This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9XSwptV-ZNILwy4i5DW_tgPkgSU.roa File: 9XSwptV-ZNILwy4i5DW_tgPkgSU.roa (raw, json) Hash identifier: 1gOGH6Fm4nuBFJfCO9Q2Mvfqz47h/JLm40saj0YTiOk= Subject key identifier: F5:74:B0:A6:D5:7E:64:D2:0B:C3:2E:22:E4:35:BF:B6:03:E4:81:25 Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5 Certificate serial: 019B7AC9254A1CB9C3225DB9A543B26DFED4 Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9XSwptV-ZNILwy4i5DW_tgPkgSU.roa Signing time: Thu 01 Jan 2026 18:19:21 +0000 ROA not before: Thu 01 Jan 2026 18:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216333 IP address blocks: 194.8.133.0/24 maxlen: 24 2a13:d6c0:1::/48 maxlen: 48 2a13:d6c0:20::/48 maxlen: 48 2a13:d6c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:25:4a:1c:b9:c3:22:5d:b9:a5:43:b2:6d:fe:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5 Validity Not Before: Jan 1 18:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f574b0a6d57e64d20bc32e22e435bfb603e48125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b9:78:12:5a:8b:ae:29:48:ca:30:e1:b0:bc: de:18:e2:dd:bc:74:2a:b0:fc:4b:55:98:26:07:8f: 07:7b:aa:23:15:93:16:d9:9a:f1:a4:6c:f9:08:57: 0c:5c:a1:be:fd:71:0e:8e:73:46:f3:25:fd:ce:4e: 5e:f4:14:d2:be:f1:17:5d:2c:77:ba:31:1b:07:68: 15:2f:b9:77:4d:70:58:75:60:51:cb:24:cc:86:21: dc:d5:37:e5:b1:3a:50:a2:17:7e:70:fe:1c:9a:6d: 18:e7:53:ea:27:a6:bc:40:d6:cf:e8:3d:ae:b3:e9: d9:9b:85:77:37:cf:f4:50:e5:d1:22:83:7a:16:3f: 4a:84:57:41:6e:3a:80:7a:c6:90:eb:92:42:29:2b: 05:3a:96:c1:d5:6c:21:12:25:c9:ab:3c:1f:45:cd: 6c:ac:35:c1:1f:12:92:79:b6:c8:b2:3e:31:b5:31: 90:8b:23:1d:29:95:93:79:07:e3:51:15:c0:8f:44: 1b:73:1d:1a:5f:a3:0d:50:b0:f1:4e:f6:10:41:3a: ff:13:5e:c3:63:60:43:4c:66:d4:1e:ce:a9:0c:da: 51:c5:e5:8b:4e:33:49:f7:23:39:49:38:41:00:23: 54:bb:d2:98:1c:5f:1f:0e:5d:61:e0:f6:11:e5:ce: 61:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:74:B0:A6:D5:7E:64:D2:0B:C3:2E:22:E4:35:BF:B6:03:E4:81:25 X509v3 Authority Key Identifier: keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9XSwptV-ZNILwy4i5DW_tgPkgSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.133.0/24 IPv6: 2a13:d6c0:1::/48 2a13:d6c0:20::/48 2a13:d6c0:100::/48 Signature Algorithm: sha256WithRSAEncryption 87:76:44:58:40:83:33:47:ef:7f:bb:e7:bb:6b:99:f7:de:02: 6a:81:ff:91:3c:f9:e1:2b:35:5b:fa:0e:92:45:e6:a2:b6:17: af:93:83:dd:66:82:bf:a0:e3:dd:ea:01:ee:cc:ef:d8:39:83: f3:97:29:a3:16:21:f1:35:70:3d:49:cd:a5:91:08:64:54:ed: 36:96:f6:32:92:60:bb:00:72:82:33:50:29:06:bd:e5:13:37: 0e:4e:df:88:f4:45:1e:47:4d:f9:30:95:9e:79:dc:44:fb:25: ad:65:3b:bd:f4:5a:25:c7:d8:60:ed:94:0f:1e:39:95:7d:51: 14:22:d7:57:08:e1:db:e9:ea:91:f4:35:7f:c9:b9:a3:e3:6d: bf:b8:8b:cc:4a:1f:65:de:9c:c7:c1:cf:c1:c8:40:6d:41:17: 4d:fb:e7:0b:42:c7:5c:df:09:6e:e4:63:20:b0:60:7c:d9:0a: 6c:88:98:65:ce:3c:fc:31:c7:24:68:e2:1e:ba:24:01:dc:d8: 36:ae:08:a8:33:d3:39:7a:65:51:59:ce:7f:d0:10:06:9d:11: 74:f2:d7:80:3a:9d:45:74:f0:f4:19:ce:75:dc:db:26:28:59: 24:c0:82:7a:6d:f2:01:6c:1c:79:28:14:c1:12:42:ee:91:15: aa:2e:79:d8 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt6ySVKHLnDIl25pUOybf7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MTg2MTlhZTNjOWI1OWQ4NjhiY2RmY2M3ZTczZDgxM2Y4 NTA0ZTUwHhcNMjYwMTAxMTgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTc0YjBhNmQ1N2U2NGQyMGJjMzJlMjJlNDM1YmZiNjAzZTQ4MTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rl4ElqLrilIyjDhsLzeGOLdvHQq sPxLVZgmB48He6ojFZMW2ZrxpGz5CFcMXKG+/XEOjnNG8yX9zk5e9BTSvvEXXSx3 ujEbB2gVL7l3TXBYdWBRyyTMhiHc1TflsTpQohd+cP4cmm0Y51PqJ6a8QNbP6D2u s+nZm4V3N8/0UOXRIoN6Fj9KhFdBbjqAesaQ65JCKSsFOpbB1WwhEiXJqzwfRc1s rDXBHxKSebbIsj4xtTGQiyMdKZWTeQfjURXAj0Qbcx0aX6MNULDxTvYQQTr/E17D Y2BDTGbUHs6pDNpRxeWLTjNJ9yM5SThBACNUu9KYHF8fDl1h4PYR5c5hcQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFPV0sKbVfmTSC8MuIuQ1v7YD5IElMB8GA1UdIwQY MBaAFPYYYZrjybWdhovN/MfnPYE/hQTlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWhoaG11UEp0WjJHaTgzOHgtYzlnVC1GQk9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85ZjUxMDUtMTJkNy00ZjZiLTlkMGQt ZDk3N2IzODlkNWFiLzEvOVhTd3B0Vi1aTklMd3k0aTVEV190Z1BrZ1NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS85ZjUxMDUtMTJkNy00ZjZiLTlkMGQtZDk3N2IzODlkNWFi LzEvOWhoaG11UEp0WjJHaTgzOHgtYzlnVC1GQk9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAwgiFMCEE AgACMBsDBwAqE9bAAAEDBwAqE9bAACADBwAqE9bAAQAwDQYJKoZIhvcNAQELBQAD ggEBAId2RFhAgzNH73+757trmffeAmqB/5E8+eErNVv6DpJF5qK2F6+Tg91mgr+g 493qAe7M79g5g/OXKaMWIfE1cD1JzaWRCGRU7TaW9jKSYLsAcoIzUCkGveUTNw5O 34j0RR5HTfkwlZ553ET7Ja1lO730WiXH2GDtlA8eOZV9URQi11cI4dvp6pH0NX/J uaPjbb+4i8xKH2XenMfBz8HIQG1BF0375wtCx1zfCW7kYyCwYHzZCmyImGXOPPwx xyRo4h66JAHc2DauCKgz0zl6ZVFZzn/QEAadEXTy14A6nUV08PQZznXc2yYoWSTA gnpt8gFsHHkoFMESQu6RFaouedg= -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:56 2026 by rpki-client