This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa File: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (raw, json) Hash identifier: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio= Subject key identifier: 4A:CF:A9:C6:0E:CC:09:49:C0:4C:E4:29:B9:3F:09:87:C6:BA:2A:73 Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Certificate serial: 019B7DCB67D53AD26883992BCF614B31A556 Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 176.57.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:67:d5:3a:d2:68:83:99:2b:cf:61:4b:31:a5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4acfa9c60ecc0949c04ce429b93f0987c6ba2a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:67:49:09:10:0a:f7:71:50:b2:55:04:15: 18:81:38:ef:0c:88:8d:9c:52:66:ed:dd:ea:8f:60: a2:00:23:01:f9:fe:8c:e5:bc:21:af:18:50:65:4a: f3:20:2c:97:03:33:41:a5:8b:23:12:ed:2c:b4:82: a4:98:08:9f:29:ae:5a:f2:cb:a0:f1:f6:67:9b:52: f9:f2:bc:89:28:0a:3b:cd:4a:45:dd:f5:9e:68:ae: 65:d1:f5:c4:be:a7:2e:04:5e:6f:fc:2c:21:49:e7: ec:21:f7:5a:1f:71:34:40:9e:9d:4d:59:35:45:f0: 7d:cb:f1:89:68:bf:0f:e1:b8:ad:b2:de:4d:c6:bd: 83:bd:3e:e8:2f:26:73:b4:5a:09:58:47:05:ad:98: e2:47:0b:9b:2e:13:69:5b:db:0c:58:ea:60:2e:ef: 09:73:9b:7f:57:37:c8:12:3b:61:44:41:10:10:90: a5:7f:03:07:95:35:7f:78:51:f8:92:7a:5a:25:65: 7a:92:e4:ce:60:e1:7f:2f:ca:63:9f:55:da:c8:25: 29:7e:64:c8:ea:46:d4:23:96:3f:4b:83:c0:8b:36: 7c:71:82:67:1a:8f:d8:cd:43:7e:ff:32:3e:b8:94: 23:91:52:cb:24:23:bc:f2:3d:75:7f:10:ff:40:90: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CF:A9:C6:0E:CC:09:49:C0:4C:E4:29:B9:3F:09:87:C6:BA:2A:73 X509v3 Authority Key Identifier: keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.178.0/24 Signature Algorithm: sha256WithRSAEncryption 19:c0:cf:35:28:6c:9a:2d:d1:81:13:db:db:73:2f:bd:66:2f: 59:5b:b8:f0:3f:9e:f6:9e:15:93:44:72:b3:12:ff:75:c7:50: 6c:cd:b0:93:d7:cd:50:8b:5e:90:ae:91:45:51:43:f9:7e:b8: d1:af:31:9c:08:c5:47:c0:dc:7b:ae:fe:8a:8c:5d:b9:48:d4: f6:cb:3e:9d:c8:ad:ce:ce:1b:ad:6c:30:8b:41:f0:13:c3:96: 15:79:dd:10:0e:63:ec:14:4d:c9:61:bb:b9:4e:17:95:0d:3b: f8:f7:f2:f1:47:36:7f:c3:f4:33:86:63:e1:86:0f:65:4d:95: 39:c2:80:0e:14:f5:43:ef:8f:1d:03:f6:06:df:92:75:23:b0: 9f:3e:44:38:7f:97:84:b2:e6:e5:4c:41:77:ce:0f:a2:92:27: b4:43:c7:d6:fe:27:ca:fd:13:b9:bc:be:ba:6e:3d:4b:e5:0d: ea:dc:31:db:d2:52:2a:99:35:33:c2:90:1b:90:24:4d:90:4b: de:fa:98:be:42:44:86:92:36:f9:0b:ae:3f:8e:02:c3:8a:76: 84:a7:19:f3:90:97:95:1d:cc:e5:0b:65:b0:02:6a:6c:3d:87: f1:2c:1e:ee:95:56:17:1c:dd:41:50:52:fb:dc:99:c0:1b:7c: d5:d4:2e:58 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt9y2fVOtJog5krz2FLMaVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy MjBmYzIwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWNmYTljNjBlY2MwOTQ5YzA0Y2U0MjliOTNmMDk4N2M2YmEyYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLBnSQkQCvdxULJVBBUYgTjvDIiN nFJm7d3qj2CiACMB+f6M5bwhrxhQZUrzICyXAzNBpYsjEu0stIKkmAifKa5a8sug 8fZnm1L58ryJKAo7zUpF3fWeaK5l0fXEvqcuBF5v/CwhSefsIfdaH3E0QJ6dTVk1 RfB9y/GJaL8P4bitst5Nxr2DvT7oLyZztFoJWEcFrZjiRwubLhNpW9sMWOpgLu8J c5t/VzfIEjthREEQEJClfwMHlTV/eFH4knpaJWV6kuTOYOF/L8pjn1XayCUpfmTI 6kbUI5Y/S4PAizZ8cYJnGo/YzUN+/zI+uJQjkVLLJCO88j11fxD/QJBnnwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFErPqcYOzAlJwEzkKbk/CYfGuipzMB8GA1UdIwQY MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz LWE4OWY4MTc3NjQwNi8xL1NzLXB4ZzdNQ1VuQVRPUXB1VDhKaDhhNktuTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQzLWE4OWY4MTc3NjQw Ni8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACwObIw DQYJKoZIhvcNAQELBQADggEBABnAzzUobJot0YET29tzL71mL1lbuPA/nvaeFZNE crMS/3XHUGzNsJPXzVCLXpCukUVRQ/l+uNGvMZwIxUfA3Huu/oqMXblI1PbLPp3I rc7OG61sMItB8BPDlhV53RAOY+wUTclhu7lOF5UNO/j38vFHNn/D9DOGY+GGD2VN lTnCgA4U9UPvjx0D9gbfknUjsJ8+RDh/l4Sy5uVMQXfOD6KSJ7RDx9b+J8r9E7m8 vrpuPUvlDercMdvSUiqZNTPCkBuQJE2QS976mL5CRIaSNvkLrj+OAsOKdoSnGfOQ l5UdzOULZbACamw9h/EsHu6VVhcc3UFQUvvcmcAbfNXULlg= -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:52 2026 by rpki-client