This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/n9DHKwk4Wny8zDrEY8_hSkrJ_RA.roa File: n9DHKwk4Wny8zDrEY8_hSkrJ_RA.roa (raw, json) Hash identifier: gVRzaVlrA0PT4P/eOqodE9EyzqJ1MpOnj1J5G+nWuZc= Subject key identifier: 9F:D0:C7:2B:09:38:5A:7C:BC:CC:3A:C4:63:CF:E1:4A:4A:C9:FD:10 Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Certificate serial: 019B7B359F2C08F94786A7AE99A806C9A2F7 Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/n9DHKwk4Wny8zDrEY8_hSkrJ_RA.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210538 IP address blocks: 94.154.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9f:2c:08:f9:47:86:a7:ae:99:a8:06:c9:a2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fd0c72b09385a7cbccc3ac463cfe14a4ac9fd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b7:d9:e5:66:c3:09:db:16:80:9c:7c:c9:7e: bf:31:d8:19:57:45:31:f9:12:c6:cb:16:b9:35:d0: a5:ec:2c:48:de:69:ec:ac:9b:aa:92:f7:a1:ae:3a: e2:31:92:8f:0b:d8:1a:12:7f:0e:83:88:e4:7d:49: 7f:8b:3a:22:98:48:e6:d7:01:45:54:6d:80:13:82: 3b:a3:e7:4f:41:98:5a:3b:9b:28:a0:d8:e9:ff:29: bd:f2:d2:60:1c:b3:c1:91:49:eb:3f:46:ae:60:d2: 41:c9:07:3c:9b:7b:83:06:d0:a9:ea:e5:82:4e:bd: 4c:8e:cb:95:bb:49:24:e5:80:36:a8:a4:5f:aa:01: 08:e3:98:1d:d3:7e:c0:62:53:be:88:59:f0:d6:9f: 30:f6:1a:91:15:2d:d5:9f:d5:9a:9a:9b:aa:1c:27: 0f:1c:50:c4:21:19:b3:40:16:94:b8:81:43:3a:54: fc:09:80:bc:13:95:8e:10:fc:ec:b9:12:2b:2d:d6: 9d:49:df:9d:e0:88:a3:df:9c:33:c9:bb:57:76:1f: 8a:72:9a:e2:a2:70:78:5f:32:78:e5:92:e6:ac:54: f7:98:14:77:ac:3f:2f:87:ba:fd:69:72:7b:65:25: 3b:88:40:2b:c8:f2:8c:c8:b3:36:fd:03:f0:ce:6a: 36:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D0:C7:2B:09:38:5A:7C:BC:CC:3A:C4:63:CF:E1:4A:4A:C9:FD:10 X509v3 Authority Key Identifier: keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/n9DHKwk4Wny8zDrEY8_hSkrJ_RA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.46.0/24 Signature Algorithm: sha256WithRSAEncryption 53:8a:6e:12:24:9c:33:32:92:50:e4:c7:e9:94:0b:c8:1a:a5: 5e:7a:83:56:07:8a:eb:df:68:fe:f2:8f:b9:90:3d:db:2e:d1: 42:52:c0:d4:a8:ad:cd:5d:a9:0a:54:0a:6b:d5:b8:b0:e2:37: dd:81:fe:e2:a6:c9:1a:a4:a0:45:75:76:8b:65:3f:40:25:22: 33:3d:d4:d1:8e:9a:84:e3:4f:b2:fe:06:86:3a:1e:91:96:d0: 0a:fd:4a:0f:17:ac:0d:b3:7f:03:47:00:17:4c:86:cb:c4:59: df:5d:a6:00:88:22:8b:40:54:e7:3f:78:37:db:90:21:58:be: af:33:4c:ed:09:88:36:41:0e:25:0f:c6:95:25:55:3f:24:29: d8:9c:a1:9c:2d:69:98:a5:33:d6:bd:6e:06:c0:bb:47:2e:5b: c0:dd:96:73:79:28:96:cc:8c:54:23:27:c7:92:32:3e:de:a8: f4:df:fb:9c:9e:85:15:d6:03:3c:7c:a5:da:b0:a5:b0:2c:59: 4e:60:3d:ae:d2:c5:95:18:63:1c:3a:f2:6e:20:82:ea:df:5b: 56:4d:f7:0d:4c:3d:41:32:b6:39:03:53:56:ea:01:74:8b:e5: b0:ed:e5:1a:6c:3b:61:ea:e6:69:d1:da:d4:b4:3d:52:24:72: bd:fe:a5:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZ8sCPlHhqeumagGyaL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk NzExNTUwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmQwYzcyYjA5Mzg1YTdjYmNjYzNhYzQ2M2NmZTE0YTRhYzlmZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrfZ5WbDCdsWgJx8yX6/MdgZV0Ux +RLGyxa5NdCl7CxI3mnsrJuqkvehrjriMZKPC9gaEn8Og4jkfUl/izoimEjm1wFF VG2AE4I7o+dPQZhaO5sooNjp/ym98tJgHLPBkUnrP0auYNJByQc8m3uDBtCp6uWC Tr1MjsuVu0kk5YA2qKRfqgEI45gd037AYlO+iFnw1p8w9hqRFS3Vn9WampuqHCcP HFDEIRmzQBaUuIFDOlT8CYC8E5WOEPzsuRIrLdadSd+d4Iij35wzybtXdh+Kcpri onB4XzJ45ZLmrFT3mBR3rD8vh7r9aXJ7ZSU7iEAryPKMyLM2/QPwzmo21QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/QxysJOFp8vMw6xGPP4UpKyf0QMB8GA1UdIwQY MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt NjUyNDljYmM1NzNjLzEvbjlESEt3azRXbnk4ekRyRVk4X2hTa3JKX1JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpouMA0G CSqGSIb3DQEBCwUAA4IBAQBTim4SJJwzMpJQ5MfplAvIGqVeeoNWB4rr32j+8o+5 kD3bLtFCUsDUqK3NXakKVApr1biw4jfdgf7ipskapKBFdXaLZT9AJSIzPdTRjpqE 40+y/gaGOh6RltAK/UoPF6wNs38DRwAXTIbLxFnfXaYAiCKLQFTnP3g325AhWL6v M0ztCYg2QQ4lD8aVJVU/JCnYnKGcLWmYpTPWvW4GwLtHLlvA3ZZzeSiWzIxUIyfH kjI+3qj03/ucnoUV1gM8fKXasKWwLFlOYD2u0sWVGGMcOvJuIILq31tWTfcNTD1B MrY5A1NW6gF0i+Ww7eUabDth6uZp0drUtD1SJHK9/qWs -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:16 2026 by rpki-client