This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa File: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (raw, json) Hash identifier: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU= Subject key identifier: F4:67:6A:E5:64:F0:D1:9B:8F:26:3B:32:F3:33:FC:AA:56:CF:1B:23 Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Certificate serial: 019B7CEE497CE2267043B2805C68F1AD2B56 Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa Signing time: Fri 02 Jan 2026 04:19:09 +0000 ROA not before: Fri 02 Jan 2026 04:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 2.57.28.0/22 maxlen: 22 139.28.226.0/24 maxlen: 24 193.168.220.0/22 maxlen: 22 194.93.32.0/24 maxlen: 24 194.93.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:49:7c:e2:26:70:43:b2:80:5c:68:f1:ad:2b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Validity Not Before: Jan 2 04:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4676ae564f0d19b8f263b32f333fcaa56cf1b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d5:18:ff:11:ef:18:f1:c4:33:15:2f:1b:21: 74:93:bd:29:b3:3a:08:5f:02:8d:d9:d6:a3:b0:9e: e7:9e:bb:74:97:6e:7e:69:db:ea:62:3e:b4:b9:44: 1a:4c:10:87:30:f8:40:40:a2:f9:67:04:46:51:bc: 79:ce:96:dc:9b:fe:02:62:b0:dd:fa:01:66:84:4d: 43:d8:6b:44:18:20:42:5b:ed:7d:fb:4d:a3:e9:4b: 55:31:5c:a5:a8:0c:b3:10:3f:54:8f:c4:fe:92:a2: be:94:58:79:62:37:d8:7a:4d:88:2d:e9:58:67:73: 3d:b8:5e:b6:ec:f0:bb:8c:8b:2d:6b:5e:9b:12:cc: f7:7a:ca:f4:7b:19:e0:7c:c5:73:f0:98:38:75:4c: 87:d4:2f:3d:a7:bc:eb:c4:f8:0a:3a:6b:9c:36:8e: 8f:9f:97:65:47:16:8c:ac:01:71:ee:03:53:e7:7b: 88:07:a2:ff:bc:eb:12:f0:f9:6a:6c:be:65:63:84: 8e:43:d4:ce:6c:1b:8f:f6:a9:f4:1a:67:8e:56:10: 6a:2c:b5:22:05:92:81:85:13:3a:a4:04:3f:01:4f: 65:e7:bd:30:2a:fd:1a:a5:b0:da:75:64:d7:8d:b8: 05:e9:5d:80:13:da:9f:a1:fb:3a:e1:5b:5d:47:9f: c8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:67:6A:E5:64:F0:D1:9B:8F:26:3B:32:F3:33:FC:AA:56:CF:1B:23 X509v3 Authority Key Identifier: keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.28.0/22 139.28.226.0/24 193.168.220.0/22 194.93.32.0/23 Signature Algorithm: sha256WithRSAEncryption d3:02:22:9d:d4:68:c3:e6:6b:fb:fc:c2:84:9a:a9:34:78:d0: 29:ae:c9:82:d5:3a:7d:65:5a:ed:c4:16:13:e6:89:e6:db:8b: b8:a5:52:81:8b:69:35:89:ff:02:e5:c6:0e:8e:19:12:45:6d: 49:35:83:b9:f6:97:a5:4c:31:93:5e:c3:2e:04:1f:5c:d7:c8: 9e:2e:40:fa:ec:af:5d:ae:ad:14:63:b5:f3:51:e3:df:8f:9a: 3d:08:38:ad:95:94:36:07:1c:9a:46:89:29:d9:2c:8a:e7:28: 6d:d7:c0:62:31:12:98:92:9f:89:9f:e9:a3:cb:1e:c4:47:7a: 10:97:b3:7b:ca:0a:ee:a2:fd:1d:8e:78:5c:81:43:e8:d3:90: 15:38:1e:9f:8c:13:91:d0:cb:36:be:6e:7e:78:e5:76:00:30: 8c:bb:2b:5c:72:84:a4:91:09:61:b1:e7:1e:ec:54:57:f1:26: 35:54:a5:d3:e2:15:d7:44:75:71:5b:de:2d:87:f4:eb:3e:6b: c4:94:8f:a2:84:f6:4a:38:0e:25:01:0b:21:74:e2:1d:fb:e7: ff:c8:75:37:2f:13:e5:95:d7:42:c4:cd:d7:32:25:80:2b:95: 4f:70:aa:e4:27:a5:a1:2b:1f:1e:b2:d9:19:5a:47:3f:09:1d: f1:c8:ea:ff -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87kl84iZwQ7KAXGjxrStWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz MzliYWUwHhcNMjYwMTAyMDQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDY3NmFlNTY0ZjBkMTliOGYyNjNiMzJmMzMzZmNhYTU2Y2YxYjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NUY/xHvGPHEMxUvGyF0k70pszoI XwKN2dajsJ7nnrt0l25+advqYj60uUQaTBCHMPhAQKL5ZwRGUbx5zpbcm/4CYrDd +gFmhE1D2GtEGCBCW+19+02j6UtVMVylqAyzED9Uj8T+kqK+lFh5YjfYek2ILelY Z3M9uF627PC7jIsta16bEsz3esr0exngfMVz8Jg4dUyH1C89p7zrxPgKOmucNo6P n5dlRxaMrAFx7gNT53uIB6L/vOsS8PlqbL5lY4SOQ9TObBuP9qn0GmeOVhBqLLUi BZKBhRM6pAQ/AU9l570wKv0apbDadWTXjbgF6V2AE9qfofs64VtdR5/INwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPRnauVk8NGbjyY7MvMz/KpWzxsjMB8GA1UdIwQY MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt Y2M3YjI4OTkwYjgxLzEvOUdkcTVXVHcwWnVQSmpzeTh6UDhxbGJQR3lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCAjkcAwQA ixziAwQCwajcAwQBwl0gMA0GCSqGSIb3DQEBCwUAA4IBAQDTAiKd1GjD5mv7/MKE mqk0eNAprsmC1Tp9ZVrtxBYT5onm24u4pVKBi2k1if8C5cYOjhkSRW1JNYO59pel TDGTXsMuBB9c18ieLkD67K9drq0UY7XzUePfj5o9CDitlZQ2BxyaRokp2SyK5yht 18BiMRKYkp+Jn+mjyx7ER3oQl7N7ygruov0djnhcgUPo05AVOB6fjBOR0Ms2vm5+ eOV2ADCMuytccoSkkQlhsece7FRX8SY1VKXT4hXXRHVxW94th/TrPmvElI+ihPZK OA4lAQshdOId++f/yHU3LxPllddCxM3XMiWAK5VPcKrkJ6WhKx8estkZWkc/CR3x yOr/ -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:58 2026 by rpki-client