This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/9j1B5LLZDXYRtu0JrlF53YNgDew.roa File: 9j1B5LLZDXYRtu0JrlF53YNgDew.roa (raw, json) Hash identifier: enCaw1pzt1wj9vxuJHJ4PKIp1awPrJly1Aljj7nxS5c= Subject key identifier: F6:3D:41:E4:B2:D9:0D:76:11:B6:ED:09:AE:51:79:DD:83:60:0D:EC Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Certificate serial: 019B7C1324417D8A3F990010F03643A43461 Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/9j1B5LLZDXYRtu0JrlF53YNgDew.roa Signing time: Fri 02 Jan 2026 00:19:47 +0000 ROA not before: Fri 02 Jan 2026 00:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204816 IP address blocks: 185.49.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:24:41:7d:8a:3f:99:00:10:f0:36:43:a4:34:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895 Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f63d41e4b2d90d7611b6ed09ae5179dd83600dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:48:76:0e:69:e4:07:90:43:21:c9:6c:1e:97: 56:d8:29:97:c3:1b:62:54:8c:86:86:14:18:a1:70: 54:7d:75:cf:70:e1:91:88:18:c5:8d:37:ff:4e:db: 16:57:58:88:c7:6e:0d:82:2b:b9:e1:7c:91:f3:e3: e7:e9:5f:75:46:8c:07:31:8e:57:d9:08:79:f0:8d: 7d:06:f1:0f:03:a8:67:93:5f:0e:13:cb:02:78:ae: b6:a0:87:06:3c:9b:61:3c:82:b3:6b:b5:22:6d:8c: eb:60:7b:4e:a6:6d:9a:0d:c4:ea:08:09:0c:00:54: e3:4a:63:dd:f8:69:ef:d0:c6:d7:c5:88:c4:62:ce: 8e:7b:2a:0c:cc:f8:77:29:c2:ea:1b:86:22:10:b6: 52:a9:9a:79:54:89:f7:37:c4:e0:c8:82:5d:b7:c6: b9:af:2d:c5:13:be:12:cf:ed:23:ae:4b:53:44:2e: fb:c9:d6:8a:28:53:94:da:ec:ca:0d:3e:32:61:0b: 5b:20:bb:82:01:3d:ea:93:1d:eb:9c:eb:04:80:68: 4a:d4:13:54:fb:b3:f7:a2:c3:e2:ad:e4:5b:d0:59: fa:6b:a7:62:65:36:18:90:a2:31:6d:67:42:89:51: b1:48:ef:9e:c0:69:4f:da:bd:21:d1:17:40:eb:a2: 92:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3D:41:E4:B2:D9:0D:76:11:B6:ED:09:AE:51:79:DD:83:60:0D:EC X509v3 Authority Key Identifier: keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/9j1B5LLZDXYRtu0JrlF53YNgDew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.26.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:2a:00:55:fe:73:d0:fa:33:12:dd:7f:6a:1e:18:6c:c3:c3: 97:78:2c:67:dd:10:7d:95:5c:57:56:84:07:14:14:a0:1a:b5: 44:66:8c:1c:5a:1d:19:6c:64:e8:2c:1c:20:9d:21:27:3b:6a: 72:a8:57:d7:05:22:47:2f:a0:5f:02:a7:45:46:fc:f8:32:dd: 0d:8c:ae:c1:77:4b:e6:ec:04:c4:12:0e:3a:b0:91:a9:c0:46: e9:b3:50:33:ac:a6:f9:71:1d:e6:f5:4f:e6:ef:cf:f9:23:99: 11:de:4c:23:f4:49:1d:1b:88:26:2e:f6:b8:86:14:73:6a:f9: 58:b6:f1:00:ba:7d:45:a7:85:2a:e1:a6:3b:24:05:6a:18:85: f5:80:e5:85:8d:c0:68:54:35:ee:23:7f:a7:98:27:a6:bf:b0: e9:2e:87:e7:68:39:a4:ab:57:3a:7e:97:b4:40:a3:aa:bf:42: a9:e1:91:51:00:73:fb:3f:33:20:96:8e:ff:c2:e0:fc:3f:e4: 06:28:9b:9f:7a:fe:76:95:24:24:70:b6:c5:71:95:5a:4a:26: da:ba:2b:48:4a:31:bd:e5:c1:5b:d1:ea:db:c8:4d:10:59:64: fa:e0:77:cb:40:71:d9:4d:8e:84:cc:62:06:38:03:d2:5a:93: cb:04:b7:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EyRBfYo/mQAQ8DZDpDRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1N2U1OGMzNDZlN2I0MTU1NTBjMTNhZWFkZDJjZjkwZWRk MDc4OTUwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjNkNDFlNGIyZDkwZDc2MTFiNmVkMDlhZTUxNzlkZDgzNjAwZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUh2DmnkB5BDIclsHpdW2CmXwxti VIyGhhQYoXBUfXXPcOGRiBjFjTf/TtsWV1iIx24Ngiu54XyR8+Pn6V91RowHMY5X 2Qh58I19BvEPA6hnk18OE8sCeK62oIcGPJthPIKza7UibYzrYHtOpm2aDcTqCAkM AFTjSmPd+Gnv0MbXxYjEYs6OeyoMzPh3KcLqG4YiELZSqZp5VIn3N8TgyIJdt8a5 ry3FE74Sz+0jrktTRC77ydaKKFOU2uzKDT4yYQtbILuCAT3qkx3rnOsEgGhK1BNU +7P3osPireRb0Fn6a6diZTYYkKIxbWdCiVGxSO+ewGlP2r0h0RdA66KSfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPY9QeSy2Q12EbbtCa5Red2DYA3sMB8GA1UdIwQY MBaAFMV+WMNG57QVVQwTrq3Sz5Dt0HiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2Mt MDc0MzA1NzM1YWMyLzEvOWoxQjVMTFpEWFlSdHUwSnJsRjUzWU5nRGV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jZWU3MGQtOGI1Mi00YzExLWE3N2MtMDc0MzA1NzM1YWMy LzEveFg1WXcwYm50QlZWREJPdXJkTFBrTzNRZUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTEaMA0G CSqGSIb3DQEBCwUAA4IBAQA6KgBV/nPQ+jMS3X9qHhhsw8OXeCxn3RB9lVxXVoQH FBSgGrVEZowcWh0ZbGToLBwgnSEnO2pyqFfXBSJHL6BfAqdFRvz4Mt0NjK7Bd0vm 7ATEEg46sJGpwEbps1AzrKb5cR3m9U/m78/5I5kR3kwj9EkdG4gmLva4hhRzavlY tvEAun1Fp4Uq4aY7JAVqGIX1gOWFjcBoVDXuI3+nmCemv7DpLofnaDmkq1c6fpe0 QKOqv0Kp4ZFRAHP7PzMglo7/wuD8P+QGKJufev52lSQkcLbFcZVaSibauitISjG9 5cFb0erbyE0QWWT64HfLQHHZTY6EzGIGOAPSWpPLBLfJ -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:32 2026 by rpki-client