This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa File: t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa (raw, json) Hash identifier: kWqIg6Zu9e2cjZJBsJNhAniK6OQKlOVK34Tp81YEZc0= Subject key identifier: B7:DB:19:FA:CB:E4:34:23:A7:FD:A0:79:3E:A4:54:25:C2:00:E6:AC Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6 Certificate serial: 019B7B35BCE91D80EB06844877F284E3DFDB Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9255 IP address blocks: 146.255.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:bc:e9:1d:80:eb:06:84:48:77:f2:84:e3:df:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6 Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7db19facbe43423a7fda0793ea45425c200e6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:7a:2b:9e:e7:e8:e0:60:09:ed:3c:3c:19: 7f:83:94:73:8b:5a:18:25:b3:82:ec:54:97:21:c9: 15:fa:2e:93:0e:e4:e3:01:0b:9a:e3:1e:b1:ef:44: e4:8b:34:7b:fe:b0:b5:e9:de:4b:3f:21:03:ed:cb: 23:88:47:2e:ad:c3:ce:8b:20:1e:d8:a7:b5:13:37: e9:85:cb:62:a5:1e:b2:73:32:75:bb:06:ac:06:f8: f7:b0:2c:d9:78:a9:d8:ff:30:9a:0b:f5:b1:cd:df: 6d:3b:a1:3d:9e:f6:f9:56:19:80:62:5b:78:74:90: 21:97:2c:48:bd:5e:05:a8:fe:cb:57:3a:a1:97:19: 34:18:f5:c3:e1:05:c8:11:0b:cd:5b:24:be:15:c0: 3b:90:d4:3b:28:da:0a:fc:57:ed:dc:ff:62:13:80: 82:e9:ac:05:d6:48:7e:6e:b6:ce:3e:23:09:25:8b: ab:3e:f5:e2:49:85:4d:f3:bf:d0:36:24:8b:04:c9: 1a:18:e0:4a:56:43:f2:bd:c6:e0:89:9d:dc:2c:b9: f8:96:e5:fe:ba:93:9a:05:a8:8e:7a:f8:8b:39:98: 6b:34:4c:74:7d:33:75:53:fc:f9:60:28:e0:bf:67: af:d7:33:ba:e7:a5:36:63:2f:84:53:99:9a:5d:f0: a0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DB:19:FA:CB:E4:34:23:A7:FD:A0:79:3E:A4:54:25:C2:00:E6:AC X509v3 Authority Key Identifier: keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/t9sZ-svkNCOn_aB5PqRUJcIA5qw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.255.124.0/22 Signature Algorithm: sha256WithRSAEncryption 24:f1:d8:44:67:2a:ac:5a:16:34:0c:c0:e8:01:0e:c9:f3:60: 2e:f8:11:f1:89:18:96:78:73:b8:be:8c:91:4e:1c:7d:b5:b1: 6a:c4:97:a2:1f:99:5b:85:87:99:97:33:2e:ca:10:c2:58:d5: f7:ac:b2:dc:d8:5d:e1:cd:a9:ab:bf:a3:53:d6:b0:ce:d3:48: be:04:11:b4:69:f6:c2:ac:b1:19:25:b9:af:a3:ed:6b:d8:b1: d0:d2:59:6d:52:fe:68:2f:8e:01:71:4c:7a:c8:85:e4:7f:ac: ba:b5:ed:ac:e2:32:1b:04:b9:2b:68:dc:8a:7e:b4:c4:01:42: e8:10:dc:61:64:f9:7e:ea:09:56:cd:22:28:c0:5c:05:6a:22: 5d:0e:36:1f:07:82:5f:92:f1:d5:49:84:ef:84:c0:59:6c:14: 79:95:b2:c1:87:15:39:c0:12:fc:d9:40:ed:c3:6a:d8:63:49: 4e:f0:a8:8d:5f:92:e5:ab:51:cd:21:a1:eb:11:28:d0:74:b5: 29:29:64:b9:8c:c8:6c:81:9c:5b:8a:c7:df:f9:41:a7:3a:20: f5:9b:3c:54:db:b7:90:12:14:52:ac:5a:59:1b:2f:4d:8c:ca: 78:44:6d:92:a5:eb:e7:1b:2b:e1:77:fe:5b:e7:5a:e7:93:77: 6e:44:5f:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NbzpHYDrBoRId/KE49/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzg5MTE2ODJiYzVjYTcxY2VjZTFlZmUzYWMxMzViZmRi NTlkZDYwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2RiMTlmYWNiZTQzNDIzYTdmZGEwNzkzZWE0NTQyNWMyMDBlNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Rt6K57n6OBgCe08PBl/g5Rzi1oY JbOC7FSXIckV+i6TDuTjAQua4x6x70TkizR7/rC16d5LPyED7csjiEcurcPOiyAe 2Ke1EzfphctipR6yczJ1uwasBvj3sCzZeKnY/zCaC/Wxzd9tO6E9nvb5VhmAYlt4 dJAhlyxIvV4FqP7LVzqhlxk0GPXD4QXIEQvNWyS+FcA7kNQ7KNoK/Fft3P9iE4CC 6awF1kh+brbOPiMJJYurPvXiSYVN87/QNiSLBMkaGOBKVkPyvcbgiZ3cLLn4luX+ upOaBaiOeviLOZhrNEx0fTN1U/z5YCjgv2ev1zO656U2Yy+EU5maXfCgGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfbGfrL5DQjp/2geT6kVCXCAOasMB8GA1UdIwQY MBaAFH3IkRaCvFynHOzh7+OsE1v9tZ3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQt NzUyOTUyNTFiMWU4LzEvdDlzWi1zdmtOQ09uX2FCNVBxUlVKY0lBNXF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQtNzUyOTUyNTFiMWU4 LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkv98MA0G CSqGSIb3DQEBCwUAA4IBAQAk8dhEZyqsWhY0DMDoAQ7J82Au+BHxiRiWeHO4voyR Thx9tbFqxJeiH5lbhYeZlzMuyhDCWNX3rLLc2F3hzamrv6NT1rDO00i+BBG0afbC rLEZJbmvo+1r2LHQ0lltUv5oL44BcUx6yIXkf6y6te2s4jIbBLkraNyKfrTEAULo ENxhZPl+6glWzSIowFwFaiJdDjYfB4JfkvHVSYTvhMBZbBR5lbLBhxU5wBL82UDt w2rYY0lO8KiNX5Llq1HNIaHrESjQdLUpKWS5jMhsgZxbisff+UGnOiD1mzxU27eQ EhRSrFpZGy9NjMp4RG2SpevnGyvhd/5b51rnk3duRF8D -----END CERTIFICATE-----Generated at Wed Jan 21 18:06:24 2026 by rpki-client