This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/9IHrAt44QyoQXEQYn8yZd1FCGBU.roa File: 9IHrAt44QyoQXEQYn8yZd1FCGBU.roa (raw, json) Hash identifier: AqcqSMjwHuNGwoWeAKqJtnJMa/jkdc0IN4+ezx8SqwA= Subject key identifier: F4:81:EB:02:DE:38:43:2A:10:5C:44:18:9F:CC:99:77:51:42:18:15 Certificate issuer: /CN=2dc955f4c2c7157abbdbfe809cf195605949a698 Certificate serial: 019B7AC94B3D84D0FBC2A417452DD14AEE49 Authority key identifier: 2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/9IHrAt44QyoQXEQYn8yZd1FCGBU.roa Signing time: Thu 01 Jan 2026 18:19:30 +0000 ROA not before: Thu 01 Jan 2026 18:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8652 IP address blocks: 194.164.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.mft rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4b:3d:84:d0:fb:c2:a4:17:45:2d:d1:4a:ee:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dc955f4c2c7157abbdbfe809cf195605949a698 Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f481eb02de38432a105c44189fcc997751421815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:9e:00:87:75:34:68:53:c0:c3:fb:33:cf: 1d:72:2f:17:ca:e4:f3:b3:b4:e6:6e:d7:83:fb:f8: 9b:99:8e:5e:08:0e:5f:d8:ea:32:da:ae:67:df:3d: 06:69:b1:31:56:c2:67:88:79:44:93:93:ac:e7:56: 69:04:d4:35:07:62:c2:12:b4:b0:17:92:21:58:48: 8e:18:35:7d:e7:87:7b:01:11:5f:85:73:d2:5c:e3: 56:d6:cb:99:43:d3:c7:01:10:05:1d:c6:84:74:ae: ff:7a:22:b1:72:f4:a9:b9:51:44:50:34:e7:be:50: d9:07:c2:9a:53:ed:2c:e5:a0:3e:66:f6:c0:09:9e: d9:c5:80:7c:55:bc:7a:52:6b:64:af:f8:0e:11:7c: df:56:c8:ae:b7:54:00:ad:ac:75:e2:e8:ff:1c:ad: 32:c2:08:58:86:e7:b1:08:fb:93:fc:6a:5e:a4:24: 8e:1b:d0:6a:7e:cc:24:db:69:4a:6f:6d:63:95:59: 20:79:c8:c8:06:a3:ab:09:56:fa:59:93:e7:e4:c9: e8:e4:f3:a1:fc:53:cc:1a:fa:78:ec:b1:5c:56:da: b1:ae:4d:34:bc:5f:9c:f1:e3:04:72:56:56:3d:df: b5:f0:4c:1e:d5:9c:fb:84:aa:af:3a:35:ff:b6:45: 4f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:81:EB:02:DE:38:43:2A:10:5C:44:18:9F:CC:99:77:51:42:18:15 X509v3 Authority Key Identifier: keyid:2D:C9:55:F4:C2:C7:15:7A:BB:DB:FE:80:9C:F1:95:60:59:49:A6:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LclV9MLHFXq72_6AnPGVYFlJppg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/9IHrAt44QyoQXEQYn8yZd1FCGBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c5c6a7-710c-490e-89da-119820b522ad/1/LclV9MLHFXq72_6AnPGVYFlJppg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.164.146.0/23 Signature Algorithm: sha256WithRSAEncryption 87:31:24:e6:a9:df:bc:45:6c:71:91:36:f9:30:c7:9e:b5:5b: be:bf:ca:bc:d7:a3:88:af:ce:9c:78:0b:5f:7b:d1:e7:dd:45: 4b:7a:d8:ed:52:86:7a:1c:27:47:6a:30:13:c5:bf:03:e8:67: 19:76:5f:70:b2:22:31:26:c1:5a:d5:ed:53:ed:13:19:d9:c5: d3:5c:1b:fe:10:72:b1:97:56:1c:9b:ed:c3:86:b3:03:37:c0: fa:af:f2:2c:46:08:6a:7e:e3:1d:a4:76:26:85:f9:a9:2a:67: c2:8c:6b:42:f6:2f:c6:95:a6:c3:79:0c:29:4b:3f:e4:c7:85: 0e:b1:07:ac:4c:37:c0:dd:fe:16:a5:64:6a:b3:0b:c1:ab:d6: 1e:60:90:dc:1e:ee:3b:63:01:97:54:5f:68:66:a2:be:8f:21: 52:57:11:91:47:33:63:3c:61:41:b8:21:f0:99:78:65:5e:cb: 21:83:3c:57:4c:ee:74:d7:ad:da:a5:78:c3:c0:14:c4:2c:8f: d3:c6:a1:4b:85:9a:cb:b0:77:85:68:af:9e:b9:15:db:86:7a: c1:55:cb:86:44:7e:c2:45:17:41:cc:2f:21:f4:fa:9b:e6:56: 06:2c:e6:85:ec:74:7d:2d:dd:51:64:ff:69:c9:82:50:9b:01: 88:0f:bf:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUs9hND7wqQXRS3RSu5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkYzk1NWY0YzJjNzE1N2FiYmRiZmU4MDljZjE5NTYwNTk0 OWE2OTgwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDgxZWIwMmRlMzg0MzJhMTA1YzQ0MTg5ZmNjOTk3NzUxNDIxODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9+eAId1NGhTwMP7M88dci8XyuTz s7TmbteD+/ibmY5eCA5f2Ooy2q5n3z0GabExVsJniHlEk5Os51ZpBNQ1B2LCErSw F5IhWEiOGDV954d7ARFfhXPSXONW1suZQ9PHARAFHcaEdK7/eiKxcvSpuVFEUDTn vlDZB8KaU+0s5aA+ZvbACZ7ZxYB8Vbx6Umtkr/gOEXzfVsiut1QArax14uj/HK0y wghYhuexCPuT/GpepCSOG9Bqfswk22lKb21jlVkgecjIBqOrCVb6WZPn5Mno5POh /FPMGvp47LFcVtqxrk00vF+c8eMEclZWPd+18Ewe1Zz7hKqvOjX/tkVPBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPSB6wLeOEMqEFxEGJ/MmXdRQhgVMB8GA1UdIwQY MBaAFC3JVfTCxxV6u9v+gJzxlWBZSaaYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEt MTE5ODIwYjUyMmFkLzEvOUlIckF0NDRReW9RWEVRWW44eVpkMUZDR0JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jNWM2YTctNzEwYy00OTBlLTg5ZGEtMTE5ODIwYjUyMmFk LzEvTGNsVjlNTEhGWHE3Ml82QW5QR1ZZRmxKcHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwqSSMA0G CSqGSIb3DQEBCwUAA4IBAQCHMSTmqd+8RWxxkTb5MMeetVu+v8q816OIr86ceAtf e9Hn3UVLetjtUoZ6HCdHajATxb8D6GcZdl9wsiIxJsFa1e1T7RMZ2cXTXBv+EHKx l1Ycm+3DhrMDN8D6r/IsRghqfuMdpHYmhfmpKmfCjGtC9i/GlabDeQwpSz/kx4UO sQesTDfA3f4WpWRqswvBq9YeYJDcHu47YwGXVF9oZqK+jyFSVxGRRzNjPGFBuCHw mXhlXsshgzxXTO50163apXjDwBTELI/TxqFLhZrLsHeFaK+euRXbhnrBVcuGRH7C RRdBzC8h9Pqb5lYGLOaF7HR9Ld1RZP9pyYJQmwGID78A -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:02 2026 by rpki-client