This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9XG455RFOZicCNftBxtqAofplfU.roa File: 9XG455RFOZicCNftBxtqAofplfU.roa (raw, json) Hash identifier: BJq2iPAadZlXi289k6uFwotWaRkhziXNk2vksllKoV8= Subject key identifier: F5:71:B8:E7:94:45:39:98:9C:08:D7:ED:07:1B:6A:02:87:E9:95:F5 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F854AA3665344F3D4E3B882D0D30E90 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9XG455RFOZicCNftBxtqAofplfU.roa Signing time: Fri 02 Jan 2026 16:23:20 +0000 ROA not before: Fri 02 Jan 2026 16:23:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42946 IP address blocks: 195.58.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:4a:a3:66:53:44:f3:d4:e3:b8:82:d0:d3:0e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f571b8e7944539989c08d7ed071b6a0287e995f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:a3:b4:12:fc:1d:0a:1f:ee:d7:7a:60:a3: fa:88:ca:fd:9c:93:ad:56:cf:63:ea:e6:d9:d8:05: 90:28:93:25:55:83:cf:b9:2f:60:14:d7:e2:99:7d: d9:9c:83:cb:b1:e7:f4:6d:b8:34:79:e5:48:00:f8: f6:1e:5d:c7:72:0d:c9:6d:fa:99:41:35:e2:34:18: 51:05:b0:75:f0:68:ab:7e:b7:e2:79:f5:99:96:cf: 4c:59:fb:b6:6a:98:07:e1:68:96:79:13:9f:52:b0: 8c:d5:2e:d0:1d:d9:cf:8c:7c:e7:02:05:23:13:f6: 2e:99:d4:69:17:c0:55:45:36:0a:fc:5c:44:62:08: fe:55:8d:b0:ff:fb:1b:12:9f:35:e3:92:df:7e:9d: 04:87:9d:71:5d:91:f9:9b:e6:74:3e:09:86:e6:9a: b4:a3:8b:4e:c3:87:9c:45:2d:cb:d2:65:0f:3f:8b: 84:ec:37:af:61:3b:4c:16:81:95:75:e4:cc:cd:bb: ef:4f:fb:a9:76:28:a3:ec:29:b5:84:40:fb:43:44: 4c:1e:71:6b:14:3d:33:a7:65:8f:a6:de:93:ac:ee: 6a:11:d8:fa:a1:89:36:85:9b:05:15:84:64:8c:37: dd:8d:42:22:2e:b1:ce:99:cf:53:61:28:73:b1:24: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:71:B8:E7:94:45:39:98:9C:08:D7:ED:07:1B:6A:02:87:E9:95:F5 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9XG455RFOZicCNftBxtqAofplfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.58.46.0/24 Signature Algorithm: sha256WithRSAEncryption 60:37:b6:00:9d:7b:98:ab:d4:3c:df:19:69:ae:09:90:a7:d6: a9:04:05:f8:69:71:0c:21:fa:0f:0b:7e:ae:75:0f:c6:d0:63: f2:91:b5:16:44:59:4c:bb:28:d4:dc:d0:f7:cf:ef:74:0d:38: 4c:ec:19:40:52:8a:bd:d2:d4:c9:17:73:05:0b:e1:11:0b:9a: c1:5e:67:77:5b:27:b1:1e:00:4b:47:e1:68:d2:a7:36:9c:de: 4e:8e:ba:61:55:69:2a:83:63:b5:1e:ab:37:77:57:12:98:61: 3a:43:36:4a:4b:7e:65:4a:60:2c:0b:f0:e8:a7:ff:4c:b3:95: a0:ba:01:32:60:9e:f2:87:db:50:d0:48:0f:7d:7e:98:02:1a: 3e:7b:24:b6:c8:fc:9d:c3:b3:5d:55:1f:5c:e5:88:3a:5f:87: d8:87:07:5c:fe:b7:63:8f:75:18:c3:4d:6b:db:2a:98:db:c5: ef:58:04:6e:80:03:cb:ad:45:55:44:3f:5e:06:45:c3:a2:9c: 21:42:2f:44:6c:d6:1f:d5:74:5d:52:52:0d:a9:60:29:99:06: 98:b0:e6:d3:6c:54:7e:d4:c7:a8:b9:82:c3:bf:d4:29:87:99: 5d:45:0f:15:6f:5d:a1:45:e5:07:ab:cf:b7:42:48:d4:bb:6c: 43:56:9b:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hUqjZlNE89TjuILQ0w6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTcxYjhlNzk0NDUzOTk4OWMwOGQ3ZWQwNzFiNmEwMjg3ZTk5NWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvqjtBL8HQof7td6YKP6iMr9nJOt Vs9j6ubZ2AWQKJMlVYPPuS9gFNfimX3ZnIPLsef0bbg0eeVIAPj2Hl3Hcg3JbfqZ QTXiNBhRBbB18GirfrfiefWZls9MWfu2apgH4WiWeROfUrCM1S7QHdnPjHznAgUj E/YumdRpF8BVRTYK/FxEYgj+VY2w//sbEp8145Lffp0Eh51xXZH5m+Z0PgmG5pq0 o4tOw4ecRS3L0mUPP4uE7DevYTtMFoGVdeTMzbvvT/updiij7Cm1hED7Q0RMHnFr FD0zp2WPpt6TrO5qEdj6oYk2hZsFFYRkjDfdjUIiLrHOmc9TYShzsSToiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPVxuOeURTmYnAjX7QcbagKH6ZX1MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvOVhHNDU1UkZPWmljQ05mdEJ4dHFBb2ZwbGZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzouMA0G CSqGSIb3DQEBCwUAA4IBAQBgN7YAnXuYq9Q83xlprgmQp9apBAX4aXEMIfoPC36u dQ/G0GPykbUWRFlMuyjU3ND3z+90DThM7BlAUoq90tTJF3MFC+ERC5rBXmd3Wyex HgBLR+Fo0qc2nN5OjrphVWkqg2O1Hqs3d1cSmGE6QzZKS35lSmAsC/Dop/9Ms5Wg ugEyYJ7yh9tQ0EgPfX6YAho+eyS2yPydw7NdVR9c5Yg6X4fYhwdc/rdjj3UYw01r 2yqY28XvWARugAPLrUVVRD9eBkXDopwhQi9EbNYf1XRdUlINqWApmQaYsObTbFR+ 1MeouYLDv9Qph5ldRQ8Vb12hReUHq8+3QkjUu2xDVpvV -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:14 2026 by rpki-client