This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/xEEobC6a9g-ieILcoz7D0nJiJUk.roa File: xEEobC6a9g-ieILcoz7D0nJiJUk.roa (raw, json) Hash identifier: oW3AWDFA5hp4F3w3Pl6J/jMvd/iESOLPY+Y+Yt3dnpk= Subject key identifier: C4:41:28:6C:2E:9A:F6:0F:A2:78:82:DC:A3:3E:C3:D2:72:62:25:49 Certificate issuer: /CN=a69749fa2337db33a76474eb812c034e30509d2a Certificate serial: 019B7834EB3B6AA8FEF8CF0069C5B5BF051E Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/xEEobC6a9g-ieILcoz7D0nJiJUk.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 156.118.0.0/24 maxlen: 24 156.118.6.0/24 maxlen: 24 156.118.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:eb:3b:6a:a8:fe:f8:cf:00:69:c5:b5:bf:05:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c441286c2e9af60fa27882dca33ec3d272622549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:c8:e7:31:51:77:84:ea:d5:3f:6c:d9:0e: b6:70:15:e4:4f:a9:d0:1f:35:f5:3a:3a:27:81:20: 77:fb:22:8b:4a:90:fe:d2:da:22:ce:9d:b6:4b:4d: 50:26:31:06:31:1e:d6:0b:a4:58:70:d2:cb:60:2c: 34:83:32:4a:a3:11:d7:e1:71:a8:cb:a8:59:c7:8a: 24:68:e3:35:d6:5d:d6:cc:a7:0a:c4:14:3b:94:90: a6:c8:b2:3d:f7:10:12:11:5d:2d:33:dc:46:1a:33: cb:51:97:55:35:d7:c1:c5:07:a9:e5:32:8c:1f:3a: c1:b1:43:f5:2c:92:0c:91:da:fb:38:48:1e:3e:6e: fd:77:ff:8b:2e:4c:30:6c:07:e1:cc:a2:3d:b2:bd: d5:bd:79:63:a2:6f:8a:1c:4e:78:d8:86:f2:cd:ba: 69:ce:c1:f7:b8:c8:8e:e9:c2:54:54:3a:a6:63:a3: 0f:09:e9:15:45:1f:83:9f:a1:86:64:de:3c:25:14: 01:2d:0c:5a:bb:46:a9:62:c5:db:10:6d:ce:b8:39: cd:f4:51:c3:ef:f7:b2:5e:c3:79:92:33:4c:2b:ae: 3f:5c:b2:52:e1:ef:62:27:ee:7d:da:20:30:1e:c1: 6d:8a:f7:1a:0f:27:1f:c1:b5:66:be:26:31:fe:33: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:28:6C:2E:9A:F6:0F:A2:78:82:DC:A3:3E:C3:D2:72:62:25:49 X509v3 Authority Key Identifier: keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/xEEobC6a9g-ieILcoz7D0nJiJUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.118.0.0/24 156.118.6.0/24 156.118.8.0/24 Signature Algorithm: sha256WithRSAEncryption 23:da:6c:31:4b:c0:99:05:49:5d:9f:a8:39:a5:74:18:03:15: 00:c4:14:c7:1a:5f:a8:94:05:b0:56:a7:f7:64:9a:1a:b3:04: 32:f3:aa:32:54:0f:e3:46:f9:65:f4:09:db:92:e4:f0:75:1e: f4:c1:f0:2e:42:67:7c:b6:aa:87:07:8f:92:76:d1:df:a8:9c: 60:f5:70:38:f9:01:79:78:04:c4:2c:53:d4:49:19:78:7b:40: 69:90:3c:5b:27:47:d1:2a:b0:78:06:76:3e:94:37:bb:23:c0: 87:2a:20:85:d5:36:90:15:3a:5c:9d:06:32:cb:35:b6:37:52: b0:9d:29:56:05:bf:6d:c6:0c:3d:f1:c1:87:bb:90:c7:49:3d: 16:ef:6b:65:fb:17:eb:05:62:2d:c2:a2:0f:7e:09:f5:f2:5f: 43:f6:70:83:e8:6e:96:e4:77:d7:1e:53:82:8d:e4:a2:ef:3d: 46:c5:0c:b9:dc:c6:a2:9d:ab:f9:bd:2b:60:1d:6e:39:80:67: 9f:1a:5a:4a:76:63:d1:b9:bd:4c:c3:a1:0a:6f:4b:1b:04:e7: 0f:b5:79:42:21:85:c7:24:50:75:58:ff:93:1c:6b:e9:e7:f9: 46:61:38:30:a4:09:46:a0:50:79:b8:20:ce:8f:fe:ac:e4:a9: d8:e3:04:5d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NOs7aqj++M8AacW1vwUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTc0OWZhMjMzN2RiMzNhNzY0NzRlYjgxMmMwMzRlMzA1 MDlkMmEwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDQxMjg2YzJlOWFmNjBmYTI3ODgyZGNhMzNlYzNkMjcyNjIyNTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+nI5zFRd4Tq1T9s2Q62cBXkT6nQ HzX1OjongSB3+yKLSpD+0toizp22S01QJjEGMR7WC6RYcNLLYCw0gzJKoxHX4XGo y6hZx4okaOM11l3WzKcKxBQ7lJCmyLI99xASEV0tM9xGGjPLUZdVNdfBxQep5TKM HzrBsUP1LJIMkdr7OEgePm79d/+LLkwwbAfhzKI9sr3VvXljom+KHE542Ibyzbpp zsH3uMiO6cJUVDqmY6MPCekVRR+Dn6GGZN48JRQBLQxau0apYsXbEG3OuDnN9FHD 7/eyXsN5kjNMK64/XLJS4e9iJ+592iAwHsFtivcaDycfwbVmviYx/jMbowIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMRBKGwumvYPoniC3KM+w9JyYiVJMB8GA1UdIwQY MBaAFKaXSfojN9szp2R064EsA04wUJ0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEt Y2IyOTY3MDhkZWM4LzEveEVFb2JDNmE5Zy1pZUlMY296N0QwbkppSlVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEtY2IyOTY3MDhkZWM4 LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnHYAAwQA nHYGAwQAnHYIMA0GCSqGSIb3DQEBCwUAA4IBAQAj2mwxS8CZBUldn6g5pXQYAxUA xBTHGl+olAWwVqf3ZJoaswQy86oyVA/jRvll9AnbkuTwdR70wfAuQmd8tqqHB4+S dtHfqJxg9XA4+QF5eATELFPUSRl4e0BpkDxbJ0fRKrB4BnY+lDe7I8CHKiCF1TaQ FTpcnQYyyzW2N1KwnSlWBb9txgw98cGHu5DHST0W72tl+xfrBWItwqIPfgn18l9D 9nCD6G6W5HfXHlOCjeSi7z1GxQy53Mainav5vStgHW45gGefGlpKdmPRub1Mw6EK b0sbBOcPtXlCIYXHJFB1WP+THGvp5/lGYTgwpAlGoFB5uCDOj/6s5KnY4wRd -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:59 2026 by rpki-client