This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa File: f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa (raw, json) Hash identifier: gD8lBkeNmMP/yM8L2z9Jlxh7FwEKNnW8Lx9hYy3Jdus= Subject key identifier: 7F:DB:65:BD:1B:11:20:F3:AE:1B:42:38:27:D1:72:7E:66:72:35:61 Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Certificate serial: 019B7A5B53252B82094B1B730074E0F943C8 Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa Signing time: Thu 01 Jan 2026 16:19:23 +0000 ROA not before: Thu 01 Jan 2026 16:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210558 IP address blocks: 2.58.56.0/24 maxlen: 24 194.26.192.0/24 maxlen: 24 2a12:a800:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:53:25:2b:82:09:4b:1b:73:00:74:e0:f9:43:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0 Validity Not Before: Jan 1 16:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fdb65bd1b1120f3ae1b423827d1727e66723561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:f0:2a:de:51:a1:5c:c3:fe:d8:e7:7e:6c: 22:ce:da:f7:a4:52:f0:e7:52:ec:ff:cc:c5:77:78: 3b:8c:8b:fa:e4:fe:6c:fb:3e:b4:b6:c4:9f:fb:8b: b3:3a:b5:28:0b:b1:38:7b:3b:5e:59:e6:68:f3:03: a9:b7:05:a4:5d:b1:5c:0f:dd:c5:16:9b:e9:20:af: d9:fd:96:92:91:fd:d6:5e:c1:30:d7:fb:46:32:f4: 91:d7:79:18:08:85:a9:9d:b2:31:d3:db:c6:02:f6: 7a:db:83:00:f0:53:e9:31:ff:ea:90:9b:8e:21:42: 83:24:a8:f8:22:67:04:67:67:14:57:84:48:84:3c: af:1b:6c:00:85:87:06:57:8a:53:18:6a:71:5f:62: f8:31:45:29:ee:dc:42:11:32:40:c6:1a:43:e8:0f: 4d:3d:1d:be:da:b3:ce:b9:3a:92:7d:20:2f:ec:33: ee:b2:f9:52:98:42:31:50:4d:ef:c4:53:fd:b0:0d: 67:41:21:a6:17:81:8b:5c:e9:8c:f0:59:d8:c2:14: 7d:5d:fc:70:58:36:4e:b5:29:b1:e4:46:0a:b0:ea: 90:55:2f:eb:13:cb:87:35:74:8e:88:0f:ad:a0:76: 27:dc:30:8b:e5:33:c1:f4:9e:69:42:2d:5a:ca:42: 0f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DB:65:BD:1B:11:20:F3:AE:1B:42:38:27:D1:72:7E:66:72:35:61 X509v3 Authority Key Identifier: keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.56.0/24 194.26.192.0/24 IPv6: 2a12:a800:1::/48 Signature Algorithm: sha256WithRSAEncryption d0:d4:aa:6e:85:aa:4a:f3:ec:c5:d4:2b:22:4d:10:11:56:b8: 28:5b:1c:04:e3:aa:0c:f6:79:ed:a7:ba:58:cf:d3:30:23:81: d7:a4:40:56:c5:46:64:f6:b7:af:03:e2:09:bc:55:6b:76:51: 3c:af:91:f2:8d:cc:92:ce:0b:3d:9b:1d:71:f9:86:f6:59:b3: 73:31:64:41:6d:c4:22:2a:47:29:0d:8d:78:94:85:ee:ac:ef: b3:6e:f7:e9:37:08:ce:8d:20:cd:1a:76:b2:f5:17:0c:f5:67: fe:fe:dc:28:46:f5:e3:c8:d0:95:44:86:3e:d6:4f:ca:a9:08: 72:5b:ba:f2:03:0d:74:75:98:46:9b:dd:2f:e2:57:80:d0:90: 1b:1e:fd:15:cd:84:a0:15:15:2d:49:f3:1f:4d:18:a9:cf:00: 3c:7c:05:a8:41:82:df:65:f1:9d:18:1e:98:d9:a1:1d:e4:63: bf:c9:80:6b:7b:e0:83:06:a5:29:e4:40:5c:c6:ab:49:c0:e8: c6:99:d0:6a:0c:1c:3f:c0:f4:1a:58:57:dc:39:8c:83:01:74: f2:a4:d3:06:1e:6c:ee:4e:d2:42:87:ea:4f:1d:28:89:99:e1: 11:d6:d4:ee:2f:db:63:4f:c0:df:92:b0:b7:88:b0:ea:e7:f2: 90:2f:4b:3e -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6W1MlK4IJSxtzAHTg+UPIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNWEyMGE4NjkzOWM4ZGU4YWVkYzMwNTI0M2IwZmQ0YWQ4 NjU0ZDAwHhcNMjYwMTAxMTYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmRiNjViZDFiMTEyMGYzYWUxYjQyMzgyN2QxNzI3ZTY2NzIzNTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMXwKt5RoVzD/tjnfmwiztr3pFLw 51Ls/8zFd3g7jIv65P5s+z60tsSf+4uzOrUoC7E4ezteWeZo8wOptwWkXbFcD93F FpvpIK/Z/ZaSkf3WXsEw1/tGMvSR13kYCIWpnbIx09vGAvZ624MA8FPpMf/qkJuO IUKDJKj4ImcEZ2cUV4RIhDyvG2wAhYcGV4pTGGpxX2L4MUUp7txCETJAxhpD6A9N PR2+2rPOuTqSfSAv7DPusvlSmEIxUE3vxFP9sA1nQSGmF4GLXOmM8FnYwhR9Xfxw WDZOtSmx5EYKsOqQVS/rE8uHNXSOiA+toHYn3DCL5TPB9J5pQi1aykIPOwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFH/bZb0bESDzrhtCOCfRcn5mcjVhMB8GA1UdIwQY MBaAFLNaIKhpOcjeiu3DBSQ7D9SthlTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAt YTU0MjU4OTc5OWJjLzEvZjl0bHZSc1JJUE91RzBJNEo5RnlmbVp5TldFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8xNjIxODYtNTBkMS00NzYxLWFhZjAtYTU0MjU4OTc5OWJj LzEvczFvZ3FHazV5TjZLN2NNRkpEc1AxSzJHVk5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAAjo4AwQA whrAMA8EAgACMAkDBwAqEqgAAAEwDQYJKoZIhvcNAQELBQADggEBANDUqm6Fqkrz 7MXUKyJNEBFWuChbHATjqgz2ee2nuljP0zAjgdekQFbFRmT2t68D4gm8VWt2UTyv kfKNzJLOCz2bHXH5hvZZs3MxZEFtxCIqRykNjXiUhe6s77Nu9+k3CM6NIM0adrL1 Fwz1Z/7+3ChG9ePI0JVEhj7WT8qpCHJbuvIDDXR1mEab3S/iV4DQkBse/RXNhKAV FS1J8x9NGKnPADx8BahBgt9l8Z0YHpjZoR3kY7/JgGt74IMGpSnkQFzGq0nA6MaZ 0GoMHD/A9BpYV9w5jIMBdPKk0wYebO5O0kKH6k8dKImZ4RHW1O4v22NPwN+SsLeI sOrn8pAvSz4= -----END CERTIFICATE-----Generated at Mon Jan 26 21:05:38 2026 by rpki-client