This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa File: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (raw, json) Hash identifier: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU= Subject key identifier: F6:C3:2B:32:2F:6C:14:EF:0A:81:23:75:70:B6:E2:FA:ED:E5:BC:CF Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019B78A2E2D8460497E3482851A8419AD012 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209854 IP address blocks: 94.154.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e2:d8:46:04:97:e3:48:28:51:a8:41:9a:d0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6c32b322f6c14ef0a81237570b6e2faede5bccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a7:64:aa:92:6b:1f:0d:1c:31:43:93:34:7d: 10:4a:d6:16:ab:00:61:39:55:24:aa:5b:ff:7b:e7: a5:61:aa:48:1e:ef:76:61:1f:72:c5:39:c8:a5:f0: 8e:eb:6c:0b:38:8e:43:9a:cd:ae:c6:ca:58:2c:6d: 01:45:ff:e3:ab:b8:13:ad:51:88:6c:86:7f:af:6c: fe:a2:27:fa:21:63:16:30:5a:d9:78:3e:c5:f2:ed: 4e:91:0e:35:36:02:16:59:cd:97:e0:b5:8c:1c:29: 96:2c:ec:e0:ab:72:60:f9:0a:79:71:3e:8b:75:30: 7e:da:bd:76:14:bd:33:f2:85:f1:de:b4:b5:1a:10: b9:30:1f:eb:3a:d2:3b:b2:b3:6c:d1:7b:37:da:e7: df:ca:27:be:c5:f8:1d:f6:39:8d:28:b4:0b:58:c1: ce:c8:35:ae:77:51:06:30:a2:04:0a:da:68:d9:1c: 84:c3:3c:17:78:e7:39:a0:96:af:f0:ab:43:b5:71: 89:b3:2c:f0:c2:74:35:63:13:9d:35:4c:aa:5f:db: 5e:13:f5:fd:ae:b1:8b:d1:36:bb:9f:f4:b8:bd:0e: 39:9d:bb:74:f3:d1:04:ee:0c:2b:3d:26:b7:06:95: 35:bd:3f:f4:06:22:10:cc:8b:b0:6a:14:9b:41:bd: cc:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C3:2B:32:2F:6C:14:EF:0A:81:23:75:70:B6:E2:FA:ED:E5:BC:CF X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.124.0/24 Signature Algorithm: sha256WithRSAEncryption 61:18:89:f3:f0:0f:2f:ae:96:51:ca:51:60:3d:7b:87:a7:2d: 19:7f:83:98:59:0e:f0:5b:c5:5c:6e:72:36:90:1a:db:c4:4d: 0d:c8:97:dc:8c:9b:ac:79:06:0d:e9:e1:c5:0b:ff:fd:d9:24: 6c:8c:52:79:8f:79:8a:ba:be:28:9f:2a:60:79:59:75:04:56: 0e:a2:eb:ae:55:fd:c1:12:87:6f:7d:7c:ec:90:3a:00:ed:08: ee:a3:78:35:0c:8d:1e:cc:5d:82:7c:ec:f5:a8:7d:61:e5:fd: 78:35:96:b0:b8:46:8a:96:51:f4:93:7c:24:ac:17:a7:3f:56: ac:08:5a:35:6e:f3:b4:cc:9c:3c:a7:3b:c1:fd:27:4e:5e:9a: d0:42:de:de:15:a3:d3:60:7e:ed:24:c4:dd:f3:2d:02:be:57: fb:61:0b:e8:fc:65:fd:da:86:20:8c:c2:d7:9c:99:7d:0e:21: f0:15:a1:16:3c:63:8f:89:2e:f3:99:2a:29:b2:85:25:7e:5e: fc:12:1d:59:45:62:9a:4b:84:4a:a3:54:64:0a:fc:5d:2a:50: 30:2d:a4:f5:4e:b6:66:e6:bf:61:97:df:2d:f3:15:12:a2:0a: 11:ed:38:79:fd:2b:5e:68:fe:f0:2a:4d:88:de:6b:c8:4b:0b: 9e:44:b6:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouLYRgSX40goUahBmtASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmMzMmIzMjJmNmMxNGVmMGE4MTIzNzU3MGI2ZTJmYWVkZTViY2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KdkqpJrHw0cMUOTNH0QStYWqwBh OVUkqlv/e+elYapIHu92YR9yxTnIpfCO62wLOI5Dms2uxspYLG0BRf/jq7gTrVGI bIZ/r2z+oif6IWMWMFrZeD7F8u1OkQ41NgIWWc2X4LWMHCmWLOzgq3Jg+Qp5cT6L dTB+2r12FL0z8oXx3rS1GhC5MB/rOtI7srNs0Xs32uffyie+xfgd9jmNKLQLWMHO yDWud1EGMKIECtpo2RyEwzwXeOc5oJav8KtDtXGJsyzwwnQ1YxOdNUyqX9teE/X9 rrGL0Ta7n/S4vQ45nbt089EE7gwrPSa3BpU1vT/0BiIQzIuwahSbQb3MtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPbDKzIvbBTvCoEjdXC24vrt5bzPMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvOXNNck1pOXNGTzhLZ1NOMWNMYmktdTNsdk04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpp8MA0G CSqGSIb3DQEBCwUAA4IBAQBhGInz8A8vrpZRylFgPXuHpy0Zf4OYWQ7wW8VcbnI2 kBrbxE0NyJfcjJuseQYN6eHFC//92SRsjFJ5j3mKur4onypgeVl1BFYOouuuVf3B EodvfXzskDoA7Qjuo3g1DI0ezF2CfOz1qH1h5f14NZawuEaKllH0k3wkrBenP1as CFo1bvO0zJw8pzvB/SdOXprQQt7eFaPTYH7tJMTd8y0Cvlf7YQvo/GX92oYgjMLX nJl9DiHwFaEWPGOPiS7zmSopsoUlfl78Eh1ZRWKaS4RKo1RkCvxdKlAwLaT1TrZm 5r9hl98t8xUSogoR7Th5/SteaP7wKk2I3mvISwueRLZh -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:54 2026 by rpki-client