This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hZ7paKBkgnfRhdTMvkqBqehpyoY.roa File: hZ7paKBkgnfRhdTMvkqBqehpyoY.roa (raw, json) Hash identifier: /uyYtceOYJusG8cxuTBdAx+bo5fEwHaFehyAvCaibgk= Subject key identifier: 85:9E:E9:68:A0:64:82:77:D1:85:D4:CC:BE:4A:81:A9:E8:69:CA:86 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AACF7DAA906B7D2E551F45EBF6042 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hZ7paKBkgnfRhdTMvkqBqehpyoY.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62390 IP address blocks: 109.176.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ac:f7:da:a9:06:b7:d2:e5:51:f4:5e:bf:60:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=859ee968a0648277d185d4ccbe4a81a9e869ca86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:af:b5:c7:0f:4c:db:22:70:b9:12:e5:f8: 50:7a:22:e2:5e:f7:29:e9:fa:9a:d4:a6:1a:33:57: 59:c2:f6:79:8e:5f:66:bb:1e:57:eb:84:ea:f7:4a: b6:18:18:b9:fd:e4:d9:01:13:71:b0:d6:ec:ec:a5: 71:99:6c:88:7f:a0:01:bf:10:6a:29:8b:76:71:1d: 63:14:f1:07:39:c8:c5:d5:da:35:f8:12:b5:a9:20: 59:e8:97:30:42:c1:48:45:51:84:bd:a8:79:a3:36: e9:2b:ef:19:79:14:48:44:d6:76:74:7b:8c:2e:37: f0:da:cc:f5:16:7f:6c:d6:e1:38:a6:dd:a4:92:71: 88:28:c3:e7:c2:ab:d2:fd:aa:b3:76:59:85:17:37: db:99:cc:b9:4e:62:8e:df:e6:81:8f:20:1c:7c:8f: 6e:92:8c:cc:7d:f7:8a:59:c2:f2:93:d8:25:11:0c: d9:22:e4:aa:5c:b9:37:73:e1:fb:69:65:9e:d6:0e: 7c:a3:59:7b:5f:73:b2:ac:fb:98:1b:40:7d:de:5c: 12:55:43:31:e8:5d:5a:91:28:6e:91:1b:6f:e7:44: 25:ad:2c:c6:02:68:ab:3c:1e:48:04:0c:7b:47:e8: 83:44:05:9e:0c:78:a7:63:af:9d:5e:1d:29:5f:50: b8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9E:E9:68:A0:64:82:77:D1:85:D4:CC:BE:4A:81:A9:E8:69:CA:86 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/hZ7paKBkgnfRhdTMvkqBqehpyoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.176.246.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:62:17:b2:9c:c1:5b:ad:77:ac:5d:6b:15:ab:4d:ba:a5:2e: 60:0a:c5:76:21:1c:82:bc:10:ea:21:98:ea:02:1b:a0:1c:82: 43:eb:8f:d0:22:13:3d:6a:e2:2a:2c:ce:60:9b:00:4a:2d:32: dd:64:a8:b6:29:53:61:b2:ae:d2:8d:ce:d8:6b:84:66:c3:91: 2a:1b:a8:26:d8:41:55:aa:2d:c5:8d:e1:45:de:6a:cb:60:d2: 97:91:a8:1a:ef:d2:2e:01:47:04:5a:e8:39:83:2a:ee:23:49: 9b:41:68:20:93:b7:6c:ea:e8:1f:a7:85:1d:7c:7c:0b:5d:16: 0c:22:d4:0a:7c:e6:84:da:5e:6d:0e:67:b9:fe:bf:32:3b:04: 6d:3f:60:d4:83:f0:1b:83:9e:fd:e6:27:3d:4a:96:cb:f4:6b: 56:d9:c5:3b:39:60:f2:30:40:6d:e2:a6:a1:54:3c:9c:d4:21: b9:53:8e:35:12:e3:fe:99:f3:4d:01:55:bb:98:eb:d3:dc:bf: 58:82:7b:cb:ca:ea:fb:c0:c2:b5:c6:f8:09:30:e5:2f:50:1f: b1:1d:75:30:75:d2:22:ab:db:b8:09:66:c0:c4:be:21:1f:42: b3:db:99:c9:f8:ad:3c:99:34:35:92:6f:00:d4:9c:c4:d5:f2: 5b:37:6e:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wqz32qkGt9LlUfRev2BCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTllZTk2OGEwNjQ4Mjc3ZDE4NWQ0Y2NiZTRhODFhOWU4NjljYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/OvtccPTNsicLkS5fhQeiLiXvcp 6fqa1KYaM1dZwvZ5jl9mux5X64Tq90q2GBi5/eTZARNxsNbs7KVxmWyIf6ABvxBq KYt2cR1jFPEHOcjF1do1+BK1qSBZ6JcwQsFIRVGEvah5ozbpK+8ZeRRIRNZ2dHuM Ljfw2sz1Fn9s1uE4pt2kknGIKMPnwqvS/aqzdlmFFzfbmcy5TmKO3+aBjyAcfI9u kozMffeKWcLyk9glEQzZIuSqXLk3c+H7aWWe1g58o1l7X3OyrPuYG0B93lwSVUMx 6F1akShukRtv50QlrSzGAmirPB5IBAx7R+iDRAWeDHinY6+dXh0pX1C4YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIWe6WigZIJ30YXUzL5KganoacqGMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvaFo3cGFLQmtnbmZSaGRUTXZrcUJxZWhweW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbD2MA0G CSqGSIb3DQEBCwUAA4IBAQAvYheynMFbrXesXWsVq026pS5gCsV2IRyCvBDqIZjq AhugHIJD64/QIhM9auIqLM5gmwBKLTLdZKi2KVNhsq7Sjc7Ya4Rmw5EqG6gm2EFV qi3FjeFF3mrLYNKXkaga79IuAUcEWug5gyruI0mbQWggk7ds6ugfp4UdfHwLXRYM ItQKfOaE2l5tDme5/r8yOwRtP2DUg/Abg5795ic9SpbL9GtW2cU7OWDyMEBt4qah VDyc1CG5U441EuP+mfNNAVW7mOvT3L9YgnvLyur7wMK1xvgJMOUvUB+xHXUwddIi q9u4CWbAxL4hH0Kz25nJ+K08mTQ1km8A1JzE1fJbN27x -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:53 2026 by rpki-client