This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/dCctAo4cF_cQVF9v9iua88jVN3g.roa File: dCctAo4cF_cQVF9v9iua88jVN3g.roa (raw, json) Hash identifier: NqSK6SL1qTb0fxaxxTxRSRb53epcbkxkPGl7gPfChT0= Subject key identifier: 74:27:2D:02:8E:1C:17:F7:10:54:5F:6F:F6:2B:9A:F3:C8:D5:37:78 Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008 Certificate serial: 019B79ECD733ED3F06F5C920E83A21D9FCC9 Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/dCctAo4cF_cQVF9v9iua88jVN3g.roa Signing time: Thu 01 Jan 2026 14:18:43 +0000 ROA not before: Thu 01 Jan 2026 14:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 176.116.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d7:33:ed:3f:06:f5:c9:20:e8:3a:21:d9:fc:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008 Validity Not Before: Jan 1 14:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74272d028e1c17f710545f6ff62b9af3c8d53778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:c7:ec:12:d5:b2:1f:98:67:d9:57:3e:e5: 3c:f3:92:08:65:41:a5:a6:99:c2:13:3b:7a:7e:d3: 93:bf:05:14:50:1d:e1:24:c1:7b:e4:8f:f5:24:70: 9e:3b:d1:e1:ca:c5:4d:ef:47:b8:3a:ab:0f:15:79: ec:b7:35:35:2d:18:fb:75:8b:8c:4c:2e:30:07:bf: 97:39:e8:33:21:dd:81:79:50:71:5c:58:e8:e8:f7: e8:4e:e5:81:15:7a:b7:71:29:97:c4:7d:08:1f:d5: fc:ab:c4:15:e5:98:5b:53:91:56:cf:91:c1:80:f7: 91:58:14:72:6a:c5:73:d5:47:f6:46:fb:e3:b4:9d: 98:3f:bf:bb:4b:e5:66:79:d7:a0:4a:97:5b:38:d9: ac:b9:88:df:d1:54:ff:81:17:00:a6:7b:2a:a7:30: 8f:23:24:59:f6:d7:69:d4:03:ce:b2:73:7b:71:ea: 21:70:85:cd:2c:9e:ea:ce:31:b9:8e:68:ac:5f:d1: 42:f6:f1:73:88:65:04:a9:9a:f6:2b:37:d6:72:d0: 0b:b4:76:1c:66:b0:bf:db:5f:56:d7:cd:a2:e4:f1: 7c:ab:0c:5f:bc:fc:3a:30:9b:47:6c:ba:4b:8b:36: c6:13:50:ac:76:7e:bc:10:51:d8:99:94:58:f0:d8: 18:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:27:2D:02:8E:1C:17:F7:10:54:5F:6F:F6:2B:9A:F3:C8:D5:37:78 X509v3 Authority Key Identifier: keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/dCctAo4cF_cQVF9v9iua88jVN3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.116.14.0/24 Signature Algorithm: sha256WithRSAEncryption 43:96:0e:5a:d7:e2:f8:f4:80:8a:a8:cc:96:00:64:cc:86:f0: 7f:42:f1:f1:2d:97:29:12:8b:7a:be:55:2f:10:77:3c:49:98: e7:1e:8f:d5:2a:7c:87:98:47:80:64:0a:a4:fe:ee:09:19:9d: c2:4d:ac:32:ba:c4:7a:a1:cd:e4:a2:ad:cc:49:30:f8:1e:4a: 72:3d:5f:57:a4:32:1a:48:07:da:30:6b:38:78:97:a6:ae:77: 23:d9:ee:84:e6:c5:44:6a:bf:ea:c9:33:8d:f2:8d:40:cf:ba: c0:99:25:3f:4b:22:ef:89:80:35:7f:fe:fa:0d:14:5f:de:9f: 7d:0f:06:90:97:18:b4:c9:eb:e2:94:fa:0d:5f:1b:4c:37:19: d2:79:28:e7:cb:6c:32:f1:67:65:04:37:f0:36:f3:35:7c:5f: 3d:e6:64:8e:39:7a:35:93:e1:c9:ea:d6:86:f3:75:d4:3e:3c: 17:59:6a:f4:4b:ee:c3:73:63:20:19:7e:60:3f:0b:4e:31:32: 71:e2:d8:a8:3e:c9:46:a6:3e:86:8e:6f:2e:05:65:cb:29:10: 97:0f:b9:ae:cc:40:2e:91:7e:e2:7a:20:8c:6d:0a:4b:b3:46: ae:a3:f3:ab:1d:cb:e7:cf:41:0d:5c:4b:10:25:2f:63:b5:3e: 7c:eb:31:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ncz7T8G9ckg6Doh2fzJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYmM4NDAyZjA5MjM0M2I5YzAzZDM4NjA2OTcyOGY4OTgz ZTYwMDgwHhcNMjYwMTAxMTQxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDI3MmQwMjhlMWMxN2Y3MTA1NDVmNmZmNjJiOWFmM2M4ZDUzNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsfH7BLVsh+YZ9lXPuU885IIZUGl ppnCEzt6ftOTvwUUUB3hJMF75I/1JHCeO9HhysVN70e4OqsPFXnstzU1LRj7dYuM TC4wB7+XOegzId2BeVBxXFjo6PfoTuWBFXq3cSmXxH0IH9X8q8QV5ZhbU5FWz5HB gPeRWBRyasVz1Uf2RvvjtJ2YP7+7S+VmedegSpdbONmsuYjf0VT/gRcApnsqpzCP IyRZ9tdp1APOsnN7ceohcIXNLJ7qzjG5jmisX9FC9vFziGUEqZr2KzfWctALtHYc ZrC/219W182i5PF8qwxfvPw6MJtHbLpLizbGE1Csdn68EFHYmZRY8NgYmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHQnLQKOHBf3EFRfb/YrmvPI1Td4MB8GA1UdIwQY MBaAFGy8hALwkjQ7nAPThgaXKPiYPmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQt MjgwZjVhNGI1ZTAzLzEvZENjdEFvNGNGX2NRVkY5djlpdWE4OGpWTjNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQtMjgwZjVhNGI1ZTAz LzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQOMA0G CSqGSIb3DQEBCwUAA4IBAQBDlg5a1+L49ICKqMyWAGTMhvB/QvHxLZcpEot6vlUv EHc8SZjnHo/VKnyHmEeAZAqk/u4JGZ3CTawyusR6oc3koq3MSTD4HkpyPV9XpDIa SAfaMGs4eJemrncj2e6E5sVEar/qyTON8o1Az7rAmSU/SyLviYA1f/76DRRf3p99 DwaQlxi0yevilPoNXxtMNxnSeSjny2wy8WdlBDfwNvM1fF895mSOOXo1k+HJ6taG 83XUPjwXWWr0S+7Dc2MgGX5gPwtOMTJx4tioPslGpj6Gjm8uBWXLKRCXD7muzEAu kX7ieiCMbQpLs0auo/OrHcvnz0ENXEsQJS9jtT586zHA -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:44 2026 by rpki-client