This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/n9jXeCQebePRp-nZqBI8SlNOL0A.roa File: n9jXeCQebePRp-nZqBI8SlNOL0A.roa (raw, json) Hash identifier: iRFY1MascouzPY6CQ9pd/hkDj4KxTl5LRhZinPt+4Z8= Subject key identifier: 9F:D8:D7:78:24:1E:6D:E3:D1:A7:E9:D9:A8:12:3C:4A:53:4E:2F:40 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C809B95BBD950EC7754AFD5840F2CFE Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/n9jXeCQebePRp-nZqBI8SlNOL0A.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51799 IP address blocks: 193.23.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9b:95:bb:d9:50:ec:77:54:af:d5:84:0f:2c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fd8d778241e6de3d1a7e9d9a8123c4a534e2f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bc:ad:1a:0f:df:7e:a1:14:80:91:ae:e7:1d: 67:9e:4b:2c:2f:88:11:00:a1:c9:85:42:db:e1:44: 23:68:56:36:76:81:99:bd:6e:09:38:5e:87:ad:e7: 4a:2e:78:2d:1f:5c:d5:a3:58:27:17:08:1e:df:b1: 74:2f:eb:46:19:87:57:8e:c7:d2:2b:8a:c9:03:7f: 9b:06:19:b1:96:6d:03:90:0b:dd:62:fb:f4:ef:c1: f5:eb:38:72:78:4c:32:e7:f0:85:39:a6:a4:49:9b: 5e:2e:26:68:04:4d:60:d7:72:d9:5e:69:8b:d6:3f: cb:bb:5a:4c:bb:0b:c5:f5:2d:4b:a0:a5:59:9f:54: db:9d:1e:a6:cb:5e:9e:b9:e4:2f:0d:6d:ba:40:cd: 13:6f:03:b0:1a:f3:36:d2:3d:d0:67:74:15:e4:df: 57:e4:e8:0b:e0:c7:62:e8:5f:ea:9a:e8:70:cc:b0: 31:05:65:b6:e6:77:3c:48:32:14:36:9d:de:2e:09: 2f:e5:7e:ca:4f:e2:83:f2:50:ae:e9:46:6d:7d:06: 22:98:0f:58:db:9d:f8:fe:81:45:39:82:2f:d1:fe: 7a:d5:7e:41:0d:bb:c9:df:b6:51:29:f0:e4:11:b1: 8c:4e:e6:27:08:0f:90:d5:89:43:06:16:e1:7f:dd: 0b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D8:D7:78:24:1E:6D:E3:D1:A7:E9:D9:A8:12:3C:4A:53:4E:2F:40 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/n9jXeCQebePRp-nZqBI8SlNOL0A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.4.0/22 Signature Algorithm: sha256WithRSAEncryption 70:6b:16:2a:e6:b8:20:07:3f:aa:4c:c9:29:b4:c2:cc:76:03: da:13:52:ad:30:b8:75:87:17:fa:bd:55:e6:40:08:0c:c9:1e: b9:8d:8e:bf:cb:dd:7c:5d:ad:6c:0a:b4:46:79:a1:35:58:ec: 8c:65:8a:44:58:0d:8f:d4:4d:7b:ec:f8:7a:7d:5b:08:f4:fd: 5e:21:c0:05:78:6d:60:d2:c6:7e:c3:ec:d4:e9:a8:66:07:4b: 06:94:a8:5f:ae:7b:85:61:c5:fa:a7:ff:86:9a:25:e0:98:28: 5e:48:b4:a7:f9:ca:be:fe:7e:52:4c:b9:20:1d:6d:3e:6c:c1: 8f:1a:ac:9d:ac:30:23:da:be:97:dd:49:0b:9d:55:d3:ae:3b: 67:82:78:2a:41:db:50:cc:65:fb:66:c8:31:cd:0b:34:1c:82: e5:4e:a1:ea:13:c0:6b:8c:50:ee:b8:60:36:87:c6:c9:dd:cf: c6:27:9a:fa:bb:67:97:a6:15:f4:c8:43:18:9e:33:d0:64:9d: a1:63:64:05:73:16:0a:07:4c:09:41:05:0c:c5:02:54:72:26: 2e:64:ad:8e:f0:0b:cb:7d:76:96:bf:6e:e2:1d:93:4f:e6:f3: cc:e1:9f:08:ea:9c:f5:48:25:e1:c4:45:da:3f:27:c4:3f:28: 58:36:38:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJuVu9lQ7HdUr9WEDyz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmQ4ZDc3ODI0MWU2ZGUzZDFhN2U5ZDlhODEyM2M0YTUzNGUyZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rytGg/ffqEUgJGu5x1nnkssL4gR AKHJhULb4UQjaFY2doGZvW4JOF6HredKLngtH1zVo1gnFwge37F0L+tGGYdXjsfS K4rJA3+bBhmxlm0DkAvdYvv078H16zhyeEwy5/CFOaakSZteLiZoBE1g13LZXmmL 1j/Lu1pMuwvF9S1LoKVZn1TbnR6my16eueQvDW26QM0TbwOwGvM20j3QZ3QV5N9X 5OgL4Mdi6F/qmuhwzLAxBWW25nc8SDIUNp3eLgkv5X7KT+KD8lCu6UZtfQYimA9Y 2534/oFFOYIv0f561X5BDbvJ37ZRKfDkEbGMTuYnCA+Q1YlDBhbhf90LDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/Y13gkHm3j0afp2agSPEpTTi9AMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvbjlqWGVDUWViZVBScC1uWnFCSThTbE5PTDBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwRcEMA0G CSqGSIb3DQEBCwUAA4IBAQBwaxYq5rggBz+qTMkptMLMdgPaE1KtMLh1hxf6vVXm QAgMyR65jY6/y918Xa1sCrRGeaE1WOyMZYpEWA2P1E177Ph6fVsI9P1eIcAFeG1g 0sZ+w+zU6ahmB0sGlKhfrnuFYcX6p/+GmiXgmCheSLSn+cq+/n5STLkgHW0+bMGP GqydrDAj2r6X3UkLnVXTrjtngngqQdtQzGX7ZsgxzQs0HILlTqHqE8BrjFDuuGA2 h8bJ3c/GJ5r6u2eXphX0yEMYnjPQZJ2hY2QFcxYKB0wJQQUMxQJUciYuZK2O8AvL fXaWv27iHZNP5vPM4Z8I6pz1SCXhxEXaPyfEPyhYNjgk -----END CERTIFICATE-----Generated at Wed Jan 21 10:47:24 2026 by rpki-client