This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/IxSOqG3VKiGzkrHVsxe1NDwRPlQ.roa File: IxSOqG3VKiGzkrHVsxe1NDwRPlQ.roa (raw, json) Hash identifier: COV4hg+LgsDZn9oz3/oU/egGJ+3yB4BuGfUdkH+oFDI= Subject key identifier: 23:14:8E:A8:6D:D5:2A:21:B3:92:B1:D5:B3:17:B5:34:3C:11:3E:54 Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca Certificate serial: 019B76EAF23926BAC381C8E7D0BF0D9DFC53 Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/IxSOqG3VKiGzkrHVsxe1NDwRPlQ.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58006 IP address blocks: 176.122.206.0/24 maxlen: 24 176.122.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f2:39:26:ba:c3:81:c8:e7:d0:bf:0d:9d:fc:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23148ea86dd52a21b392b1d5b317b5343c113e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:38:89:6a:9d:b5:1e:a2:ed:1e:e6:52:3b: cb:67:73:52:c3:da:bf:3d:a0:c0:5a:b3:89:6d:50: f2:a9:ff:00:5a:72:29:d9:93:f3:2c:41:ff:e3:6d: 3c:25:d5:83:28:37:b8:59:bc:05:9a:9e:cb:89:ec: 04:1e:79:16:39:b1:78:b3:e0:e7:13:ff:56:aa:ea: b8:12:68:16:5a:ac:0d:eb:08:f4:70:82:49:68:48: aa:52:a9:4e:a7:85:9a:41:dd:5f:76:86:2f:f9:97: 22:99:3c:55:56:e6:aa:56:fa:fa:45:0c:39:f5:64: 08:83:84:d9:44:c3:9c:48:db:d7:6d:c8:e2:8e:5d: c5:66:82:82:df:ec:0d:60:24:f0:70:3f:1a:d1:43: 13:a5:76:cf:d0:a5:f6:3a:db:a1:b3:78:d8:da:e0: cb:2a:15:63:8c:b2:a7:f2:9b:d9:7a:4b:47:d6:8e: 17:8c:dc:58:28:69:b3:fe:7b:a0:e1:62:7f:7b:12: 74:cb:cd:6e:a3:14:3d:bd:83:1f:08:80:da:49:c1: ab:cc:c7:e5:f7:e4:39:7f:9f:ce:aa:04:c7:ec:fa: 48:73:c0:ea:cc:3f:b4:45:1a:be:ec:f5:2e:88:6a: e8:b2:5c:89:79:a2:24:95:e5:c1:48:b0:b3:b3:bf: 3f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:14:8E:A8:6D:D5:2A:21:B3:92:B1:D5:B3:17:B5:34:3C:11:3E:54 X509v3 Authority Key Identifier: keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/IxSOqG3VKiGzkrHVsxe1NDwRPlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.122.206.0/23 Signature Algorithm: sha256WithRSAEncryption 94:20:2d:8f:fa:40:02:1a:92:2d:97:de:9a:aa:39:13:01:de: 4c:b8:8f:df:7f:2f:ca:b3:25:32:03:81:91:35:5e:1f:9e:02: d1:02:95:f3:d8:63:cb:56:48:80:d7:77:f8:a4:38:84:bd:09: f8:d6:d1:98:62:2f:ec:42:f7:4a:39:05:23:38:a2:bd:ff:2a: 46:fc:5c:50:86:6f:27:f9:53:b0:25:38:e3:ac:6a:b9:7f:ee: 41:01:71:1c:40:e3:85:28:84:e2:a9:86:ae:d7:a9:82:be:44: 3a:3c:0c:ae:39:f6:5c:4a:d7:a8:63:b2:99:2c:fa:72:e1:2f: 2f:98:67:ea:9d:e6:b0:b0:ff:fe:25:dc:b0:2c:dc:0f:80:01: 42:f0:3b:c7:40:59:a0:67:01:bf:a7:e5:f1:b9:e7:83:56:96: 97:07:61:4f:83:4b:cd:86:c7:fd:1a:e8:52:71:79:ac:3e:0c: 3d:7a:8b:a1:44:91:12:42:39:06:0e:46:a1:be:31:17:f7:54: 0c:16:15:17:26:51:13:3d:88:65:9d:69:99:ed:41:2a:23:03: b6:d0:d7:83:aa:c6:7a:ea:3f:93:76:65:fb:a4:25:45:8f:af: ad:48:ee:59:20:ee:70:ca:e8:6e:3e:de:07:f8:24:85:f0:6f: 21:3a:d6:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vI5JrrDgcjn0L8NnfxTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTk0ZDJlZWRjZDgyNGFjMWRlNzRhZGUzNmMxZjlkNjlk NDk2Y2EwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzE0OGVhODZkZDUyYTIxYjM5MmIxZDViMzE3YjUzNDNjMTEzZTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ws4iWqdtR6i7R7mUjvLZ3NSw9q/ PaDAWrOJbVDyqf8AWnIp2ZPzLEH/4208JdWDKDe4WbwFmp7LiewEHnkWObF4s+Dn E/9Wquq4EmgWWqwN6wj0cIJJaEiqUqlOp4WaQd1fdoYv+ZcimTxVVuaqVvr6RQw5 9WQIg4TZRMOcSNvXbcjijl3FZoKC3+wNYCTwcD8a0UMTpXbP0KX2Otuhs3jY2uDL KhVjjLKn8pvZektH1o4XjNxYKGmz/nug4WJ/exJ0y81uoxQ9vYMfCIDaScGrzMfl 9+Q5f5/OqgTH7PpIc8DqzD+0RRq+7PUuiGroslyJeaIkleXBSLCzs78/cQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCMUjqht1Sohs5Kx1bMXtTQ8ET5UMB8GA1UdIwQY MBaAFJ/pTS7tzYJKwd50reNsH51p1JbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEt N2NhMTFkYzNhZTgyLzEvSXhTT3FHM1ZLaUd6a3JIVnN4ZTFORHdSUGxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEtN2NhMTFkYzNhZTgy LzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHrOMA0G CSqGSIb3DQEBCwUAA4IBAQCUIC2P+kACGpItl96aqjkTAd5MuI/ffy/KsyUyA4GR NV4fngLRApXz2GPLVkiA13f4pDiEvQn41tGYYi/sQvdKOQUjOKK9/ypG/FxQhm8n +VOwJTjjrGq5f+5BAXEcQOOFKITiqYau16mCvkQ6PAyuOfZcSteoY7KZLPpy4S8v mGfqneawsP/+JdywLNwPgAFC8DvHQFmgZwG/p+XxueeDVpaXB2FPg0vNhsf9GuhS cXmsPgw9eouhRJESQjkGDkahvjEX91QMFhUXJlETPYhlnWmZ7UEqIwO20NeDqsZ6 6j+TdmX7pCVFj6+tSO5ZIO5wyuhuPt4H+CSF8G8hOtaR -----END CERTIFICATE-----Generated at Fri Jan 2 21:42:15 2026 by rpki-client