This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa File: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (raw, json) Hash identifier: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14= Subject key identifier: 8F:DA:23:46:A0:3C:86:33:30:49:16:14:09:CA:63:34:97:FD:84:AB Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499 Certificate serial: 019B7EA653FBBB957E00AA1F44767D51DCF1 Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa Signing time: Fri 02 Jan 2026 12:19:48 +0000 ROA not before: Fri 02 Jan 2026 12:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 188.72.12.0/24 maxlen: 24 188.72.17.0/24 maxlen: 24 188.72.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:53:fb:bb:95:7e:00:aa:1f:44:76:7d:51:dc:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499 Validity Not Before: Jan 2 12:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fda2346a03c86333049161409ca633497fd84ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c9:75:1c:4c:72:e6:4e:43:b8:85:1a:46:2c: f3:bb:e3:9c:62:14:51:16:0d:1c:ca:74:ba:6b:36: 2a:29:9f:b7:ff:1c:f6:58:5a:73:83:99:74:ad:a6: f5:d0:0d:9c:46:7f:59:e2:af:d4:a1:98:a8:a4:d1: 66:d7:a0:48:08:9b:bc:60:26:87:f0:10:dc:d3:f7: 42:21:b1:70:a0:fd:42:10:17:4a:18:7c:ff:b9:ff: fd:83:eb:92:36:76:28:2f:e8:17:92:9b:a5:05:61: fa:46:54:57:9c:f7:7a:9c:46:62:40:66:29:21:88: e8:74:65:e8:97:c7:c0:bf:de:31:a8:2e:02:92:76: 18:97:d3:53:4b:77:a7:47:60:c2:44:1e:d7:94:9a: 34:72:f0:dd:9e:22:6c:2d:b2:16:e9:82:60:2f:0c: 09:27:a5:1b:c1:c9:2b:be:63:80:2f:b8:1c:4e:79: e1:3c:8f:18:68:01:e8:97:49:78:77:a3:1e:0f:d8: 21:ef:31:07:c5:52:ad:e1:f4:ac:8d:2c:9c:e8:e3: 2c:ad:f9:c2:2e:e8:25:67:26:e9:6d:ac:bc:ff:5b: d6:bc:c7:58:93:1c:88:44:d3:7c:7a:d9:f4:e6:d5: 8f:73:c6:a5:5d:a4:b0:07:67:a1:3a:ed:30:0a:ba: 03:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:23:46:A0:3C:86:33:30:49:16:14:09:CA:63:34:97:FD:84:AB X509v3 Authority Key Identifier: keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.72.12.0/24 188.72.17.0/24 188.72.30.0/24 Signature Algorithm: sha256WithRSAEncryption a2:91:33:fe:36:0b:36:a0:10:8f:d9:54:54:11:ca:bc:22:1f: e7:4b:7a:0b:af:e7:39:b8:a5:da:11:c7:c2:20:14:3e:37:18: 54:05:32:61:bc:49:11:80:ce:aa:50:46:b0:d8:e7:f8:0d:44: 45:64:ff:79:54:22:76:50:11:53:23:d8:9c:69:d2:71:0f:91: be:56:11:be:fe:19:ba:74:c3:77:14:9e:25:a2:54:73:94:98: 3d:60:d9:21:b4:e0:3c:c4:db:3e:bd:89:ab:e5:dc:2a:73:5b: 84:04:46:7d:60:24:58:67:c1:14:fb:43:d5:d0:20:9e:70:a0: bc:31:7b:86:b9:0c:94:ef:0d:05:83:8b:d6:08:2d:26:e1:b7: 64:78:21:7d:9e:c7:07:d6:fd:47:77:6d:10:78:dc:20:ca:f3: 30:15:a6:ad:55:8d:f1:b8:8f:ba:39:a0:d4:49:f0:16:64:9c: 30:25:2c:7f:1c:70:6f:34:f6:f3:ad:cc:c9:e8:b0:23:d3:11: 1a:18:a0:cf:01:0f:d0:41:70:6a:f8:b1:27:95:82:b0:5e:a4: 74:63:d7:96:dd:62:fd:fe:54:ee:3a:53:81:3e:19:58:a8:3c: c0:5d:08:a3:75:db:6a:91:37:98:17:3b:60:31:b0:91:72:07: e6:a0:f3:b8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+plP7u5V+AKofRHZ9UdzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw OWY0OTkwHhcNMjYwMTAyMTIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmRhMjM0NmEwM2M4NjMzMzA0OTE2MTQwOWNhNjMzNDk3ZmQ4NGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysl1HExy5k5DuIUaRizzu+OcYhRR Fg0cynS6azYqKZ+3/xz2WFpzg5l0rab10A2cRn9Z4q/UoZiopNFm16BICJu8YCaH 8BDc0/dCIbFwoP1CEBdKGHz/uf/9g+uSNnYoL+gXkpulBWH6RlRXnPd6nEZiQGYp IYjodGXol8fAv94xqC4CknYYl9NTS3enR2DCRB7XlJo0cvDdniJsLbIW6YJgLwwJ J6UbwckrvmOAL7gcTnnhPI8YaAHol0l4d6MeD9gh7zEHxVKt4fSsjSyc6OMsrfnC LuglZybpbay8/1vWvMdYkxyIRNN8etn05tWPc8alXaSwB2ehOu0wCroD0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI/aI0agPIYzMEkWFAnKYzSX/YSrMB8GA1UdIwQY MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt NTJiOWU2YTE2MzUwLzEvajlvalJxQThoak13U1JZVUNjcGpOSmY5aEtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAvEgMAwQA vEgRAwQAvEgeMA0GCSqGSIb3DQEBCwUAA4IBAQCikTP+Ngs2oBCP2VRUEcq8Ih/n S3oLr+c5uKXaEcfCIBQ+NxhUBTJhvEkRgM6qUEaw2Of4DURFZP95VCJ2UBFTI9ic adJxD5G+VhG+/hm6dMN3FJ4lolRzlJg9YNkhtOA8xNs+vYmr5dwqc1uEBEZ9YCRY Z8EU+0PV0CCecKC8MXuGuQyU7w0Fg4vWCC0m4bdkeCF9nscH1v1Hd20QeNwgyvMw FaatVY3xuI+6OaDUSfAWZJwwJSx/HHBvNPbzrczJ6LAj0xEaGKDPAQ/QQXBq+LEn lYKwXqR0Y9eW3WL9/lTuOlOBPhlYqDzAXQijddtqkTeYFztgMbCRcgfmoPO4 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:05 2026 by rpki-client