This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9znaEQNdXgEXiKWcHckAM2ycPk0.roa File: 9znaEQNdXgEXiKWcHckAM2ycPk0.roa (raw, json) Hash identifier: caeCcafMp8mHIWPfv55vggbIQhbGJ43DUCvY/TjIseE= Subject key identifier: F7:39:DA:11:03:5D:5E:01:17:88:A5:9C:1D:C9:00:33:6C:9C:3E:4D Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C5A9CBFE4E8B998FAF69D93120A6 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9znaEQNdXgEXiKWcHckAM2ycPk0.roa Signing time: Thu 01 Jan 2026 18:17:51 +0000 ROA not before: Thu 01 Jan 2026 18:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21700 IP address blocks: 159.148.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c5:a9:cb:fe:4e:8b:99:8f:af:69:d9:31:20:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f739da11035d5e011788a59c1dc900336c9c3e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:01:cb:d4:f4:43:93:ce:13:10:df:ac:a0:37: 86:6e:dd:ee:0c:94:f0:5c:84:20:d6:15:04:46:3b: 24:28:ea:58:60:3b:9d:92:a9:7d:33:44:fa:36:89: 08:1a:c1:29:08:d7:ce:2c:11:37:55:4b:d6:de:20: c8:3d:02:56:f5:5f:49:99:75:e2:ce:bb:2c:21:52: 90:15:d3:0d:cc:25:eb:cb:89:df:ce:59:1d:99:0b: 89:92:3f:6f:37:85:fc:8d:1d:6c:79:7b:6e:29:11: b7:41:1f:e8:01:64:ad:ab:dc:b1:a6:b7:3a:1b:47: 47:35:3d:a3:61:e1:df:66:ae:5f:d3:f4:54:86:ca: 70:02:92:c9:aa:a1:b0:2e:ae:2d:66:d7:81:6e:3e: 34:62:81:51:d5:1d:9d:e4:7e:02:67:44:04:c7:a3: d3:87:fe:10:1f:de:27:24:e0:b0:e1:94:d1:50:43: 9b:2d:7f:9f:5e:09:dd:0f:a3:f4:83:70:e9:80:94: a5:c9:e6:d7:5a:b1:d0:82:e9:07:cf:fc:ee:77:36: 0d:35:d0:d4:40:7b:bf:4d:f9:1c:de:43:b5:60:63: 63:5a:29:b9:b0:80:3f:45:59:33:d1:59:68:88:a0: 3a:99:52:e2:84:e4:25:0b:59:c0:fc:ec:b2:b3:da: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:39:DA:11:03:5D:5E:01:17:88:A5:9C:1D:C9:00:33:6C:9C:3E:4D X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/9znaEQNdXgEXiKWcHckAM2ycPk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.114.0/24 Signature Algorithm: sha256WithRSAEncryption 42:c0:a0:fc:07:51:76:e2:38:19:d7:33:6e:3c:b1:bc:be:77: b3:e4:5a:73:ff:c2:14:75:4a:5b:c2:85:38:bc:3a:67:f0:40: 9b:db:b2:bb:4b:47:48:a8:79:4f:bd:9e:f7:55:44:63:d9:6e: 66:1b:e1:14:49:c0:03:89:79:5e:80:50:08:71:3e:ed:61:16: c9:a8:ff:cd:e2:33:fe:bf:cf:ff:65:a7:90:74:cb:1b:2b:b1: 08:9d:c3:8a:22:07:91:f5:db:a6:e0:ee:fb:4b:b8:91:74:2b: 28:76:dd:9f:15:6a:66:dc:1f:1d:e9:54:3d:80:35:f5:c2:b6: 37:de:f1:6c:44:88:95:fa:b9:0a:1f:c0:c0:a6:95:2f:b4:77: 7b:a7:1e:f0:ce:7f:4f:f5:52:04:01:1e:1a:c7:2d:43:3c:c2: 6c:71:b9:92:17:3d:9e:41:ba:78:b4:d9:e5:5a:ed:f4:94:0a: 7c:06:6a:5e:07:08:34:9f:c5:2a:ef:b2:fe:60:ae:55:00:91: e0:4c:b8:3d:17:b3:5a:70:67:d7:0e:d2:4d:7a:69:e1:04:15: 4e:77:b2:14:5d:01:24:96:8d:d2:5a:02:92:74:01:f2:36:ae: 13:e5:56:7d:30:03:50:61:01:05:34:0a:22:18:dd:53:ea:4c: 84:6a:f7:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8Wpy/5Oi5mPr2nZMSCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzM5ZGExMTAzNWQ1ZTAxMTc4OGE1OWMxZGM5MDAzMzZjOWMzZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gHL1PRDk84TEN+soDeGbt3uDJTw XIQg1hUERjskKOpYYDudkql9M0T6NokIGsEpCNfOLBE3VUvW3iDIPQJW9V9JmXXi zrssIVKQFdMNzCXry4nfzlkdmQuJkj9vN4X8jR1seXtuKRG3QR/oAWStq9yxprc6 G0dHNT2jYeHfZq5f0/RUhspwApLJqqGwLq4tZteBbj40YoFR1R2d5H4CZ0QEx6PT h/4QH94nJOCw4ZTRUEObLX+fXgndD6P0g3DpgJSlyebXWrHQgukHz/zudzYNNdDU QHu/Tfkc3kO1YGNjWim5sIA/RVkz0VloiKA6mVLihOQlC1nA/Oyys9pe/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPc52hEDXV4BF4ilnB3JADNsnD5NMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvOXpuYUVRTmRYZ0VYaUtXY0hja0FNMnljUGswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5RyMA0G CSqGSIb3DQEBCwUAA4IBAQBCwKD8B1F24jgZ1zNuPLG8vnez5Fpz/8IUdUpbwoU4 vDpn8ECb27K7S0dIqHlPvZ73VURj2W5mG+EUScADiXlegFAIcT7tYRbJqP/N4jP+ v8//ZaeQdMsbK7EIncOKIgeR9dum4O77S7iRdCsodt2fFWpm3B8d6VQ9gDX1wrY3 3vFsRIiV+rkKH8DAppUvtHd7px7wzn9P9VIEAR4axy1DPMJscbmSFz2eQbp4tNnl Wu30lAp8BmpeBwg0n8Uq77L+YK5VAJHgTLg9F7NacGfXDtJNemnhBBVOd7IUXQEk lo3SWgKSdAHyNq4T5VZ9MANQYQEFNAoiGN1T6kyEavel -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:24 2026 by rpki-client