This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/0v42-yuEzObgwInMahxldfZmrHg.roa File: 0v42-yuEzObgwInMahxldfZmrHg.roa (raw, json) Hash identifier: spJCO+lQpC/r9TzdhrE3WFFw5uBpamaSo1GrCaKj4Fg= Subject key identifier: D2:FE:36:FB:2B:84:CC:E6:E0:C0:89:CC:6A:1C:65:75:F6:66:AC:78 Certificate issuer: /CN=09c50efe13aadf5423b04f0ddca8b3288395823e Certificate serial: 019B7F85827A7E4EA5BC8BAB8F961BCE77A9 Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/0v42-yuEzObgwInMahxldfZmrHg.roa Signing time: Fri 02 Jan 2026 16:23:34 +0000 ROA not before: Fri 02 Jan 2026 16:23:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2854 IP address blocks: 194.24.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:82:7a:7e:4e:a5:bc:8b:ab:8f:96:1b:ce:77:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e Validity Not Before: Jan 2 16:23:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2fe36fb2b84cce6e0c089cc6a1c6575f666ac78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:3f:11:a0:47:36:9b:92:5f:b9:08:03:01: f4:62:64:a0:ce:9c:a9:18:4a:95:d4:c7:b6:8d:bf: 1c:05:b9:25:0d:2d:15:ab:45:40:5b:b1:b1:ca:62: d1:9a:35:dd:96:4c:48:a6:84:32:a3:43:22:b5:7c: 58:25:3f:3e:83:68:32:69:31:4e:c8:d4:d9:3c:4f: 4e:9e:18:49:b3:1c:8f:75:0c:4d:af:34:3a:2e:14: 5a:c7:8a:6d:cd:57:c4:1e:98:63:80:29:5b:53:39: 1e:11:c5:3c:04:86:03:65:1f:b1:d9:cf:af:ae:2b: 18:c0:b9:81:a7:9d:56:b1:62:51:4c:d1:20:70:d1: 75:4c:b1:c0:d6:82:6a:28:b9:3e:57:f0:fb:c5:8d: c5:21:2a:6f:d4:93:09:01:7f:5d:ac:71:3f:c2:4d: 2d:c0:fc:3a:20:8d:cd:a4:a5:0c:3d:32:31:95:a6: c8:2f:7e:71:f2:b8:4d:c9:3d:07:65:dc:e2:09:9e: 20:b6:c9:1a:23:8b:73:05:87:77:88:05:7d:0f:57: b8:a7:3e:b6:fb:29:b1:cd:5d:9f:b8:49:7c:9c:2f: 8b:4a:f0:82:ca:bf:17:3c:d5:44:7c:71:41:76:f2: 64:bf:f2:59:65:ca:75:d8:17:42:d9:88:eb:79:36: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FE:36:FB:2B:84:CC:E6:E0:C0:89:CC:6A:1C:65:75:F6:66:AC:78 X509v3 Authority Key Identifier: keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/0v42-yuEzObgwInMahxldfZmrHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.24.9.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:55:42:99:a1:8a:77:15:88:51:ba:cd:74:7d:3a:df:f5:64: 1f:5a:ce:1e:bc:83:25:4e:e5:5f:0e:8a:da:a5:80:74:cb:1d: 58:55:f8:af:36:3f:cc:08:4a:3a:93:02:ea:12:1e:d1:7b:68: c4:91:fb:6a:05:e2:b1:85:ae:45:99:1b:38:dd:f2:1f:ad:b1: 99:57:32:e2:08:51:1f:b9:57:49:0b:2f:5f:69:df:14:14:a7: 7d:7f:69:72:25:81:59:33:30:ad:bb:f9:7e:af:d6:7c:9c:ac: af:ac:0f:9a:31:3e:27:02:dd:f7:ef:3d:a0:e0:c9:b7:58:86: 8f:b0:3c:f2:b0:ad:28:e3:ea:14:13:91:1c:51:5e:55:95:12: 11:6b:52:fc:eb:97:c4:88:5c:26:7e:c7:b5:e6:76:73:a7:5c: ec:34:40:eb:a7:0f:4c:df:08:0f:3a:ac:e0:19:19:f0:fa:a2: e6:08:9e:b1:37:9e:1a:82:84:d9:ee:08:36:aa:17:9c:53:98: 64:58:d0:ef:f8:90:6a:7d:bf:78:cc:87:af:ca:96:98:84:07: 8c:40:35:03:9e:2d:0d:29:f7:dd:95:c2:b7:1f:5f:6e:40:6e: 3d:23:4a:fd:bd:9a:41:bb:7c:93:14:b5:df:1a:9b:5a:ad:7a: 47:e2:65:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hYJ6fk6lvIurj5YbznepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzUwZWZlMTNhYWRmNTQyM2IwNGYwZGRjYThiMzI4ODM5 NTgyM2UwHhcNMjYwMTAyMTYyMzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmZlMzZmYjJiODRjY2U2ZTBjMDg5Y2M2YTFjNjU3NWY2NjZhYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrM/EaBHNpuSX7kIAwH0YmSgzpyp GEqV1Me2jb8cBbklDS0Vq0VAW7GxymLRmjXdlkxIpoQyo0MitXxYJT8+g2gyaTFO yNTZPE9OnhhJsxyPdQxNrzQ6LhRax4ptzVfEHphjgClbUzkeEcU8BIYDZR+x2c+v risYwLmBp51WsWJRTNEgcNF1TLHA1oJqKLk+V/D7xY3FISpv1JMJAX9drHE/wk0t wPw6II3NpKUMPTIxlabIL35x8rhNyT0HZdziCZ4gtskaI4tzBYd3iAV9D1e4pz62 +ymxzV2fuEl8nC+LSvCCyr8XPNVEfHFBdvJkv/JZZcp12BdC2YjreTbTnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNL+NvsrhMzm4MCJzGocZXX2Zqx4MB8GA1UdIwQY MBaAFAnFDv4Tqt9UI7BPDdyosyiDlYI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84NWEyMDgtMWFiNi00NmY3LWIxYTUt YTI2ZDI1YmM3NjU0LzEvMHY0Mi15dUV6T2Jnd0luTWFoeGxkZlptckhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84NWEyMDgtMWFiNi00NmY3LWIxYTUtYTI2ZDI1YmM3NjU0 LzEvQ2NVT19oT3EzMVFqc0U4TjNLaXpLSU9WZ2o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhgJMA0G CSqGSIb3DQEBCwUAA4IBAQAsVUKZoYp3FYhRus10fTrf9WQfWs4evIMlTuVfDora pYB0yx1YVfivNj/MCEo6kwLqEh7Re2jEkftqBeKxha5FmRs43fIfrbGZVzLiCFEf uVdJCy9fad8UFKd9f2lyJYFZMzCtu/l+r9Z8nKyvrA+aMT4nAt337z2g4Mm3WIaP sDzysK0o4+oUE5EcUV5VlRIRa1L865fEiFwmfse15nZzp1zsNEDrpw9M3wgPOqzg GRnw+qLmCJ6xN54agoTZ7gg2qhecU5hkWNDv+JBqfb94zIevypaYhAeMQDUDni0N KffdlcK3H19uQG49I0r9vZpBu3yTFLXfGptarXpH4mWt -----END CERTIFICATE-----Generated at Tue Feb 3 00:18:16 2026 by rpki-client