This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/fD0zMeFpTdbjlyII0WXNlsdWjwg.roa File: fD0zMeFpTdbjlyII0WXNlsdWjwg.roa (raw, json) Hash identifier: 1nJ8LKFZY40ZGZ9fyCE9tTFmLCEjP6khJLvEfhwNXts= Subject key identifier: 7C:3D:33:31:E1:69:4D:D6:E3:97:22:08:D1:65:CD:96:C7:56:8F:08 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB893B1C714272FBAC6FF569EDF145 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/fD0zMeFpTdbjlyII0WXNlsdWjwg.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61420 IP address blocks: 176.41.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:89:3b:1c:71:42:72:fb:ac:6f:f5:69:ed:f1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c3d3331e1694dd6e3972208d165cd96c7568f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2a:b8:ea:c3:ac:da:a7:66:03:d5:c2:6a:c0: 19:40:0d:4d:d1:1c:4e:40:b0:fe:38:55:d6:37:d1: 22:87:13:b6:18:87:8c:db:d4:1f:59:41:8e:9e:35: d0:95:54:93:f4:d3:b6:e2:2f:1c:3b:20:0f:8f:81: 44:1e:e9:c8:46:bc:df:a2:8f:d4:7a:0b:d1:2e:bf: 1a:30:36:d6:4a:11:5e:07:a5:8e:8e:01:c0:3b:7c: b4:61:95:9e:b8:7d:9b:43:b6:7d:48:6a:7f:fa:79: c1:0f:6d:11:a7:f1:48:1f:b0:35:9d:f3:74:1f:ee: ff:de:ec:ce:8d:d1:40:cb:2c:53:c5:90:c6:c7:48: ec:54:cf:0d:18:8e:d2:cf:4b:23:c8:84:ec:28:dc: 04:f5:f8:05:80:f6:b6:c9:60:3c:b5:30:47:ba:b9: 50:66:03:8b:a7:d6:ac:93:d0:75:62:d8:97:44:46: 1e:62:6a:00:82:8b:11:73:79:83:2d:68:a0:0e:e0: 51:b4:5c:9a:36:43:34:af:b0:28:1f:ea:d6:84:88: a9:20:c1:f3:c8:18:50:d6:c3:4a:5b:2e:df:9e:1e: 07:ed:a1:3d:c9:79:59:4a:ef:02:1a:f2:8d:db:31: 9d:f2:ca:39:33:4b:01:d7:d2:9a:40:2d:b5:41:02: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3D:33:31:E1:69:4D:D6:E3:97:22:08:D1:65:CD:96:C7:56:8F:08 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/fD0zMeFpTdbjlyII0WXNlsdWjwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.41.133.0/24 Signature Algorithm: sha256WithRSAEncryption 23:d4:2d:a0:d7:df:32:86:70:ff:e7:f5:51:7b:7e:1f:6e:17: 42:e0:dd:51:33:e5:74:a1:c6:c6:8f:47:43:2c:bc:3e:7b:a3: d1:0b:27:ac:1f:ed:ae:77:42:95:62:a7:f6:a2:a0:11:c3:f3: b5:a9:7a:c4:b1:4f:fb:92:20:2a:49:1a:a8:37:18:62:96:b4: 7f:7c:4b:71:c5:93:46:8f:c6:5a:35:f9:8f:e4:89:e5:42:08: 2a:f4:a4:30:1d:57:90:67:2c:7d:58:02:b4:3f:19:d9:ea:40: 1b:99:45:3c:4f:58:e4:da:10:4e:42:6a:33:c0:20:73:86:95: 69:24:9d:2f:26:7d:b6:22:7e:b4:3a:d4:d8:dd:01:67:68:d2: 0d:d9:4b:c1:91:30:76:ba:c1:75:31:05:5d:24:f9:b3:bf:15: 11:21:4c:71:f9:84:9b:46:18:72:10:b3:46:52:9e:f0:4c:2d: 76:74:b3:38:f5:a6:8f:a1:a7:8c:a9:b1:0e:91:e3:7d:18:04: 90:2d:e6:5d:1a:3d:1b:eb:a6:c7:c8:25:62:e4:be:fe:4a:b2: 4b:ba:18:2c:68:7d:4a:7d:2f:78:2f:40:f7:20:e7:75:70:e0: a1:82:e6:50:e4:04:53:2c:e6:85:72:1a:fd:54:03:48:dc:f1: 71:84:54:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264k7HHFCcvusb/Vp7fFFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzNkMzMzMWUxNjk0ZGQ2ZTM5NzIyMDhkMTY1Y2Q5NmM3NTY4ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiq46sOs2qdmA9XCasAZQA1N0RxO QLD+OFXWN9EihxO2GIeM29QfWUGOnjXQlVST9NO24i8cOyAPj4FEHunIRrzfoo/U egvRLr8aMDbWShFeB6WOjgHAO3y0YZWeuH2bQ7Z9SGp/+nnBD20Rp/FIH7A1nfN0 H+7/3uzOjdFAyyxTxZDGx0jsVM8NGI7Sz0sjyITsKNwE9fgFgPa2yWA8tTBHurlQ ZgOLp9ask9B1YtiXREYeYmoAgosRc3mDLWigDuBRtFyaNkM0r7AoH+rWhIipIMHz yBhQ1sNKWy7fnh4H7aE9yXlZSu8CGvKN2zGd8so5M0sB19KaQC21QQI9iQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHw9MzHhaU3W45ciCNFlzZbHVo8IMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvZkQwek1lRnBUZGJqbHlJSTBXWE5sc2RXandnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsCmFMA0G CSqGSIb3DQEBCwUAA4IBAQAj1C2g198yhnD/5/VRe34fbhdC4N1RM+V0ocbGj0dD LLw+e6PRCyesH+2ud0KVYqf2oqARw/O1qXrEsU/7kiAqSRqoNxhilrR/fEtxxZNG j8ZaNfmP5InlQggq9KQwHVeQZyx9WAK0PxnZ6kAbmUU8T1jk2hBOQmozwCBzhpVp JJ0vJn22In60OtTY3QFnaNIN2UvBkTB2usF1MQVdJPmzvxURIUxx+YSbRhhyELNG Up7wTC12dLM49aaPoaeMqbEOkeN9GASQLeZdGj0b66bHyCVi5L7+SrJLuhgsaH1K fS94L0D3IOd1cOChguZQ5ARTLOaFchr9VANI3PFxhFR+ -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:16 2026 by rpki-client