This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/w9CRvvsYzgY0DlQQmWuMnS9mI2o.roa File: w9CRvvsYzgY0DlQQmWuMnS9mI2o.roa (raw, json) Hash identifier: fUMokcIKd3DOh6naOLFCtJpr9vVF9HoG1tnLSbQmKeQ= Subject key identifier: C3:D0:91:BE:FB:18:CE:06:34:0E:54:10:99:6B:8C:9D:2F:66:23:6A Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97 Certificate serial: 019B7E3867258AF622F96FFE832D41FCF12F Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/w9CRvvsYzgY0DlQQmWuMnS9mI2o.roa Signing time: Fri 02 Jan 2026 10:19:44 +0000 ROA not before: Fri 02 Jan 2026 10:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50774 IP address blocks: 193.108.142.0/23 maxlen: 23 193.108.142.0/24 maxlen: 24 193.108.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:67:25:8a:f6:22:f9:6f:fe:83:2d:41:fc:f1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97 Validity Not Before: Jan 2 10:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3d091befb18ce06340e5410996b8c9d2f66236a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4f:ab:e7:3f:7b:9a:47:4b:e4:1f:40:0e:87: d1:fb:44:a0:f3:6a:24:72:63:a5:f2:e2:9a:0a:5f: 68:bb:fb:6c:73:5a:8f:b0:a2:51:e6:57:ef:89:d6: 29:ca:9a:f4:92:c6:7d:34:17:12:ec:39:42:94:49: 8e:2e:04:8b:13:9b:b0:d7:c7:4a:03:49:15:64:82: 84:e4:1f:e0:dc:6f:6d:37:bd:b6:00:37:ed:97:f4: fe:8d:e8:ca:cb:c8:c7:ef:ba:94:1b:e4:f5:9c:95: 5b:a4:fd:2c:5b:b3:9b:f0:47:fe:6e:fe:9e:47:6c: c1:c6:f4:fc:64:df:39:80:73:49:c3:0a:b8:0c:89: 1d:b4:39:2b:f7:5d:c3:4f:78:ad:a9:bf:71:aa:f0: e2:a1:91:b9:3e:65:a2:30:e9:7b:78:e7:c4:ec:e9: 73:92:ee:12:28:33:a7:a7:62:ae:98:be:da:65:df: f6:64:bd:6e:65:0e:52:ab:67:01:59:b3:29:47:76: 5c:44:d7:94:5b:4b:1d:86:f2:ae:16:ad:18:41:a0: 5e:c1:b4:54:be:7e:9e:9b:f9:9d:67:08:b4:89:16: 4b:5d:c5:d1:b9:45:db:63:05:4f:67:65:46:14:04: ad:14:a4:0a:b3:da:05:e4:06:8d:47:b8:0e:80:43: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D0:91:BE:FB:18:CE:06:34:0E:54:10:99:6B:8C:9D:2F:66:23:6A X509v3 Authority Key Identifier: keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/w9CRvvsYzgY0DlQQmWuMnS9mI2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.142.0/23 Signature Algorithm: sha256WithRSAEncryption 69:84:7f:64:39:a0:fc:8a:e7:59:f8:a3:3e:3b:bd:bd:a1:63: 6a:c6:9e:66:c6:59:25:04:7d:d3:0c:ce:30:40:47:c0:ce:fd: 70:8f:17:26:e4:70:f3:fe:7a:6f:8d:77:bd:b9:84:46:7c:fe: 81:d9:a8:b8:53:e3:d1:39:f3:87:6e:81:df:04:64:54:b8:f0: 57:11:e7:dd:2c:b1:d0:73:f5:2f:f4:46:3a:be:f8:da:c7:a2: bb:f7:3e:6e:f0:6f:da:cd:90:32:c8:fe:01:5d:92:e6:f0:75: bf:a0:e1:ee:e2:d3:ec:54:a8:64:98:86:27:8a:62:1f:e7:08: d1:e1:04:bb:a1:d1:40:3d:da:15:7e:bc:49:01:ff:9a:6b:00: 74:ac:ff:e5:31:d2:92:91:65:ca:02:04:c7:65:f8:9b:a8:4d: 90:68:b4:62:66:eb:19:70:6d:94:14:50:f0:52:e1:f6:0d:73: 29:2f:ca:97:22:8a:3f:5c:f3:b7:61:96:7a:7a:98:80:1a:b0: 62:c2:90:b7:6b:d4:7b:76:a9:69:bd:2e:4b:8c:5c:69:e1:41: c0:07:47:0c:ca:84:56:e0:36:94:21:44:f7:f6:b4:c8:b6:57: 06:c5:f1:7d:6b:a6:ec:d4:72:4d:85:1b:2b:21:6f:84:76:5d: d6:d5:c4:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OGclivYi+W/+gy1B/PEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzhjMDhhMDYzYWMyZDM0YTFiMTkxZTI0MzYzODliYmVl ZDVlOTcwHhcNMjYwMTAyMTAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2QwOTFiZWZiMThjZTA2MzQwZTU0MTA5OTZiOGM5ZDJmNjYyMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU+r5z97mkdL5B9ADofR+0Sg82ok cmOl8uKaCl9ou/tsc1qPsKJR5lfvidYpypr0ksZ9NBcS7DlClEmOLgSLE5uw18dK A0kVZIKE5B/g3G9tN722ADftl/T+jejKy8jH77qUG+T1nJVbpP0sW7Ob8Ef+bv6e R2zBxvT8ZN85gHNJwwq4DIkdtDkr913DT3itqb9xqvDioZG5PmWiMOl7eOfE7Olz ku4SKDOnp2KumL7aZd/2ZL1uZQ5Sq2cBWbMpR3ZcRNeUW0sdhvKuFq0YQaBewbRU vn6em/mdZwi0iRZLXcXRuUXbYwVPZ2VGFAStFKQKs9oF5AaNR7gOgEODiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMPQkb77GM4GNA5UEJlrjJ0vZiNqMB8GA1UdIwQY MBaAFDR4wIoGOsLTShsZHiQ2OJu+7V6XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTIt OTE3YzM1NzdmMzRmLzEvdzlDUnZ2c1l6Z1kwRGxRUW1XdU1uUzltSTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8xZjEwYzItMDJlMi00MzhhLTkwYTItOTE3YzM1NzdmMzRm LzEvTkhqQWlnWTZ3dE5LR3hrZUpEWTRtNzd0WHBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwWyOMA0G CSqGSIb3DQEBCwUAA4IBAQBphH9kOaD8iudZ+KM+O729oWNqxp5mxlklBH3TDM4w QEfAzv1wjxcm5HDz/npvjXe9uYRGfP6B2ai4U+PROfOHboHfBGRUuPBXEefdLLHQ c/Uv9EY6vvjax6K79z5u8G/azZAyyP4BXZLm8HW/oOHu4tPsVKhkmIYnimIf5wjR 4QS7odFAPdoVfrxJAf+aawB0rP/lMdKSkWXKAgTHZfibqE2QaLRiZusZcG2UFFDw UuH2DXMpL8qXIoo/XPO3YZZ6epiAGrBiwpC3a9R7dqlpvS5LjFxp4UHAB0cMyoRW 4DaUIUT39rTItlcGxfF9a6bs1HJNhRsrIW+Edl3W1cSm -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:11 2026 by rpki-client