This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/S7xMn2WZ6tpb12ZzK2bfHpgj_jQ.roa File: S7xMn2WZ6tpb12ZzK2bfHpgj_jQ.roa (raw, json) Hash identifier: a6xOII9rFzlXhVP9cTBhXZN2z2bq0zGYQLqbGgEi7x8= Subject key identifier: 4B:BC:4C:9F:65:99:EA:DA:5B:D7:66:73:2B:66:DF:1E:98:23:FE:34 Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Certificate serial: 019B7CEE23124595BB9E884E00BC741A612E Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/S7xMn2WZ6tpb12ZzK2bfHpgj_jQ.roa Signing time: Fri 02 Jan 2026 04:18:59 +0000 ROA not before: Fri 02 Jan 2026 04:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 176.124.200.0/24 maxlen: 24 176.124.208.0/24 maxlen: 24 176.124.209.0/24 maxlen: 24 176.124.210.0/24 maxlen: 24 176.124.211.0/24 maxlen: 24 176.124.212.0/24 maxlen: 24 176.124.213.0/24 maxlen: 24 176.124.214.0/24 maxlen: 24 176.124.215.0/24 maxlen: 24 176.124.216.0/24 maxlen: 24 176.124.217.0/24 maxlen: 24 176.124.218.0/24 maxlen: 24 176.124.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:23:12:45:95:bb:9e:88:4e:00:bc:74:1a:61:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bbc4c9f6599eada5bd766732b66df1e9823fe34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:e1:4e:e2:17:17:ea:ac:da:77:1f:42:72: 7d:18:48:5b:8b:ec:f4:67:9a:98:bd:3f:80:bf:83: 6f:af:a0:2b:62:89:4d:32:90:18:76:a8:d9:19:e3: fa:bc:14:28:c4:e1:87:c6:2f:9b:be:e5:63:6c:da: 2f:8c:9a:c1:f5:a9:be:07:11:67:43:ac:8a:6d:c5: 67:d2:8c:f9:44:92:b4:a3:0e:ca:ab:45:59:a2:da: ca:c5:33:48:77:87:67:57:01:f7:ba:a4:2a:e4:41: 3d:4a:b4:4d:2e:52:df:ea:f6:85:99:49:ce:e5:32: aa:8b:53:03:41:f4:52:05:b1:0f:41:1b:f7:a2:2e: 93:4a:63:c1:3c:0e:b9:74:20:0b:ae:fa:cb:2a:bc: 94:fe:eb:e0:29:77:e4:a2:b0:cd:a8:ae:6e:6b:06: 30:65:94:43:cc:a8:66:5f:96:08:74:d9:4d:39:0e: 01:0c:df:4d:71:b6:c0:f8:d4:c8:da:26:05:6c:90: 37:6e:a0:c6:47:b1:6e:4d:b4:cd:7a:a8:d2:1b:ee: 3d:54:51:b9:e5:3c:ad:94:47:23:17:8f:56:ca:89: c2:8f:cf:af:3a:ca:ab:88:fa:66:88:50:ab:a1:c8: 0c:d3:45:b6:c5:73:aa:4a:cf:9b:95:02:8a:65:21: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BC:4C:9F:65:99:EA:DA:5B:D7:66:73:2B:66:DF:1E:98:23:FE:34 X509v3 Authority Key Identifier: keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/S7xMn2WZ6tpb12ZzK2bfHpgj_jQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.200.0/24 176.124.208.0-176.124.219.255 Signature Algorithm: sha256WithRSAEncryption 77:c8:9d:65:ee:37:aa:eb:96:cc:47:a7:59:24:17:e3:80:93: 5b:fa:5b:48:6d:77:5f:28:38:bf:dd:72:51:c7:de:6b:af:24: 57:17:59:f2:5a:1d:7f:a9:65:21:70:1b:df:97:42:fa:a5:37: 1b:df:60:47:d8:eb:00:3c:51:fc:de:e5:a5:b2:c8:a0:35:56: ff:0f:c6:92:67:39:26:0a:89:92:8a:02:ba:95:5f:bf:ba:60: dc:71:14:68:8f:48:a8:ba:18:5e:15:d9:11:a1:ff:e8:ba:62: d3:13:a5:37:6b:3e:0d:61:f2:86:18:31:79:f7:2a:f6:0a:c2: 4c:aa:ed:7a:24:cf:66:66:92:3d:40:58:44:8f:5a:ad:d3:cd: 7c:9c:84:42:6e:0e:cf:6d:9b:63:39:08:5e:da:0d:da:7a:b3: a3:2c:9a:af:1c:0e:6c:c0:40:35:8b:9a:a9:f9:6d:4a:65:f8: 7b:e2:0f:d1:9d:37:01:83:61:50:2c:02:82:1a:7d:4e:8f:f0: 3d:e8:69:e2:df:8b:81:80:20:06:bc:d4:61:ae:13:e5:98:f9: 9a:7e:c2:18:9e:98:e4:46:34:c6:6b:68:c8:13:48:b0:4f:8c: d0:f9:99:84:9e:6b:21:88:1f:b5:5b:0f:98:98:10:f8:18:bb: 89:4b:e8:59 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87iMSRZW7nohOALx0GmEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjY2Q1ODNjOGQ3MWEyNDI3ZTAwNjBlM2NjOTI0ZjMyZGMx YTgyMGIwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmJjNGM5ZjY1OTllYWRhNWJkNzY2NzMyYjY2ZGYxZTk4MjNmZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCLhTuIXF+qs2ncfQnJ9GEhbi+z0 Z5qYvT+Av4Nvr6ArYolNMpAYdqjZGeP6vBQoxOGHxi+bvuVjbNovjJrB9am+BxFn Q6yKbcVn0oz5RJK0ow7Kq0VZotrKxTNId4dnVwH3uqQq5EE9SrRNLlLf6vaFmUnO 5TKqi1MDQfRSBbEPQRv3oi6TSmPBPA65dCALrvrLKryU/uvgKXfkorDNqK5uawYw ZZRDzKhmX5YIdNlNOQ4BDN9NcbbA+NTI2iYFbJA3bqDGR7FuTbTNeqjSG+49VFG5 5TytlEcjF49WyonCj8+vOsqriPpmiFCrocgM00W2xXOqSs+blQKKZSErSQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEu8TJ9lmeraW9dmcytm3x6YI/40MB8GA1UdIwQY MBaAFMzNWDyNcaJCfgBg48ySTzLcGoILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYt ZjQ4NTAyZDEzOTQ4LzEvUzd4TW4yV1o2dHBiMTJaeksyYmZIcGdqX2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYtZjQ4NTAyZDEzOTQ4 LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAsHzIMAwD BASwfNADBAKwfNgwDQYJKoZIhvcNAQELBQADggEBAHfInWXuN6rrlsxHp1kkF+OA k1v6W0htd18oOL/dclHH3muvJFcXWfJaHX+pZSFwG9+XQvqlNxvfYEfY6wA8Ufze 5aWyyKA1Vv8PxpJnOSYKiZKKArqVX7+6YNxxFGiPSKi6GF4V2RGh/+i6YtMTpTdr Pg1h8oYYMXn3KvYKwkyq7Xokz2Zmkj1AWESPWq3TzXychEJuDs9tm2M5CF7aDdp6 s6Msmq8cDmzAQDWLmqn5bUpl+HviD9GdNwGDYVAsAoIafU6P8D3oaeLfi4GAIAa8 1GGuE+WY+Zp+whiemORGNMZraMgTSLBPjND5mYSeayGIH7VbD5iYEPgYu4lL6Fk= -----END CERTIFICATE-----Generated at Wed Jan 21 11:15:15 2026 by rpki-client