This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wEri72pFsS9Dly7L_lxzY5OEiI4.roa File: wEri72pFsS9Dly7L_lxzY5OEiI4.roa (raw, json) Hash identifier: bHZk0We/xQIz3XiIA/tBI7ytGpmeQt2piWvfbNOjUp8= Subject key identifier: C0:4A:E2:EF:6A:45:B1:2F:43:97:2E:CB:FE:5C:73:63:93:84:88:8E Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C75198D99AA18BECAA0A2A0E41F55A Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wEri72pFsS9Dly7L_lxzY5OEiI4.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393427 IP address blocks: 66.9.96.0/20 maxlen: 24 168.75.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:51:98:d9:9a:a1:8b:ec:aa:0a:2a:0e:41:f5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c04ae2ef6a45b12f43972ecbfe5c73639384888e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:cb:b3:c3:41:6c:c5:c0:18:1e:50:cf:70: cd:32:92:5e:a4:30:fb:3b:d5:a7:21:13:10:09:8f: f5:2a:2b:0c:2e:22:84:47:bc:3e:fd:c6:2a:4f:2e: 52:7d:10:6d:8c:2a:a1:00:b4:9d:6e:a5:6c:53:41: 92:76:b6:64:5e:88:d3:e5:4b:39:7e:40:27:1f:ab: 70:12:e4:48:ef:f8:30:59:8a:36:63:2a:31:a9:9c: 6a:26:cd:69:53:06:ce:4e:3a:10:f9:07:25:95:fd: 4d:0b:36:5c:90:5b:be:66:0b:de:0a:47:ea:57:c1: 5b:6e:cf:f4:a1:dc:52:71:84:39:cf:94:d6:92:c4: e3:08:69:1e:ae:40:a2:32:96:89:6b:48:06:d8:08: 48:89:62:29:55:8c:a2:0d:d7:0b:f8:75:1a:27:5c: 89:cb:af:d8:41:69:f5:94:fe:35:3f:75:7e:d8:ea: bf:2d:74:35:87:e6:2b:e0:f2:2f:b9:48:96:84:2b: 3e:86:32:3d:08:b7:e3:e3:fc:80:91:37:c3:cb:76: 17:c1:e6:dc:97:4c:19:77:e6:75:41:de:35:6f:ae: b5:59:70:6b:cc:d8:f1:d4:6c:bb:eb:c9:6f:d3:9d: 1c:18:f1:28:ae:41:27:fb:c0:a7:13:f7:b7:22:63: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4A:E2:EF:6A:45:B1:2F:43:97:2E:CB:FE:5C:73:63:93:84:88:8E X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wEri72pFsS9Dly7L_lxzY5OEiI4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.9.96.0/20 168.75.224.0/20 Signature Algorithm: sha256WithRSAEncryption 71:46:80:cc:ca:d7:a9:21:e0:ba:02:9f:90:79:3a:64:7d:26: 18:54:8e:22:7d:57:9d:9e:37:c8:a1:cb:de:91:9b:69:ca:2e: 33:78:bf:41:65:20:98:d9:bf:3c:3d:9f:72:a1:62:9f:63:c5: b6:f8:33:8f:6b:aa:48:b3:d4:b8:e3:bd:b8:bc:d0:b2:6d:e7: d1:0d:fc:7a:cb:31:41:d8:32:8e:c5:d3:df:ea:74:81:98:b6: a9:1f:21:8a:07:13:2a:56:a2:04:b0:3e:3b:33:3d:f1:9f:14: 1f:42:30:af:61:2a:97:6a:d2:3c:d2:34:1b:e7:64:f6:38:0c: 8e:fe:56:75:cf:b7:a1:ff:d5:80:52:bc:5f:5d:82:7c:40:5d: 97:e4:d0:ab:3b:90:22:ce:6b:16:7d:da:99:77:98:2b:2a:5c: c7:5e:fa:df:58:dc:8b:65:e4:ec:8a:8a:66:91:b5:44:c7:dd: d8:0c:03:39:df:13:f6:a8:ed:08:e5:a6:39:b9:c8:bd:6a:87: d1:3b:b6:35:52:e6:8b:22:d6:67:f8:98:2a:da:60:ef:be:12: 6d:b8:37:8e:82:a4:6e:f9:19:d7:ec:a4:21:02:dd:c5:db:59: 1e:77:c4:1d:3c:cb:ad:73:b1:a7:a8:e1:94:4c:85:bd:b5:1f: 50:4c:c8:18 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x1GY2Zqhi+yqCioOQfVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDRhZTJlZjZhNDViMTJmNDM5NzJlY2JmZTVjNzM2MzkzODQ4ODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD7Ls8NBbMXAGB5Qz3DNMpJepDD7 O9WnIRMQCY/1KisMLiKER7w+/cYqTy5SfRBtjCqhALSdbqVsU0GSdrZkXojT5Us5 fkAnH6twEuRI7/gwWYo2YyoxqZxqJs1pUwbOTjoQ+Qcllf1NCzZckFu+ZgveCkfq V8Fbbs/0odxScYQ5z5TWksTjCGkerkCiMpaJa0gG2AhIiWIpVYyiDdcL+HUaJ1yJ y6/YQWn1lP41P3V+2Oq/LXQ1h+Yr4PIvuUiWhCs+hjI9CLfj4/yAkTfDy3YXwebc l0wZd+Z1Qd41b661WXBrzNjx1Gy768lv050cGPEorkEn+8CnE/e3ImN/qwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMBK4u9qRbEvQ5cuy/5cc2OThIiOMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvd0VyaTcycEZzUzlEbHk3TF9seHpZNU9FaUk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQglgAwQE qEvgMA0GCSqGSIb3DQEBCwUAA4IBAQBxRoDMytepIeC6Ap+QeTpkfSYYVI4ifVed njfIocvekZtpyi4zeL9BZSCY2b88PZ9yoWKfY8W2+DOPa6pIs9S44724vNCybefR Dfx6yzFB2DKOxdPf6nSBmLapHyGKBxMqVqIEsD47Mz3xnxQfQjCvYSqXatI80jQb 52T2OAyO/lZ1z7eh/9WAUrxfXYJ8QF2X5NCrO5AizmsWfdqZd5grKlzHXvrfWNyL ZeTsiopmkbVEx93YDAM53xP2qO0I5aY5uci9aofRO7Y1UuaLItZn+Jgq2mDvvhJt uDeOgqRu+RnX7KQhAt3F21ked8QdPMutc7GnqOGUTIW9tR9QTMgY -----END CERTIFICATE-----Generated at Thu Jan 1 20:30:06 2026 by rpki-client