This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/fE9cNRDKHoumM1hRkT3ZAa2rwPs.roa File: fE9cNRDKHoumM1hRkT3ZAa2rwPs.roa (raw, json) Hash identifier: Zy3HM17iHdXxNk/UVoAmsPQwfcZdi0N5Gh6yWp44W4o= Subject key identifier: 7C:4F:5C:35:10:CA:1E:8B:A6:33:58:51:91:3D:D9:01:AD:AB:C0:FB Certificate issuer: /CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Certificate serial: 019B8E74D005518DDB80674F5D0CAF6CC864 Authority key identifier: 2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/fE9cNRDKHoumM1hRkT3ZAa2rwPs.roa Signing time: Mon 05 Jan 2026 13:59:38 +0000 ROA not before: Mon 05 Jan 2026 13:59:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 194.150.74.0/24 maxlen: 24 194.150.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.mft rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:74:d0:05:51:8d:db:80:67:4f:5d:0c:af:6c:c8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d3c3987e7c34b366aa0f09c40ea4c80bfed0e01 Validity Not Before: Jan 5 13:59:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c4f5c3510ca1e8ba6335851913dd901adabc0fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d1:e1:0e:82:11:b0:82:3f:28:87:33:bb:ec: cd:8d:72:15:a6:fc:99:b4:1d:02:f1:a5:d7:d2:ee: d9:ac:ee:ad:9b:e1:a2:d4:2f:47:7c:b2:6d:7d:c0: 70:b4:38:d9:a3:90:e1:6f:ec:8e:c7:43:0c:a9:15: 13:31:37:03:cf:58:c8:c3:41:e2:c1:a2:be:85:6c: 53:08:e3:a1:13:8e:eb:5e:dd:06:3c:a9:16:2f:0a: c6:9b:3a:f3:35:82:0a:95:3f:eb:ec:da:80:88:38: e9:cb:ba:0c:52:4b:d3:e7:54:30:79:ab:a0:60:c7: 8d:c2:f3:82:0a:15:27:77:4e:e5:d8:56:64:74:d8: fd:4d:e0:88:06:74:23:ec:08:89:80:66:40:ff:4b: ec:52:b5:e4:60:a1:f8:4d:c9:c6:ec:aa:26:d8:e2: 64:c7:19:5d:31:ba:83:6a:5f:3f:4f:af:fe:f7:7e: 75:92:40:48:68:60:df:97:5c:a0:b1:ba:33:99:b5: 77:58:21:43:cf:4f:5f:d8:42:d3:fc:b0:0e:40:77: 65:3a:32:73:44:f0:01:9e:50:7a:6e:c8:e3:8c:85: 15:2f:27:8e:3f:e3:2d:eb:1d:cc:0c:06:6a:91:19: 9e:da:2a:44:f2:84:75:dc:8f:8a:60:73:e2:38:32: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4F:5C:35:10:CA:1E:8B:A6:33:58:51:91:3D:D9:01:AD:AB:C0:FB X509v3 Authority Key Identifier: keyid:2D:3C:39:87:E7:C3:4B:36:6A:A0:F0:9C:40:EA:4C:80:BF:ED:0E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LTw5h-fDSzZqoPCcQOpMgL_tDgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/fE9cNRDKHoumM1hRkT3ZAa2rwPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/068a6c-921b-4e0b-ba7e-3a6de99ede47/1/LTw5h-fDSzZqoPCcQOpMgL_tDgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.150.74.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:e8:09:c1:28:85:3e:9a:a4:7f:08:e5:a1:f4:41:db:60:fd: 30:a1:27:9e:2f:76:c1:15:f7:f6:86:80:79:79:dd:ad:0a:fd: 2f:dd:ae:04:46:71:e3:ae:4d:7d:4f:03:e3:39:8b:63:d4:bd: c2:98:28:6b:f3:04:58:1c:da:f2:92:c9:09:d0:16:d3:bd:77: de:fe:62:f9:67:f4:d6:34:50:a1:36:c3:b3:1f:19:c6:5d:4f: 7d:da:5c:eb:0c:b4:85:e4:d2:af:e4:20:66:4c:b2:27:81:25: 3f:ed:bd:3f:f0:97:58:1c:76:00:13:a3:6b:2e:09:0f:95:5d: 49:3e:42:87:12:26:ab:60:38:48:f9:f7:99:ef:56:7e:5e:07: 37:73:2b:5b:cf:80:51:8a:ad:e5:6f:78:f9:6a:c8:1d:ec:ef: ce:88:d5:ea:c0:3d:1b:ec:2c:64:3d:a0:5c:09:a8:5f:59:e9: d0:d8:28:b1:af:bc:c2:55:65:d2:7e:05:74:16:fb:e7:5e:83: bf:2f:29:20:6e:41:47:5d:54:34:3c:23:9c:fd:48:04:97:87: 6e:68:5a:51:a1:f4:ee:6c:c9:c5:92:03:bb:6b:b6:ea:c1:d4: 66:11:9c:6e:75:bc:d6:ec:1e:ff:86:dc:3a:82:77:83:a5:2f: cd:e0:d7:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuOdNAFUY3bgGdPXQyvbMhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkM2MzOTg3ZTdjMzRiMzY2YWEwZjA5YzQwZWE0YzgwYmZl ZDBlMDEwHhcNMjYwMTA1MTM1OTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzRmNWMzNTEwY2ExZThiYTYzMzU4NTE5MTNkZDkwMWFkYWJjMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9HhDoIRsII/KIczu+zNjXIVpvyZ tB0C8aXX0u7ZrO6tm+Gi1C9HfLJtfcBwtDjZo5Dhb+yOx0MMqRUTMTcDz1jIw0Hi waK+hWxTCOOhE47rXt0GPKkWLwrGmzrzNYIKlT/r7NqAiDjpy7oMUkvT51Qweaug YMeNwvOCChUnd07l2FZkdNj9TeCIBnQj7AiJgGZA/0vsUrXkYKH4TcnG7Kom2OJk xxldMbqDal8/T6/+9351kkBIaGDfl1ygsbozmbV3WCFDz09f2ELT/LAOQHdlOjJz RPABnlB6bsjjjIUVLyeOP+Mt6x3MDAZqkRme2ipE8oR13I+KYHPiODITvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHxPXDUQyh6LpjNYUZE92QGtq8D7MB8GA1UdIwQY MBaAFC08OYfnw0s2aqDwnEDqTIC/7Q4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2Ut M2E2ZGU5OWVkZTQ3LzEvZkU5Y05SREtIb3VtTTFoUmtUM1pBYTJyd1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wNjhhNmMtOTIxYi00ZTBiLWJhN2UtM2E2ZGU5OWVkZTQ3 LzEvTFR3NWgtZkRTelpxb1BDY1FPcE1nTF90RGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpZKMA0G CSqGSIb3DQEBCwUAA4IBAQAf6AnBKIU+mqR/COWh9EHbYP0woSeeL3bBFff2hoB5 ed2tCv0v3a4ERnHjrk19TwPjOYtj1L3CmChr8wRYHNrykskJ0BbTvXfe/mL5Z/TW NFChNsOzHxnGXU992lzrDLSF5NKv5CBmTLIngSU/7b0/8JdYHHYAE6NrLgkPlV1J PkKHEiarYDhI+feZ71Z+Xgc3cytbz4BRiq3lb3j5asgd7O/OiNXqwD0b7CxkPaBc CahfWenQ2Cixr7zCVWXSfgV0FvvnXoO/LykgbkFHXVQ0PCOc/UgEl4duaFpRofTu bMnFkgO7a7bqwdRmEZxudbzW7B7/htw6gneDpS/N4Ncp -----END CERTIFICATE-----Generated at Sun Jan 18 10:03:21 2026 by rpki-client