This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/e9d8j5pFRds2eyf7EtWu3Q1x5eg.roa File: e9d8j5pFRds2eyf7EtWu3Q1x5eg.roa (raw, json) Hash identifier: CdFMDMixOpI+FPixrzk29327d47UICMJvvmv5LgznBY= Subject key identifier: 7B:D7:7C:8F:9A:45:45:DB:36:7B:27:FB:12:D5:AE:DD:0D:71:E5:E8 Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0 Certificate serial: 019B78354BC2E0BBAC4F762DB1EC5BF54C46 Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/e9d8j5pFRds2eyf7EtWu3Q1x5eg.roa Signing time: Thu 01 Jan 2026 06:18:37 +0000 ROA not before: Thu 01 Jan 2026 06:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 158.162.32.0/19 maxlen: 19 158.162.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:4b:c2:e0:bb:ac:4f:76:2d:b1:ec:5b:f5:4c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0 Validity Not Before: Jan 1 06:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bd77c8f9a4545db367b27fb12d5aedd0d71e5e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:41:a9:78:c5:1f:df:d6:f0:72:b1:0a:b0: 41:80:95:5b:e0:b2:b5:c1:38:38:d4:3f:70:ba:70: a4:1b:5b:19:ba:2a:c3:be:e8:87:b3:f5:00:2b:b9: 85:74:01:85:57:3f:f3:22:8b:ab:b9:e4:6a:c8:c6: 08:46:17:a6:6e:cc:e9:bf:1d:a5:5c:e8:5e:56:53: 04:11:c4:e4:af:d6:bc:a7:e2:19:be:ab:99:0a:29: 05:d4:42:69:36:a0:a8:02:e4:28:33:41:7b:ef:3f: 9c:c4:f2:81:65:2d:66:01:dc:b3:0b:22:2b:8e:28: 74:a1:f2:a0:f7:99:69:07:58:ce:e0:2c:91:a4:ff: 64:3a:b8:84:28:8a:04:f4:4a:8a:86:3a:7b:dc:53: f4:ca:d6:2c:04:b8:b2:33:cb:aa:83:92:a8:a8:76: 95:a3:d9:06:4d:2d:40:85:7d:85:7c:6c:4a:11:55: 1b:1e:d6:b7:0d:c7:a0:f5:9f:5e:92:11:55:bc:97: 13:cf:73:50:b8:c3:9b:fb:b7:8b:81:f3:21:e8:30: 18:90:29:cd:26:c9:5b:f4:2f:56:b2:41:63:f2:48: 6d:79:51:c8:7b:44:82:22:e9:4c:2f:38:4e:e5:d4: 18:e9:14:fd:1f:eb:f5:9b:47:8a:59:9f:31:11:a3: 7e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D7:7C:8F:9A:45:45:DB:36:7B:27:FB:12:D5:AE:DD:0D:71:E5:E8 X509v3 Authority Key Identifier: keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/e9d8j5pFRds2eyf7EtWu3Q1x5eg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.162.32.0/19 158.162.192.0/18 Signature Algorithm: sha256WithRSAEncryption 3f:95:bf:87:8e:78:ea:12:a5:fb:8e:3f:3a:32:ac:74:72:cb: c4:59:8d:d8:ce:dc:db:5c:21:b1:01:b2:6d:f6:07:c8:21:fe: 52:7c:26:71:da:18:68:65:5a:3b:bc:a6:d6:39:5f:15:d6:63: ad:5f:79:a3:c5:a5:56:33:ba:f1:4f:a7:f4:59:d0:9a:f0:f6: ac:f9:ce:08:12:fb:9d:e4:ec:df:c3:d4:c9:31:21:a4:5a:4d: 5d:16:c5:e8:59:f3:8b:1c:fb:2b:f1:08:19:c0:47:f9:5d:58: 68:1b:1f:7b:27:e6:ca:47:e0:c8:df:75:65:85:8a:73:e3:5c: c6:21:a6:ac:fb:fd:df:2e:69:53:6f:87:78:15:6e:b5:7d:ca: 6f:06:55:e3:77:bb:96:b6:f0:af:35:4e:f4:62:98:6e:f2:82: 6b:90:3c:9f:70:55:90:88:64:97:35:46:7e:bc:82:de:ad:79: bd:1c:02:c3:35:33:f7:4b:bf:ce:23:b9:a9:2f:8e:5d:1c:26: f5:6b:69:ac:2c:c0:e0:d2:df:95:bf:15:2b:05:5b:c6:25:6b: 24:0b:79:7e:a3:a9:50:07:ea:5d:9e:74:ba:c3:51:5f:2b:0c: c3:62:9e:18:6b:45:0c:8f:69:e2:61:c9:dd:49:2c:9b:82:f5: 66:fb:4e:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NUvC4LusT3Ytsexb9UxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZjRjYzQxMmNjMzBmYjJmOWY3YzM3YzNlMzkwYmVjNWU2 MjU2YjAwHhcNMjYwMTAxMDYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmQ3N2M4ZjlhNDU0NWRiMzY3YjI3ZmIxMmQ1YWVkZDBkNzFlNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJBBqXjFH9/W8HKxCrBBgJVb4LK1 wTg41D9wunCkG1sZuirDvuiHs/UAK7mFdAGFVz/zIourueRqyMYIRhembszpvx2l XOheVlMEEcTkr9a8p+IZvquZCikF1EJpNqCoAuQoM0F77z+cxPKBZS1mAdyzCyIr jih0ofKg95lpB1jO4CyRpP9kOriEKIoE9EqKhjp73FP0ytYsBLiyM8uqg5KoqHaV o9kGTS1AhX2FfGxKEVUbHta3Dceg9Z9ekhFVvJcTz3NQuMOb+7eLgfMh6DAYkCnN Jslb9C9WskFj8khteVHIe0SCIulMLzhO5dQY6RT9H+v1m0eKWZ8xEaN+4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHvXfI+aRUXbNnsn+xLVrt0NceXoMB8GA1UdIwQY MBaAFAD0zEEsww+y+ffDfD45C+xeYlawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85Mzc1YTItM2U2Zi00NTc3LTg1ZDEt NWYxNDVjZmQyMDcwLzEvZTlkOGo1cEZSZHMyZXlmN0V0V3UzUTF4NWVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy85Mzc1YTItM2U2Zi00NTc3LTg1ZDEtNWYxNDVjZmQyMDcw LzEvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFnqIgAwQG nqLAMA0GCSqGSIb3DQEBCwUAA4IBAQA/lb+HjnjqEqX7jj86Mqx0csvEWY3Yztzb XCGxAbJt9gfIIf5SfCZx2hhoZVo7vKbWOV8V1mOtX3mjxaVWM7rxT6f0WdCa8Pas +c4IEvud5Ozfw9TJMSGkWk1dFsXoWfOLHPsr8QgZwEf5XVhoGx97J+bKR+DI33Vl hYpz41zGIaas+/3fLmlTb4d4FW61fcpvBlXjd7uWtvCvNU70Yphu8oJrkDyfcFWQ iGSXNUZ+vILerXm9HALDNTP3S7/OI7mpL45dHCb1a2msLMDg0t+VvxUrBVvGJWsk C3l+o6lQB+pdnnS6w1FfKwzDYp4Ya0UMj2niYcndSSybgvVm+05O -----END CERTIFICATE-----Generated at Wed Jan 21 12:20:14 2026 by rpki-client