This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/p9sadlQLRMoFQLA1QXaKKY23LjQ.roa File: p9sadlQLRMoFQLA1QXaKKY23LjQ.roa (raw, json) Hash identifier: HShX7yQDvzKtFJFjK3t2BxQA1/vBYI4tq5fNWg1k4xY= Subject key identifier: A7:DB:1A:76:54:0B:44:CA:05:40:B0:35:41:76:8A:29:8D:B7:2E:34 Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca Certificate serial: 019B76EAF1B9D01F29A56126BFAC6BD115ED Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/p9sadlQLRMoFQLA1QXaKKY23LjQ.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41616 IP address blocks: 176.122.206.0/24 maxlen: 24 176.122.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f1:b9:d0:1f:29:a5:61:26:bf:ac:6b:d1:15:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7db1a76540b44ca0540b03541768a298db72e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1b:6f:6c:95:13:b7:40:e5:a5:e9:f8:c7:68: 30:0f:ad:b8:b6:a6:5c:e2:72:7e:1a:7f:32:36:95: 50:73:f8:08:c0:89:e8:47:cd:38:13:52:bf:53:b4: be:06:65:2c:ba:1f:d1:5d:32:84:d3:64:be:40:94: 8e:9d:2c:2d:0b:8a:64:db:5d:68:ff:ff:de:fc:28: 50:45:dd:59:92:bd:f7:e6:f1:d6:a2:5a:47:6c:e3: 2b:f8:7b:2b:44:7f:be:d9:05:71:d6:33:e8:33:f0: dc:da:be:a9:db:d0:98:f8:66:97:62:61:bb:e4:f5: ea:90:85:51:9b:b1:37:d4:ed:6a:84:a6:10:3e:31: 62:10:35:a4:8e:83:47:14:30:65:52:a4:11:37:bd: 1b:7a:72:24:65:13:99:a9:88:56:be:4b:c6:97:68: c6:b9:4a:84:4a:06:ce:7f:0c:54:74:e9:00:d6:43: 31:82:52:47:b8:61:89:83:d4:56:79:dd:eb:73:0d: d8:55:4a:24:7d:e0:12:49:22:63:14:66:8d:7e:83: 8c:e8:b7:0d:05:08:92:73:96:d5:55:2f:7a:ef:7b: 52:b8:54:ad:22:c9:29:fa:60:d0:59:74:8e:a2:d6: 93:4f:5f:7a:1b:1b:c4:79:8c:1c:d4:aa:c9:a0:63: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DB:1A:76:54:0B:44:CA:05:40:B0:35:41:76:8A:29:8D:B7:2E:34 X509v3 Authority Key Identifier: keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/p9sadlQLRMoFQLA1QXaKKY23LjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.122.206.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:f0:d9:c5:89:bb:6b:39:8c:c4:d6:81:de:31:d2:59:33:c2: d6:f5:f5:ac:2f:73:08:b6:de:0f:ef:02:2d:05:72:fe:2f:3e: d3:7c:95:22:41:80:c9:b0:86:d9:0b:ce:b6:62:ef:13:35:51: 9c:42:c2:86:ee:a3:53:0d:ba:1b:57:df:c7:ce:c5:1d:58:b4: 21:5a:d0:26:82:42:b0:b6:60:06:da:d6:e8:7c:0a:6a:a3:01: 4b:c4:80:b0:0d:44:c7:06:67:c3:1d:85:27:d8:15:32:6f:f2: 5e:b4:6a:69:5c:69:c6:bc:4f:67:34:50:2e:86:5d:99:65:7a: 53:e9:8c:54:4b:d0:b1:b8:e8:77:35:77:91:96:c6:47:d0:ce: e7:bc:71:38:96:56:49:58:cd:44:ea:93:1a:57:df:27:08:a3: 1c:b5:56:ac:ef:fb:f9:71:40:1a:37:c1:56:09:22:bf:a9:6b: b6:83:c2:18:87:37:2c:22:3c:ec:5c:17:2e:b0:e1:98:e1:05: 51:bb:8e:bb:74:73:5d:69:cb:df:18:7d:2d:bb:66:12:aa:0d: 94:54:38:fc:e0:04:b7:e4:79:4d:78:42:30:43:d9:ad:eb:14: c3:8b:fb:6d:b6:28:b4:65:a6:2b:df:ea:ef:19:8f:b3:c2:02: c4:0d:c2:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vG50B8ppWEmv6xr0RXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTk0ZDJlZWRjZDgyNGFjMWRlNzRhZGUzNmMxZjlkNjlk NDk2Y2EwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2RiMWE3NjU0MGI0NGNhMDU0MGIwMzU0MTc2OGEyOThkYjcyZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BtvbJUTt0Dlpen4x2gwD624tqZc 4nJ+Gn8yNpVQc/gIwInoR804E1K/U7S+BmUsuh/RXTKE02S+QJSOnSwtC4pk211o ///e/ChQRd1Zkr335vHWolpHbOMr+HsrRH++2QVx1jPoM/Dc2r6p29CY+GaXYmG7 5PXqkIVRm7E31O1qhKYQPjFiEDWkjoNHFDBlUqQRN70benIkZROZqYhWvkvGl2jG uUqESgbOfwxUdOkA1kMxglJHuGGJg9RWed3rcw3YVUokfeASSSJjFGaNfoOM6LcN BQiSc5bVVS9673tSuFStIskp+mDQWXSOotaTT196GxvEeYwc1KrJoGNL6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKfbGnZUC0TKBUCwNUF2iimNty40MB8GA1UdIwQY MBaAFJ/pTS7tzYJKwd50reNsH51p1JbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEt N2NhMTFkYzNhZTgyLzEvcDlzYWRsUUxSTW9GUUxBMVFYYUtLWTIzTGpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEtN2NhMTFkYzNhZTgy LzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHrOMA0G CSqGSIb3DQEBCwUAA4IBAQAv8NnFibtrOYzE1oHeMdJZM8LW9fWsL3MItt4P7wIt BXL+Lz7TfJUiQYDJsIbZC862Yu8TNVGcQsKG7qNTDbobV9/HzsUdWLQhWtAmgkKw tmAG2tbofApqowFLxICwDUTHBmfDHYUn2BUyb/JetGppXGnGvE9nNFAuhl2ZZXpT 6YxUS9CxuOh3NXeRlsZH0M7nvHE4llZJWM1E6pMaV98nCKMctVas7/v5cUAaN8FW CSK/qWu2g8IYhzcsIjzsXBcusOGY4QVRu467dHNdacvfGH0tu2YSqg2UVDj84AS3 5HlNeEIwQ9mt6xTDi/tttii0ZaYr3+rvGY+zwgLEDcLq -----END CERTIFICATE-----Generated at Fri Jan 2 21:42:17 2026 by rpki-client