This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/9VeKZDE1iGHZNfZDG7yt114IeSs.roa File: 9VeKZDE1iGHZNfZDG7yt114IeSs.roa (raw, json) Hash identifier: osxP6EgjjjBz4lB4YyG0W3qp7xP9edg7UyqKvlF/CrE= Subject key identifier: F5:57:8A:64:31:35:88:61:D9:35:F6:43:1B:BC:AD:D7:5E:08:79:2B Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4 Certificate serial: 019B7E38AEDF57F5E24DD2191676A5927015 Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/9VeKZDE1iGHZNfZDG7yt114IeSs.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209801 IP address blocks: 192.88.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ae:df:57:f5:e2:4d:d2:19:16:76:a5:92:70:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4 Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5578a6431358861d935f6431bbcadd75e08792b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:83:64:e0:45:23:b9:aa:b7:60:77:e7:c7:08: 5f:ae:00:d7:58:6c:b0:f2:48:99:7b:0d:5a:02:3d: 3a:0a:66:40:07:14:21:64:2a:cd:74:f6:9a:5a:ba: a3:cd:b4:4f:09:b4:9f:88:ec:3c:81:7a:79:1f:45: 76:c9:ea:d5:f0:bd:e8:ce:c2:6c:2c:2b:70:9a:f8: 51:99:f0:1a:a6:e1:26:c1:13:66:23:07:8a:ac:14: 3f:79:33:93:ad:96:f0:c3:6e:78:06:80:f4:76:85: 57:c3:8f:28:f0:ed:f9:59:d4:fc:7a:14:91:c9:1e: 38:b3:b6:0e:7a:0b:85:4c:8f:72:b0:06:e5:de:69: d5:9e:af:20:a8:e7:1c:63:59:b8:cb:f3:ed:48:6e: 59:dc:ae:d2:b0:d6:5d:1c:00:c0:6a:91:bd:90:d5: a7:26:26:5c:fd:e7:6f:44:cf:ef:6c:ff:77:e2:48: 9f:c3:31:fc:aa:e8:b9:f0:2a:c1:13:12:2d:64:44: a3:5a:dc:de:4a:ef:5b:f3:82:4b:92:db:cb:fb:62: ee:90:45:59:ed:47:0f:35:4d:08:a0:1c:c6:9f:46: c9:90:23:fb:57:e0:7f:cb:d2:bd:50:73:84:4c:b6: 74:90:8f:62:00:0c:5e:01:6c:0b:b7:f4:b5:0c:47: 5b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:57:8A:64:31:35:88:61:D9:35:F6:43:1B:BC:AD:D7:5E:08:79:2B X509v3 Authority Key Identifier: keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/9VeKZDE1iGHZNfZDG7yt114IeSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.88.204.0/24 Signature Algorithm: sha256WithRSAEncryption 37:8e:7d:d7:8d:8f:a8:c2:20:ef:8f:83:ed:4a:14:95:9e:e9: 04:20:bb:ee:45:45:69:fd:e5:11:1c:21:ba:3d:54:59:03:42: a3:4f:f4:93:6b:f3:33:4d:55:37:30:1c:1b:36:a1:53:b8:da: b8:f8:06:15:c6:d2:f2:61:70:f9:76:06:14:3e:aa:01:28:31: 52:e7:d2:fe:28:3f:61:1a:c2:7a:62:b9:9a:0a:5e:a7:81:d1: 7a:01:a2:b4:f2:60:0d:b8:38:2f:1e:82:8d:d1:71:d4:27:3e: 35:ec:8d:ad:88:65:75:e4:f3:25:b9:89:ab:65:43:b2:3a:bf: 26:50:64:eb:b8:1d:e3:90:0e:36:d3:35:05:33:5d:5f:0f:2f: 11:7a:f0:ee:87:06:01:4d:5e:7b:1e:10:e7:12:09:f4:08:1f: 0a:46:e9:66:7c:ef:ea:0b:8a:49:97:66:c7:cb:ce:ca:5a:70: 99:9f:f5:66:44:4d:24:0d:a8:8e:d4:6b:3e:62:cf:58:60:c7: fe:4b:6b:20:9c:8a:58:69:5c:48:46:c7:48:ac:d5:34:ab:f5: 27:85:77:fd:66:5a:48:69:14:d5:ed:18:1a:73:29:f9:c8:d0: 1e:f7:e9:2c:58:86:5e:a9:11:ae:89:5e:de:b1:c4:7a:e8:c4: 31:a0:da:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OK7fV/XiTdIZFnalknAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYmZlOTM4NWU2YTc1OWY4MzNlNGYwOWEwOWYwZGNmZWQ1 M2IzZTQwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTU3OGE2NDMxMzU4ODYxZDkzNWY2NDMxYmJjYWRkNzVlMDg3OTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoNk4EUjuaq3YHfnxwhfrgDXWGyw 8kiZew1aAj06CmZABxQhZCrNdPaaWrqjzbRPCbSfiOw8gXp5H0V2yerV8L3ozsJs LCtwmvhRmfAapuEmwRNmIweKrBQ/eTOTrZbww254BoD0doVXw48o8O35WdT8ehSR yR44s7YOeguFTI9ysAbl3mnVnq8gqOccY1m4y/PtSG5Z3K7SsNZdHADAapG9kNWn JiZc/edvRM/vbP934kifwzH8qui58CrBExItZESjWtzeSu9b84JLktvL+2LukEVZ 7UcPNU0IoBzGn0bJkCP7V+B/y9K9UHOETLZ0kI9iAAxeAWwLt/S1DEdb7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPVXimQxNYhh2TX2Qxu8rddeCHkrMB8GA1UdIwQY MBaAFA+/6TheanWfgz5PCaCfDc/tU7PkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUt ZDY0N2RjOGE1NmI2LzEvOVZlS1pERTFpR0haTmZaREc3eXQxMTRJZVNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yYmI5NDgtNDc4Yy00YTAyLWExOGUtZDY0N2RjOGE1NmI2 LzEvRDdfcE9GNXFkWi1EUGs4Sm9KOE56LTFUcy1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFjMMA0G CSqGSIb3DQEBCwUAA4IBAQA3jn3XjY+owiDvj4PtShSVnukEILvuRUVp/eURHCG6 PVRZA0KjT/STa/MzTVU3MBwbNqFTuNq4+AYVxtLyYXD5dgYUPqoBKDFS59L+KD9h GsJ6YrmaCl6ngdF6AaK08mANuDgvHoKN0XHUJz417I2tiGV15PMluYmrZUOyOr8m UGTruB3jkA420zUFM11fDy8RevDuhwYBTV57HhDnEgn0CB8KRulmfO/qC4pJl2bH y87KWnCZn/VmRE0kDaiO1Gs+Ys9YYMf+S2sgnIpYaVxIRsdIrNU0q/UnhXf9ZlpI aRTV7Rgacyn5yNAe9+ksWIZeqRGuiV7escR66MQxoNpr -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:41 2026 by rpki-client