This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/4X9bzbTjxxEC-csNdknM31iR6Vk.roa File: 4X9bzbTjxxEC-csNdknM31iR6Vk.roa (raw, json) Hash identifier: g5Y0JUJxW/m2Y8F30up7Txp8xJPm4qz4gVK4xJRO0QQ= Subject key identifier: E1:7F:5B:CD:B4:E3:C7:11:02:F9:CB:0D:76:49:CC:DF:58:91:E9:59 Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f Certificate serial: 019B7E38A4A420DFF722275E202231ACE8AB Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/4X9bzbTjxxEC-csNdknM31iR6Vk.roa Signing time: Fri 02 Jan 2026 10:19:59 +0000 ROA not before: Fri 02 Jan 2026 10:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 131.188.0.0/16 maxlen: 16 192.44.81.0/24 maxlen: 24 192.44.82.0/23 maxlen: 23 192.44.84.0/22 maxlen: 22 192.44.88.0/23 maxlen: 23 192.44.90.0/24 maxlen: 24 192.129.10.0/23 maxlen: 23 192.129.12.0/23 maxlen: 23 192.129.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:a4:a4:20:df:f7:22:27:5e:20:22:31:ac:e8:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f Validity Not Before: Jan 2 10:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e17f5bcdb4e3c71102f9cb0d7649ccdf5891e959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:3e:aa:3e:a7:e7:8e:9a:c2:11:37:df:ef: 89:af:fa:16:a7:9a:12:0b:ac:c8:dd:e4:f3:65:3f: dc:48:8b:cf:04:e2:4d:a2:4c:59:8c:48:9d:d1:84: eb:19:5d:41:f3:96:b9:7b:9c:50:42:0a:30:4d:9d: b5:88:25:9a:61:4f:93:40:f8:0f:1f:41:fe:c6:d2: e0:c8:2d:27:f5:b8:ba:af:d5:fd:a4:09:03:bb:69: cd:c9:91:98:44:36:db:ac:af:d4:45:83:94:2f:a4: 1c:b0:6f:0c:3a:2b:3d:65:17:d0:59:ba:e4:39:c2: 78:70:0f:cc:ad:e8:cc:b0:b8:e5:bf:79:36:1f:35: 07:ce:a6:e9:fd:bb:94:78:f1:df:8f:c4:51:c6:7d: 0b:01:68:dd:06:2a:80:f3:cb:b3:46:92:94:36:ec: 06:fd:7e:eb:92:b3:5b:e5:2b:c1:35:85:35:71:9d: e2:ba:54:e7:0a:a9:8f:25:e7:c9:6c:b0:73:fd:23: 9c:07:ce:4b:c6:1b:4d:9a:df:10:5f:3a:2b:73:e8: 23:f9:1f:79:80:60:c9:50:43:68:a4:69:38:80:b9: cb:ba:10:55:fa:4a:f4:f3:b5:2f:b7:0c:3d:33:f9: 88:fb:31:3f:be:dd:bf:9d:30:05:aa:34:41:11:09: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7F:5B:CD:B4:E3:C7:11:02:F9:CB:0D:76:49:CC:DF:58:91:E9:59 X509v3 Authority Key Identifier: keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/4X9bzbTjxxEC-csNdknM31iR6Vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.188.0.0/16 192.44.81.0-192.44.90.255 192.129.10.0-192.129.14.255 Signature Algorithm: sha256WithRSAEncryption 9a:8c:5e:84:8a:6d:1e:70:70:d8:d0:e2:3a:22:32:5f:ab:4e: 00:b4:1e:e4:a9:b9:fd:01:4d:4e:1b:c7:52:67:9d:b3:de:b9: e7:ee:fa:48:6e:9c:01:f6:22:48:10:fa:3f:6e:17:f3:18:5f: 0e:f2:27:09:9b:e9:ab:c1:54:e4:f3:35:e0:46:4e:b9:ba:8f: 16:c1:7e:d5:3d:02:94:0b:1c:78:ae:bf:7d:2b:c1:fc:42:fc: d1:ca:30:cb:50:66:d7:02:55:d1:8f:af:61:e7:b4:23:a5:2a: bf:64:66:32:6d:ec:f6:70:5d:94:16:f8:e2:2e:d7:12:9a:aa: e6:18:c8:48:84:4a:db:01:66:cf:dd:b3:00:5b:dd:e8:4b:b2: 55:eb:45:a1:41:d6:97:18:61:be:b6:d6:f2:cf:f7:08:d2:cf: 0f:b0:61:b7:65:46:a9:74:2c:da:58:1e:3a:7a:79:93:dc:67: 99:d1:84:92:e5:35:f3:4c:09:0d:a5:49:1f:e7:89:9e:f1:9d: cb:64:aa:22:c8:a8:2a:76:a2:f8:8b:c8:66:78:d4:0e:d7:39: 8b:89:68:72:55:46:b3:ac:56:2e:98:4b:93:c3:98:20:3c:e1: 39:d0:a0:cd:69:60:df:50:b0:22:50:f7:38:0a:d3:f6:d3:06: 6b:4a:d8:72 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+OKSkIN/3IideICIxrOirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjQ5YmFmMTdmMDZjMzY0YTAwZjhlNjRjODkxYzUzNzI5 ZjdhMmYwHhcNMjYwMTAyMTAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTdmNWJjZGI0ZTNjNzExMDJmOWNiMGQ3NjQ5Y2NkZjU4OTFlOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9E+qj6n546awhE33++Jr/oWp5oS C6zI3eTzZT/cSIvPBOJNokxZjEid0YTrGV1B85a5e5xQQgowTZ21iCWaYU+TQPgP H0H+xtLgyC0n9bi6r9X9pAkDu2nNyZGYRDbbrK/URYOUL6QcsG8MOis9ZRfQWbrk OcJ4cA/MrejMsLjlv3k2HzUHzqbp/buUePHfj8RRxn0LAWjdBiqA88uzRpKUNuwG /X7rkrNb5SvBNYU1cZ3iulTnCqmPJefJbLBz/SOcB85LxhtNmt8QXzorc+gj+R95 gGDJUENopGk4gLnLuhBV+kr087Uvtww9M/mI+zE/vt2/nTAFqjRBEQlqcwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFOF/W82048cRAvnLDXZJzN9YkelZMB8GA1UdIwQY MBaAFI20m68X8Gw2SgD45kyJHFNyn3ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQt ODUxNzNlNTdlYjUyLzEvNFg5YnpiVGp4eEVDLWNzTmRrbk0zMWlSNlZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQtODUxNzNlNTdlYjUy LzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAg7wwDAME AMAsUQMEAMAsWjAMAwQBwIEKAwQAwIEOMA0GCSqGSIb3DQEBCwUAA4IBAQCajF6E im0ecHDY0OI6IjJfq04AtB7kqbn9AU1OG8dSZ52z3rnn7vpIbpwB9iJIEPo/bhfz GF8O8icJm+mrwVTk8zXgRk65uo8WwX7VPQKUCxx4rr99K8H8QvzRyjDLUGbXAlXR j69h57QjpSq/ZGYybez2cF2UFvjiLtcSmqrmGMhIhErbAWbP3bMAW93oS7JV60Wh QdaXGGG+ttbyz/cI0s8PsGG3ZUapdCzaWB46enmT3GeZ0YSS5TXzTAkNpUkf54me 8Z3LZKoiyKgqdqL4i8hmeNQO1zmLiWhyVUazrFYumEuTw5ggPOE50KDNaWDfULAi UPc4CtP20wZrSthy -----END CERTIFICATE-----Generated at Tue Jan 27 11:27:35 2026 by rpki-client