This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/ph347tnTWIGgg-ume_myaaWDaLI.roa File: ph347tnTWIGgg-ume_myaaWDaLI.roa (raw, json) Hash identifier: QshFHAUgJPhiQAsqFN+zLpGH5qrmvaGrvVCzAsW8GE0= Subject key identifier: A6:1D:F8:EE:D9:D3:58:81:A0:83:EB:A6:7B:F9:B2:69:A5:83:68:B2 Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6D03CD7B227EC2590C87E46CF4CA6 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/ph347tnTWIGgg-ume_myaaWDaLI.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 157.97.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d0:3c:d7:b2:27:ec:25:90:c8:7e:46:cf:4c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a61df8eed9d35881a083eba67bf9b269a58368b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:f5:f8:34:b6:98:ae:3c:e4:03:e9:c6:61: d7:6a:ba:7e:f3:57:2e:b0:11:95:ac:98:ae:0c:fc: bb:7a:dd:a0:9c:23:c9:ea:c4:92:f7:07:99:d5:89: b4:a5:c3:51:7a:b7:11:82:16:69:aa:e2:ac:ad:32: 66:88:cc:ad:32:78:82:bb:8f:c3:f6:8b:ab:be:7d: e2:41:b0:3d:ca:6b:a4:c3:ef:82:35:a9:d4:bf:a5: b9:7f:d7:db:80:79:61:90:68:69:8b:ea:ba:cf:e4: 41:15:0d:b1:0c:ff:9e:81:c8:ad:5f:d3:4f:e1:92: 0c:ff:f0:23:2a:92:11:2a:e6:e9:62:a0:96:84:3a: cf:c4:94:fb:00:a0:16:66:7b:60:4a:de:41:88:66: 58:d6:88:54:f4:15:52:79:67:a4:1a:27:fb:a2:9a: 43:e4:45:74:91:4f:81:66:d2:aa:ed:cc:a3:e2:cf: b9:55:8c:e6:c1:47:e2:93:76:6c:0b:d8:f7:5b:39: 4c:a7:83:4e:e4:42:9f:26:42:9a:92:d0:90:ce:af: 83:42:4c:0d:92:f8:f4:d1:d4:af:b6:3e:1e:b1:c9: d4:2b:43:01:d0:22:ee:2e:53:e7:d2:ad:00:64:58: 56:d6:20:71:7b:b0:21:49:dc:95:5f:97:eb:65:28: 5e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1D:F8:EE:D9:D3:58:81:A0:83:EB:A6:7B:F9:B2:69:A5:83:68:B2 X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/ph347tnTWIGgg-ume_myaaWDaLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.121.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:3a:19:5d:61:ec:24:df:99:b3:4c:39:66:f9:4d:20:16:bf: 05:50:18:68:8f:77:8c:2d:04:fa:39:a2:c0:38:16:46:43:fe: 18:36:52:0e:db:85:fb:9b:22:de:89:c1:39:00:3e:a4:1f:8e: 05:3c:cb:a6:c7:6d:38:1f:4d:89:c4:09:78:9f:c6:18:de:a8: c8:1d:40:bb:2d:19:ac:37:6d:a0:9b:fd:6f:ce:0f:02:4b:0a: 10:02:af:ce:16:14:9d:8b:7e:83:42:49:5e:c8:75:53:59:6d: b6:5a:b4:78:86:94:1d:44:33:a4:6b:5c:83:c7:61:19:6c:19: 50:9f:1a:04:d5:48:51:58:85:45:b8:66:45:e6:a4:0d:f7:df: c9:19:25:e2:eb:51:8a:1c:d0:b0:1e:5a:89:80:df:f5:1d:80: 18:1a:11:57:cf:fa:ad:3f:06:68:a6:5b:da:1c:2f:64:b8:a5: 5c:0f:84:10:c6:93:9d:cb:48:55:d0:22:1d:97:cb:6e:75:b2: 99:bd:24:04:ce:6e:19:02:7a:61:f2:35:af:63:49:32:2b:60: b0:98:fb:70:c7:55:fe:1e:3f:90:69:3d:6e:83:da:79:54:4f: 59:50:35:0d:af:bb:60:2c:51:95:b9:dd:73:f4:1a:7d:99:c0: 90:82:e8:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtA817In7CWQyH5Gz0ymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjFkZjhlZWQ5ZDM1ODgxYTA4M2ViYTY3YmY5YjI2OWE1ODM2OGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vn1+DS2mK485APpxmHXarp+81cu sBGVrJiuDPy7et2gnCPJ6sSS9weZ1Ym0pcNRercRghZpquKsrTJmiMytMniCu4/D 9ourvn3iQbA9ymukw++CNanUv6W5f9fbgHlhkGhpi+q6z+RBFQ2xDP+egcitX9NP 4ZIM//AjKpIRKubpYqCWhDrPxJT7AKAWZntgSt5BiGZY1ohU9BVSeWekGif7oppD 5EV0kU+BZtKq7cyj4s+5VYzmwUfik3ZsC9j3WzlMp4NO5EKfJkKaktCQzq+DQkwN kvj00dSvtj4escnUK0MB0CLuLlPn0q0AZFhW1iBxe7AhSdyVX5frZShe4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYd+O7Z01iBoIPrpnv5smmlg2iyMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvcGgzNDd0blRXSUdnZy11bWVfbXlhYVdEYUxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnWF5MA0G CSqGSIb3DQEBCwUAA4IBAQBqOhldYewk35mzTDlm+U0gFr8FUBhoj3eMLQT6OaLA OBZGQ/4YNlIO24X7myLeicE5AD6kH44FPMumx204H02JxAl4n8YY3qjIHUC7LRms N22gm/1vzg8CSwoQAq/OFhSdi36DQkleyHVTWW22WrR4hpQdRDOka1yDx2EZbBlQ nxoE1UhRWIVFuGZF5qQN99/JGSXi61GKHNCwHlqJgN/1HYAYGhFXz/qtPwZoplva HC9kuKVcD4QQxpOdy0hV0CIdl8tudbKZvSQEzm4ZAnph8jWvY0kyK2CwmPtwx1X+ Hj+QaT1ug9p5VE9ZUDUNr7tgLFGVud1z9Bp9mcCQguhR -----END CERTIFICATE-----Generated at Tue Jan 20 17:13:36 2026 by rpki-client