This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/w9NUwjkVEsbl6f_3X2NX-nZZ-B8.roa File: w9NUwjkVEsbl6f_3X2NX-nZZ-B8.roa (raw, json) Hash identifier: O5fXV03OVnj4GfOGoPRM5h1hGk4OyNwLNCVzYw938+o= Subject key identifier: C3:D3:54:C2:39:15:12:C6:E5:E9:FF:F7:5F:63:57:FA:76:59:F8:1F Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5463BB35475C3955E0A51DD2E656F Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/w9NUwjkVEsbl6f_3X2NX-nZZ-B8.roa Signing time: Thu 01 Jan 2026 22:19:47 +0000 ROA not before: Thu 01 Jan 2026 22:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201114 IP address blocks: 62.176.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:46:3b:b3:54:75:c3:95:5e:0a:51:dd:2e:65:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3d354c2391512c6e5e9fff75f6357fa7659f81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:26:fe:92:09:35:70:1b:a1:0e:69:6e:ee: e3:43:4d:f7:75:e7:70:0c:68:23:e3:fb:ce:0f:c3: cd:05:96:ec:7e:91:3f:d5:f1:dc:5e:11:ea:7d:ca: 3c:f5:82:45:a6:e8:ac:67:6b:87:13:44:16:16:d4: 4d:13:c1:aa:f9:4f:2f:fb:a7:3c:5d:e2:db:0e:5b: 8c:7a:e7:5c:3c:4f:3a:19:ec:d4:09:cc:3f:83:a9: 03:ea:14:5c:55:63:02:37:7d:c8:32:36:45:b8:d9: c3:23:db:9f:2f:71:fa:cc:73:ce:dc:fa:10:e9:6e: 9b:22:ee:7a:48:d0:6a:ef:b6:c8:e0:d3:35:0e:e6: 22:f2:a2:b0:5a:81:8e:ea:20:7a:d5:93:b5:de:9b: 64:62:01:d2:c0:aa:b0:96:1a:41:2e:08:b4:45:ce: 23:98:4d:63:2c:f2:66:a0:89:fb:16:68:23:d0:c1: 34:ed:3c:47:6c:32:64:f9:42:55:e8:0f:53:df:f0: de:cd:0c:41:7c:4a:25:6b:e1:ae:39:5c:85:be:89: 07:3b:5d:18:25:94:62:46:39:84:36:90:5f:2f:20: 7a:f8:30:18:e9:81:2b:8f:45:5e:65:fb:48:19:a1: 5e:e1:cd:74:cc:9d:2a:99:ce:40:77:bd:ff:41:1a: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D3:54:C2:39:15:12:C6:E5:E9:FF:F7:5F:63:57:FA:76:59:F8:1F X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/w9NUwjkVEsbl6f_3X2NX-nZZ-B8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.176.121.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:68:34:cc:b2:31:2b:16:b8:28:11:33:fb:79:03:df:0c:2d: f5:be:c3:04:90:a5:8c:81:b7:33:39:59:60:44:6b:c1:e4:35: 65:af:fd:bf:74:b0:ba:f4:14:59:9a:71:75:a3:3f:a2:f3:6f: 6b:fe:b9:6e:0f:44:6d:56:74:60:d5:c7:ee:59:af:98:e9:7e: 5b:48:57:07:a8:1f:00:5c:5d:e9:b1:f3:07:c3:54:10:e1:71: 23:ec:3d:1e:d1:3e:e3:81:da:7e:23:ed:7c:e6:3e:f2:28:20: 9a:0d:d8:ba:88:ba:3e:4e:eb:a6:58:90:7c:eb:91:c9:4e:bd: d2:3f:a6:36:3e:01:ec:d1:11:74:89:37:3b:ea:9e:db:c2:e1: f5:19:17:4c:9a:27:e2:15:a1:db:58:53:82:7b:f0:3e:a2:b6: f0:92:90:00:eb:56:3a:a4:9b:2d:16:37:59:66:1d:ad:cc:7b: 77:43:93:0c:47:fb:77:4a:72:23:31:2a:c6:ca:1e:86:a2:09: 85:24:9f:7e:fd:7a:84:42:87:7b:cc:da:e0:ba:ee:5e:de:fd: c4:b1:d4:b4:89:49:e4:c2:e2:1a:5f:38:f9:50:2f:a2:da:60: 87:c8:69:06:df:f4:2a:17:41:88:41:f1:d0:3a:fd:8d:91:7c: f4:2f:67:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUY7s1R1w5VeClHdLmVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2QzNTRjMjM5MTUxMmM2ZTVlOWZmZjc1ZjYzNTdmYTc2NTlmODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT8m/pIJNXAboQ5pbu7jQ033dedw DGgj4/vOD8PNBZbsfpE/1fHcXhHqfco89YJFpuisZ2uHE0QWFtRNE8Gq+U8v+6c8 XeLbDluMeudcPE86GezUCcw/g6kD6hRcVWMCN33IMjZFuNnDI9ufL3H6zHPO3PoQ 6W6bIu56SNBq77bI4NM1DuYi8qKwWoGO6iB61ZO13ptkYgHSwKqwlhpBLgi0Rc4j mE1jLPJmoIn7Fmgj0ME07TxHbDJk+UJV6A9T3/DezQxBfEola+GuOVyFvokHO10Y JZRiRjmENpBfLyB6+DAY6YErj0VeZftIGaFe4c10zJ0qmc5Ad73/QRr30QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMPTVMI5FRLG5en/919jV/p2WfgfMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvdzlOVXdqa1ZFc2JsNmZfM1gyTlgtblpaLUI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPrB5MA0G CSqGSIb3DQEBCwUAA4IBAQBtaDTMsjErFrgoETP7eQPfDC31vsMEkKWMgbczOVlg RGvB5DVlr/2/dLC69BRZmnF1oz+i829r/rluD0RtVnRg1cfuWa+Y6X5bSFcHqB8A XF3psfMHw1QQ4XEj7D0e0T7jgdp+I+185j7yKCCaDdi6iLo+TuumWJB865HJTr3S P6Y2PgHs0RF0iTc76p7bwuH1GRdMmifiFaHbWFOCe/A+orbwkpAA61Y6pJstFjdZ Zh2tzHt3Q5MMR/t3SnIjMSrGyh6GogmFJJ9+/XqEQod7zNrguu5e3v3EsdS0iUnk wuIaXzj5UC+i2mCHyGkG3/QqF0GIQfHQOv2NkXz0L2cL -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:55 2026 by rpki-client