This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/X9p1dpq5cNTg4oaZ6x30uyHelQI.roa File: X9p1dpq5cNTg4oaZ6x30uyHelQI.roa (raw, json) Hash identifier: D5fNoAic1Tp57BY17A3hU+C+OdDJaGcq/k7ZyehvTB8= Subject key identifier: 5F:DA:75:76:9A:B9:70:D4:E0:E2:86:99:EB:1D:F4:BB:21:DE:95:02 Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057 Certificate serial: 019B78A2D28B321D4D7FF8D502225BE5085A Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/X9p1dpq5cNTg4oaZ6x30uyHelQI.roa Signing time: Thu 01 Jan 2026 08:18:15 +0000 ROA not before: Thu 01 Jan 2026 08:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8976 IP address blocks: 193.105.64.0/24 maxlen: 24 2001:67c:e14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.mft rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d2:8b:32:1d:4d:7f:f8:d5:02:22:5b:e5:08:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057 Validity Not Before: Jan 1 08:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fda75769ab970d4e0e28699eb1df4bb21de9502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:45:0e:35:6c:40:01:af:3d:d4:fe:ba:24: 7f:ea:9b:44:1b:0a:37:94:46:8e:56:5c:ac:22:b5: da:2b:b2:61:c0:b2:be:df:e7:02:a3:13:8a:b1:23: 6f:97:92:d2:95:7b:cb:70:a8:85:65:98:8c:47:81: a6:f6:80:90:af:ad:45:47:4b:18:36:76:3c:ce:98: 96:ae:3c:13:1d:98:b9:18:ca:a6:17:1e:0d:96:a3: d4:61:e5:94:18:45:af:3c:ca:b9:47:08:42:3c:a5: ef:36:17:cf:67:c9:de:36:57:03:48:ab:ed:89:89: 37:21:29:48:98:13:2a:76:71:73:70:89:93:47:29: ff:1a:6d:26:ac:63:a2:dd:f6:e0:a6:af:20:00:04: 4a:ae:75:f5:cf:f0:e3:fe:76:1f:af:b9:77:44:8e: 34:50:db:05:88:4e:17:4d:b2:b2:29:92:61:fd:23: cf:07:9d:9f:57:e0:a2:92:7a:dd:ab:1f:e4:1d:2f: 96:4a:45:45:52:bb:af:73:f9:fb:83:24:5d:95:ae: 9f:f9:8c:88:0e:a6:3b:7c:4d:3e:a8:3c:f4:7f:4b: a9:cd:61:d7:ef:a2:68:89:27:ab:08:3e:71:ce:cf: f6:e9:69:27:f9:2b:22:54:79:85:7f:e9:96:3d:7c: 7a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DA:75:76:9A:B9:70:D4:E0:E2:86:99:EB:1D:F4:BB:21:DE:95:02 X509v3 Authority Key Identifier: keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/X9p1dpq5cNTg4oaZ6x30uyHelQI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.64.0/24 IPv6: 2001:67c:e14::/48 Signature Algorithm: sha256WithRSAEncryption 93:f9:cd:ff:03:50:be:ed:71:87:10:6e:98:2e:3f:87:c1:09: 13:a0:fe:d3:5f:b0:da:e9:74:4d:ec:82:bb:7b:55:95:89:f9: 7b:03:b9:ae:16:7a:4a:2c:9d:e2:f7:58:a7:87:9e:8a:a5:5e: f0:e2:2c:cb:1b:5c:f4:59:92:0e:09:37:66:f1:74:b6:da:d1: 0a:17:78:3b:1f:65:43:8d:57:d1:4e:82:e6:47:d4:31:3a:ca: 54:3c:11:41:84:8e:48:16:05:fa:2d:f8:07:28:c0:ea:9f:6a: f4:71:29:a6:f8:7e:f5:76:75:b5:d9:97:f6:4e:02:3f:3b:9e: 54:18:4f:3d:01:7e:30:d5:b0:74:df:a0:d0:89:46:a8:8c:96: 4d:b1:28:90:c6:01:6a:9c:40:33:72:8d:a4:40:51:34:62:7e: 2f:29:30:36:b5:7b:e9:71:96:f0:fd:d1:c9:ae:c3:f7:73:d9: ad:fb:a1:7b:8b:3e:75:44:12:06:cb:d4:b7:ff:af:63:68:6b: fd:17:d9:67:fe:1f:c1:5d:63:7f:8c:1f:41:be:e3:ca:5f:7e: ca:dd:62:aa:e6:33:97:8c:a5:a7:fe:4a:ac:69:f4:fd:e8:2c: 8a:a9:17:a8:65:05:c4:00:97:9c:26:84:7b:14:aa:37:6a:8d: db:c7:5b:02 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4otKLMh1Nf/jVAiJb5QhaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxNjAwMzAwZWVlZDVhZjVkN2ZjMDlkOGZjMTU4YjY1OTM1 ZWQwNTcwHhcNMjYwMTAxMDgxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmRhNzU3NjlhYjk3MGQ0ZTBlMjg2OTllYjFkZjRiYjIxZGU5NTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuxFDjVsQAGvPdT+uiR/6ptEGwo3 lEaOVlysIrXaK7JhwLK+3+cCoxOKsSNvl5LSlXvLcKiFZZiMR4Gm9oCQr61FR0sY NnY8zpiWrjwTHZi5GMqmFx4NlqPUYeWUGEWvPMq5RwhCPKXvNhfPZ8neNlcDSKvt iYk3ISlImBMqdnFzcImTRyn/Gm0mrGOi3fbgpq8gAARKrnX1z/Dj/nYfr7l3RI40 UNsFiE4XTbKyKZJh/SPPB52fV+Ciknrdqx/kHS+WSkVFUruvc/n7gyRdla6f+YyI DqY7fE0+qDz0f0upzWHX76JoiSerCD5xzs/26Wkn+SsiVHmFf+mWPXx6KQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFF/adXaauXDU4OKGmesd9Lsh3pUCMB8GA1UdIwQY MBaAFEFgAwDu7Vr11/wJ2PwVi2WTXtBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NGZkZDgtMDRkZC00YTIyLTg0MTAt N2Q3OWMwNzE3M2Y0LzEvWDlwMWRwcTVjTlRnNG9hWjZ4MzB1eUhlbFFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85NGZkZDgtMDRkZC00YTIyLTg0MTAtN2Q3OWMwNzE3M2Y0 LzEvUVdBREFPN3RXdlhYX0FuWV9CV0xaWk5lMEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWlAMA8E AgACMAkDBwAgAQZ8DhQwDQYJKoZIhvcNAQELBQADggEBAJP5zf8DUL7tcYcQbpgu P4fBCROg/tNfsNrpdE3sgrt7VZWJ+XsDua4WekosneL3WKeHnoqlXvDiLMsbXPRZ kg4JN2bxdLba0QoXeDsfZUONV9FOguZH1DE6ylQ8EUGEjkgWBfot+AcowOqfavRx Kab4fvV2dbXZl/ZOAj87nlQYTz0BfjDVsHTfoNCJRqiMlk2xKJDGAWqcQDNyjaRA UTRifi8pMDa1e+lxlvD90cmuw/dz2a37oXuLPnVEEgbL1Lf/r2Noa/0X2Wf+H8Fd Y3+MH0G+48pffsrdYqrmM5eMpaf+Sqxp9P3oLIqpF6hlBcQAl5wmhHsUqjdqjdvH WwI= -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:00 2026 by rpki-client