU ebKMdiEUxjP6V9wB7yTrOBz38QEuuI+19TFBfSUiCS7tGDxNCMRAenk4dBJX1Cfs W805CvS4zSGlougdSreGlfdgyNrWl8M660PLgbSc4WfIgcg/p9h+F85zkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNeFk81wVziHIlede7fxUiaYXhVMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvODE0V1R6WEJYT0ljaVY1MTd0X0ZTSnBoZUZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDnKMA0G CSqGSIb3DQEBCwUAA4IBAQAPe6nvLFBtS8LnopI+uRZGTjeVnlqqOmpQ3WoG9tR6 KLG07a8BUeOfTdFXimFxK6DQQAi2gwcVmhQrBrzHgwbeDsj4UYxzBwB/qygQIMz6 ZopeYXOgMumUr2iPELl0wUFzc2DKPzj1kfb+5MWvMUpWyMlbq0Z0UVF4aYqjwmhu 94waducCjhdPlFnho6G3y1F46z0W1lTg0T6e4GDnZtTY0UycdWJ3Y3a2SamE7Li5 NNjW6GxUWEefjamhlMXT5y0L21GftT+EZ//jx05XTjKWNNYdJt1yJw4yjgHNTGW7 k5edQvJzQ5LIlP599Y1aXrDivmr6D0VrXSBbERKD8whH -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:37 2026 by rpki-client