This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/fJg4dPBbW9V0V9GJxGd2E1IZ3Q8.roa File: fJg4dPBbW9V0V9GJxGd2E1IZ3Q8.roa (raw, json) Hash identifier: 9DTO9B8YoPB/uUt1Im78LbNqxaAWyEGXlRRw0zOgX3E= Subject key identifier: 7C:98:38:74:F0:5B:5B:D5:74:57:D1:89:C4:67:76:13:52:19:DD:0F Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Certificate serial: 019B7A5B82164289471F0188450CD17697B7 Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/fJg4dPBbW9V0V9GJxGd2E1IZ3Q8.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 216.25.124.0/24 maxlen: 24 216.25.125.0/24 maxlen: 24 216.25.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:82:16:42:89:47:1f:01:88:45:0c:d1:76:97:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86 Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c983874f05b5bd57457d189c46776135219dd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:74:ee:d7:37:9b:63:a4:7b:07:16:6c:87: 4e:23:dd:f2:e7:b7:f1:5f:55:f3:14:cd:e0:ea:0d: 1b:bb:2e:11:fc:f7:66:45:da:a5:10:af:0e:4d:c6: f5:67:e3:af:b2:90:63:d8:9a:36:1b:22:ed:cd:ae: c2:07:ee:38:0d:c5:a1:d6:3c:91:96:ec:b5:6a:37: 56:2f:02:c0:07:bd:9f:05:bc:16:56:ce:b4:9f:bf: f6:21:f0:c4:56:9c:73:a6:8b:04:a8:2d:24:ad:b8: b6:0d:da:de:f4:74:98:95:83:53:46:16:13:b3:60: c5:5a:20:1a:56:b5:ba:e1:b1:53:bb:9f:50:d0:50: 44:f4:bf:e7:18:12:38:47:57:1f:57:78:de:eb:b7: 29:83:fd:78:d9:c3:33:09:a2:60:3c:f3:c9:e3:b2: a1:0d:b5:ef:9e:4a:cd:38:ba:ae:17:59:be:dd:cc: 93:79:a6:e1:11:74:7a:31:d3:d4:6f:63:6b:8b:16: 56:be:90:94:f4:c9:f2:30:20:c6:69:9f:33:c4:55: 5e:9e:65:10:1a:96:c2:65:1d:f1:11:ae:6c:0e:17: ce:4f:93:ca:72:f2:fb:32:43:db:6d:a6:9d:01:e6: e5:ad:bf:8b:30:6c:4f:8c:48:1b:21:5b:76:b3:54: c1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:98:38:74:F0:5B:5B:D5:74:57:D1:89:C4:67:76:13:52:19:DD:0F X509v3 Authority Key Identifier: keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/fJg4dPBbW9V0V9GJxGd2E1IZ3Q8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.25.124.0-216.25.126.255 Signature Algorithm: sha256WithRSAEncryption 5d:1c:4b:92:63:68:82:58:43:ca:42:75:24:b2:6d:54:85:1d: b9:b1:39:8a:7f:d6:09:98:fc:11:0b:7b:fc:b1:0f:38:dd:88: 4f:01:01:f6:5f:7f:63:96:75:c1:4c:76:ee:5e:65:ed:a0:45: 4a:bd:83:5f:0a:14:a7:06:e0:c2:1f:c8:69:90:e4:54:54:69: 73:77:db:b3:0f:18:28:0a:a3:87:e8:fa:ed:f0:32:c1:d5:6b: 51:07:e7:da:21:6c:0e:0a:f3:85:4f:53:69:2b:70:35:62:34: 2e:8e:91:4e:c5:b2:98:f4:85:ea:38:1a:4a:9d:d2:46:18:d1: ad:a7:6f:8b:5b:22:c8:74:a2:66:cc:2b:66:4c:07:ee:4d:1c: b0:d6:56:1b:c7:13:fb:2e:6d:5d:4c:5b:d9:cd:26:e9:2d:71: 70:17:42:f2:35:f2:64:37:a8:87:16:18:55:fb:5d:64:55:44: 86:43:14:11:94:43:18:ca:60:4f:3c:9a:c0:56:f9:0e:d5:29: 72:d5:71:9f:5b:db:0d:f0:f4:9c:6f:ee:4f:0b:c0:69:56:de: 67:51:de:2c:31:39:9c:4d:95:ed:17:50:87:98:b7:ec:f7:d1: c9:e3:68:7a:6e:e1:6e:15:e5:4b:6d:4f:aa:4d:47:a1:33:1d: 8e:7b:25:e3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6W4IWQolHHwGIRQzRdpe3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOWZjOGEwNjdmYTZkMjQ3NmJkY2UyNGFmZmZhZDE3MTMx ZDllODYwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yzk4Mzg3NGYwNWI1YmQ1NzQ1N2QxODljNDY3NzYxMzUyMTlkZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWh07tc3m2OkewcWbIdOI93y57fx X1XzFM3g6g0buy4R/PdmRdqlEK8OTcb1Z+OvspBj2Jo2GyLtza7CB+44DcWh1jyR luy1ajdWLwLAB72fBbwWVs60n7/2IfDEVpxzposEqC0krbi2Ddre9HSYlYNTRhYT s2DFWiAaVrW64bFTu59Q0FBE9L/nGBI4R1cfV3je67cpg/142cMzCaJgPPPJ47Kh DbXvnkrNOLquF1m+3cyTeabhEXR6MdPUb2NrixZWvpCU9MnyMCDGaZ8zxFVenmUQ GpbCZR3xEa5sDhfOT5PKcvL7MkPbbaadAeblrb+LMGxPjEgbIVt2s1TBjwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHyYOHTwW1vVdFfRicRndhNSGd0PMB8GA1UdIwQY MBaAFMCfyKBn+m0kdr3OJK//rRcTHZ6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYt OGU5MjRmZmJlNTg0LzEvZkpnNGRQQmJXOVYwVjlHSnhHZDJFMUlaM1E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYtOGU5MjRmZmJlNTg0 LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALYGXwD BADYGX4wDQYJKoZIhvcNAQELBQADggEBAF0cS5JjaIJYQ8pCdSSybVSFHbmxOYp/ 1gmY/BELe/yxDzjdiE8BAfZff2OWdcFMdu5eZe2gRUq9g18KFKcG4MIfyGmQ5FRU aXN327MPGCgKo4fo+u3wMsHVa1EH59ohbA4K84VPU2krcDViNC6OkU7Fspj0heo4 Gkqd0kYY0a2nb4tbIsh0ombMK2ZMB+5NHLDWVhvHE/subV1MW9nNJuktcXAXQvI1 8mQ3qIcWGFX7XWRVRIZDFBGUQxjKYE88msBW+Q7VKXLVcZ9b2w3w9Jxv7k8LwGlW 3mdR3iwxOZxNle0XUIeYt+z30cnjaHpu4W4V5UttT6pNR6EzHY57JeM= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:16 2026 by rpki-client