This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/9nPguctHaB_7gscvVC8bMWUEEhg.roa File: 9nPguctHaB_7gscvVC8bMWUEEhg.roa (raw, json) Hash identifier: tgJSmONimeZaLDAFkdP2njX6XOWmQAy8RBHAeP1bFuM= Subject key identifier: F6:73:E0:B9:CB:47:68:1F:FB:82:C7:2F:54:2F:1B:31:65:04:12:18 Certificate issuer: /CN=606560e03ee88332eefbfa6944ebd1038ae0eab8 Certificate serial: 019B7F15B5964CE3D4313A50C7FA3872C4B9 Authority key identifier: 60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/9nPguctHaB_7gscvVC8bMWUEEhg.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210799 IP address blocks: 176.100.45.0/24 maxlen: 24 2a11:c780::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.mft rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b5:96:4c:e3:d4:31:3a:50:c7:fa:38:72:c4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606560e03ee88332eefbfa6944ebd1038ae0eab8 Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f673e0b9cb47681ffb82c72f542f1b3165041218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:00:61:16:f1:8c:d2:72:8d:a4:9b:51:f6: fd:8c:fc:4e:df:15:4b:00:5f:f7:f1:9b:51:a1:52: 2e:90:2f:be:e0:fc:9e:18:60:8f:7d:76:12:44:d9: 5a:f8:18:f2:54:cd:68:6a:4f:37:b5:e1:15:ef:08: 2f:78:f3:25:32:50:65:e4:51:4d:ac:ee:df:2f:ec: c0:e0:9d:c1:56:b4:fa:28:6a:da:92:cb:cf:f7:8b: d6:d5:c4:70:e0:68:0a:7e:40:bc:d6:88:74:96:04: f9:17:57:b9:ca:c8:ee:bc:7c:da:61:dd:c8:38:00: c7:89:b1:e7:88:fa:b2:7b:68:3a:7f:15:e7:74:c1: 36:1d:ef:92:df:f9:b3:85:87:8e:9c:1f:fb:16:13: 91:e7:30:e7:2f:3a:6a:a7:26:1e:d7:26:38:df:8b: 80:e0:4a:3d:d9:2a:ff:55:7a:74:50:d0:67:fc:8b: 78:20:46:eb:ca:67:69:6a:6d:2d:c6:82:cf:ec:3c: 6c:27:8b:ec:78:97:e7:64:90:c4:ae:fa:98:0b:78: 8e:e9:47:c5:05:e4:c9:28:74:71:ca:7a:00:e9:c1: c6:99:37:1c:7b:ee:12:88:10:7e:e2:06:87:a0:b8: 78:96:e7:44:68:bf:80:b6:22:96:8e:4f:6d:76:99: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:73:E0:B9:CB:47:68:1F:FB:82:C7:2F:54:2F:1B:31:65:04:12:18 X509v3 Authority Key Identifier: keyid:60:65:60:E0:3E:E8:83:32:EE:FB:FA:69:44:EB:D1:03:8A:E0:EA:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGVg4D7ogzLu-_ppROvRA4rg6rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/9nPguctHaB_7gscvVC8bMWUEEhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d4b78f-8cbb-4846-866e-cf9e7164c07f/1/YGVg4D7ogzLu-_ppROvRA4rg6rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.100.45.0/24 IPv6: 2a11:c780::/29 Signature Algorithm: sha256WithRSAEncryption 3d:15:e6:c2:fb:a6:f5:24:9b:75:b9:39:b0:3c:ce:4e:23:2d: cb:01:f2:c6:a6:2e:74:f6:7b:d3:63:c6:f7:cb:7b:90:74:ab: cd:69:7a:62:0c:18:25:ad:2e:09:de:3d:29:41:86:3b:05:c6: 9b:c3:4c:86:a7:34:22:64:c6:6b:42:95:7b:b6:3a:10:49:10: bd:77:8b:91:d4:cb:f9:21:25:e9:d0:07:a0:be:21:73:ae:38: 8f:0f:19:1a:ef:2a:96:83:5b:a1:ba:0f:ea:c8:e2:ea:c2:38: 31:8d:76:ea:0c:a4:ba:f1:91:cb:81:a0:87:3f:c6:5b:50:2a: 70:d6:cc:4d:c4:c5:b2:ca:a6:e9:c6:b0:50:3f:75:b7:18:d4: c2:9d:12:c6:32:d5:64:0e:c2:66:1f:5e:97:27:bc:27:b1:b7: f5:14:54:ee:40:4f:d8:30:9c:91:5d:c7:6c:c7:f4:12:01:e1: 0d:05:fb:04:12:40:d7:22:da:73:89:9c:6c:36:52:5a:3a:bb: b2:3d:79:55:85:e3:d6:c8:25:ee:d2:fb:25:ee:35:42:86:8c: 9b:86:15:42:08:37:9d:6c:f0:5a:42:20:59:e1:8d:d2:10:2a: 7a:d2:5a:1a:f1:2f:da:21:b0:d8:54:20:f4:5f:d5:13:39:75: 15:3b:3e:0d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FbWWTOPUMTpQx/o4csS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjU2MGUwM2VlODgzMzJlZWZiZmE2OTQ0ZWJkMTAzOGFl MGVhYjgwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjczZTBiOWNiNDc2ODFmZmI4MmM3MmY1NDJmMWIzMTY1MDQxMjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1EAYRbxjNJyjaSbUfb9jPxO3xVL AF/38ZtRoVIukC++4PyeGGCPfXYSRNla+BjyVM1oak83teEV7wgvePMlMlBl5FFN rO7fL+zA4J3BVrT6KGraksvP94vW1cRw4GgKfkC81oh0lgT5F1e5ysjuvHzaYd3I OADHibHniPqye2g6fxXndME2He+S3/mzhYeOnB/7FhOR5zDnLzpqpyYe1yY434uA 4Eo92Sr/VXp0UNBn/It4IEbrymdpam0txoLP7DxsJ4vseJfnZJDErvqYC3iO6UfF BeTJKHRxynoA6cHGmTcce+4SiBB+4gaHoLh4ludEaL+AtiKWjk9tdpk8awIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPZz4LnLR2gf+4LHL1QvGzFlBBIYMB8GA1UdIwQY MBaAFGBlYOA+6IMy7vv6aUTr0QOK4Oq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdWZzREN29nekx1LV9wcFJPdlJBNHJnNnJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9kNGI3OGYtOGNiYi00ODQ2LTg2NmUt Y2Y5ZTcxNjRjMDdmLzEvOW5QZ3VjdEhhQl83Z3NjdlZDOGJNV1VFRWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9kNGI3OGYtOGNiYi00ODQ2LTg2NmUtY2Y5ZTcxNjRjMDdm LzEvWUdWZzREN29nekx1LV9wcFJPdlJBNHJnNnJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAsGQtMA0E AgACMAcDBQMqEceAMA0GCSqGSIb3DQEBCwUAA4IBAQA9FebC+6b1JJt1uTmwPM5O Iy3LAfLGpi509nvTY8b3y3uQdKvNaXpiDBglrS4J3j0pQYY7Bcabw0yGpzQiZMZr QpV7tjoQSRC9d4uR1Mv5ISXp0AegviFzrjiPDxka7yqWg1uhug/qyOLqwjgxjXbq DKS68ZHLgaCHP8ZbUCpw1sxNxMWyyqbpxrBQP3W3GNTCnRLGMtVkDsJmH16XJ7wn sbf1FFTuQE/YMJyRXcdsx/QSAeENBfsEEkDXItpziZxsNlJaOruyPXlVhePWyCXu 0vsl7jVChoybhhVCCDedbPBaQiBZ4Y3SECp60loa8S/aIbDYVCD0X9UTOXUVOz4N -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:31 2026 by rpki-client