This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/9LQRctI2YftbEKVnyItaOOy3d_M.roa File: 9LQRctI2YftbEKVnyItaOOy3d_M.roa (raw, json) Hash identifier: pgk2Inrux/7lL/EYb6kKY+A+qh5ghGB3qij7g35sOh8= Subject key identifier: F4:B4:11:72:D2:36:61:FB:5B:10:A5:67:C8:8B:5A:38:EC:B7:77:F3 Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F8386CD0D63195A142470D22331C8EC Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/9LQRctI2YftbEKVnyItaOOy3d_M.roa Signing time: Fri 02 Jan 2026 16:21:24 +0000 ROA not before: Fri 02 Jan 2026 16:21:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63473 IP address blocks: 188.209.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:86:cd:0d:63:19:5a:14:24:70:d2:23:31:c8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4b41172d23661fb5b10a567c88b5a38ecb777f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:81:5c:fb:d3:6d:b1:56:d0:b9:4c:07:02:68: 93:f9:43:8a:7b:ef:9c:4f:cb:4c:e0:25:f5:8a:f2: 18:13:3b:16:1a:8d:bb:c5:de:f0:19:e1:4a:03:cf: 50:89:b2:a0:70:d0:c9:24:98:35:5d:d4:e9:9a:dd: bf:63:75:f8:7f:d4:92:ab:33:4e:ea:2a:28:8b:86: aa:12:89:56:96:58:a7:29:8b:95:81:15:08:09:92: 0d:49:f2:ad:3c:f4:79:dc:f6:40:b3:ac:a0:1a:e4: 3c:81:6c:02:6d:49:12:5f:b1:1f:f6:e7:9e:93:98: 83:66:d3:05:43:b1:7c:b8:ba:61:1c:af:c2:d3:20: 75:1d:7c:4d:07:19:22:3e:03:7f:d8:1b:31:9d:99: af:ff:7f:5c:c4:ff:02:24:9a:e5:62:44:7e:e7:4a: 2c:e8:26:f3:de:1e:5f:61:30:68:a0:11:ef:e6:d2: e2:de:05:e3:12:2a:d4:92:ef:34:16:f1:1c:1a:72: 40:22:09:de:87:8f:10:db:e9:16:ed:da:45:93:ce: c2:49:02:40:28:f7:3b:06:ff:fa:af:dc:e8:1b:09: e2:0c:1b:e8:7f:71:22:33:a1:37:8d:23:60:bc:ca: a1:ef:bf:2f:ba:d4:18:47:4b:9c:a6:31:36:4b:c0: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B4:11:72:D2:36:61:FB:5B:10:A5:67:C8:8B:5A:38:EC:B7:77:F3 X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/9LQRctI2YftbEKVnyItaOOy3d_M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.141.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:23:6e:1f:a9:23:b6:0b:8e:ab:79:e9:a7:d4:32:23:05:88: 53:c5:9f:94:54:62:d7:4b:ab:23:a9:d6:b5:b8:f3:a8:2b:77: 63:e6:ec:43:fb:42:06:ad:af:f2:20:81:34:38:ed:bb:6f:ca: 92:66:05:1a:f3:17:38:0e:32:41:7c:18:97:9d:d8:c4:3f:d8: fe:4e:43:39:ff:88:ac:98:b9:cf:aa:31:a9:4d:00:b0:60:b9: e2:87:e1:ef:e1:07:eb:56:77:f4:4c:01:03:7e:35:8c:d6:df: 6d:b5:5a:71:ce:27:20:e3:f6:74:52:74:9c:91:54:d7:ad:a2: 24:cc:cf:df:02:c3:52:26:cd:a3:d4:be:84:04:2d:04:31:26: 88:6c:de:06:67:d5:8a:c5:16:33:af:98:40:0a:bc:15:bf:da: ed:60:65:4b:f4:35:ff:f1:d9:05:4a:4e:6a:78:94:2a:53:a1: b3:2b:b6:4f:95:33:b4:2c:0c:f7:55:45:81:e3:b0:8e:38:19: 7e:75:3d:18:aa:59:65:35:0a:46:98:bc:29:b9:79:bb:e8:52: 16:54:78:7e:20:d9:3a:08:8b:f2:fb:37:c1:ac:8f:e0:5a:5f: 7f:5e:55:bf:33:61:e6:ab:4b:7f:b2:ea:d2:bd:0c:8d:97:78: df:6d:cc:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g4bNDWMZWhQkcNIjMcjsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGI0MTE3MmQyMzY2MWZiNWIxMGE1NjdjODhiNWEzOGVjYjc3N2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4Fc+9NtsVbQuUwHAmiT+UOKe++c T8tM4CX1ivIYEzsWGo27xd7wGeFKA89QibKgcNDJJJg1XdTpmt2/Y3X4f9SSqzNO 6iooi4aqEolWllinKYuVgRUICZINSfKtPPR53PZAs6ygGuQ8gWwCbUkSX7Ef9uee k5iDZtMFQ7F8uLphHK/C0yB1HXxNBxkiPgN/2BsxnZmv/39cxP8CJJrlYkR+50os 6Cbz3h5fYTBooBHv5tLi3gXjEirUku80FvEcGnJAIgneh48Q2+kW7dpFk87CSQJA KPc7Bv/6r9zoGwniDBvof3EiM6E3jSNgvMqh778vutQYR0ucpjE2S8Dh1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPS0EXLSNmH7WxClZ8iLWjjst3fzMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvOUxRUmN0STJZZnRiRUtWbnlJdGFPT3kzZF9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGNMA0G CSqGSIb3DQEBCwUAA4IBAQBdI24fqSO2C46reemn1DIjBYhTxZ+UVGLXS6sjqda1 uPOoK3dj5uxD+0IGra/yIIE0OO27b8qSZgUa8xc4DjJBfBiXndjEP9j+TkM5/4is mLnPqjGpTQCwYLnih+Hv4QfrVnf0TAEDfjWM1t9ttVpxzicg4/Z0UnSckVTXraIk zM/fAsNSJs2j1L6EBC0EMSaIbN4GZ9WKxRYzr5hACrwVv9rtYGVL9DX/8dkFSk5q eJQqU6GzK7ZPlTO0LAz3VUWB47COOBl+dT0YqlllNQpGmLwpuXm76FIWVHh+INk6 CIvy+zfBrI/gWl9/XlW/M2Hmq0t/surSvQyNl3jfbcym -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:03 2026 by rpki-client