This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/9AuCong1zigYqjutdRdR7B3z2og.roa File: 9AuCong1zigYqjutdRdR7B3z2og.roa (raw, json) Hash identifier: pxQuSAkEiFjIpythtsl8fCmD/lGDm0b2YQdlT3sht70= Subject key identifier: F4:0B:82:A2:78:35:CE:28:18:AA:3B:AD:75:17:51:EC:1D:F3:DA:88 Certificate issuer: /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c Certificate serial: 019B7F80BB5B4C375171CF7C1CD6A6E0F220 Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/9AuCong1zigYqjutdRdR7B3z2og.roa Signing time: Fri 02 Jan 2026 16:18:21 +0000 ROA not before: Fri 02 Jan 2026 16:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 145.36.0.0/19 maxlen: 19 145.36.32.0/19 maxlen: 19 145.36.64.0/19 maxlen: 19 145.36.96.0/19 maxlen: 19 145.36.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:bb:5b:4c:37:51:71:cf:7c:1c:d6:a6:e0:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c Validity Not Before: Jan 2 16:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f40b82a27835ce2818aa3bad751751ec1df3da88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ff:b4:79:fe:15:e1:b8:71:71:df:b5:e5:4b: d0:f5:1a:39:c0:c6:45:09:a5:cb:fa:3e:9f:f7:4e: 3f:e0:5a:e4:70:f5:af:66:2e:42:40:27:bf:bc:ed: b4:7b:c7:d1:94:61:53:35:69:8c:da:c0:01:ab:a0: 58:44:ec:32:2c:5b:99:53:f2:06:eb:9a:7d:17:dc: 1d:be:2f:f1:88:36:0d:d6:53:5f:cd:ec:fc:ae:aa: ba:8b:64:40:e7:47:f0:6a:0e:c9:08:74:3d:0f:26: 16:ec:47:66:ce:66:19:92:9f:54:bb:ca:1f:43:0d: 50:45:b0:ad:98:22:34:4f:19:92:bd:3a:b4:b9:f7: b6:61:a7:2d:1b:63:a2:47:45:41:eb:21:2e:43:5b: e4:b9:35:c9:8a:95:c6:99:a2:6c:53:96:de:db:fd: a5:91:7e:e2:a6:2b:20:8f:60:a6:43:3f:37:04:ec: 71:95:d2:f9:90:78:f7:69:19:c9:83:56:bc:76:06: 82:f4:3d:ee:4c:76:b6:f1:12:ce:4d:84:79:b7:e1: b0:ec:a7:16:83:72:b9:0d:a9:92:cf:f5:d0:34:d7: 5c:a5:56:ef:ef:bc:65:dc:9d:1e:78:32:c2:b5:24: 57:75:42:8a:13:41:88:7e:c7:f5:ff:9c:b1:7b:f9: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0B:82:A2:78:35:CE:28:18:AA:3B:AD:75:17:51:EC:1D:F3:DA:88 X509v3 Authority Key Identifier: keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/9AuCong1zigYqjutdRdR7B3z2og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.36.0.0/16 Signature Algorithm: sha256WithRSAEncryption 77:9e:6a:72:34:db:7e:f1:9e:c0:ba:c7:d1:67:1a:0a:6c:24: 32:11:5b:17:e9:a7:b9:e9:48:fb:ea:51:fb:ad:99:f5:3d:91: 6d:59:44:4b:48:2e:ba:75:16:de:44:5a:b9:a9:4b:6e:1a:ab: dd:54:90:29:76:37:b1:b7:73:24:53:ef:2e:70:d4:c2:2a:69: 9a:6c:2a:99:3b:fa:0f:5d:52:f9:40:35:da:0c:95:b0:26:89: 02:9c:f7:b9:fc:8a:71:06:35:85:32:51:99:0c:1e:33:12:76: 9b:64:cd:d9:64:ff:35:52:a6:5a:c4:0f:c0:9e:e7:3f:fe:ac: 98:d2:41:13:28:1b:78:fc:f8:cb:bf:50:13:44:e7:15:e7:21: 50:58:37:09:2c:bd:fb:7d:a7:bc:07:a7:22:97:9c:84:68:46: 2b:41:4e:9f:5f:d2:18:47:78:cb:ba:61:c0:cb:7d:72:d7:e7: 0a:96:87:7d:7f:73:f6:7b:c2:28:9b:d8:0c:b0:ad:bb:e7:0c: 09:a4:2f:38:2e:09:75:13:91:ea:48:dd:a0:e8:fa:87:b0:5d: ad:06:54:9e:4c:97:2f:61:39:02:5b:f7:b9:3e:b2:0f:7a:c0: 3c:40:f9:97:2b:1f:12:0f:82:cc:df:4b:df:35:fb:a0:cc:e5: 4a:8b:66:e6 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt/gLtbTDdRcc98HNam4PIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YzE4MTcwNmY2MWM0YjczN2NkN2ViNzhmNzIzMGUzNGNk ZmMxNGMwHhcNMjYwMTAyMTYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDBiODJhMjc4MzVjZTI4MThhYTNiYWQ3NTE3NTFlYzFkZjNkYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P+0ef4V4bhxcd+15UvQ9Ro5wMZF CaXL+j6f904/4FrkcPWvZi5CQCe/vO20e8fRlGFTNWmM2sABq6BYROwyLFuZU/IG 65p9F9wdvi/xiDYN1lNfzez8rqq6i2RA50fwag7JCHQ9DyYW7EdmzmYZkp9Uu8of Qw1QRbCtmCI0TxmSvTq0ufe2YactG2OiR0VB6yEuQ1vkuTXJipXGmaJsU5be2/2l kX7ipisgj2CmQz83BOxxldL5kHj3aRnJg1a8dgaC9D3uTHa28RLOTYR5t+Gw7KcW g3K5DamSz/XQNNdcpVbv77xl3J0eeDLCtSRXdUKKE0GIfsf1/5yxe/l7kQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFPQLgqJ4Nc4oGKo7rXUXUewd89qIMB8GA1UdIwQY MBaAFBXBgXBvYcS3N81+t49yMONM38FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUt OGZmNmNkNzc0N2M0LzEvOUF1Q29uZzF6aWdZcWp1dGRSZFI3QjN6Mm9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUtOGZmNmNkNzc0N2M0 LzEvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkSQwDQYJ KoZIhvcNAQELBQADggEBAHeeanI0237xnsC6x9FnGgpsJDIRWxfpp7npSPvqUfut mfU9kW1ZREtILrp1Ft5EWrmpS24aq91UkCl2N7G3cyRT7y5w1MIqaZpsKpk7+g9d UvlANdoMlbAmiQKc97n8inEGNYUyUZkMHjMSdptkzdlk/zVSplrED8Ce5z/+rJjS QRMoG3j8+Mu/UBNE5xXnIVBYNwksvft9p7wHpyKXnIRoRitBTp9f0hhHeMu6YcDL fXLX5wqWh31/c/Z7wiib2AywrbvnDAmkLzguCXUTkepI3aDo+oewXa0GVJ5Mly9h OQJb97k+sg96wDxA+ZcrHxIPgszfS981+6DM5UqLZuY= -----END CERTIFICATE-----Generated at Sat Jan 17 08:24:54 2026 by rpki-client