This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/9DLIgBG0jvfuH8ou8TZjKoDe-ho.roa File: 9DLIgBG0jvfuH8ou8TZjKoDe-ho.roa (raw, json) Hash identifier: HpaZI7kuC6hl/mDsBhvQTtPfFBQMuUpypzbtW9UHoK0= Subject key identifier: F4:32:C8:80:11:B4:8E:F7:EE:1F:CA:2E:F1:36:63:2A:80:DE:FA:1A Certificate issuer: /CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71 Certificate serial: 019B78A2ACC050EE5CAF62D6F67C282AE42B Authority key identifier: 50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/9DLIgBG0jvfuH8ou8TZjKoDe-ho.roa Signing time: Thu 01 Jan 2026 08:18:05 +0000 ROA not before: Thu 01 Jan 2026 08:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215957 IP address blocks: 152.114.248.0/21 maxlen: 22 2a14:c680:10::/44 maxlen: 44 2a14:c680:100::/40 maxlen: 40 2a14:c680:200::/40 maxlen: 40 2a14:c680:300::/40 maxlen: 40 2a14:c681::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.mft rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ac:c0:50:ee:5c:af:62:d6:f6:7c:28:2a:e4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=507c770bb6b08dcb4d6ea9b0c96272af3a6f9c71 Validity Not Before: Jan 1 08:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f432c88011b48ef7ee1fca2ef136632a80defa1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:19:15:eb:07:eb:3c:9a:bd:0a:64:2d:93: 41:2b:cf:53:77:74:0b:4e:a3:57:eb:eb:7b:be:1f: af:7a:2c:fa:39:0e:6e:98:6a:b1:76:b7:e6:42:df: 68:05:f2:85:04:c7:cf:6a:e2:55:0d:52:aa:db:25: 87:e7:66:f5:d2:b1:9c:a9:5b:91:c0:7d:44:c7:47: 54:f3:7f:8a:b6:4c:11:22:22:fe:b6:de:63:f0:00: 73:b2:ba:00:bf:11:ca:db:92:e6:4f:57:c7:94:a5: f1:a9:75:3d:98:b4:e1:1b:bb:74:79:33:4a:0c:8e: 3b:78:2b:92:cc:95:71:75:9f:67:1f:07:87:7c:24: 71:95:55:6c:e5:2f:9f:56:5f:64:31:8a:99:17:8d: 4a:d7:28:c3:de:7b:71:3c:61:17:0c:ad:85:d2:bf: b7:fa:a7:75:7b:8c:8c:bf:7d:3a:8e:63:db:69:f2: a5:87:90:7d:03:e0:f3:8e:68:c6:7d:23:27:1e:41: db:f1:36:e0:63:94:71:6b:a2:a5:46:ca:48:7b:3b: f5:e3:60:7b:65:38:9e:01:ce:dd:0f:5b:07:ee:84: 71:a8:f6:bc:eb:7a:af:1c:43:58:3e:a7:c1:76:81: 1e:89:d6:19:24:b8:b5:78:36:30:17:6d:e0:42:8a: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:32:C8:80:11:B4:8E:F7:EE:1F:CA:2E:F1:36:63:2A:80:DE:FA:1A X509v3 Authority Key Identifier: keyid:50:7C:77:0B:B6:B0:8D:CB:4D:6E:A9:B0:C9:62:72:AF:3A:6F:9C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHx3C7awjctNbqmwyWJyrzpvnHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/9DLIgBG0jvfuH8ou8TZjKoDe-ho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/5f1511-10fc-43e7-a8e0-58b79bc9bcc7/1/UHx3C7awjctNbqmwyWJyrzpvnHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.114.248.0/21 IPv6: 2a14:c680:10::/44 2a14:c680:100::-2a14:c680:3ff:ffff:ffff:ffff:ffff:ffff 2a14:c681::/32 Signature Algorithm: sha256WithRSAEncryption 38:29:bd:58:80:08:8c:af:a2:87:3f:35:e9:39:eb:2a:6a:8e: e2:64:8c:4b:01:5b:00:00:6b:f8:47:f1:69:2c:5c:53:f6:bf: 4a:4d:23:75:76:ba:32:9a:44:80:ab:60:f7:79:5d:a2:18:47: 7c:4a:17:0b:c3:14:8e:0e:19:bf:bd:b6:e6:2c:f5:1b:5f:43: 67:5b:1d:0b:51:09:18:1c:0a:d9:3e:48:38:a9:ea:75:16:f8: 42:8a:53:93:bd:be:fb:e8:4f:2b:a8:d5:4c:4b:b1:08:82:ea: 38:23:44:4d:d6:19:ae:2d:2b:b0:e9:2e:7e:8e:86:13:f5:be: f8:11:33:1b:1a:27:89:5a:ff:3f:37:3e:d9:06:a5:d3:ca:37: b1:e0:13:a8:7f:cf:e2:1c:c2:b1:42:87:1b:f1:b1:66:d7:28: d1:44:90:fa:e8:10:94:2a:ee:e7:ea:46:38:e7:85:db:77:df: 34:63:31:dd:26:43:99:6b:25:2e:60:2b:6b:fe:ec:62:b3:35: 2c:e5:ea:19:9a:6c:3f:2b:aa:32:7e:f7:29:4c:44:cd:7e:45: 02:51:e5:42:20:83:f5:8b:4b:d9:76:34:03:84:39:04:3d:1e: f2:23:0f:d5:79:21:7f:02:ca:a2:35:3a:b3:08:10:e8:0e:fa: 6b:9f:2f:e8 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt4oqzAUO5cr2LW9nwoKuQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwN2M3NzBiYjZiMDhkY2I0ZDZlYTliMGM5NjI3MmFmM2E2 ZjljNzEwHhcNMjYwMTAxMDgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDMyYzg4MDExYjQ4ZWY3ZWUxZmNhMmVmMTM2NjMyYTgwZGVmYTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6AZFesH6zyavQpkLZNBK89Td3QL TqNX6+t7vh+veiz6OQ5umGqxdrfmQt9oBfKFBMfPauJVDVKq2yWH52b10rGcqVuR wH1Ex0dU83+KtkwRIiL+tt5j8ABzsroAvxHK25LmT1fHlKXxqXU9mLThG7t0eTNK DI47eCuSzJVxdZ9nHweHfCRxlVVs5S+fVl9kMYqZF41K1yjD3ntxPGEXDK2F0r+3 +qd1e4yMv306jmPbafKlh5B9A+DzjmjGfSMnHkHb8TbgY5Rxa6KlRspIezv142B7 ZTieAc7dD1sH7oRxqPa863qvHENYPqfBdoEeidYZJLi1eDYwF23gQorLawIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFPQyyIARtI737h/KLvE2YyqA3voaMB8GA1UdIwQY MBaAFFB8dwu2sI3LTW6psMlicq86b5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUh4M0M3YXdqY3ROYnFtd3lXSnlyenB2bkhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi81ZjE1MTEtMTBmYy00M2U3LWE4ZTAt NThiNzliYzliY2M3LzEvOURMSWdCRzBqdmZ1SDhvdThUWmpLb0RlLWhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi81ZjE1MTEtMTBmYy00M2U3LWE4ZTAtNThiNzliYzliY2M3 LzEvVUh4M0M3YXdqY3ROYnFtd3lXSnlyenB2bkhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAMBAIAATAGAwQDmHL4MCgE AgACMCIDBwQqFMaAABAwEAMGACoUxoABAwYCKhTGgAADBQAqFMaBMA0GCSqGSIb3 DQEBCwUAA4IBAQA4Kb1YgAiMr6KHPzXpOesqao7iZIxLAVsAAGv4R/FpLFxT9r9K TSN1droymkSAq2D3eV2iGEd8ShcLwxSODhm/vbbmLPUbX0NnWx0LUQkYHArZPkg4 qep1FvhCilOTvb776E8rqNVMS7EIguo4I0RN1hmuLSuw6S5+joYT9b74ETMbGieJ Wv8/Nz7ZBqXTyjex4BOof8/iHMKxQocb8bFm1yjRRJD66BCUKu7n6kY454Xbd980 YzHdJkOZayUuYCtr/uxiszUs5eoZmmw/K6oyfvcpTETNfkUCUeVCIIP1i0vZdjQD hDkEPR7yIw/VeSF/AsqiNTqzCBDoDvprny/o -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:16 2026 by rpki-client