This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa File: sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa (raw, json) Hash identifier: MfbxVfKPhfU7+vz/KhDXRG39RyplbnNlSLuWA903WKA= Subject key identifier: B0:D8:FF:95:A8:8E:70:0C:B1:E3:22:8A:A1:3E:5E:A3:51:71:61:B4 Certificate issuer: /CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Certificate serial: 019B78354246B2537E791F0ADE0851C3EC9D Authority key identifier: 83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa Signing time: Thu 01 Jan 2026 06:18:34 +0000 ROA not before: Thu 01 Jan 2026 06:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 176.100.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:42:46:b2:53:7e:79:1f:0a:de:08:51:c3:ec:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83f36b0adee6cb5518763b5bc8eaa3d41f23e938 Validity Not Before: Jan 1 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0d8ff95a88e700cb1e3228aa13e5ea3517161b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:24:10:7e:01:2a:a5:b7:5d:40:e6:82:c6:f2: 80:ad:2c:9a:48:bc:05:78:ad:48:65:b0:8a:92:14: 32:82:70:cb:de:cd:4b:e2:19:9c:fe:74:db:b8:4d: 45:77:2c:e6:a1:65:f8:a8:71:11:20:29:b9:04:72: 3f:ed:9c:a0:71:d8:bd:f8:c9:47:bc:f1:40:9e:3b: 22:f0:a3:e5:27:11:bf:69:1a:62:6b:b0:62:3d:c0: 89:9e:d0:75:02:66:0d:fe:be:92:be:a4:d9:8a:a2: 0e:38:d2:af:57:74:a8:84:0f:07:a8:41:d0:d7:ce: 57:65:1c:40:20:90:6f:dd:ed:16:f1:40:68:29:f9: c4:ce:f9:38:3c:55:34:a3:32:77:3c:2c:d0:93:f2: 37:25:16:64:cb:ff:df:ce:a9:0a:eb:a2:9e:8b:93: 52:0a:35:ba:4e:e7:bd:37:c5:fd:cc:44:1b:75:eb: dc:e1:b8:c5:c0:39:fc:24:c5:bb:9b:88:ab:6c:fe: 83:7f:ef:fb:92:35:31:69:86:c8:92:c1:ca:a6:3a: 45:71:62:ad:2e:ed:11:79:c0:28:b6:8e:90:15:37: 68:04:5c:f3:b9:d2:a0:6f:dd:b0:dd:ed:b7:c0:2a: 02:83:39:b5:fe:a1:bc:0a:8a:5b:b9:bb:a8:d5:db: 2f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D8:FF:95:A8:8E:70:0C:B1:E3:22:8A:A1:3E:5E:A3:51:71:61:B4 X509v3 Authority Key Identifier: keyid:83:F3:6B:0A:DE:E6:CB:55:18:76:3B:5B:C8:EA:A3:D4:1F:23:E9:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_NrCt7my1UYdjtbyOqj1B8j6Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/sNj_laiOcAyx4yKKoT5eo1FxYbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/73195c-e663-498c-97db-af64f3fa2459/1/g_NrCt7my1UYdjtbyOqj1B8j6Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.128.0/23 Signature Algorithm: sha256WithRSAEncryption 05:bb:74:4a:94:fe:17:68:97:81:d8:e0:3d:74:e9:10:c3:76: 78:83:a3:e3:b8:39:ea:db:8d:03:c3:38:90:fa:4d:dd:e8:72: 90:ff:b8:a5:f3:a0:0f:ab:fb:1b:71:0e:17:b3:a0:ca:17:74: b4:ec:3a:3b:af:90:91:c5:c0:68:41:28:87:d9:53:28:7a:a5: c1:ef:c7:3b:4b:4c:b0:a3:f9:d7:84:b8:45:a6:53:df:5e:62: 22:6f:16:a6:d5:39:ad:28:4f:d1:af:2f:d5:13:00:ae:5d:fb: 46:aa:b8:89:76:c2:9c:e1:70:af:31:ba:5e:30:7a:42:51:38: 29:09:73:72:41:d1:9e:37:35:c2:67:6e:d1:40:2c:ee:d5:ca: b1:ff:d0:5a:e9:42:bb:1c:e6:f5:5f:ac:89:4f:bb:a4:c0:9a: 4e:65:ba:0f:d2:7f:d5:a2:be:1a:7a:c0:0b:9b:04:8b:e0:5d: ff:c5:15:23:75:e4:6e:5b:04:a4:2d:41:7a:b2:e8:e3:6c:5b: 81:33:d0:7a:b7:e1:91:b5:db:33:30:c1:1a:31:a6:31:66:89: 68:37:64:13:fc:16:37:fc:5c:d4:f2:e6:30:7e:46:15:b5:86: c7:a9:47:a9:cb:b3:87:e9:0f:ce:33:7a:99:09:92:e4:5b:f8: b2:39:b2:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUJGslN+eR8K3ghRw+ydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZjM2YjBhZGVlNmNiNTUxODc2M2I1YmM4ZWFhM2Q0MWYy M2U5MzgwHhcNMjYwMTAxMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGQ4ZmY5NWE4OGU3MDBjYjFlMzIyOGFhMTNlNWVhMzUxNzE2MWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCQQfgEqpbddQOaCxvKArSyaSLwF eK1IZbCKkhQygnDL3s1L4hmc/nTbuE1FdyzmoWX4qHERICm5BHI/7Zygcdi9+MlH vPFAnjsi8KPlJxG/aRpia7BiPcCJntB1AmYN/r6SvqTZiqIOONKvV3SohA8HqEHQ 185XZRxAIJBv3e0W8UBoKfnEzvk4PFU0ozJ3PCzQk/I3JRZky//fzqkK66Kei5NS CjW6Tue9N8X9zEQbdevc4bjFwDn8JMW7m4irbP6Df+/7kjUxaYbIksHKpjpFcWKt Lu0RecAoto6QFTdoBFzzudKgb92w3e23wCoCgzm1/qG8Copbubuo1dsvuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLDY/5WojnAMseMiiqE+XqNRcWG0MB8GA1UdIwQY MBaAFIPzawre5stVGHY7W8jqo9QfI+k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGIt YWY2NGYzZmEyNDU5LzEvc05qX2xhaU9jQXl4NHlLS29UNWVvMUZ4WWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83MzE5NWMtZTY2My00OThjLTk3ZGItYWY2NGYzZmEyNDU5 LzEvZ19OckN0N215MVVZZGp0YnlPcWoxQjhqNlRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsGSAMA0G CSqGSIb3DQEBCwUAA4IBAQAFu3RKlP4XaJeB2OA9dOkQw3Z4g6PjuDnq240DwziQ +k3d6HKQ/7il86APq/sbcQ4Xs6DKF3S07Do7r5CRxcBoQSiH2VMoeqXB78c7S0yw o/nXhLhFplPfXmIibxam1TmtKE/Rry/VEwCuXftGqriJdsKc4XCvMbpeMHpCUTgp CXNyQdGeNzXCZ27RQCzu1cqx/9Ba6UK7HOb1X6yJT7ukwJpOZboP0n/Vor4aesAL mwSL4F3/xRUjdeRuWwSkLUF6sujjbFuBM9B6t+GRtdszMMEaMaYxZoloN2QT/BY3 /FzU8uYwfkYVtYbHqUepy7OH6Q/OM3qZCZLkW/iyObI2 -----END CERTIFICATE-----Generated at Sun Jan 18 08:55:01 2026 by rpki-client