This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/9Q48JulZKZMIo9Ga0zqiC82Ky20.roa File: 9Q48JulZKZMIo9Ga0zqiC82Ky20.roa (raw, json) Hash identifier: d0KAKCB+dqKq+yi9l3L5Eoioug+AEF3BauuhcHAUh5I= Subject key identifier: F5:0E:3C:26:E9:59:29:93:08:A3:D1:9A:D3:3A:A2:0B:CD:8A:CB:6D Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73 Certificate serial: 019B77C739896E5E1EB8D96313DC78B78216 Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/9Q48JulZKZMIo9Ga0zqiC82Ky20.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208873 IP address blocks: 94.127.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:39:89:6e:5e:1e:b8:d9:63:13:dc:78:b7:82:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73 Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f50e3c26e959299308a3d19ad33aa20bcd8acb6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:e7:4c:cc:57:16:bb:a1:8d:c6:ea:0a:59: 58:1e:76:c2:7e:b2:58:66:99:6a:56:d4:5f:61:66: d0:47:84:c4:ba:a2:f1:d3:80:bf:fb:84:95:29:71: 81:f4:61:de:08:b0:b5:2b:7b:05:27:88:93:78:3f: e7:52:a1:e4:8e:d7:bb:2b:da:7b:6e:8e:21:49:2c: ed:3a:2d:c7:52:ce:38:a0:89:e7:e6:d0:5a:69:f9: 80:dd:dd:31:8a:8a:da:2d:21:cd:5a:ce:12:ff:46: 51:d9:88:06:2e:32:e8:83:5b:87:3e:60:48:e8:0c: c6:57:c1:f7:47:e2:8e:90:ae:39:df:d1:36:a6:f7: ad:ca:19:e1:b2:92:da:cf:9b:07:e6:67:2d:b1:7d: 70:46:75:e2:21:ea:4d:88:0f:ce:b6:fc:ce:75:06: c8:82:d3:18:00:84:2f:d8:74:c0:f8:7f:a4:f9:82: ff:f0:6c:b3:a1:46:de:45:2c:b8:34:3f:fc:8a:bb: 6b:90:ed:5b:51:6d:54:31:8b:4c:ae:31:12:d4:c8: 7d:87:46:5a:95:f5:a6:87:3f:e7:e6:1e:90:f8:72: 8f:e1:bf:64:a3:a8:14:09:7e:2b:0b:e9:6d:96:b2: db:97:4f:b5:37:a6:65:0f:0e:6c:55:09:b0:57:e5: 7e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0E:3C:26:E9:59:29:93:08:A3:D1:9A:D3:3A:A2:0B:CD:8A:CB:6D X509v3 Authority Key Identifier: keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/9Q48JulZKZMIo9Ga0zqiC82Ky20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.127.236.0/24 Signature Algorithm: sha256WithRSAEncryption 75:06:39:70:21:78:2e:ec:fa:84:86:a2:a1:40:3b:56:00:c8: 52:df:7a:7e:d2:66:a1:ed:36:9a:3d:2a:da:5b:c1:28:f9:c1: 3c:97:8c:d3:c1:a8:64:8f:b4:b8:27:f9:ce:15:17:de:59:d9: c5:18:4d:2f:14:6a:48:08:a9:41:94:95:bc:4e:f7:51:b1:0b: f3:58:fb:39:d7:4c:87:8a:f5:be:4f:ba:87:4d:ba:03:23:f3: d2:f4:72:8b:8e:95:b1:df:37:81:a0:75:11:f8:a7:b8:23:dc: 88:2f:52:61:65:7f:15:63:30:64:d5:a8:6a:85:56:73:16:0e: c3:02:07:32:81:17:dd:7d:82:4f:cb:45:8a:6f:10:b8:a5:7f: 11:52:75:66:ff:48:ba:7b:da:11:64:12:87:c5:e8:80:7b:66: 10:90:4b:ed:7f:6e:7c:35:d7:d8:39:d6:a3:d6:47:96:10:80: e7:ca:1e:a5:7c:86:19:de:dc:e6:4a:8c:eb:82:a3:44:ba:37: a6:5f:3a:c5:59:c5:9a:03:8c:d5:e8:f1:62:80:b7:ad:72:09: 7f:07:cb:aa:a9:3e:86:99:c6:f3:11:cd:12:d8:c9:b8:b5:95: d6:f3:a8:d6:8f:61:4f:f1:11:36:05:91:78:04:22:43:c3:ca: 1b:92:c1:f4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xzmJbl4euNljE9x4t4IWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNzQ2OGRjY2FlNDNjMjM5Zjg1MzBlODIzNWUzYTJkNGZj ZDNlNzMwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTBlM2MyNmU5NTkyOTkzMDhhM2QxOWFkMzNhYTIwYmNkOGFjYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWDnTMxXFruhjcbqCllYHnbCfrJY ZplqVtRfYWbQR4TEuqLx04C/+4SVKXGB9GHeCLC1K3sFJ4iTeD/nUqHkjte7K9p7 bo4hSSztOi3HUs44oInn5tBaafmA3d0xioraLSHNWs4S/0ZR2YgGLjLog1uHPmBI 6AzGV8H3R+KOkK4539E2pvetyhnhspLaz5sH5mctsX1wRnXiIepNiA/OtvzOdQbI gtMYAIQv2HTA+H+k+YL/8GyzoUbeRSy4ND/8irtrkO1bUW1UMYtMrjES1Mh9h0Za lfWmhz/n5h6Q+HKP4b9ko6gUCX4rC+ltlrLbl0+1N6ZlDw5sVQmwV+V+FwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPUOPCbpWSmTCKPRmtM6ogvNisttMB8GA1UdIwQY MBaAFPp0aNzK5Dwjn4Uw6CNeOi1PzT5zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uUm8zTXJrUENPZmhURG9JMTQ2TFVfTlBuTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvYTBjODE2LTc2NWUtNGQxYS04NjZi LWIzZjA5NDJlNjllYy8xLzlRNDhKdWxaS1pNSW85R2EwenFpQzgyS3kyMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTYvYTBjODE2LTc2NWUtNGQxYS04NjZiLWIzZjA5NDJlNjll Yy8xLzEtblJvM01ya1BDT2ZoVERvSTE0NkxVX05Qbk0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABef+ww DQYJKoZIhvcNAQELBQADggEBAHUGOXAheC7s+oSGoqFAO1YAyFLfen7SZqHtNpo9 KtpbwSj5wTyXjNPBqGSPtLgn+c4VF95Z2cUYTS8UakgIqUGUlbxO91GxC/NY+znX TIeK9b5PuodNugMj89L0couOlbHfN4GgdRH4p7gj3IgvUmFlfxVjMGTVqGqFVnMW DsMCBzKBF919gk/LRYpvELilfxFSdWb/SLp72hFkEofF6IB7ZhCQS+1/bnw119g5 1qPWR5YQgOfKHqV8hhne3OZKjOuCo0S6N6ZfOsVZxZoDjNXo8WKAt61yCX8Hy6qp PoaZxvMRzRLYybi1ldbzqNaPYU/xETYFkXgEIkPDyhuSwfQ= -----END CERTIFICATE-----Generated at Tue Feb 10 02:28:21 2026 by rpki-client