This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/1-w9hWaB0Y-QZTijfEO33ePRZy0.roa File: 1-w9hWaB0Y-QZTijfEO33ePRZy0.roa (raw, json) Hash identifier: SgY+1sZqpVCfIbnHknsFg6v2g9JFPjHBp5HxZb7l6VM= Subject key identifier: D7:EC:3D:85:66:81:D1:8F:90:65:38:A3:7C:43:B7:DD:E3:D1:67:2D Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f Certificate serial: 019B797ECE7B0E571B91F97EF5FA6B547CD7 Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/1-w9hWaB0Y-QZTijfEO33ePRZy0.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30736 IP address blocks: 82.103.128.0/18 maxlen: 18 2a00:9080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ce:7b:0e:57:1b:91:f9:7e:f5:fa:6b:54:7c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7ec3d856681d18f906538a37c43b7dde3d1672d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:40:70:20:d3:26:bb:46:a3:4c:1e:81:04: 63:2a:59:39:b9:69:6b:64:8c:f6:75:b7:c3:23:8d: 9a:74:2e:39:10:e4:b9:68:0c:ba:bb:40:6f:26:8b: b5:d9:9b:d4:a8:d1:05:aa:cf:9d:79:5a:50:b6:03: 45:cc:f4:99:f2:d3:46:88:33:59:b1:05:08:1a:43: bb:22:94:5a:b6:74:a8:20:d3:b0:e6:2b:39:37:5f: 3c:a0:2f:28:f2:f7:6f:f0:00:f6:9c:99:a2:db:c5: 70:80:1f:c2:2a:e2:e3:a6:18:51:18:8f:25:09:37: 14:a6:73:5e:19:47:d5:19:87:a7:6e:21:d2:c4:ae: ab:78:0f:37:7f:24:2c:e6:f2:71:35:91:80:5b:6e: 60:56:6b:45:8e:e7:ca:54:2c:f6:bf:43:98:72:52: 50:7f:ce:a1:b6:b1:f9:5c:23:49:a2:63:34:3e:32: bc:8c:83:fd:5f:d3:42:37:c0:6d:2e:e6:79:5f:d4: d7:b1:54:b1:a3:41:d0:90:bf:98:d9:fa:23:75:bd: 23:cd:ae:ef:76:4f:d6:c8:d6:d3:9c:5a:49:ae:c0: eb:8a:76:37:e0:9b:7c:4c:3f:e1:de:9e:69:4a:94: 05:74:48:a0:38:31:ac:4d:89:5e:c7:0e:be:76:42: e8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EC:3D:85:66:81:D1:8F:90:65:38:A3:7C:43:B7:DD:E3:D1:67:2D X509v3 Authority Key Identifier: keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/1-w9hWaB0Y-QZTijfEO33ePRZy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.103.128.0/18 IPv6: 2a00:9080::/32 Signature Algorithm: sha256WithRSAEncryption 2a:f7:25:37:49:a2:6f:6b:b7:9e:10:59:41:d3:7e:c1:5c:cc: de:6b:83:41:c5:cd:6c:d0:a1:63:4c:67:b6:b0:14:0f:b2:c2: db:19:90:f7:c7:2a:4b:ab:df:6b:8b:f7:18:6c:38:a5:a1:8b: 98:e9:46:4f:6f:47:2f:a5:82:a9:17:b9:cf:17:ba:a7:93:99: 21:e2:f1:a8:03:f3:96:bf:cc:e7:19:6d:10:8f:cf:e1:03:c9: c4:44:d7:2e:95:88:02:4c:d0:e8:4c:9b:3c:f9:65:25:6e:3e: de:02:68:76:6c:a9:eb:da:da:bd:c4:e5:1c:2c:e0:29:71:4d: fd:a5:de:b4:c9:c1:4f:c5:d1:71:2b:bf:0f:79:bc:d8:6e:f7: f4:83:01:df:4c:99:3f:c1:a0:79:87:27:95:60:ea:37:76:cc: d7:48:eb:de:58:b7:79:81:9d:de:cf:36:f4:69:e9:d6:4d:8e: 50:d8:f7:16:fd:41:4a:48:0a:dd:3d:53:e1:c2:79:5a:01:fc: 92:df:fb:82:a8:c5:ad:22:78:3e:f8:55:a0:07:25:2e:03:52: 7f:bc:b8:e0:46:8c:1b:64:b8:00:65:c5:1f:93:72:d4:d7:45: 08:be:27:bf:10:8a:5d:0a:11:35:91:33:cc:42:50:70:67:41: 05:6b:42:fb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fs57Dlcbkfl+9fprVHzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZjI0YWZiZmVjZGY2YTk5YzI4MmJmNTNiMzA0ZjNjMWU4 ZjQ3MGYwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2VjM2Q4NTY2ODFkMThmOTA2NTM4YTM3YzQzYjdkZGUzZDE2NzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS9AcCDTJrtGo0wegQRjKlk5uWlr ZIz2dbfDI42adC45EOS5aAy6u0BvJou12ZvUqNEFqs+deVpQtgNFzPSZ8tNGiDNZ sQUIGkO7IpRatnSoINOw5is5N188oC8o8vdv8AD2nJmi28VwgB/CKuLjphhRGI8l CTcUpnNeGUfVGYenbiHSxK6reA83fyQs5vJxNZGAW25gVmtFjufKVCz2v0OYclJQ f86htrH5XCNJomM0PjK8jIP9X9NCN8BtLuZ5X9TXsVSxo0HQkL+Y2fojdb0jza7v dk/WyNbTnFpJrsDrinY34Jt8TD/h3p5pSpQFdEigODGsTYlexw6+dkLorwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNfsPYVmgdGPkGU4o3xDt93j0WctMB8GA1UdIwQY MBaAFJ3ySvv+zfapnCgr9TswTzwej0cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQt N2VlZGY0ZGQ2YzEzLzEvMS13OWhXYUIwWS1RWlRpamZFTzMzZVBSWnkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lYTljNTktOWUxNC00ZjI1LTg2YmQtN2VlZGY0ZGQ2YzEz LzEvbmZKSy1fN045cW1jS0N2MU96QlBQQjZQUnc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGUmeAMA0E AgACMAcDBQAqAJCAMA0GCSqGSIb3DQEBCwUAA4IBAQAq9yU3SaJva7eeEFlB037B XMzea4NBxc1s0KFjTGe2sBQPssLbGZD3xypLq99ri/cYbDiloYuY6UZPb0cvpYKp F7nPF7qnk5kh4vGoA/OWv8znGW0Qj8/hA8nERNculYgCTNDoTJs8+WUlbj7eAmh2 bKnr2tq9xOUcLOApcU39pd60ycFPxdFxK78PebzYbvf0gwHfTJk/waB5hyeVYOo3 dszXSOveWLd5gZ3ezzb0aenWTY5Q2PcW/UFKSArdPVPhwnlaAfyS3/uCqMWtIng+ +FWgByUuA1J/vLjgRowbZLgAZcUfk3LU10UIvie/EIpdChE1kTPMQlBwZ0EFa0L7 -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:05 2026 by rpki-client