This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c9kKTxDNPAWM0oCgrElFmrWyd00.roa File: c9kKTxDNPAWM0oCgrElFmrWyd00.roa (raw, json) Hash identifier: oRBeoLm1jElAYtoTPxTYPlgcqgA28RS7Wup1MdhdH6M= Subject key identifier: 73:D9:0A:4F:10:CD:3C:05:8C:D2:80:A0:AC:49:45:9A:B5:B2:77:4D Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E0BEB20CDE50E33686BB114201B70 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c9kKTxDNPAWM0oCgrElFmrWyd00.roa Signing time: Thu 01 Jan 2026 12:17:42 +0000 ROA not before: Thu 01 Jan 2026 12:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216070 IP address blocks: 176.126.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:0b:eb:20:cd:e5:0e:33:68:6b:b1:14:20:1b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73d90a4f10cd3c058cd280a0ac49459ab5b2774d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:59:8c:1c:87:3b:3d:1d:31:bf:a9:b7:bb: f9:5f:b6:2c:1a:e3:cd:c5:b0:ff:b8:73:ce:bc:13: 0d:25:66:fa:1c:59:b8:71:01:64:0f:82:65:29:64: fd:36:b8:37:7a:e8:98:33:df:87:58:7a:50:83:00: 32:d7:35:51:55:63:7b:e4:46:fc:78:f1:14:00:6b: 31:33:ab:cd:bb:e0:f8:ae:02:57:9e:1f:65:28:65: b5:d6:e9:72:d4:b4:74:18:13:77:29:e4:15:da:8b: 2f:ba:35:ad:54:99:d0:41:f2:ea:57:df:a4:da:ad: 03:af:18:c2:2f:50:98:e3:9a:94:52:d7:51:4c:e3: 8a:ce:f1:ac:d4:f9:80:d3:48:6f:21:13:db:ff:fa: b1:58:e6:ac:87:79:b5:a0:64:1d:f8:04:16:42:f8: 60:83:fd:83:1c:60:cb:19:50:43:99:f1:69:75:06: b9:5a:76:83:27:f3:97:df:e4:61:7f:b3:bf:c4:cc: c9:41:bf:04:ff:1b:56:17:9e:ff:fd:b0:fd:a5:1e: fe:a5:fb:10:7d:66:78:b8:24:a3:cd:80:6f:eb:52: af:e2:a6:5f:51:f8:41:65:e9:9a:ff:5a:18:fe:65: e3:19:87:7f:17:62:42:92:2d:04:b3:4c:c2:3a:3d: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D9:0A:4F:10:CD:3C:05:8C:D2:80:A0:AC:49:45:9A:B5:B2:77:4D X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c9kKTxDNPAWM0oCgrElFmrWyd00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.126.174.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:e5:ac:38:d5:91:64:0e:af:9e:7e:ca:16:45:bf:84:4e:16: c7:5f:89:c9:bc:59:1e:ea:7a:c6:5c:82:90:c2:61:b4:2e:31: 57:1f:e3:06:78:b7:26:6c:38:8d:07:bb:d9:cd:19:e9:bd:b4: 92:2e:97:b2:c4:6a:bf:03:91:a7:3c:ac:c6:9d:5f:d9:d9:69: fa:8c:88:6f:a8:88:84:47:89:ed:e8:62:56:f7:4a:08:58:9b: c4:7c:23:24:b4:ad:bd:5d:e5:f1:79:29:84:46:4a:57:81:46: cc:ca:0e:a5:3a:f3:38:fe:04:ae:67:58:9f:95:9f:48:b7:20: bf:31:11:1c:9f:a7:1f:c6:c4:63:1f:92:61:cd:cc:65:82:3a: 09:a1:f9:24:d3:6c:55:b0:84:af:56:f5:35:e1:b9:2b:c6:0e: 64:d2:af:2d:2a:c6:c5:b3:20:e4:86:d5:9a:02:ab:03:73:ce: 48:89:52:f1:24:74:ec:92:3a:01:c7:e7:18:aa:f8:b4:c5:14: 8a:90:ae:47:8f:a6:9c:5b:68:3f:30:c3:5b:5d:23:ca:27:80: 0c:70:b3:eb:6b:2c:bf:64:ca:90:39:ce:fd:44:98:0a:a0:d2: 8d:f2:e1:77:74:f8:08:b7:5d:70:21:5b:7f:5d:7c:6b:72:c8: 21:87:d6:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgvrIM3lDjNoa7EUIBtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2Q5MGE0ZjEwY2QzYzA1OGNkMjgwYTBhYzQ5NDU5YWI1YjI3NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXFZjByHOz0dMb+pt7v5X7YsGuPN xbD/uHPOvBMNJWb6HFm4cQFkD4JlKWT9Nrg3euiYM9+HWHpQgwAy1zVRVWN75Eb8 ePEUAGsxM6vNu+D4rgJXnh9lKGW11uly1LR0GBN3KeQV2osvujWtVJnQQfLqV9+k 2q0DrxjCL1CY45qUUtdRTOOKzvGs1PmA00hvIRPb//qxWOash3m1oGQd+AQWQvhg g/2DHGDLGVBDmfFpdQa5WnaDJ/OX3+Rhf7O/xMzJQb8E/xtWF57//bD9pR7+pfsQ fWZ4uCSjzYBv61Kv4qZfUfhBZema/1oY/mXjGYd/F2JCki0Es0zCOj2whQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHPZCk8QzTwFjNKAoKxJRZq1sndNMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvYzlrS1R4RE5QQVdNMG9DZ3JFbEZtcld5ZDAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsH6uMA0G CSqGSIb3DQEBCwUAA4IBAQCK5aw41ZFkDq+efsoWRb+EThbHX4nJvFke6nrGXIKQ wmG0LjFXH+MGeLcmbDiNB7vZzRnpvbSSLpeyxGq/A5GnPKzGnV/Z2Wn6jIhvqIiE R4nt6GJW90oIWJvEfCMktK29XeXxeSmERkpXgUbMyg6lOvM4/gSuZ1iflZ9ItyC/ MREcn6cfxsRjH5JhzcxlgjoJofkk02xVsISvVvU14bkrxg5k0q8tKsbFsyDkhtWa AqsDc85IiVLxJHTskjoBx+cYqvi0xRSKkK5Hj6acW2g/MMNbXSPKJ4AMcLPrayy/ ZMqQOc79RJgKoNKN8uF3dPgIt11wIVt/XXxrcsghh9bC -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:14 2026 by rpki-client