This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa File: 9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa (raw, json) Hash identifier: 4raYX1rjDm7gMpaOcfPnUtC02bJsDBACsNYhYrbdmZM= Subject key identifier: F5:A6:DF:A3:57:5F:7B:68:B9:54:41:85:78:E0:A2:F9:8B:B5:D4:34 Certificate issuer: /CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Certificate serial: 019B7A5A81DB2FD70E40EE8C5E89A2E913BC Authority key identifier: DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa Signing time: Thu 01 Jan 2026 16:18:30 +0000 ROA not before: Thu 01 Jan 2026 16:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 92.243.85.0/24 maxlen: 24 194.15.100.0/24 maxlen: 24 194.15.101.0/24 maxlen: 24 194.15.102.0/24 maxlen: 24 194.15.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.mft rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:81:db:2f:d7:0e:40:ee:8c:5e:89:a2:e9:13:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcdcb02b61e3a15eac373b992e0e1a6545f61e52 Validity Not Before: Jan 1 16:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5a6dfa3575f7b68b954418578e0a2f98bb5d434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:0c:ac:cb:11:c0:88:ea:d9:44:04:4e:53: 79:35:f7:3b:19:92:a9:33:5b:9b:f0:31:d6:12:81: b1:fe:38:23:e9:b3:a0:ad:03:56:c9:95:16:f0:49: b2:34:0c:cd:53:3b:9a:1e:be:2e:82:a4:18:c2:10: de:bd:56:34:bb:0f:b3:8a:34:57:bb:62:41:63:33: 53:bc:a1:ec:de:c8:ae:71:8c:ad:af:cb:6e:4b:07: 42:b8:24:e7:41:cd:e5:29:64:e0:4b:3a:dd:0c:46: 83:28:97:c8:6d:6f:06:62:2a:10:54:4b:8d:a7:25: 01:3c:98:79:8b:40:c3:af:bf:d1:d3:50:7a:4d:8c: 42:26:6e:3b:f8:d5:ed:ee:cd:4a:70:88:f6:fb:b1: d3:9b:18:21:83:00:17:8d:81:d6:9d:ff:5b:31:4a: 2f:87:6f:4a:a2:95:20:59:b6:2e:3a:f0:b9:41:92: 50:e5:40:15:37:5b:36:64:50:20:cd:10:bf:2d:c3: 79:80:d2:77:6c:d4:3a:ef:dc:ee:77:f9:71:13:1b: 42:31:5f:0d:e9:11:77:10:56:d6:2f:09:1b:4c:69: e9:50:c0:57:2c:82:d2:d3:f2:88:a6:a3:cb:29:aa: 98:7d:a5:50:d0:1c:05:36:fb:6a:78:c2:8a:be:02: 2c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A6:DF:A3:57:5F:7B:68:B9:54:41:85:78:E0:A2:F9:8B:B5:D4:34 X509v3 Authority Key Identifier: keyid:DC:DC:B0:2B:61:E3:A1:5E:AC:37:3B:99:2E:0E:1A:65:45:F6:1E:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3NywK2HjoV6sNzuZLg4aZUX2HlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/9abfo1dfe2i5VEGFeOCi-Yu11DQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2b4823-4262-47d3-9b80-66758479863e/1/3NywK2HjoV6sNzuZLg4aZUX2HlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.243.85.0/24 194.15.100.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:57:bc:a3:76:58:32:5b:40:04:bb:59:2f:46:bb:1e:80:a7: 25:60:7d:19:a6:1d:d9:7f:4d:a8:d2:13:2a:ec:aa:f0:f6:2e: 36:8c:ff:dc:7a:dd:a9:f5:27:93:39:0a:c3:44:5b:b6:56:8a: 4f:98:2c:98:1d:7b:7b:c2:b5:19:3e:8e:11:46:04:a9:76:dd: 21:bc:33:bc:11:60:d5:0a:ed:f8:8e:e1:7a:09:5f:38:fd:c3: f4:4b:66:38:dc:50:07:47:0c:69:42:2a:98:96:18:43:c9:87: aa:cd:ad:2d:b6:8c:de:22:74:54:d0:aa:4a:c8:db:46:d3:d6: d7:82:1c:21:64:0f:77:13:d1:11:49:64:57:66:de:13:a3:1e: 17:0b:33:df:93:9b:94:bf:63:52:b2:5a:b8:32:46:f2:84:53: 78:7c:21:c5:6a:da:66:8a:8e:1e:f7:48:bc:f2:21:44:8c:3c: 0b:53:61:6a:ec:10:74:90:ad:1c:13:e9:40:1d:74:2c:84:4e: 33:b8:e8:43:3d:83:a7:b2:15:f7:90:ff:8c:ba:2a:67:cd:39: 74:3d:10:8a:5d:f8:04:2b:60:39:85:e6:aa:17:d4:ca:19:b2: 9b:f8:8e:30:84:bd:96:67:79:1d:16:8e:ff:93:d9:f5:30:d4: e7:81:bb:3e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WoHbL9cOQO6MXomi6RO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZGNiMDJiNjFlM2ExNWVhYzM3M2I5OTJlMGUxYTY1NDVm NjFlNTIwHhcNMjYwMTAxMTYxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWE2ZGZhMzU3NWY3YjY4Yjk1NDQxODU3OGUwYTJmOThiYjVkNDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpoMrMsRwIjq2UQETlN5Nfc7GZKp M1ub8DHWEoGx/jgj6bOgrQNWyZUW8EmyNAzNUzuaHr4ugqQYwhDevVY0uw+zijRX u2JBYzNTvKHs3siucYytr8tuSwdCuCTnQc3lKWTgSzrdDEaDKJfIbW8GYioQVEuN pyUBPJh5i0DDr7/R01B6TYxCJm47+NXt7s1KcIj2+7HTmxghgwAXjYHWnf9bMUov h29KopUgWbYuOvC5QZJQ5UAVN1s2ZFAgzRC/LcN5gNJ3bNQ679zud/lxExtCMV8N 6RF3EFbWLwkbTGnpUMBXLILS0/KIpqPLKaqYfaVQ0BwFNvtqeMKKvgIsYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPWm36NXX3touVRBhXjgovmLtdQ0MB8GA1UdIwQY MBaAFNzcsCth46FerDc7mS4OGmVF9h5SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAt NjY3NTg0Nzk4NjNlLzEvOWFiZm8xZGZlMmk1VkVHRmVPQ2ktWXUxMURRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yYjQ4MjMtNDI2Mi00N2QzLTliODAtNjY3NTg0Nzk4NjNl LzEvM055d0sySGpvVjZzTnp1WkxnNGFaVVgySGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXPNVAwQC wg9kMA0GCSqGSIb3DQEBCwUAA4IBAQCfV7yjdlgyW0AEu1kvRrsegKclYH0Zph3Z f02o0hMq7Krw9i42jP/cet2p9SeTOQrDRFu2VopPmCyYHXt7wrUZPo4RRgSpdt0h vDO8EWDVCu34juF6CV84/cP0S2Y43FAHRwxpQiqYlhhDyYeqza0ttozeInRU0KpK yNtG09bXghwhZA93E9ERSWRXZt4Tox4XCzPfk5uUv2NSslq4MkbyhFN4fCHFatpm io4e90i88iFEjDwLU2Fq7BB0kK0cE+lAHXQshE4zuOhDPYOnshX3kP+MuipnzTl0 PRCKXfgEK2A5heaqF9TKGbKb+I4whL2WZ3kdFo7/k9n1MNTngbs+ -----END CERTIFICATE-----Generated at Wed Jan 21 13:16:57 2026 by rpki-client