This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/C9A49XShrpT2L1lbu5v6tyyqxGE.roa File: C9A49XShrpT2L1lbu5v6tyyqxGE.roa (raw, json) Hash identifier: Z6iZSfPjsI83CHUl8Gu4u2Ux8v9NUtJP/iskQ5nB/10= Subject key identifier: 0B:D0:38:F5:74:A1:AE:94:F6:2F:59:5B:BB:9B:FA:B7:2C:AA:C4:61 Certificate issuer: /CN=168f0e2ba2d093433a4b61295727b99bb145f77b Certificate serial: 019B7CEE61CD7CC55CD5578CFC4F76041B0D Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/C9A49XShrpT2L1lbu5v6tyyqxGE.roa Signing time: Fri 02 Jan 2026 04:19:15 +0000 ROA not before: Fri 02 Jan 2026 04:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198095 IP address blocks: 64.187.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:61:cd:7c:c5:5c:d5:57:8c:fc:4f:76:04:1b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b Validity Not Before: Jan 2 04:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bd038f574a1ae94f62f595bbb9bfab72caac461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:26:ca:45:48:2c:c2:11:7d:41:82:9a:77:66: 61:0c:75:5a:f3:fe:8d:fc:19:4f:ba:46:57:85:9f: 85:b1:22:53:64:00:de:59:d2:94:c0:c2:fe:f4:51: 31:fe:bc:31:b3:ca:eb:2a:eb:b3:de:96:0c:aa:23: 3f:35:4e:95:7e:23:a9:a7:f9:97:a7:cc:b4:c3:70: 3b:ed:b9:b1:b5:16:ac:5a:18:9f:60:21:20:86:63: b6:0a:89:d2:0e:57:3f:0c:aa:01:6f:35:e7:55:e3: aa:fe:bc:9d:cb:04:d6:1b:6f:b3:93:dd:2d:b5:48: 6c:b1:84:db:0b:a3:74:d6:86:9e:64:c6:27:de:09: d2:37:a0:40:01:4b:95:f8:4c:bd:61:94:d3:04:a9: 42:e2:f7:25:a3:58:2e:86:9a:02:9a:a0:57:ff:8c: 69:34:bb:89:36:1e:41:a7:80:9a:29:cd:71:77:29: 30:4f:98:7c:60:8c:fb:f6:08:68:f2:3c:1c:2c:cb: f6:3f:2e:6a:96:70:08:ae:77:a2:20:aa:79:c5:b6: e9:72:c1:51:da:3b:57:ee:a5:7a:51:87:29:1e:0c: 05:d5:38:33:b5:6c:14:4a:4b:d4:c7:8b:54:6a:b4: 3c:ce:d5:21:d8:c0:df:cf:bd:1a:46:5e:91:75:ab: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D0:38:F5:74:A1:AE:94:F6:2F:59:5B:BB:9B:FA:B7:2C:AA:C4:61 X509v3 Authority Key Identifier: keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/C9A49XShrpT2L1lbu5v6tyyqxGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.187.108.0/24 Signature Algorithm: sha256WithRSAEncryption 42:f7:18:a1:7a:59:e7:5f:07:4c:73:ee:c8:f4:ed:eb:9a:18: 87:d8:8d:da:37:b4:38:6e:8d:e0:0d:df:d3:e0:ef:0a:b3:af: b3:b8:87:82:be:4b:f9:31:28:00:7f:01:3b:94:84:84:12:6b: e0:b7:6a:8d:d2:6b:2c:6f:f8:41:73:0a:43:d9:46:e1:dd:ec: c6:35:0c:58:c0:53:bc:48:e3:e5:9e:47:f1:04:a9:12:6f:7a: 41:f8:2e:71:92:d2:c7:d7:2d:33:3b:9f:b5:68:84:4f:d9:6c: cc:0b:47:2d:a3:0c:db:e6:06:9c:b2:72:3e:d7:29:74:56:2d: c5:75:11:84:00:45:b6:bc:8b:9f:80:ae:db:6b:db:f6:26:90: 92:0e:e8:1e:65:3b:8b:fa:d7:ca:db:6f:9c:0f:d6:ba:5d:9f: 52:95:23:e6:2c:21:69:94:e4:25:62:70:4b:a1:af:1b:28:ea: 05:93:16:17:fd:42:6c:b9:f5:a2:6d:bb:5a:2e:c3:b9:c9:e1: 31:4c:32:0b:61:56:00:76:ab:75:41:9a:fd:b4:9f:00:3e:d1: 6f:05:69:d7:2d:0b:43:13:5f:af:8c:8a:82:91:b8:e5:80:7b: 16:d5:f2:eb:32:d1:64:17:eb:7f:63:43:76:e9:41:0e:62:38: bf:67:e3:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87mHNfMVc1VeM/E92BBsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OGYwZTJiYTJkMDkzNDMzYTRiNjEyOTU3MjdiOTliYjE0 NWY3N2IwHhcNMjYwMTAyMDQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmQwMzhmNTc0YTFhZTk0ZjYyZjU5NWJiYjliZmFiNzJjYWFjNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSbKRUgswhF9QYKad2ZhDHVa8/6N /BlPukZXhZ+FsSJTZADeWdKUwML+9FEx/rwxs8rrKuuz3pYMqiM/NU6VfiOpp/mX p8y0w3A77bmxtRasWhifYCEghmO2ConSDlc/DKoBbzXnVeOq/rydywTWG2+zk90t tUhssYTbC6N01oaeZMYn3gnSN6BAAUuV+Ey9YZTTBKlC4vclo1guhpoCmqBX/4xp NLuJNh5Bp4CaKc1xdykwT5h8YIz79gho8jwcLMv2Py5qlnAIrneiIKp5xbbpcsFR 2jtX7qV6UYcpHgwF1TgztWwUSkvUx4tUarQ8ztUh2MDfz70aRl6Rdaug1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAvQOPV0oa6U9i9ZW7ub+rcsqsRhMB8GA1UdIwQY MBaAFBaPDiui0JNDOkthKVcnuZuxRfd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wODA4YjItMTYzMy00YzBkLWJjYmMt ZjZmY2Y3M2NlZTcwLzEvQzlBNDlYU2hycFQyTDFsYnU1djZ0eXlxeEdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8wODA4YjItMTYzMy00YzBkLWJjYmMtZjZmY2Y3M2NlZTcw LzEvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLtsMA0G CSqGSIb3DQEBCwUAA4IBAQBC9xihelnnXwdMc+7I9O3rmhiH2I3aN7Q4bo3gDd/T 4O8Ks6+zuIeCvkv5MSgAfwE7lISEEmvgt2qN0mssb/hBcwpD2Ubh3ezGNQxYwFO8 SOPlnkfxBKkSb3pB+C5xktLH1y0zO5+1aIRP2WzMC0ctowzb5gacsnI+1yl0Vi3F dRGEAEW2vIufgK7ba9v2JpCSDugeZTuL+tfK22+cD9a6XZ9SlSPmLCFplOQlYnBL oa8bKOoFkxYX/UJsufWibbtaLsO5yeExTDILYVYAdqt1QZr9tJ8APtFvBWnXLQtD E1+vjIqCkbjlgHsW1fLrMtFkF+t/Y0N26UEOYji/Z+Ny -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:46 2026 by rpki-client