This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c9yseEHvtWsTfz1xHxMgo8ne4fw.roa File: c9yseEHvtWsTfz1xHxMgo8ne4fw.roa (raw, json) Hash identifier: tdGJRrsKm7NwdaSnrHK36hmDlv5+qNFu4FCRdPgwH84= Subject key identifier: 73:DC:AC:78:41:EF:B5:6B:13:7F:3D:71:1F:13:20:A3:C9:DE:E1:FC Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Certificate serial: 019B7F858712974BE59B103D797764F2022E Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c9yseEHvtWsTfz1xHxMgo8ne4fw.roa Signing time: Fri 02 Jan 2026 16:23:35 +0000 ROA not before: Fri 02 Jan 2026 16:23:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 835 IP address blocks: 92.42.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 00:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:87:12:97:4b:e5:9b:10:3d:79:77:64:f2:02:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f Validity Not Before: Jan 2 16:23:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73dcac7841efb56b137f3d711f1320a3c9dee1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:70:67:cf:aa:ad:bc:23:55:5d:0a:0c:d4: 96:46:1b:3e:62:dc:77:79:f7:68:09:69:48:b7:0e: 3b:4f:ae:1b:30:b0:47:47:e4:2d:30:19:41:ec:53: d3:5f:45:69:6d:42:85:2e:fd:35:48:e3:07:17:70: e8:78:18:15:13:76:c4:7e:81:d8:38:d4:f6:03:8b: 85:06:c8:0a:3b:5a:91:a8:2d:f2:7c:a2:de:1d:c9: e6:a4:17:a7:2c:47:01:a1:91:64:24:d6:dd:c0:d4: b3:55:fc:c1:6d:81:6b:06:0e:6d:b4:aa:3b:67:bc: a0:4b:dc:0b:2a:0a:97:37:85:f4:c1:c7:c4:b9:2b: 23:f0:53:4b:5d:9c:e5:18:66:c3:04:ea:a7:1b:3c: 74:02:86:c1:a0:d0:57:d0:56:b7:74:90:22:6f:b8: 2f:47:67:e6:68:8f:de:05:54:af:73:ff:43:4f:c7: 67:c4:96:50:4e:ae:ec:7d:2f:9f:7f:68:d5:b9:fc: 6d:4d:d3:94:70:68:1f:bd:58:46:42:4b:2e:5d:51: 4c:c5:6c:c1:44:c7:16:1a:31:69:1b:ce:6d:1f:50: 5a:38:5b:4c:7b:72:03:09:45:91:80:93:a3:a9:59: b3:d7:15:e3:0b:0f:1e:b7:80:68:36:7e:ec:f3:db: 77:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DC:AC:78:41:EF:B5:6B:13:7F:3D:71:1F:13:20:A3:C9:DE:E1:FC X509v3 Authority Key Identifier: keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c9yseEHvtWsTfz1xHxMgo8ne4fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.200.0/24 Signature Algorithm: sha256WithRSAEncryption 52:a1:96:8e:ae:40:60:65:87:3c:82:d9:01:e2:c2:12:16:ef: 4e:bf:6e:f2:b4:c8:24:78:7e:08:66:f1:30:a6:83:67:f5:39: 0d:36:1f:66:5d:96:8a:b3:b2:24:1b:9e:31:ed:30:dc:9b:d8: 92:66:62:2a:0a:66:ac:32:16:24:7a:68:ab:de:89:de:bf:5d: ec:1b:0f:d7:d9:7f:ad:f6:b7:f1:d5:81:30:51:8f:42:d9:79: ea:06:16:de:f6:e7:61:0a:ee:41:98:89:17:20:dc:3d:6c:f6: 61:3c:64:ce:8f:df:19:ac:20:0c:5e:52:21:d1:42:fd:aa:f9: 99:d2:2c:b0:c8:ea:dd:7d:61:8d:5a:f6:b9:e4:b6:9c:05:2d: f8:9d:ee:4c:2a:04:ea:e2:7d:21:d0:a1:7e:00:82:56:5e:5c: 64:99:33:96:cf:72:7b:c1:95:a4:55:2f:fd:53:1d:48:3a:64: 0f:22:1f:c3:93:96:f9:dc:a4:e3:28:7c:01:da:92:f7:23:da: bc:67:42:97:c3:b4:3d:ec:58:c5:ca:bf:ee:61:af:cd:6a:19: 97:7d:c3:9e:8b:e1:8d:6a:88:57:8c:a0:d7:af:8d:02:79:4e: f9:41:e2:5e:d7:b0:53:c9:63:5a:1b:39:06:2e:45:c6:17:2f: 31:1a:83:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hYcSl0vlmxA9eXdk8gIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk ZmUyMGYwHhcNMjYwMTAyMTYyMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2RjYWM3ODQxZWZiNTZiMTM3ZjNkNzExZjEzMjBhM2M5ZGVlMWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYRwZ8+qrbwjVV0KDNSWRhs+Ytx3 efdoCWlItw47T64bMLBHR+QtMBlB7FPTX0VpbUKFLv01SOMHF3DoeBgVE3bEfoHY ONT2A4uFBsgKO1qRqC3yfKLeHcnmpBenLEcBoZFkJNbdwNSzVfzBbYFrBg5ttKo7 Z7ygS9wLKgqXN4X0wcfEuSsj8FNLXZzlGGbDBOqnGzx0AobBoNBX0Fa3dJAib7gv R2fmaI/eBVSvc/9DT8dnxJZQTq7sfS+ff2jVufxtTdOUcGgfvVhGQksuXVFMxWzB RMcWGjFpG85tH1BaOFtMe3IDCUWRgJOjqVmz1xXjCw8et4BoNn7s89t3QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHPcrHhB77VrE389cR8TIKPJ3uH8MB8GA1UdIwQY MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct YjcxNzk4MGU0YWQ2LzEvYzl5c2VFSHZ0V3NUZnoxeEh4TWdvOG5lNGZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2 LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCrIMA0G CSqGSIb3DQEBCwUAA4IBAQBSoZaOrkBgZYc8gtkB4sISFu9Ov27ytMgkeH4IZvEw poNn9TkNNh9mXZaKs7IkG54x7TDcm9iSZmIqCmasMhYkemir3onev13sGw/X2X+t 9rfx1YEwUY9C2XnqBhbe9udhCu5BmIkXINw9bPZhPGTOj98ZrCAMXlIh0UL9qvmZ 0iywyOrdfWGNWva55LacBS34ne5MKgTq4n0h0KF+AIJWXlxkmTOWz3J7wZWkVS/9 Ux1IOmQPIh/Dk5b53KTjKHwB2pL3I9q8Z0KXw7Q97FjFyr/uYa/NahmXfcOei+GN aohXjKDXr40CeU75QeJe17BTyWNaGzkGLkXGFy8xGoMZ -----END CERTIFICATE-----Generated at Mon Jan 12 07:55:10 2026 by rpki-client