This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bOA4TmEkE2X60T5_L0whGDb6lMg.roa File: bOA4TmEkE2X60T5_L0whGDb6lMg.roa (raw, json) Hash identifier: WIWhXgpAmPYcW++esAcb795B5hJnmjeR8EonEy7w1w0= Subject key identifier: 6C:E0:38:4E:61:24:13:65:FA:D1:3E:7F:2F:4C:21:18:36:FA:94:C8 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AD227AC2878CA2AFE09EFC8078A45 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bOA4TmEkE2X60T5_L0whGDb6lMg.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213693 IP address blocks: 109.176.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d2:27:ac:28:78:ca:2a:fe:09:ef:c8:07:8a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ce0384e61241365fad13e7f2f4c211836fa94c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:ad:1e:1d:9d:b2:f7:61:75:a3:38:8a:4b: f8:c4:50:8e:0c:66:6c:2c:58:5b:ad:f6:5f:d4:70: eb:59:f4:ed:6f:ec:7a:60:7d:80:bc:0a:d5:89:00: 39:0b:00:6c:33:70:10:30:13:87:e2:10:60:d3:f3: 67:c0:7b:fb:d5:c4:01:d0:e9:67:6a:a1:da:68:77: 3c:7a:27:ee:3b:2b:20:0f:1d:1b:68:45:cb:26:1a: 92:3f:72:62:6a:a2:96:fa:a1:b5:9e:70:de:63:d3: 57:06:c0:8b:ef:bb:e9:85:1a:b9:7c:80:1f:cd:f5: 76:4d:5a:99:a9:77:b5:46:2b:bf:4f:66:54:82:f6: 27:40:37:f9:e2:d1:8b:76:be:a3:c8:c0:10:ac:8b: 60:cd:a8:7a:a6:46:0c:ad:5d:91:67:f1:57:e1:e3: e7:4c:48:02:7f:9f:58:e1:9d:13:5e:e2:ba:7a:4f: ab:b5:9f:f3:d0:3c:68:23:37:0c:6c:c0:69:a5:2e: c5:b3:77:5c:8c:8e:c3:32:00:82:91:cb:1d:ae:d0: a0:9b:87:b7:2e:22:96:03:05:0c:b7:9d:cb:60:f2: e5:a0:e0:5c:4c:cf:74:b2:b0:83:92:b9:09:09:49: b1:85:e2:65:dc:b0:f0:23:2b:8d:5b:d8:69:f7:b0: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E0:38:4E:61:24:13:65:FA:D1:3E:7F:2F:4C:21:18:36:FA:94:C8 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bOA4TmEkE2X60T5_L0whGDb6lMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.202.0/24 Signature Algorithm: sha256WithRSAEncryption 50:a5:fb:92:59:13:01:a5:5d:6e:58:29:06:3c:3b:23:bb:89: 51:5f:69:67:e5:87:5d:82:13:65:76:d6:65:44:35:8e:34:06: 6a:3c:13:82:15:a2:e7:6e:73:6e:53:0d:ff:bf:39:4d:a1:d0: 4d:74:5e:3e:0a:1b:ea:85:76:65:d7:f9:6e:8d:4c:4c:07:fb: 03:c7:c4:d4:3a:ce:10:d1:1f:0a:d6:a2:9b:b9:b5:1d:ed:96: c9:90:94:64:ab:37:54:7b:0e:34:dc:47:19:40:3d:0b:e3:38: db:bb:f4:84:e5:8a:69:10:42:86:36:c3:e9:25:bf:15:49:2e: 95:3c:c6:24:d6:09:03:f4:e4:47:d2:28:51:19:e3:dc:ad:22: 74:4c:a8:cd:31:6d:e2:01:b7:aa:4a:fd:93:8f:8f:41:e0:3b: 62:eb:d7:3d:5a:85:e3:0e:52:d1:23:7f:8c:2e:70:24:78:26: 8a:46:73:be:60:2b:ba:b3:14:d7:46:b8:80:3c:03:91:78:e7: 64:1a:23:24:ed:f5:e1:11:14:c6:b3:b8:3f:f5:61:40:64:d2: bb:35:c5:2c:08:4d:5e:80:37:1f:e2:ef:8f:39:59:a7:e1:da: c2:fb:c3:b2:ae:63:45:e1:73:7e:42:c8:b2:7c:5c:13:63:14: 39:9a:06:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WtInrCh4yir+Ce/IB4pFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2UwMzg0ZTYxMjQxMzY1ZmFkMTNlN2YyZjRjMjExODM2ZmE5NGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3KtHh2dsvdhdaM4ikv4xFCODGZs LFhbrfZf1HDrWfTtb+x6YH2AvArViQA5CwBsM3AQMBOH4hBg0/NnwHv71cQB0Oln aqHaaHc8eifuOysgDx0baEXLJhqSP3JiaqKW+qG1nnDeY9NXBsCL77vphRq5fIAf zfV2TVqZqXe1Riu/T2ZUgvYnQDf54tGLdr6jyMAQrItgzah6pkYMrV2RZ/FX4ePn TEgCf59Y4Z0TXuK6ek+rtZ/z0DxoIzcMbMBppS7Fs3dcjI7DMgCCkcsdrtCgm4e3 LiKWAwUMt53LYPLloOBcTM90srCDkrkJCUmxheJl3LDwIyuNW9hp97ClkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGzgOE5hJBNl+tE+fy9MIRg2+pTIMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvYk9BNFRtRWtFMlg2MFQ1X0wwd2hHRGI2bE1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbDKMA0G CSqGSIb3DQEBCwUAA4IBAQBQpfuSWRMBpV1uWCkGPDsju4lRX2ln5YddghNldtZl RDWONAZqPBOCFaLnbnNuUw3/vzlNodBNdF4+ChvqhXZl1/lujUxMB/sDx8TUOs4Q 0R8K1qKbubUd7ZbJkJRkqzdUew403EcZQD0L4zjbu/SE5YppEEKGNsPpJb8VSS6V PMYk1gkD9ORH0ihRGePcrSJ0TKjNMW3iAbeqSv2Tj49B4Dti69c9WoXjDlLRI3+M LnAkeCaKRnO+YCu6sxTXRriAPAOReOdkGiMk7fXhERTGs7g/9WFAZNK7NcUsCE1e gDcf4u+POVmn4drC+8OyrmNF4XN+QsiyfFwTYxQ5mgZF -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:12 2026 by rpki-client