This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/szA0BB7G4bmhdwtcn8KzEtEZsfY.roa File: szA0BB7G4bmhdwtcn8KzEtEZsfY.roa (raw, json) Hash identifier: TOh2TnQlFGNS8X5M+MNtlPM2LQojt2wk8kWXSpGSvKA= Subject key identifier: B3:30:34:04:1E:C6:E1:B9:A1:77:0B:5C:9F:C2:B3:12:D1:19:B1:F6 Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e Certificate serial: 019B7F1547BC08FEADCBED095942F05C82F2 Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/szA0BB7G4bmhdwtcn8KzEtEZsfY.roa Signing time: Fri 02 Jan 2026 14:20:59 +0000 ROA not before: Fri 02 Jan 2026 14:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 159.101.128.0/21 maxlen: 21 159.101.236.0/22 maxlen: 22 159.101.240.0/22 maxlen: 22 159.101.252.0/23 maxlen: 23 159.101.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:47:bc:08:fe:ad:cb:ed:09:59:42:f0:5c:82:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ead799026094d60516b527d842b6166805668e9e Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b33034041ec6e1b9a1770b5c9fc2b312d119b1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:69:08:3d:12:a7:5c:87:27:68:23:ba:2a:db: bc:a5:22:07:48:09:ae:e9:df:1a:50:17:d0:ea:36: 0c:de:aa:ce:cf:f5:93:55:36:05:57:ac:16:43:f3: 0a:39:52:af:8c:60:4b:7b:c0:ee:b1:87:38:6b:73: 17:92:bb:61:f5:2c:59:08:47:47:f1:06:0c:4f:ac: 5e:cd:66:49:b4:39:a6:93:7a:5c:5d:c0:8f:40:11: 21:23:f0:f6:d6:7a:4f:07:47:9c:e7:ef:5b:ea:06: 7a:aa:17:87:02:35:5b:4c:a0:52:a0:7a:0a:00:b9: 30:62:88:bf:5d:5e:28:e4:4e:40:41:78:f6:f9:a5: ac:f2:12:04:85:bf:ea:80:b3:00:d3:72:fc:c2:ef: 38:f4:73:8f:db:e8:7f:40:5c:f2:85:46:b5:4f:cf: f1:53:ba:74:4f:19:f0:9c:06:84:e9:4c:ee:67:3d: 5f:a0:7c:d3:84:9b:20:33:67:8e:16:42:db:5a:f3: c3:1d:f9:ff:57:32:be:63:ca:37:f5:5f:9b:21:7c: c0:4d:a6:1c:d2:27:e4:c2:99:59:38:9b:b3:3e:da: 5d:ad:fe:31:1c:9f:bc:74:13:0c:03:6f:fa:7c:52: e0:ba:eb:bb:55:a9:88:32:35:70:5f:82:1e:8e:91: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:30:34:04:1E:C6:E1:B9:A1:77:0B:5C:9F:C2:B3:12:D1:19:B1:F6 X509v3 Authority Key Identifier: keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/szA0BB7G4bmhdwtcn8KzEtEZsfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.101.128.0/21 159.101.236.0-159.101.243.255 159.101.252.0/22 Signature Algorithm: sha256WithRSAEncryption df:3b:64:20:88:b1:88:6e:ab:04:a8:18:0a:14:c2:a8:13:65: 4a:34:d2:38:72:90:a9:f0:dc:c6:25:6b:10:b5:4d:4b:6f:40: e4:53:c2:37:24:08:3b:da:c9:5c:2f:d9:ff:b7:ed:ab:83:73: f7:88:8b:07:b2:42:83:d7:fa:f0:9c:fa:00:e1:6c:de:c0:59: 90:d4:8b:ee:51:58:17:75:bd:22:0d:62:67:62:12:ff:88:44: 89:27:03:ad:8b:6e:ad:e4:97:20:4a:9c:b0:e0:60:00:a6:e5: e6:d5:29:79:3a:bf:ac:a3:81:ff:e3:18:6e:aa:43:9c:37:ad: 9b:f3:b0:3f:b2:d2:ad:9c:f3:ad:41:38:e9:e2:37:bf:6a:1c: ba:c1:f5:9b:b6:82:c8:c4:4f:bc:fa:52:81:94:e2:53:f9:48: fc:2d:6e:30:94:2f:42:8c:04:50:53:82:d8:9a:22:a3:47:84: c6:a3:4b:7e:16:c7:ee:ca:b1:97:03:5c:a7:49:83:22:38:b1: 88:34:ba:c4:c7:db:59:f5:56:4a:45:65:be:45:50:44:f5:da: b6:e5:5a:9b:13:67:d5:4c:bb:64:91:b3:f9:03:07:aa:bf:fb: 70:ca:fa:c3:ba:c9:22:a0:d9:79:d4:8a:32:5f:a0:d5:6d:6c: fa:dc:bb:4e -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/FUe8CP6ty+0JWULwXILyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZDc5OTAyNjA5NGQ2MDUxNmI1MjdkODQyYjYxNjY4MDU2 NjhlOWUwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzMwMzQwNDFlYzZlMWI5YTE3NzBiNWM5ZmMyYjMxMmQxMTliMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGkIPRKnXIcnaCO6Ktu8pSIHSAmu 6d8aUBfQ6jYM3qrOz/WTVTYFV6wWQ/MKOVKvjGBLe8DusYc4a3MXkrth9SxZCEdH 8QYMT6xezWZJtDmmk3pcXcCPQBEhI/D21npPB0ec5+9b6gZ6qheHAjVbTKBSoHoK ALkwYoi/XV4o5E5AQXj2+aWs8hIEhb/qgLMA03L8wu849HOP2+h/QFzyhUa1T8/x U7p0TxnwnAaE6UzuZz1foHzThJsgM2eOFkLbWvPDHfn/VzK+Y8o39V+bIXzATaYc 0ifkwplZOJuzPtpdrf4xHJ+8dBMMA2/6fFLguuu7VamIMjVwX4IejpFubQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFLMwNAQexuG5oXcLXJ/CsxLRGbH2MB8GA1UdIwQY MBaAFOrXmQJglNYFFrUn2EK2FmgFZo6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnRlWkFtQ1UxZ1VXdFNmWVFyWVdhQVZtanA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTg3MGYtODY2Yy00NDIwLWFkMDgt MzBjOWUyMDJlOTk1LzEvc3pBMEJCN0c0Ym1oZHd0Y244S3pFdEVac2ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xOTg3MGYtODY2Yy00NDIwLWFkMDgtMzBjOWUyMDJlOTk1 LzEvNnRlWkFtQ1UxZ1VXdFNmWVFyWVdhQVZtanA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDn2WAMAwD BAKfZewDBAKfZfADBAKfZfwwDQYJKoZIhvcNAQELBQADggEBAN87ZCCIsYhuqwSo GAoUwqgTZUo00jhykKnw3MYlaxC1TUtvQORTwjckCDvayVwv2f+37auDc/eIiwey QoPX+vCc+gDhbN7AWZDUi+5RWBd1vSINYmdiEv+IRIknA62Lbq3klyBKnLDgYACm 5ebVKXk6v6yjgf/jGG6qQ5w3rZvzsD+y0q2c861BOOniN79qHLrB9Zu2gsjET7z6 UoGU4lP5SPwtbjCUL0KMBFBTgtiaIqNHhMajS34Wx+7KsZcDXKdJgyI4sYg0usTH 21n1VkpFZb5FUET12rblWpsTZ9VMu2SRs/kDB6q/+3DK+sO6ySKg2XnUijJfoNVt bPrcu04= -----END CERTIFICATE-----Generated at Fri Jan 23 16:05:00 2026 by rpki-client