This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/D76OthKlE46ZLM9sdNaSig1Ng6I.roa File: D76OthKlE46ZLM9sdNaSig1Ng6I.roa (raw, json) Hash identifier: pYj/tdJI8tEjZZC6XXCFhJYt0bHwBpZtynKtpFqoszk= Subject key identifier: 0F:BE:8E:B6:12:A5:13:8E:99:2C:CF:6C:74:D6:92:8A:0D:4D:83:A2 Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6 Certificate serial: 019B7BA4F6E3757606F4024BE044C865C240 Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/D76OthKlE46ZLM9sdNaSig1Ng6I.roa Signing time: Thu 01 Jan 2026 22:19:27 +0000 ROA not before: Thu 01 Jan 2026 22:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197792 IP address blocks: 159.255.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f6:e3:75:76:06:f4:02:4b:e0:44:c8:65:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6 Validity Not Before: Jan 1 22:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fbe8eb612a5138e992ccf6c74d6928a0d4d83a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:ea:d2:0d:75:6f:9b:6a:3f:0f:98:bc:2d: 9f:cf:6d:d9:e3:17:01:11:9f:0f:41:7e:31:73:4f: c2:81:c0:85:96:d3:df:72:02:f7:d9:7c:57:9e:ed: 67:2d:e7:fe:db:1e:70:da:5f:36:2e:df:01:d0:d3: 2f:0f:fb:a9:45:b5:0a:15:dd:fa:c4:81:10:6f:24: 46:d1:7a:7a:40:1d:9a:b3:e4:4c:51:6a:5d:16:62: 54:83:b1:8a:7a:3d:99:03:d0:0f:b1:64:dd:86:eb: d1:30:6c:2e:a3:07:8f:ef:79:9c:ac:aa:ae:0d:5b: 34:c9:33:96:7e:f8:10:c6:f5:05:c8:81:43:59:c0: 54:e4:2f:f2:ca:76:09:0f:61:06:48:7b:8a:41:67: a5:2a:51:8b:57:87:84:17:38:8f:76:61:c6:74:51: 5e:07:21:e4:83:b5:60:19:bf:47:ee:74:eb:0b:92: 91:d8:29:90:07:d0:85:4a:5a:cb:6e:b3:5a:fe:21: dd:92:13:f0:aa:a4:85:7e:7f:f6:57:bd:8e:1a:af: 1d:d1:1d:da:3e:19:15:cd:20:6c:9b:b2:95:1c:ba: 53:47:be:b7:8f:d0:93:06:0d:99:a4:45:3d:77:88: f2:e2:81:92:75:2d:87:19:3e:ea:fa:10:23:16:18: 8e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BE:8E:B6:12:A5:13:8E:99:2C:CF:6C:74:D6:92:8A:0D:4D:83:A2 X509v3 Authority Key Identifier: keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/D76OthKlE46ZLM9sdNaSig1Ng6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.40.0/21 Signature Algorithm: sha256WithRSAEncryption 23:f8:c7:e9:99:47:d9:80:3e:ca:3e:83:b5:0c:44:76:9a:18: 04:86:e6:4a:4b:31:cc:da:29:53:16:66:31:63:c1:49:72:f5: a3:5c:af:ae:11:44:3b:41:e0:86:c0:23:05:12:62:2a:83:1b: 43:78:58:2a:63:79:ca:da:f3:e7:2e:ad:a9:33:ce:cf:93:92: b4:b1:04:34:72:93:f1:21:67:55:ae:99:e1:80:3d:cd:43:8d: 8e:01:b6:7b:19:eb:10:81:fd:a0:27:c0:6a:11:ca:11:f9:9f: 0a:4b:11:2d:46:0e:21:ae:1b:ce:34:c0:40:7a:1a:41:7c:84: 85:84:b8:10:71:f4:06:d9:dd:60:88:d7:0f:72:3c:5d:0c:85: 33:68:2a:8e:9c:a4:d9:a4:6c:10:85:f6:77:04:b1:1c:85:03: 6a:52:d9:25:ae:a6:a5:3f:b8:e1:c7:fd:04:76:3d:f8:fd:53: e5:f0:29:ae:4e:fd:35:22:25:5b:fe:e0:58:ea:74:7f:3f:c6: b2:12:f6:64:5d:89:2e:15:d6:a2:24:3d:36:12:14:ab:84:20: b0:5c:e9:9e:31:cd:1a:7b:67:83:61:9b:b6:33:25:d9:bf:66: a5:34:19:36:82:2c:a9:f8:0d:6a:53:9b:52:d1:65:f0:ee:2f: 2f:25:36:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPbjdXYG9AJL4ETIZcJAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTA0Y2M2N2VmOTZkOTAyMmYzZDBiZmM1MWVhZGI0YTRi NjNlZTYwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmJlOGViNjEyYTUxMzhlOTkyY2NmNmM3NGQ2OTI4YTBkNGQ4M2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpzq0g11b5tqPw+YvC2fz23Z4xcB EZ8PQX4xc0/CgcCFltPfcgL32XxXnu1nLef+2x5w2l82Lt8B0NMvD/upRbUKFd36 xIEQbyRG0Xp6QB2as+RMUWpdFmJUg7GKej2ZA9APsWTdhuvRMGwuoweP73mcrKqu DVs0yTOWfvgQxvUFyIFDWcBU5C/yynYJD2EGSHuKQWelKlGLV4eEFziPdmHGdFFe ByHkg7VgGb9H7nTrC5KR2CmQB9CFSlrLbrNa/iHdkhPwqqSFfn/2V72OGq8d0R3a PhkVzSBsm7KVHLpTR763j9CTBg2ZpEU9d4jy4oGSdS2HGT7q+hAjFhiOeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA++jrYSpROOmSzPbHTWkooNTYOiMB8GA1UdIwQY MBaAFHygTMZ++W2QIvPQv8UerbSktj7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEt YTU1NjhlMGZiYjZkLzEvRDc2T3RoS2xFNDZaTE05c2ROYVNpZzFOZzZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEtYTU1NjhlMGZiYjZk LzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn/8oMA0G CSqGSIb3DQEBCwUAA4IBAQAj+MfpmUfZgD7KPoO1DER2mhgEhuZKSzHM2ilTFmYx Y8FJcvWjXK+uEUQ7QeCGwCMFEmIqgxtDeFgqY3nK2vPnLq2pM87Pk5K0sQQ0cpPx IWdVrpnhgD3NQ42OAbZ7GesQgf2gJ8BqEcoR+Z8KSxEtRg4hrhvONMBAehpBfISF hLgQcfQG2d1giNcPcjxdDIUzaCqOnKTZpGwQhfZ3BLEchQNqUtklrqalP7jhx/0E dj34/VPl8CmuTv01IiVb/uBY6nR/P8ayEvZkXYkuFdaiJD02EhSrhCCwXOmeMc0a e2eDYZu2MyXZv2alNBk2giyp+A1qU5tS0WXw7i8vJTZR -----END CERTIFICATE-----Generated at Mon Jan 26 16:21:52 2026 by rpki-client