This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/D40tdaBGbiX69g9_RoLIbnW6Uos.roa File: D40tdaBGbiX69g9_RoLIbnW6Uos.roa (raw, json) Hash identifier: mQf8gwSpOHHVXs/itRPp+fDP+81GNDsjDAGaYMxP+UE= Subject key identifier: 0F:8D:2D:75:A0:46:6E:25:FA:F6:0F:7F:46:82:C8:6E:75:BA:52:8B Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37BA9A55EF18E2B760E4F1536CAC41 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/D40tdaBGbiX69g9_RoLIbnW6Uos.roa Signing time: Fri 02 Jan 2026 10:19:00 +0000 ROA not before: Fri 02 Jan 2026 10:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49453 IP address blocks: 158.173.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ba:9a:55:ef:18:e2:b7:60:e4:f1:53:6c:ac:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f8d2d75a0466e25faf60f7f4682c86e75ba528b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b9:e5:d1:d7:01:e8:a0:26:19:73:67:ce:ea: 53:40:d1:1d:c0:d6:1d:a0:68:8f:92:0a:57:02:f7: 1e:7f:30:1a:c9:b8:7c:06:12:77:7a:b3:77:58:0f: f8:db:d5:2f:f5:cd:a8:62:a6:2a:0b:6a:fa:cd:93: a0:1c:43:71:fe:68:27:05:c5:69:22:4d:63:e0:15: d1:29:56:64:1a:ce:08:1c:f8:46:2f:6a:b7:38:c3: ab:4f:c9:c6:b2:28:72:a3:1c:8f:35:1e:9e:dc:02: 77:d1:c6:8c:88:b7:76:f1:57:08:ee:1d:5a:92:cc: af:14:80:43:52:0f:f0:5f:35:ea:61:1f:40:a0:ef: 28:68:c6:7a:48:fe:d7:5a:f6:5a:00:09:e2:52:b6: ff:00:53:05:29:90:12:e9:52:ec:89:24:75:d6:2f: 6b:cd:7a:19:a4:0e:7f:b7:ae:54:ef:d6:64:1c:10: 40:33:85:3b:40:62:75:b2:59:d1:7c:c4:2e:21:8a: 6f:68:6b:87:c5:2e:87:b9:95:6d:8b:b7:b5:8f:e6: 7c:64:5a:c1:1f:5f:8d:05:3d:9b:e1:60:ea:1a:f4: 06:44:b9:02:e7:6e:17:02:c0:b5:8e:78:e2:21:e0: 9a:25:a0:24:1b:b3:52:9d:ed:a9:14:61:0b:5a:bf: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8D:2D:75:A0:46:6E:25:FA:F6:0F:7F:46:82:C8:6E:75:BA:52:8B X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/D40tdaBGbiX69g9_RoLIbnW6Uos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.176.0/22 Signature Algorithm: sha256WithRSAEncryption 01:56:c5:68:90:68:93:36:4b:a0:47:e3:b8:1d:c9:97:57:7e: 6e:65:fa:b7:5f:24:fe:e2:0e:18:bb:43:f6:9a:33:fb:58:59: 30:0c:1b:c7:90:0d:31:a8:2c:cb:74:e5:35:2d:76:56:e3:68: c6:40:e4:42:b0:21:ee:25:9d:8d:71:34:53:e2:7f:26:e0:0f: 97:d3:a3:24:bc:89:3d:43:93:96:35:10:72:f6:42:f9:58:4a: 56:54:d8:77:43:a7:cb:af:c8:db:7b:ab:9c:3b:3d:2f:4f:89: 2f:29:51:cd:68:6b:a9:c2:67:d1:27:ae:9d:b0:58:30:e0:88: fe:75:5a:3b:e7:63:90:ba:84:77:3f:72:15:1a:10:06:82:54: 02:23:e0:3f:df:aa:1e:bc:d0:f8:63:ed:b5:2a:50:9b:ba:bd: b3:cb:eb:63:3d:cc:78:fd:e8:2f:c7:7c:c0:4f:09:69:84:80: b9:65:0e:a5:36:2f:da:70:26:48:64:ad:4d:6a:8b:00:59:8c: 8e:e7:51:cf:19:49:4e:25:f0:0b:ac:21:bf:68:2e:b1:43:43: d6:35:b7:14:3e:a8:f9:93:62:fe:0a:f7:e1:fc:8a:ec:51:6e: 7c:3a:67:b8:a7:43:32:c8:91:4f:ba:26:01:1c:ed:3c:a9:cf: dd:7f:f7:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7qaVe8Y4rdg5PFTbKxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjhkMmQ3NWEwNDY2ZTI1ZmFmNjBmN2Y0NjgyYzg2ZTc1YmE1MjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrnl0dcB6KAmGXNnzupTQNEdwNYd oGiPkgpXAvcefzAaybh8BhJ3erN3WA/429Uv9c2oYqYqC2r6zZOgHENx/mgnBcVp Ik1j4BXRKVZkGs4IHPhGL2q3OMOrT8nGsihyoxyPNR6e3AJ30caMiLd28VcI7h1a ksyvFIBDUg/wXzXqYR9AoO8oaMZ6SP7XWvZaAAniUrb/AFMFKZAS6VLsiSR11i9r zXoZpA5/t65U79ZkHBBAM4U7QGJ1slnRfMQuIYpvaGuHxS6HuZVti7e1j+Z8ZFrB H1+NBT2b4WDqGvQGRLkC524XAsC1jnjiIeCaJaAkG7NSne2pFGELWr+lhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA+NLXWgRm4l+vYPf0aCyG51ulKLMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvRDQwdGRhQkdiaVg2OWc5X1JvTEliblc2VW9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnq2wMA0G CSqGSIb3DQEBCwUAA4IBAQABVsVokGiTNkugR+O4HcmXV35uZfq3XyT+4g4Yu0P2 mjP7WFkwDBvHkA0xqCzLdOU1LXZW42jGQORCsCHuJZ2NcTRT4n8m4A+X06MkvIk9 Q5OWNRBy9kL5WEpWVNh3Q6fLr8jbe6ucOz0vT4kvKVHNaGupwmfRJ66dsFgw4Ij+ dVo752OQuoR3P3IVGhAGglQCI+A/36oevND4Y+21KlCbur2zy+tjPcx4/egvx3zA TwlphIC5ZQ6lNi/acCZIZK1NaosAWYyO51HPGUlOJfALrCG/aC6xQ0PWNbcUPqj5 k2L+Cvfh/IrsUW58Ome4p0MyyJFPuiYBHO08qc/df/ff -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:27 2026 by rpki-client