This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/g9shmuhvNnOZeLU1eqdtKs3ZuiI.roa File: g9shmuhvNnOZeLU1eqdtKs3ZuiI.roa (raw, json) Hash identifier: GQLpiOjO3bm2121DI3xIaAK1MZUDoyF91wyvAGuIAYA= Subject key identifier: 83:DB:21:9A:E8:6F:36:73:99:78:B5:35:7A:A7:6D:2A:CD:D9:BA:22 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7D26A6BCED3DAEFE8D7A3DAECC903 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/g9shmuhvNnOZeLU1eqdtKs3ZuiI.roa Signing time: Thu 01 Jan 2026 18:17:54 +0000 ROA not before: Thu 01 Jan 2026 18:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51894 IP address blocks: 159.148.147.0/24 maxlen: 24 159.148.172.0/24 maxlen: 24 2a02:610:7501::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d2:6a:6b:ce:d3:da:ef:e8:d7:a3:da:ec:c9:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83db219ae86f36739978b5357aa76d2acdd9ba22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:56:77:c5:92:3c:23:51:17:cd:f6:f0:64: 44:3d:15:14:06:84:14:74:96:70:8e:6e:7a:07:08: 38:0d:f6:a5:67:74:bf:d8:00:dd:d8:59:0d:8a:30: 39:d4:01:af:12:36:1d:36:68:b2:52:f2:87:61:97: 06:85:b1:53:81:b2:db:01:99:30:86:f3:65:30:51: 1c:9c:58:4c:19:9e:81:0c:ed:d7:cb:a9:eb:4e:46: 4b:0f:8d:e8:9c:67:43:9d:f8:9d:f6:91:12:f3:83: ea:17:35:fe:a1:64:cc:5d:8f:86:ec:24:f5:e4:b1: 10:01:7d:46:59:14:30:20:2f:f7:92:39:64:8a:b4: 5b:a0:d0:7e:ec:a6:84:96:98:70:de:69:78:7a:4a: 0b:03:2c:0c:ee:05:53:47:84:43:43:19:c9:4f:9c: 69:8b:c9:1a:53:61:75:3b:08:3a:0e:a1:66:1d:5a: b7:e1:5f:22:45:e6:5c:d3:cc:d6:43:f8:1c:81:e6: 05:05:ff:a4:60:99:b9:22:fb:9d:05:5e:bb:60:05: 55:75:b4:a4:7e:15:8d:10:48:5f:44:d4:45:91:10: c0:8b:8f:f7:0b:67:25:81:13:9f:b5:e4:0c:af:e9: af:e3:5d:56:4b:43:54:03:96:0e:7b:fb:6c:7a:52: d8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DB:21:9A:E8:6F:36:73:99:78:B5:35:7A:A7:6D:2A:CD:D9:BA:22 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/g9shmuhvNnOZeLU1eqdtKs3ZuiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.147.0/24 159.148.172.0/24 IPv6: 2a02:610:7501::/48 Signature Algorithm: sha256WithRSAEncryption 35:88:af:80:ce:cf:c7:b5:fe:4e:14:37:ac:6a:c8:6a:b5:5a: ae:7f:43:03:4c:39:69:8f:ac:db:91:e0:68:57:37:20:4e:9a: 43:46:53:75:6d:ba:2c:7c:1a:d8:21:4a:ea:b7:89:e4:61:cb: aa:ff:bf:dc:62:8f:58:f6:5b:4a:f0:4b:f7:46:47:f1:66:04: 4f:52:78:86:aa:af:40:6f:80:42:75:04:68:ee:b8:09:87:4e: ed:81:44:d7:ab:ac:59:87:6c:2a:69:ef:64:f8:9b:8d:ad:d4: a4:33:29:c3:83:10:09:a4:aa:b4:48:b7:82:2f:93:6e:0c:61: 96:a0:2a:a2:b0:7d:a6:83:bd:ac:e6:9b:80:0a:69:a1:77:20: 75:aa:ec:ea:e3:14:80:8b:8b:c0:a9:78:50:2e:72:4a:0d:af: 00:ca:5a:a3:57:d6:23:0c:39:53:4d:6e:df:5c:ae:1e:fe:e5: 16:21:fc:88:73:64:e9:81:45:69:39:80:47:a5:1a:7b:b0:18: 46:98:25:9d:7b:eb:42:c9:b5:73:b8:5d:c3:14:f2:db:fd:10: 00:ad:62:d6:93:e8:c7:b1:ca:6b:f6:a7:61:d6:b3:24:8f:68: 3a:5e:5b:2b:66:d8:62:b5:f8:cb:69:4a:1d:bf:06:4e:10:da: 45:ea:dc:21 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6x9Jqa87T2u/o16Pa7MkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2RiMjE5YWU4NmYzNjczOTk3OGI1MzU3YWE3NmQyYWNkZDliYTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNxWd8WSPCNRF8328GREPRUUBoQU dJZwjm56Bwg4DfalZ3S/2ADd2FkNijA51AGvEjYdNmiyUvKHYZcGhbFTgbLbAZkw hvNlMFEcnFhMGZ6BDO3Xy6nrTkZLD43onGdDnfid9pES84PqFzX+oWTMXY+G7CT1 5LEQAX1GWRQwIC/3kjlkirRboNB+7KaElphw3ml4ekoLAywM7gVTR4RDQxnJT5xp i8kaU2F1Owg6DqFmHVq34V8iReZc08zWQ/gcgeYFBf+kYJm5IvudBV67YAVVdbSk fhWNEEhfRNRFkRDAi4/3C2clgROfteQMr+mv411WS0NUA5YOe/tselLYXQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIPbIZrobzZzmXi1NXqnbSrN2boiMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvZzlzaG11aHZObk9aZUxVMWVxZHRLczNadWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAn5STAwQA n5SsMA8EAgACMAkDBwAqAgYQdQEwDQYJKoZIhvcNAQELBQADggEBADWIr4DOz8e1 /k4UN6xqyGq1Wq5/QwNMOWmPrNuR4GhXNyBOmkNGU3Vtuix8GtghSuq3ieRhy6r/ v9xij1j2W0rwS/dGR/FmBE9SeIaqr0BvgEJ1BGjuuAmHTu2BRNerrFmHbCpp72T4 m42t1KQzKcODEAmkqrRIt4Ivk24MYZagKqKwfaaDvazmm4AKaaF3IHWq7OrjFICL i8CpeFAuckoNrwDKWqNX1iMMOVNNbt9crh7+5RYh/IhzZOmBRWk5gEelGnuwGEaY JZ1760LJtXO4XcMU8tv9EACtYtaT6Mexymv2p2HWsySPaDpeWytm2GK1+MtpSh2/ Bk4Q2kXq3CE= -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:55 2026 by rpki-client