This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9aM1KHMJPOx0Rww6GylNvcv27eg.roa File: 9aM1KHMJPOx0Rww6GylNvcv27eg.roa (raw, json) Hash identifier: zdVFBl5b5vEf/Sf5cyRzC+jgGSml9qZRaZF5F0aljro= Subject key identifier: F5:A3:35:28:73:09:3C:EC:74:47:0C:3A:1B:29:4D:BD:CB:F6:ED:E8 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7E2FE9DAD729C4FB9EC20F6568A4E Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9aM1KHMJPOx0Rww6GylNvcv27eg.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 159.148.131.0/24 maxlen: 24 159.148.245.0/24 maxlen: 24 159.148.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e2:fe:9d:ad:72:9c:4f:b9:ec:20:f6:56:8a:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5a3352873093cec74470c3a1b294dbdcbf6ede8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:9f:fd:1e:56:50:f8:23:1c:b8:65:99:de: f6:32:36:16:e1:cc:7d:c3:73:b3:3c:93:4b:74:11: 1a:3f:74:fd:e1:ad:19:2c:d5:80:5d:5f:80:d7:fa: 48:cc:2e:97:88:2a:fa:7e:25:6c:bf:c6:3e:a8:94: 9b:ab:36:49:a1:63:f4:19:7a:83:14:3e:d3:40:6a: d1:d3:f1:5e:db:53:42:0e:2b:7c:86:ea:27:7e:8c: 59:37:c1:00:d8:72:b4:a1:75:c2:1d:2b:b7:73:5e: 40:18:b4:42:8a:9a:c1:8c:e1:b1:d1:15:01:96:0e: 4d:3c:30:b1:f0:96:68:5e:81:40:f0:f0:95:70:e4: 67:28:4c:7b:80:c5:82:de:e0:af:f9:a4:fe:f9:a2: 6e:8d:5a:e0:c2:f1:31:b7:89:4a:37:dd:96:ed:4d: 0c:00:3a:86:43:c3:2d:54:d0:33:92:60:d6:ef:a3: 19:18:60:c5:1b:f2:6b:68:df:86:cb:ab:99:a2:60: ac:dd:6e:61:3d:23:a4:1e:63:b7:69:0f:3f:06:fd: 24:53:44:1e:6c:bd:b2:66:b2:13:ea:2a:cf:5e:96: b7:4d:8c:ba:f9:4a:66:2a:32:7a:5e:e3:b5:38:6c: 03:80:df:36:67:a2:26:7b:6a:c2:d6:9f:64:f2:92: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A3:35:28:73:09:3C:EC:74:47:0C:3A:1B:29:4D:BD:CB:F6:ED:E8 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9aM1KHMJPOx0Rww6GylNvcv27eg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.131.0/24 159.148.245.0/24 159.148.255.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:ec:dd:83:72:b9:9e:6e:39:a6:6a:ac:9c:19:47:1e:93:25: 88:8f:bd:bb:e4:4e:1f:52:ba:3c:ed:be:42:8d:0a:ee:6f:5d: 83:50:79:41:dd:26:a7:50:44:09:92:3f:4e:2a:f9:5f:d7:b3: 38:be:22:ec:3a:4d:a4:f7:02:71:48:d2:34:f5:2c:c1:7d:70: 9d:b2:36:a9:63:6e:97:92:fb:2e:69:da:73:45:0f:cb:1f:7b: e4:34:f7:8c:c9:7c:4d:2d:37:96:86:69:52:fa:39:21:78:bf: 0b:ed:b4:39:99:46:e7:8e:9b:f5:b4:0a:4a:ee:35:d1:58:6c: 44:82:47:ba:b8:74:c8:ab:45:2c:8c:24:af:b1:d8:f9:42:66: d2:da:1e:b6:38:e4:b2:93:8e:3f:ad:12:f3:dc:23:61:2e:ef: 78:29:4f:eb:12:55:ef:16:f5:0d:46:a8:57:45:a1:29:7b:4c: 68:9f:d5:e7:4d:23:4d:73:68:c9:ec:45:aa:f2:2d:e3:39:f9: 66:c8:af:16:95:b3:6a:44:1a:a1:c3:30:ee:ee:f6:15:6b:f2: 86:85:5a:52:32:c1:f7:a6:61:3f:7c:73:3e:a9:87:d0:0b:04: fe:04:26:bb:7a:f6:7f:59:6e:83:78:de:50:a1:be:13:27:d2: 1c:d7:14:09 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x+L+na1ynE+57CD2VopOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWEzMzUyODczMDkzY2VjNzQ0NzBjM2ExYjI5NGRiZGNiZjZlZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzyf/R5WUPgjHLhlmd72MjYW4cx9 w3OzPJNLdBEaP3T94a0ZLNWAXV+A1/pIzC6XiCr6fiVsv8Y+qJSbqzZJoWP0GXqD FD7TQGrR0/Fe21NCDit8huonfoxZN8EA2HK0oXXCHSu3c15AGLRCiprBjOGx0RUB lg5NPDCx8JZoXoFA8PCVcORnKEx7gMWC3uCv+aT++aJujVrgwvExt4lKN92W7U0M ADqGQ8MtVNAzkmDW76MZGGDFG/JraN+Gy6uZomCs3W5hPSOkHmO3aQ8/Bv0kU0Qe bL2yZrIT6irPXpa3TYy6+UpmKjJ6XuO1OGwDgN82Z6Ime2rC1p9k8pL9qQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPWjNShzCTzsdEcMOhspTb3L9u3oMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvOWFNMUtITUpQT3gwUnd3Nkd5bE52Y3YyN2VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAn5SDAwQA n5T1AwQAn5T/MA0GCSqGSIb3DQEBCwUAA4IBAQA/7N2DcrmebjmmaqycGUcekyWI j7275E4fUro87b5CjQrub12DUHlB3SanUEQJkj9OKvlf17M4viLsOk2k9wJxSNI0 9SzBfXCdsjapY26XkvsuadpzRQ/LH3vkNPeMyXxNLTeWhmlS+jkheL8L7bQ5mUbn jpv1tApK7jXRWGxEgke6uHTIq0UsjCSvsdj5QmbS2h62OOSyk44/rRLz3CNhLu94 KU/rElXvFvUNRqhXRaEpe0xon9XnTSNNc2jJ7EWq8i3jOflmyK8WlbNqRBqhwzDu 7vYVa/KGhVpSMsH3pmE/fHM+qYfQCwT+BCa7evZ/WW6DeN5Qob4TJ9Ic1xQJ -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:57 2026 by rpki-client