This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/9Zj08Nsu2ULVP8gIHp68zr62hmY.roa File: 9Zj08Nsu2ULVP8gIHp68zr62hmY.roa (raw, json) Hash identifier: nO29O+Uk8juTUNEEagfxAVpw9Sl4csffNTrx+Oc64nY= Subject key identifier: F5:98:F4:F0:DB:2E:D9:42:D5:3F:C8:08:1E:9E:BC:CE:BE:B6:86:66 Certificate issuer: /CN=123ba3802f9c9bf6756daabd324e5326ede419aa Certificate serial: 019B77C7211551FDD2C0D6B58A35E37FFD9A Authority key identifier: 12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/9Zj08Nsu2ULVP8gIHp68zr62hmY.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60584 IP address blocks: 193.200.243.0/24 maxlen: 24 2a06:18c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.mft rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:21:15:51:fd:d2:c0:d6:b5:8a:35:e3:7f:fd:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=123ba3802f9c9bf6756daabd324e5326ede419aa Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f598f4f0db2ed942d53fc8081e9ebccebeb68666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:71:3e:d3:ec:4a:fd:22:36:d7:0a:13:e2:08: 82:5c:e3:dd:ba:04:e5:38:25:8f:03:ef:2d:5a:3e: c3:d3:87:5a:76:e2:4f:44:0c:00:34:33:8e:f2:6c: 33:bf:b9:61:51:f9:f7:44:c0:25:b5:21:c4:00:ee: b8:6b:21:69:e2:2e:11:e0:5d:c5:5c:92:01:61:b5: 7f:2b:5b:99:06:a8:ba:b6:03:72:bc:30:68:73:61: ff:94:26:e8:86:aa:04:45:8d:de:0c:1e:9e:89:5d: 22:47:0c:74:5e:51:f6:36:78:b5:98:63:c3:1b:33: ea:2d:16:4e:9b:49:1a:70:b5:6e:65:46:72:97:f1: ee:84:cf:c8:d4:6a:c6:80:38:95:63:86:70:a0:e4: 3d:6f:dd:d1:7b:25:da:78:55:89:38:f2:aa:67:2f: 19:e8:8b:f9:ca:e4:7c:b9:d2:da:b6:56:47:eb:47: 1b:28:00:d6:1a:08:ae:7f:c3:71:6c:44:a9:48:c1: 56:ac:5d:ce:58:56:74:df:a2:3c:78:d0:68:9f:71: 15:86:ac:47:d4:08:ff:eb:1d:ce:da:63:e7:04:ad: 15:80:b3:3e:f2:23:a7:27:0a:c4:65:54:92:26:af: 74:c3:6b:e1:5d:67:24:da:9d:42:61:6f:d8:b6:42: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:98:F4:F0:DB:2E:D9:42:D5:3F:C8:08:1E:9E:BC:CE:BE:B6:86:66 X509v3 Authority Key Identifier: keyid:12:3B:A3:80:2F:9C:9B:F6:75:6D:AA:BD:32:4E:53:26:ED:E4:19:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjujgC-cm_Z1baq9Mk5TJu3kGao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/9Zj08Nsu2ULVP8gIHp68zr62hmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/61f7c3-4134-4c02-b7dd-e4d024cdae0c/1/EjujgC-cm_Z1baq9Mk5TJu3kGao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.243.0/24 IPv6: 2a06:18c0::/29 Signature Algorithm: sha256WithRSAEncryption 76:1d:f2:a2:e2:60:e5:84:4c:da:76:ac:0c:55:e0:4e:1f:93: 0e:3c:3b:98:b4:95:fa:52:58:ce:3a:2f:be:8c:5f:25:af:81: 9d:2d:a2:5f:8e:13:ca:d0:f5:ef:ee:c0:05:2e:7d:52:7c:e2: 13:1a:f3:25:30:c8:23:b1:69:34:1c:03:fe:6a:c9:9a:38:a2: a5:9f:5c:2a:0c:7d:1c:02:3c:85:e4:c7:50:c6:4d:f7:60:d4: f4:b2:0a:36:10:07:16:18:cf:6a:11:94:d4:56:ec:79:d7:bd: b3:20:12:be:90:8f:c5:01:ea:53:6c:99:da:42:d3:e5:ba:e9: 32:99:51:b1:91:be:13:14:40:34:98:d0:5e:eb:76:ce:b8:4f: 1e:60:c9:16:68:b1:e0:9b:03:21:8b:0a:87:4c:6b:c1:b1:85: a6:d9:e4:5f:c1:97:87:9d:a4:fa:14:70:37:58:7f:19:39:39: 23:36:77:4a:e1:0b:dc:7c:47:f2:47:4a:51:5e:33:e1:ec:8a: 2a:a7:51:4f:c8:84:cd:c5:1f:39:98:30:98:8a:3a:df:40:a4: fa:8c:8a:27:d8:7b:7f:3a:f7:6b:71:ed:60:df:31:3a:be:b4: 96:51:8b:47:92:33:ea:ce:39:3e:3d:5e:71:25:fd:1d:62:14: c5:3b:56:96 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xyEVUf3SwNa1ijXjf/2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyM2JhMzgwMmY5YzliZjY3NTZkYWFiZDMyNGU1MzI2ZWRl NDE5YWEwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTk4ZjRmMGRiMmVkOTQyZDUzZmM4MDgxZTllYmNjZWJlYjY4NjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HE+0+xK/SI21woT4giCXOPdugTl OCWPA+8tWj7D04daduJPRAwANDOO8mwzv7lhUfn3RMAltSHEAO64ayFp4i4R4F3F XJIBYbV/K1uZBqi6tgNyvDBoc2H/lCbohqoERY3eDB6eiV0iRwx0XlH2Nni1mGPD GzPqLRZOm0kacLVuZUZyl/HuhM/I1GrGgDiVY4ZwoOQ9b93ReyXaeFWJOPKqZy8Z 6Iv5yuR8udLatlZH60cbKADWGgiuf8NxbESpSMFWrF3OWFZ036I8eNBon3EVhqxH 1Aj/6x3O2mPnBK0VgLM+8iOnJwrEZVSSJq90w2vhXWck2p1CYW/YtkKO/QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPWY9PDbLtlC1T/ICB6evM6+toZmMB8GA1UdIwQY MBaAFBI7o4AvnJv2dW2qvTJOUybt5BmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQt ZTRkMDI0Y2RhZTBjLzEvOVpqMDhOc3UyVUxWUDhnSUhwNjh6cjYyaG1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi82MWY3YzMtNDEzNC00YzAyLWI3ZGQtZTRkMDI0Y2RhZTBj LzEvRWp1amdDLWNtX1oxYmFxOU1rNVRKdTNrR2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwcjzMA0E AgACMAcDBQMqBhjAMA0GCSqGSIb3DQEBCwUAA4IBAQB2HfKi4mDlhEzadqwMVeBO H5MOPDuYtJX6UljOOi++jF8lr4GdLaJfjhPK0PXv7sAFLn1SfOITGvMlMMgjsWk0 HAP+asmaOKKln1wqDH0cAjyF5MdQxk33YNT0sgo2EAcWGM9qEZTUVux5172zIBK+ kI/FAepTbJnaQtPluukymVGxkb4TFEA0mNBe63bOuE8eYMkWaLHgmwMhiwqHTGvB sYWm2eRfwZeHnaT6FHA3WH8ZOTkjNndK4QvcfEfyR0pRXjPh7Ioqp1FPyITNxR85 mDCYijrfQKT6jIon2Ht/Ovdrce1g3zE6vrSWUYtHkjPqzjk+PV5xJf0dYhTFO1aW -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:24 2026 by rpki-client