This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa File: 4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa (raw, json) Hash identifier: mR/ntepXIb3AfkywKQIADTaonFHTRbi9R2FQyBq3dKQ= Subject key identifier: E2:D9:51:83:97:19:49:05:D3:91:7D:94:4B:5C:54:67:41:B2:46:07 Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63 Certificate serial: 019B7BA4FD988BFAEB33E0E12E33A3EB7647 Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa Signing time: Thu 01 Jan 2026 22:19:28 +0000 ROA not before: Thu 01 Jan 2026 22:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29283 IP address blocks: 176.140.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 10:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:fd:98:8b:fa:eb:33:e0:e1:2e:33:a3:eb:76:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63 Validity Not Before: Jan 1 22:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2d9518397194905d3917d944b5c546741b24607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:81:a5:76:19:2d:72:e4:b9:fd:e4:25:8f:21: b5:68:b0:55:f7:37:e5:2b:20:63:a6:7f:77:67:19: 68:be:81:05:1b:fb:87:83:3c:05:c0:8e:66:9c:de: c6:94:6a:b4:df:48:d2:25:c5:d3:b7:f3:ef:e7:24: fe:c6:a6:79:d5:42:d9:40:6c:9a:cf:3b:86:ea:b9: 14:87:c0:2e:6b:e9:88:6b:a2:09:3a:db:7e:71:4e: 67:e7:88:9b:be:79:12:fd:2f:c4:12:77:0b:6c:fd: cc:2c:49:1f:e0:2a:ee:d6:99:e8:fb:a5:2e:fd:01: 2c:1d:1a:9c:65:8a:e1:c8:29:25:f6:0c:c3:8a:29: 5b:b7:5d:41:1a:9e:76:d6:22:df:9a:7d:57:f8:24: 30:62:c6:d9:30:f1:3a:fa:36:6b:de:0a:13:58:8a: 6e:f6:ec:36:e5:fb:8f:45:d1:5a:bf:fa:cd:d5:b9: 08:fa:b8:e2:0f:a5:f8:2b:73:18:77:fe:a0:3a:30: 58:9f:28:7e:7c:a4:92:fc:c6:ac:d9:43:a0:da:18: 25:03:d8:56:da:21:7c:c8:4e:96:02:7f:fc:eb:23: 31:87:7c:4d:51:f3:e3:78:f7:58:50:29:de:fe:35: 7b:51:85:7a:e7:1e:67:0f:15:95:73:1b:7f:a4:a3: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D9:51:83:97:19:49:05:D3:91:7D:94:4B:5C:54:67:41:B2:46:07 X509v3 Authority Key Identifier: keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/4tlRg5cZSQXTkX2US1xUZ0GyRgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.140.108.0/24 Signature Algorithm: sha256WithRSAEncryption bc:1f:16:10:b3:25:eb:b2:de:2e:18:8b:c3:b4:e5:15:8c:57: 96:dd:cc:0b:f5:af:51:22:a7:37:c6:4f:6c:ba:d8:e0:60:b9: ce:34:a2:ea:86:58:7e:ce:29:1e:80:08:fb:66:aa:e9:c7:27: 00:a2:ba:12:39:6a:21:93:54:c6:35:12:1e:02:fa:59:1e:e3: 6a:82:a0:f2:ad:77:35:07:14:e8:ed:bd:13:f1:8b:4f:30:c1: 66:75:33:f1:23:2d:92:7a:bb:0a:da:5c:e0:a0:45:75:f5:ee: 11:11:f2:1c:57:2c:bf:d9:1e:ce:07:19:33:0c:d5:4e:34:82: bf:4e:7c:14:27:76:dd:5a:f5:6e:a8:c7:86:5e:0f:4c:96:86: be:97:b2:74:3b:14:8f:26:a6:6f:b4:2f:34:ae:1e:35:44:0c: 89:d5:90:79:33:04:49:54:8d:f6:a8:77:28:b1:4c:70:1e:98: 0a:d2:c5:f8:c0:71:f8:39:56:e5:8b:08:9d:45:4b:3b:2b:ac: 16:80:8a:9c:10:56:b0:a0:41:48:42:b5:df:32:1a:aa:a1:a7: f1:74:56:80:6a:0f:19:9d:42:9d:6d:f3:48:c7:a1:f3:8a:ee: 42:79:54:c7:01:d9:b7:77:df:95:ff:6c:b7:78:c3:e1:3c:4d: 44:71:2b:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pP2Yi/rrM+DhLjOj63ZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk NTBhNjMwHhcNMjYwMTAxMjIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmQ5NTE4Mzk3MTk0OTA1ZDM5MTdkOTQ0YjVjNTQ2NzQxYjI0NjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYGldhktcuS5/eQljyG1aLBV9zfl KyBjpn93ZxlovoEFG/uHgzwFwI5mnN7GlGq030jSJcXTt/Pv5yT+xqZ51ULZQGya zzuG6rkUh8Aua+mIa6IJOtt+cU5n54ibvnkS/S/EEncLbP3MLEkf4Cru1pno+6Uu /QEsHRqcZYrhyCkl9gzDiilbt11BGp521iLfmn1X+CQwYsbZMPE6+jZr3goTWIpu 9uw25fuPRdFav/rN1bkI+rjiD6X4K3MYd/6gOjBYnyh+fKSS/Mas2UOg2hglA9hW 2iF8yE6WAn/86yMxh3xNUfPjePdYUCne/jV7UYV65x5nDxWVcxt/pKPnUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOLZUYOXGUkF05F9lEtcVGdBskYHMB8GA1UdIwQY MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt ZWQ1ZDZjZThkN2U4LzEvNHRsUmc1Y1pTUVhUa1gyVVMxeFVaMEd5UmdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4 LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsIxsMA0G CSqGSIb3DQEBCwUAA4IBAQC8HxYQsyXrst4uGIvDtOUVjFeW3cwL9a9RIqc3xk9s utjgYLnONKLqhlh+zikegAj7ZqrpxycAoroSOWohk1TGNRIeAvpZHuNqgqDyrXc1 BxTo7b0T8YtPMMFmdTPxIy2SersK2lzgoEV19e4REfIcVyy/2R7OBxkzDNVONIK/ TnwUJ3bdWvVuqMeGXg9Mloa+l7J0OxSPJqZvtC80rh41RAyJ1ZB5MwRJVI32qHco sUxwHpgK0sX4wHH4OVbliwidRUs7K6wWgIqcEFawoEFIQrXfMhqqoafxdFaAag8Z nUKdbfNIx6Hziu5CeVTHAdm3d9+V/2y3eMPhPE1EcSug -----END CERTIFICATE-----Generated at Sat Jan 3 18:57:48 2026 by rpki-client