This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/IPrRSq2gSatbbHi6fEa8RlmwLy4.roa File: IPrRSq2gSatbbHi6fEa8RlmwLy4.roa (raw, json) Hash identifier: RM5/PHoNGaX7XlREXjG/og78083kPTzGlX0ZOlSLFII= Subject key identifier: 20:FA:D1:4A:AD:A0:49:AB:5B:6C:78:BA:7C:46:BC:46:59:B0:2F:2E Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Certificate serial: 019B7C124EB5777488ACC1FA1CB4675F5F16 Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/IPrRSq2gSatbbHi6fEa8RlmwLy4.roa Signing time: Fri 02 Jan 2026 00:18:53 +0000 ROA not before: Fri 02 Jan 2026 00:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201766 IP address blocks: 176.124.253.0/24 maxlen: 24 185.64.32.0/22 maxlen: 24 2a04:f7c0::/32 maxlen: 32 2a04:f7c1::/32 maxlen: 32 2a04:f7c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4e:b5:77:74:88:ac:c1:fa:1c:b4:67:5f:5f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Validity Not Before: Jan 2 00:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20fad14aada049ab5b6c78ba7c46bc4659b02f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2d:2f:e2:da:4f:9b:af:98:22:c3:f8:87:43: cf:93:7c:41:17:da:7f:8a:73:45:de:c6:6b:c0:ab: 21:b6:2a:5a:a5:4b:d3:cf:a7:db:c5:23:ba:1f:ae: 11:f2:db:83:e0:58:85:93:22:05:b0:71:5f:2a:45: 9b:27:5e:6f:e5:5d:fd:fc:51:e0:18:00:01:4a:3b: 0b:bf:dc:5a:64:a6:13:29:45:52:db:69:af:f3:74: ce:44:f9:b9:47:35:6c:9c:69:1c:0f:ae:84:9a:2c: 57:10:b2:6e:e7:8d:07:b5:4e:ea:75:62:f0:1e:8e: 8f:a6:2e:95:33:66:c4:21:d1:e1:4b:7c:ff:b8:4c: 2c:36:c0:ff:d3:ad:17:d5:eb:41:77:5c:90:b2:f2: 7b:e8:47:a4:72:e0:17:18:d0:11:c7:4d:89:8f:ae: 4f:76:91:c4:83:09:43:2a:b3:82:ef:b0:c3:12:24: 54:76:5d:44:bb:8d:ce:66:29:3e:9c:3d:fb:3a:7b: fc:c4:a9:29:02:7c:a3:5a:77:66:0b:b3:5f:d4:10: c6:a2:46:aa:64:de:e1:0d:76:76:47:84:05:29:f9: b0:ae:2c:49:eb:a7:94:be:a4:cc:37:ff:0b:aa:bf: 39:49:e3:c5:2b:6a:bf:fe:81:30:64:a9:cd:cd:0f: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FA:D1:4A:AD:A0:49:AB:5B:6C:78:BA:7C:46:BC:46:59:B0:2F:2E X509v3 Authority Key Identifier: keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/IPrRSq2gSatbbHi6fEa8RlmwLy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.253.0/24 185.64.32.0/22 IPv6: 2a04:f7c0::-2a04:f7c2:0:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 81:0f:ca:05:e8:63:0c:91:ba:36:45:41:6c:74:bd:6f:52:76: 45:1c:1f:d5:54:70:57:ef:b9:86:91:0b:a7:ad:05:46:03:5c: 5c:aa:83:45:b4:70:5c:80:53:cd:a7:80:f7:5e:f2:9b:68:59: fe:af:f0:a1:ee:df:cc:5a:a7:a8:a1:cf:61:92:09:7e:55:8f: e7:bf:c9:49:b7:d8:ca:d1:2b:bb:ca:55:c2:3d:c0:4c:0f:9e: c6:7f:e8:31:f1:bc:44:7f:13:fc:ca:69:7e:2f:3c:2d:13:ed: 80:f3:4d:5c:47:16:b1:d5:41:4f:47:ea:a3:d8:fe:35:6f:38: ca:f7:85:00:57:ac:a2:44:2c:de:d9:d3:b7:52:02:9f:2c:d7: 85:09:7a:66:53:2c:2a:da:31:dc:cf:de:23:0a:04:be:eb:0a: a5:8e:61:3f:1a:2f:d6:17:a0:0c:8a:67:b4:e7:df:5d:e7:b5: 66:15:75:00:39:16:d6:c0:f7:7a:cd:ef:d5:f9:6e:ea:d8:eb: 0a:c4:5a:b3:6f:91:a3:d0:ae:a7:30:27:5b:1c:f9:12:b0:73: ff:e3:8f:af:ac:e0:30:25:74:54:f4:87:f5:6f:a0:d9:f0:3e: f3:8d:4e:4c:f5:c2:26:98:b7:82:83:5d:12:02:fd:a7:45:e6: 05:26:0d:58 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8Ek61d3SIrMH6HLRnX18WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDdjOTUxMzQ4YmQyZTA5Y2NhZjc2ZjU3YjgzODVmMTVk ZjQ0ZTQwHhcNMjYwMTAyMDAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGZhZDE0YWFkYTA0OWFiNWI2Yzc4YmE3YzQ2YmM0NjU5YjAyZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy0v4tpPm6+YIsP4h0PPk3xBF9p/ inNF3sZrwKshtipapUvTz6fbxSO6H64R8tuD4FiFkyIFsHFfKkWbJ15v5V39/FHg GAABSjsLv9xaZKYTKUVS22mv83TORPm5RzVsnGkcD66EmixXELJu540HtU7qdWLw Ho6Ppi6VM2bEIdHhS3z/uEwsNsD/060X1etBd1yQsvJ76EekcuAXGNARx02Jj65P dpHEgwlDKrOC77DDEiRUdl1Eu43OZik+nD37Onv8xKkpAnyjWndmC7Nf1BDGokaq ZN7hDXZ2R4QFKfmwrixJ66eUvqTMN/8Lqr85SePFK2q//oEwZKnNzQ+UtQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCD60UqtoEmrW2x4unxGvEZZsC8uMB8GA1UdIwQY MBaAFNvXyVE0i9LgnMr3b1e4OF8V30TkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEt N2QwYWM1MjgxNWE2LzEvSVByUlNxMmdTYXRiYkhpNmZFYThSbG13THk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEtN2QwYWM1MjgxNWE2 LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAsHz9AwQC uUAgMBgEAgACMBIwEAMFBioE98ADBwAqBPfCAAAwDQYJKoZIhvcNAQELBQADggEB AIEPygXoYwyRujZFQWx0vW9SdkUcH9VUcFfvuYaRC6etBUYDXFyqg0W0cFyAU82n gPde8ptoWf6v8KHu38xap6ihz2GSCX5Vj+e/yUm32MrRK7vKVcI9wEwPnsZ/6DHx vER/E/zKaX4vPC0T7YDzTVxHFrHVQU9H6qPY/jVvOMr3hQBXrKJELN7Z07dSAp8s 14UJemZTLCraMdzP3iMKBL7rCqWOYT8aL9YXoAyKZ7Tn313ntWYVdQA5FtbA93rN 79X5burY6wrEWrNvkaPQrqcwJ1sc+RKwc//jj6+s4DAldFT0h/VvoNnwPvONTkz1 wiaYt4KDXRIC/adF5gUmDVg= -----END CERTIFICATE-----Generated at Tue Jan 27 08:47:06 2026 by rpki-client