This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa File: 0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa (raw, json) Hash identifier: pfh5kzcii4MpQVjtzuuE7xEsH7nvPkPrk2Vo7JxfSO8= Subject key identifier: D1:B1:38:69:A1:A0:76:22:45:27:9D:1D:E1:25:B0:FD:12:79:CA:88 Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9 Certificate serial: 019B7AC9163F8C186CB51B7EA1DF4168CA31 Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa Signing time: Thu 01 Jan 2026 18:19:17 +0000 ROA not before: Thu 01 Jan 2026 18:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199008 IP address blocks: 176.122.48.0/24 maxlen: 24 176.122.49.0/24 maxlen: 24 176.122.50.0/24 maxlen: 24 176.122.51.0/24 maxlen: 24 176.122.52.0/22 maxlen: 22 176.122.55.0/24 maxlen: 24 176.122.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:16:3f:8c:18:6c:b5:1b:7e:a1:df:41:68:ca:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9 Validity Not Before: Jan 1 18:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1b13869a1a0762245279d1de125b0fd1279ca88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:e3:ef:aa:f8:8d:b0:15:aa:e2:b8:6e:09: 1e:61:a3:fc:52:da:61:d8:87:b3:5f:9a:75:41:7e: 8b:09:5a:48:5f:33:52:2b:1a:c9:e5:47:e0:1e:7f: cd:a4:82:a0:eb:96:ec:70:4d:7c:4d:99:99:2b:a2: 88:ba:28:cc:2e:e6:0d:7d:d8:bc:b8:db:23:72:6f: a2:e9:cb:4e:da:2f:b6:23:7b:d9:2c:bc:56:64:f8: bd:98:0a:04:c9:b4:4a:68:b3:58:87:98:44:96:3b: 07:ae:1f:78:f5:fb:48:28:96:c2:4f:ba:7f:01:6b: f0:8f:af:b1:62:a3:59:d1:63:df:06:45:4c:a3:71: 8f:dd:73:73:d3:28:c4:b3:fb:1c:e3:9b:a4:1a:49: ea:14:08:2f:b2:79:aa:b2:0e:0a:83:a8:0f:12:9d: 88:5b:5f:36:2f:80:b0:08:81:7b:51:6c:26:ca:af: e3:92:17:44:0f:fd:92:df:3d:f1:32:66:8c:bd:18: a4:a6:20:89:fb:0f:cc:7e:f0:b2:30:07:f2:ce:95: 99:98:dd:c1:d9:c6:80:0a:cb:38:dd:07:f2:74:b2: 19:07:28:71:bc:07:30:ca:92:ea:03:9f:ef:62:2a: 7e:6d:ec:2e:71:b5:6e:0d:b2:ee:2c:64:4a:ec:02: 15:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B1:38:69:A1:A0:76:22:45:27:9D:1D:E1:25:B0:FD:12:79:CA:88 X509v3 Authority Key Identifier: keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/0bE4aaGgdiJFJ50d4SWw_RJ5yog.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.122.48.0/20 Signature Algorithm: sha256WithRSAEncryption 40:78:30:0c:b5:e7:fd:a2:a1:b4:84:c5:6e:b1:c4:18:6f:9f: d2:24:01:d7:87:ee:fd:33:33:dd:a5:74:8a:24:d8:ff:63:80: c0:71:fe:bf:51:19:13:23:bd:7d:1f:8d:18:be:77:0e:30:20: 7f:32:36:30:f3:9d:94:86:47:56:28:73:f6:72:b0:4b:7d:9e: 28:5a:42:64:c1:50:ea:86:21:3d:cc:c1:ea:80:9d:1b:70:ce: 62:de:a1:95:de:05:33:34:2d:ca:ba:d9:19:1b:80:2e:00:32: c0:b8:ce:fb:c0:4c:c7:56:ab:db:c9:e9:82:73:a7:10:60:a4: ee:06:46:d7:b2:fc:32:b4:65:3f:f6:d5:37:f8:7f:7e:34:e5: 1f:ff:7d:18:2d:3c:c3:81:f9:8b:bd:2f:db:43:28:28:eb:6e: b2:8c:bf:76:01:2c:8e:eb:16:3f:b4:86:05:d7:0d:ca:a3:d7: 40:a1:da:78:39:82:26:1d:da:3e:f0:b5:89:f5:d4:3d:a2:65: d2:d8:51:29:15:6b:65:da:06:b1:36:b3:d9:af:c7:10:e1:1a: b3:93:0a:87:58:69:2d:4b:f1:7d:fa:0f:cb:0e:af:a5:33:60: 4f:89:9b:8d:14:50:4a:8f:03:fc:00:fd:3f:0a:f6:b7:9c:9c: e3:10:ae:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRY/jBhstRt+od9BaMoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NTAyMjg5MDRiOWRiZWI0NzkyYTY5NzcyN2UzNmFhZmQ4 NGQyZTkwHhcNMjYwMTAxMTgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWIxMzg2OWExYTA3NjIyNDUyNzlkMWRlMTI1YjBmZDEyNzljYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdfj76r4jbAVquK4bgkeYaP8Utph 2IezX5p1QX6LCVpIXzNSKxrJ5UfgHn/NpIKg65bscE18TZmZK6KIuijMLuYNfdi8 uNsjcm+i6ctO2i+2I3vZLLxWZPi9mAoEybRKaLNYh5hEljsHrh949ftIKJbCT7p/ AWvwj6+xYqNZ0WPfBkVMo3GP3XNz0yjEs/sc45ukGknqFAgvsnmqsg4Kg6gPEp2I W182L4CwCIF7UWwmyq/jkhdED/2S3z3xMmaMvRikpiCJ+w/MfvCyMAfyzpWZmN3B 2caACss43QfydLIZByhxvAcwypLqA5/vYip+bewucbVuDbLuLGRK7AIVPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGxOGmhoHYiRSedHeElsP0SecqIMB8GA1UdIwQY MBaAFAlQIokEudvrR5Kml3J+Nqr9hNLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQt NjI4MjFjMmMyOTlmLzEvMGJFNGFhR2dkaUpGSjUwZDRTV3dfUko1eW9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQtNjI4MjFjMmMyOTlm LzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEsHowMA0G CSqGSIb3DQEBCwUAA4IBAQBAeDAMtef9oqG0hMVuscQYb5/SJAHXh+79MzPdpXSK JNj/Y4DAcf6/URkTI719H40YvncOMCB/MjYw852UhkdWKHP2crBLfZ4oWkJkwVDq hiE9zMHqgJ0bcM5i3qGV3gUzNC3KutkZG4AuADLAuM77wEzHVqvbyemCc6cQYKTu BkbXsvwytGU/9tU3+H9+NOUf/30YLTzDgfmLvS/bQygo626yjL92ASyO6xY/tIYF 1w3Ko9dAodp4OYImHdo+8LWJ9dQ9omXS2FEpFWtl2gaxNrPZr8cQ4RqzkwqHWGkt S/F9+g/LDq+lM2BPiZuNFFBKjwP8AP0/Cva3nJzjEK40 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:22 2026 by rpki-client