This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/jHBsMIq_X95A0zcUUfrUU1TqRyA.roa File: jHBsMIq_X95A0zcUUfrUU1TqRyA.roa (raw, json) Hash identifier: di3dTOJ0E+QggdsPKZ6fs3tupenGj8s6a2rjVQo/JqM= Subject key identifier: 8C:70:6C:30:8A:BF:5F:DE:40:D3:37:14:51:FA:D4:53:54:EA:47:20 Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226 Certificate serial: 019B797F115C5A216E3C08EE79484CEA885C Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/jHBsMIq_X95A0zcUUfrUU1TqRyA.roa Signing time: Thu 01 Jan 2026 12:18:49 +0000 ROA not before: Thu 01 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197742 IP address blocks: 193.105.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:11:5c:5a:21:6e:3c:08:ee:79:48:4c:ea:88:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226 Validity Not Before: Jan 1 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c706c308abf5fde40d3371451fad45354ea4720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a6:f0:9b:2a:34:b3:9a:58:92:f9:f3:90:1b: 25:5e:87:9f:b5:bb:56:34:6a:7a:c2:6e:82:5a:6b: 59:14:85:bc:1e:fa:19:c0:25:3b:b9:88:62:a2:f7: b0:9f:3e:83:c9:dd:50:9f:ec:dc:e2:6c:88:41:6d: b6:07:7d:65:f8:c8:40:86:69:c2:e5:16:b9:f0:06: aa:99:d4:6d:7f:3a:c6:b4:74:8d:22:0f:11:e6:57: 14:52:e4:ea:ae:26:b6:c6:c7:b9:97:48:97:d4:e4: 9c:6f:87:a9:eb:7d:8c:e3:8e:5b:72:b3:2e:e7:c9: 88:50:6c:16:eb:c6:fc:16:c6:f9:76:38:24:52:81: ec:8c:b5:47:f3:be:ae:53:79:b8:60:f1:25:a5:3f: d6:d6:33:ec:70:f6:e0:a2:36:8a:fc:ed:c2:6a:be: 56:cd:17:15:01:5f:49:de:eb:0d:ba:fc:0a:53:71: a7:2d:01:6f:0b:c5:e4:a9:9e:e2:97:f4:47:9b:ee: 2e:b6:1d:ae:73:cb:ae:4b:0e:c1:69:08:89:aa:21: 8a:84:a5:46:3b:48:4d:6c:4b:f7:f9:4b:d9:6f:5d: 46:4e:33:5d:55:55:eb:93:0c:76:b2:2e:3d:0d:fc: ab:4b:c1:91:20:94:2f:6e:6d:e8:06:b0:80:a6:d2: c3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:6C:30:8A:BF:5F:DE:40:D3:37:14:51:FA:D4:53:54:EA:47:20 X509v3 Authority Key Identifier: keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/jHBsMIq_X95A0zcUUfrUU1TqRyA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.9.0/24 Signature Algorithm: sha256WithRSAEncryption 02:2e:18:7f:6d:10:4e:de:4d:ff:45:55:ed:e6:84:d7:df:4e: 5b:56:59:02:0d:bd:05:56:8d:f5:a7:02:e0:8e:af:e2:1f:3d: a9:11:47:9b:5b:98:a7:46:fe:2f:9d:5b:80:b8:d3:8c:99:d3: d5:e9:bc:7d:f9:0f:27:45:ff:c4:7a:2b:c8:2b:3d:23:d7:0f: 5a:6f:4f:fe:6c:c8:ec:a8:37:14:78:31:fb:05:6b:73:7d:73: f0:71:a1:8a:d2:d1:b6:55:7e:e0:25:22:f4:65:87:2a:83:a4: 6b:f9:bc:49:6f:d2:e9:3c:71:4e:ea:3b:0b:2e:b8:4a:76:17: 8a:b1:15:a0:a7:6a:f1:92:68:6a:36:c7:8b:c7:1f:55:0d:1d: 5a:93:f1:e2:29:09:03:da:05:c6:90:b4:24:57:9d:72:39:d5: 63:c4:78:22:b2:f4:47:7b:be:6f:a9:33:5a:a4:3e:e6:f7:7e: 92:a6:54:38:2c:66:19:3f:fd:a9:61:2e:f0:69:b9:d7:13:d1: be:6a:69:b8:54:1f:d9:75:ae:a9:12:96:6b:2a:35:c2:43:8a: 10:69:ce:b5:ef:bf:b2:a3:b8:3f:f7:8e:c3:26:cc:3d:92:c5: 3d:10:cf:ca:e5:a7:41:93:db:77:30:7a:d9:9e:c3:b7:e1:15: c7:8d:03:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fxFcWiFuPAjueUhM6ohcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTA5NTNhN2IzMDNkNmExZTlhMDI4NzE2MGMyZjQ2MGYw N2YyMjYwHhcNMjYwMTAxMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzcwNmMzMDhhYmY1ZmRlNDBkMzM3MTQ1MWZhZDQ1MzU0ZWE0NzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArabwmyo0s5pYkvnzkBslXoeftbtW NGp6wm6CWmtZFIW8HvoZwCU7uYhiovewnz6Dyd1Qn+zc4myIQW22B31l+MhAhmnC 5Ra58AaqmdRtfzrGtHSNIg8R5lcUUuTqria2xse5l0iX1OScb4ep632M445bcrMu 58mIUGwW68b8Fsb5djgkUoHsjLVH876uU3m4YPElpT/W1jPscPbgojaK/O3Car5W zRcVAV9J3usNuvwKU3GnLQFvC8XkqZ7il/RHm+4uth2uc8uuSw7BaQiJqiGKhKVG O0hNbEv3+UvZb11GTjNdVVXrkwx2si49DfyrS8GRIJQvbm3oBrCAptLDNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxwbDCKv1/eQNM3FFH61FNU6kcgMB8GA1UdIwQY MBaAFEvglTp7MD1qHpoChxYML0YPB/ImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lNDVjNTItMTcxZi00YzVjLWFiZTgt ZWU5NmQwZGYwMDAzLzEvakhCc01JcV9YOTVBMHpjVVVmclVVMVRxUnlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9lNDVjNTItMTcxZi00YzVjLWFiZTgtZWU5NmQwZGYwMDAz LzEvUy1DVk9uc3dQV29lbWdLSEZnd3ZSZzhIOGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkJMA0G CSqGSIb3DQEBCwUAA4IBAQACLhh/bRBO3k3/RVXt5oTX305bVlkCDb0FVo31pwLg jq/iHz2pEUebW5inRv4vnVuAuNOMmdPV6bx9+Q8nRf/EeivIKz0j1w9ab0/+bMjs qDcUeDH7BWtzfXPwcaGK0tG2VX7gJSL0ZYcqg6Rr+bxJb9LpPHFO6jsLLrhKdheK sRWgp2rxkmhqNseLxx9VDR1ak/HiKQkD2gXGkLQkV51yOdVjxHgisvRHe75vqTNa pD7m936SplQ4LGYZP/2pYS7wabnXE9G+amm4VB/Zda6pEpZrKjXCQ4oQac6177+y o7g/947DJsw9ksU9EM/K5adBk9t3MHrZnsO34RXHjQOf -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:02 2026 by rpki-client