This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/9d3478cw58cpVr8RPYg-kVCTW8E.roa File: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (raw, json) Hash identifier: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg= Subject key identifier: F5:DD:F8:EF:C7:30:E7:C7:29:56:BF:11:3D:88:3E:91:50:93:5B:C1 Certificate issuer: /CN=f18053ea7f3ab79a75e8f875386775551ef75739 Certificate serial: 019B7CEE381C4AF9614C28A5B9D0060E3DD7 Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/9d3478cw58cpVr8RPYg-kVCTW8E.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15401 IP address blocks: 31.193.48.0/21 maxlen: 24 178.237.96.0/20 maxlen: 24 185.3.64.0/22 maxlen: 24 185.23.92.0/22 maxlen: 24 2a00:4280::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:38:1c:4a:f9:61:4c:28:a5:b9:d0:06:0e:3d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739 Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5ddf8efc730e7c72956bf113d883e9150935bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:8c:29:35:dd:d9:6e:d1:4a:cf:52:7b:d0: d3:d9:d9:c7:c5:38:ba:04:73:86:8b:be:28:3d:75: a1:28:d2:eb:86:8f:93:ba:f0:bf:37:75:73:7c:51: ea:a2:98:c7:7e:53:bd:09:c5:af:c3:cf:e3:fd:31: e7:5c:8c:0f:46:ec:e6:21:7f:69:f6:52:36:73:9e: c1:5f:4e:25:97:4f:c8:32:53:7d:65:89:fd:9b:7b: 42:87:e4:d6:32:98:20:5d:62:e8:10:80:d2:7f:26: 72:d5:48:38:32:c4:db:cf:01:5c:d2:7a:bb:ce:be: 2c:98:a4:e8:54:2f:71:f8:a0:aa:c9:40:f4:95:0c: 92:0b:77:87:95:4e:ca:ac:af:50:8c:9d:e5:2b:2e: ba:e7:cb:d1:4e:5c:f5:73:d8:9a:54:4e:40:8d:e9: 0b:a6:0c:b0:9a:d6:c0:20:68:c3:cf:33:eb:95:8d: bb:7e:3d:f8:6b:28:c6:a4:e8:b8:80:64:11:70:dd: 56:a2:dd:0a:64:22:16:e3:ce:ae:18:72:79:3b:f7: 09:8f:48:04:a8:02:39:7e:3d:26:de:3f:6b:d0:60: 76:47:08:80:3c:59:3d:94:84:79:fb:2a:a8:0c:de: 51:f7:37:c2:2e:da:ef:6b:1b:7f:c7:0a:d4:1c:4c: ad:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DD:F8:EF:C7:30:E7:C7:29:56:BF:11:3D:88:3E:91:50:93:5B:C1 X509v3 Authority Key Identifier: keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/9d3478cw58cpVr8RPYg-kVCTW8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.48.0/21 178.237.96.0/20 185.3.64.0/22 185.23.92.0/22 IPv6: 2a00:4280::/32 Signature Algorithm: sha256WithRSAEncryption 18:6c:00:c1:fd:72:52:64:e8:03:be:b0:e8:c5:48:d5:b2:b6: 06:df:86:41:d5:b6:f3:2c:c6:63:b4:a0:4e:73:c1:93:c3:6f: 6a:f3:38:d7:0e:01:69:5a:e8:7a:43:61:d5:48:4b:76:13:5c: 5a:c4:bd:3d:64:85:89:f1:10:f4:91:13:ef:86:1c:82:cb:ce: d9:ac:7d:69:a9:69:07:bc:db:f7:64:f5:34:ea:37:e1:6c:13: 61:55:7e:84:8d:d9:f0:d3:c5:0c:22:9a:d6:e4:a1:77:90:86: 97:8b:51:dc:98:d5:80:1f:99:39:67:b6:c8:68:25:07:a6:ab: 67:8c:a9:ec:06:73:99:fe:80:e7:4f:2a:1c:2d:3f:4f:34:fc: 66:51:51:78:75:95:ac:be:88:97:57:b3:8f:81:b1:7b:0c:18: 58:f8:0a:39:e8:79:20:b1:54:f8:2d:1e:1f:f2:a2:09:67:9a: 66:fd:1e:5a:3b:62:c1:cb:ca:f5:ab:6a:c5:c7:a7:00:55:07: 2d:e2:03:12:5e:5e:af:4a:db:ed:08:75:76:d9:1c:77:99:e3: 3f:8b:28:47:8e:cd:35:df:eb:83:a6:7e:ce:3f:26:6e:db:63: 1b:d4:e8:13:42:d5:0f:47:38:3e:5b:cf:3a:ef:22:5f:53:1f: e6:e8:c6:1e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt87jgcSvlhTCiludAGDj3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxODA1M2VhN2YzYWI3OWE3NWU4Zjg3NTM4Njc3NTU1MWVm NzU3MzkwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWRkZjhlZmM3MzBlN2M3Mjk1NmJmMTEzZDg4M2U5MTUwOTM1YmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lmMKTXd2W7RSs9Se9DT2dnHxTi6 BHOGi74oPXWhKNLrho+TuvC/N3VzfFHqopjHflO9CcWvw8/j/THnXIwPRuzmIX9p 9lI2c57BX04ll0/IMlN9ZYn9m3tCh+TWMpggXWLoEIDSfyZy1Ug4MsTbzwFc0nq7 zr4smKToVC9x+KCqyUD0lQySC3eHlU7KrK9QjJ3lKy6658vRTlz1c9iaVE5AjekL pgywmtbAIGjDzzPrlY27fj34ayjGpOi4gGQRcN1Wot0KZCIW486uGHJ5O/cJj0gE qAI5fj0m3j9r0GB2RwiAPFk9lIR5+yqoDN5R9zfCLtrvaxt/xwrUHEytDwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPXd+O/HMOfHKVa/ET2IPpFQk1vBMB8GA1UdIwQY MBaAFPGAU+p/Oreadej4dThndVUe91c5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZDRjMGMtMTU4Zi00MzQ0LTk2NDEt NzQ3Y2VkMGI3NDg2LzEvOWQzNDc4Y3c1OGNwVnI4UlBZZy1rVkNUVzhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85ZDRjMGMtMTU4Zi00MzQ0LTk2NDEtNzQ3Y2VkMGI3NDg2 LzEvOFlCVDZuODZ0NXAxNlBoMU9HZDFWUjczVnprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDH8EwAwQE su1gAwQCuQNAAwQCuRdcMA0EAgACMAcDBQAqAEKAMA0GCSqGSIb3DQEBCwUAA4IB AQAYbADB/XJSZOgDvrDoxUjVsrYG34ZB1bbzLMZjtKBOc8GTw29q8zjXDgFpWuh6 Q2HVSEt2E1xaxL09ZIWJ8RD0kRPvhhyCy87ZrH1pqWkHvNv3ZPU06jfhbBNhVX6E jdnw08UMIprW5KF3kIaXi1HcmNWAH5k5Z7bIaCUHpqtnjKnsBnOZ/oDnTyocLT9P NPxmUVF4dZWsvoiXV7OPgbF7DBhY+Ao56HkgsVT4LR4f8qIJZ5pm/R5aO2LBy8r1 q2rFx6cAVQct4gMSXl6vStvtCHV22Rx3meM/iyhHjs013+uDpn7OPyZu22Mb1OgT QtUPRzg+W8867yJfUx/m6MYe -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:18 2026 by rpki-client