This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/9VtECfH9o-dKkKAC-ncxle-R8Xg.roa File: 9VtECfH9o-dKkKAC-ncxle-R8Xg.roa (raw, json) Hash identifier: ocQ8YuN/HcfaLsobfuEPg32Wt58PvTj3MWff1KCws7U= Subject key identifier: F5:5B:44:09:F1:FD:A3:E7:4A:90:A0:02:FA:77:31:95:EF:91:F1:78 Certificate issuer: /CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Certificate serial: 019B79ECF5E7E80435DD8AD34378C4130BA5 Authority key identifier: 50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/9VtECfH9o-dKkKAC-ncxle-R8Xg.roa Signing time: Thu 01 Jan 2026 14:18:50 +0000 ROA not before: Thu 01 Jan 2026 14:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 147.235.242.0/24 maxlen: 24 147.235.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.mft rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:f5:e7:e8:04:35:dd:8a:d3:43:78:c4:13:0b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50741158f3ed65bee1bde12f34f895afb0dd50d5 Validity Not Before: Jan 1 14:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f55b4409f1fda3e74a90a002fa773195ef91f178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:28:45:6e:b3:5c:c7:1d:c9:2c:88:96:74: 70:11:2a:37:e5:fe:45:55:92:62:e6:78:7e:33:b0: 6c:b3:27:1c:dd:c7:b1:1e:4f:d2:83:2e:d0:b4:db: c7:98:e2:c5:33:67:e5:24:fe:63:36:2c:9c:47:63: 3a:bb:f2:7c:6e:8b:ab:57:45:ac:b2:78:4e:f4:91: a4:3b:d9:15:0f:9e:53:96:c5:ef:92:c8:87:35:ef: ef:88:1f:2f:e9:b9:13:e4:85:19:70:64:86:f6:d1: 8e:88:cd:ca:90:6f:4e:40:22:27:ae:ac:2c:c5:aa: 99:49:3a:d7:4f:50:f2:05:30:6e:b0:dc:d9:d2:ed: 6f:79:aa:b1:b5:f0:a4:e9:90:85:88:f0:8c:d1:95: 27:34:bd:15:f3:ac:5e:9a:af:44:d9:11:d7:56:f6: 4c:5b:68:b4:15:75:2c:e7:d3:c4:bd:28:26:f3:31: 7f:de:90:ea:89:b4:b7:18:6c:57:c3:36:9b:d5:e8: 7a:08:f8:03:30:6f:2c:7a:1a:07:8b:2f:0f:dd:60: 16:da:5f:f1:28:f0:bf:5a:a9:c1:a6:9c:d9:30:1b: 5d:77:a7:87:a8:e2:e2:6f:ea:fa:bd:ef:95:f1:5b: 9d:95:02:c9:86:a0:77:75:4a:be:d8:99:a5:5f:de: 53:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5B:44:09:F1:FD:A3:E7:4A:90:A0:02:FA:77:31:95:EF:91:F1:78 X509v3 Authority Key Identifier: keyid:50:74:11:58:F3:ED:65:BE:E1:BD:E1:2F:34:F8:95:AF:B0:DD:50:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHQRWPPtZb7hveEvNPiVr7DdUNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/9VtECfH9o-dKkKAC-ncxle-R8Xg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/UHQRWPPtZb7hveEvNPiVr7DdUNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.235.242.0/24 147.235.250.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:0b:c4:fd:5e:36:c9:3d:50:80:dc:79:18:57:63:ba:9e:95: e1:08:90:46:a6:15:24:1b:11:dd:cd:52:ef:6a:a0:1f:0d:bd: ca:b3:5b:f3:b5:bf:3b:57:09:c4:96:15:e1:36:3b:ec:13:bc: fa:bd:c1:73:b3:57:c2:06:42:8c:69:72:6a:bf:08:4a:f5:b2: d2:73:82:ba:5c:de:ca:ff:7f:6a:5f:7c:97:de:ae:0c:82:b0: 98:68:84:9a:aa:95:5f:7c:41:0a:2f:90:ea:8f:67:55:b6:ed: 82:1c:ac:e1:e5:6e:5c:49:5d:43:b3:11:f4:e4:ea:7b:9b:95: c7:c4:a0:0b:3d:8b:12:b2:97:3b:a8:8e:f5:95:eb:55:73:ae: c1:37:69:6d:41:5e:0f:81:40:66:67:05:3e:57:7e:5b:b6:f1: 92:32:9f:70:a8:1f:aa:07:82:a2:b3:45:66:08:ef:74:a1:e9: 82:44:e6:e8:ec:b7:3d:42:c1:a1:3e:fe:92:93:79:9c:a0:a6: bb:a9:ff:27:2a:9a:b6:64:64:03:3c:23:7e:81:4b:05:61:df: a6:50:39:9d:71:6a:c4:a0:c8:d8:58:2d:df:79:41:b1:82:73: 1f:00:7e:12:a1:4b:4a:ef:26:1f:07:69:32:ef:17:e0:56:17: e9:93:01:c8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57PXn6AQ13YrTQ3jEEwulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNzQxMTU4ZjNlZDY1YmVlMWJkZTEyZjM0Zjg5NWFmYjBk ZDUwZDUwHhcNMjYwMTAxMTQxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTViNDQwOWYxZmRhM2U3NGE5MGEwMDJmYTc3MzE5NWVmOTFmMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8coRW6zXMcdySyIlnRwESo35f5F VZJi5nh+M7Bssycc3cexHk/Sgy7QtNvHmOLFM2flJP5jNiycR2M6u/J8bourV0Ws snhO9JGkO9kVD55TlsXvksiHNe/viB8v6bkT5IUZcGSG9tGOiM3KkG9OQCInrqws xaqZSTrXT1DyBTBusNzZ0u1veaqxtfCk6ZCFiPCM0ZUnNL0V86xemq9E2RHXVvZM W2i0FXUs59PEvSgm8zF/3pDqibS3GGxXwzab1eh6CPgDMG8sehoHiy8P3WAW2l/x KPC/WqnBppzZMBtdd6eHqOLib+r6ve+V8VudlQLJhqB3dUq+2JmlX95TQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPVbRAnx/aPnSpCgAvp3MZXvkfF4MB8GA1UdIwQY MBaAFFB0EVjz7WW+4b3hLzT4la+w3VDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQt MzU1M2I0ZWQ2Nzk0LzEvOVZ0RUNmSDlvLWRLa0tBQy1uY3hsZS1SOFhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MzliODEtM2NkMy00NjljLWI5NTQtMzU1M2I0ZWQ2Nzk0 LzEvVUhRUldQUHRaYjdodmVFdk5QaVZyN0RkVU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk+vyAwQA k+v6MA0GCSqGSIb3DQEBCwUAA4IBAQCOC8T9XjbJPVCA3HkYV2O6npXhCJBGphUk GxHdzVLvaqAfDb3Ks1vztb87VwnElhXhNjvsE7z6vcFzs1fCBkKMaXJqvwhK9bLS c4K6XN7K/39qX3yX3q4MgrCYaISaqpVffEEKL5Dqj2dVtu2CHKzh5W5cSV1DsxH0 5Op7m5XHxKALPYsSspc7qI71letVc67BN2ltQV4PgUBmZwU+V35btvGSMp9wqB+q B4Kis0VmCO90oemCRObo7Lc9QsGhPv6Sk3mcoKa7qf8nKpq2ZGQDPCN+gUsFYd+m UDmdcWrEoMjYWC3feUGxgnMfAH4SoUtK7yYfB2ky7xfgVhfpkwHI -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:33 2026 by rpki-client