This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/R9yuRT4SpbFRYXwtoqgd5_GlTyI.roa File: R9yuRT4SpbFRYXwtoqgd5_GlTyI.roa (raw, json) Hash identifier: kxhnGSSaFDIC1z6NUEjoYtqaLZRHrO86ZgnVJODeRiU= Subject key identifier: 47:DC:AE:45:3E:12:A5:B1:51:61:7C:2D:A2:A8:1D:E7:F1:A5:4F:22 Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa Certificate serial: 019B7AC8DEB4149D93BAFA65DC70C5B9D568 Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/R9yuRT4SpbFRYXwtoqgd5_GlTyI.roa Signing time: Thu 01 Jan 2026 18:19:03 +0000 ROA not before: Thu 01 Jan 2026 18:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6830 IP address blocks: 176.117.64.0/22 maxlen: 22 176.117.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:de:b4:14:9d:93:ba:fa:65:dc:70:c5:b9:d5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa Validity Not Before: Jan 1 18:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47dcae453e12a5b151617c2da2a81de7f1a54f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:dd:1d:ab:cf:bb:f7:81:13:e9:7a:7e:4c:df: 19:a2:92:2c:b8:57:c1:cb:42:b6:bc:a1:c9:44:4b: 71:69:82:86:ce:46:41:8d:7c:ab:cd:a9:cf:b0:2c: de:12:2f:5a:b3:38:8b:db:09:17:ef:02:ef:93:ac: 05:23:2e:43:3a:5a:a8:ef:e3:2b:23:c4:ba:dc:d0: 44:9b:cb:c3:b8:8f:80:be:fb:c8:2e:bb:4c:91:41: 47:66:aa:de:dd:ac:f6:55:2c:60:9f:f0:8f:2c:80: 77:94:f7:de:dd:22:f2:41:9e:6e:f4:85:6f:58:b5: ba:06:77:02:54:29:2d:a7:d0:4e:c9:32:13:ca:de: 9c:b7:db:92:bd:31:e2:1e:e1:9a:76:5d:1d:86:95: 92:d6:33:98:a8:2c:30:c9:66:78:5a:d0:f6:df:f7: 44:c4:25:fb:c5:78:12:5e:89:28:6a:0d:07:bf:c5: 45:30:9c:f3:32:21:53:f1:28:1c:f7:79:aa:56:20: 6a:54:2f:47:dd:c1:0a:52:72:62:09:87:0c:bd:f2: e0:83:27:8a:36:36:a1:62:fa:34:f2:ab:6a:60:f0: cc:2b:93:0e:dd:8d:07:76:9b:d3:de:81:63:8d:3d: 02:a0:bc:f0:0f:94:01:b2:a7:fe:e9:3e:b9:e2:b6: 63:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:AE:45:3E:12:A5:B1:51:61:7C:2D:A2:A8:1D:E7:F1:A5:4F:22 X509v3 Authority Key Identifier: keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/R9yuRT4SpbFRYXwtoqgd5_GlTyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.64.0/22 176.117.80.0/22 Signature Algorithm: sha256WithRSAEncryption 89:fb:51:f7:ab:36:2c:bc:58:e9:49:f3:00:71:7d:d7:d9:e6: 92:1e:6b:da:1c:ed:72:4f:e8:33:0d:9b:1f:2f:a2:fc:fb:9b: d8:7b:8c:86:d9:30:d9:c7:51:4d:95:cb:3d:3a:2a:22:01:45: 8e:71:e8:6e:b6:4f:ec:9d:9d:06:99:26:aa:bd:b8:a9:35:55: 36:a4:c5:71:93:04:a1:0e:49:d9:c8:fd:48:26:96:ce:64:5e: 81:90:57:99:f6:6d:12:d0:ec:54:49:d6:4d:01:84:01:9a:11: 02:99:c2:f5:ee:49:fd:73:ea:92:25:a0:f3:02:45:6c:84:57: 11:4c:d2:48:b2:13:8b:ee:7a:b9:3c:7d:4b:2d:74:9c:6b:67: 14:5c:d5:b0:0b:75:e6:a7:29:d2:3d:b6:a9:4f:4f:05:de:c2: df:47:4f:2e:49:a9:73:0c:f4:d3:50:b4:a9:c1:8e:f2:bd:b8: 33:87:84:ff:d8:ae:8c:e5:a8:5b:45:11:21:82:99:e1:e1:b7: a9:02:ec:5a:cf:83:df:8e:8b:e1:2b:68:5a:d7:c5:dc:0e:b9: 94:57:8b:87:55:2e:86:b6:47:1c:28:ab:15:af:2c:72:b8:c2: 5a:ac:3d:5f:4c:20:3a:92:3e:f3:11:ad:59:89:49:8d:79:93: aa:f6:d5:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yN60FJ2Tuvpl3HDFudVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MTYyMTAyZTVhM2MwYWVlYWI2M2MyMWVkOTJhODA1ODI2 ZGI3YWEwHhcNMjYwMTAxMTgxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2RjYWU0NTNlMTJhNWIxNTE2MTdjMmRhMmE4MWRlN2YxYTU0ZjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm90dq8+794ET6Xp+TN8ZopIsuFfB y0K2vKHJREtxaYKGzkZBjXyrzanPsCzeEi9asziL2wkX7wLvk6wFIy5DOlqo7+Mr I8S63NBEm8vDuI+AvvvILrtMkUFHZqre3az2VSxgn/CPLIB3lPfe3SLyQZ5u9IVv WLW6BncCVCktp9BOyTITyt6ct9uSvTHiHuGadl0dhpWS1jOYqCwwyWZ4WtD23/dE xCX7xXgSXokoag0Hv8VFMJzzMiFT8Sgc93mqViBqVC9H3cEKUnJiCYcMvfLggyeK NjahYvo08qtqYPDMK5MO3Y0HdpvT3oFjjT0CoLzwD5QBsqf+6T654rZjiQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEfcrkU+EqWxUWF8LaKoHefxpU8iMB8GA1UdIwQY MBaAFKYWIQLlo8Cu6rY8Ie2SqAWCbbeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGIt OWNlZTc3YmM1MjIyLzEvUjl5dVJUNFNwYkZSWVh3dG9xZ2Q1X0dsVHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGItOWNlZTc3YmM1MjIy LzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCsHVAAwQC sHVQMA0GCSqGSIb3DQEBCwUAA4IBAQCJ+1H3qzYsvFjpSfMAcX3X2eaSHmvaHO1y T+gzDZsfL6L8+5vYe4yG2TDZx1FNlcs9OioiAUWOcehutk/snZ0GmSaqvbipNVU2 pMVxkwShDknZyP1IJpbOZF6BkFeZ9m0S0OxUSdZNAYQBmhECmcL17kn9c+qSJaDz AkVshFcRTNJIshOL7nq5PH1LLXSca2cUXNWwC3XmpynSPbapT08F3sLfR08uSalz DPTTULSpwY7yvbgzh4T/2K6M5ahbRREhgpnh4bepAuxaz4PfjovhK2ha18XcDrmU V4uHVS6GtkccKKsVryxyuMJarD1fTCA6kj7zEa1ZiUmNeZOq9tUR -----END CERTIFICATE-----Generated at Wed Jan 21 04:58:53 2026 by rpki-client