This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/9fa8ImL1VcEetPph3w1jghLxkAc.roa File: 9fa8ImL1VcEetPph3w1jghLxkAc.roa (raw, json) Hash identifier: nE6WhZSis+xYGN1mVa2U+4EHFzOIHG3IsNX+cL9mP/Q= Subject key identifier: F5:F6:BC:22:62:F5:55:C1:1E:B4:FA:61:DF:0D:63:82:12:F1:90:07 Certificate issuer: /CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7 Certificate serial: 019B797E6D60FA7A7DBB6CF6A5B69D3F85DD Authority key identifier: 9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/9fa8ImL1VcEetPph3w1jghLxkAc.roa Signing time: Thu 01 Jan 2026 12:18:07 +0000 ROA not before: Thu 01 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 193.161.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6d:60:fa:7a:7d:bb:6c:f6:a5:b6:9d:3f:85:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7 Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5f6bc2262f555c11eb4fa61df0d638212f19007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:34:81:a2:e1:2d:ef:2d:73:19:b8:d3:1e:c8: 55:d8:8a:6b:2c:6f:b4:29:93:91:e6:eb:33:50:39: ed:f6:f7:c4:62:f9:31:83:7a:01:5e:ed:6e:5a:c5: 3d:b1:6c:e1:6d:06:f3:c0:08:2e:64:1b:21:9e:04: ed:f2:41:a6:e3:ed:4f:e4:97:65:97:ed:32:2b:68: 8d:9a:45:90:82:2c:67:e4:23:30:92:f1:7b:62:88: 5a:30:02:c6:79:44:d5:a2:62:7c:e3:0e:a5:60:50: 1f:7d:cc:d5:33:93:66:48:20:aa:72:d4:7e:dd:b8: a8:4c:c7:a9:55:89:f2:86:44:4e:ee:05:9b:3f:76: 38:f6:2e:80:29:c5:63:05:68:1b:3c:5b:24:cb:31: 76:9a:05:44:b4:f1:8d:a0:73:69:cb:f6:3b:42:7a: 50:c4:dc:33:f1:d4:aa:ff:66:a1:17:c2:07:c5:31: ed:e1:a0:dd:d6:43:40:4f:05:9c:76:9d:82:64:34: ac:49:f9:a9:8c:6d:ff:63:bf:9d:d7:7e:42:18:aa: 1d:27:10:02:b6:82:ab:ca:ba:2c:52:5e:65:8a:e7: cb:05:96:7e:e1:5a:c5:3b:c8:ac:db:9d:98:a6:e9: df:23:db:80:e4:2d:61:22:f3:ce:0e:82:40:7b:b8: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F6:BC:22:62:F5:55:C1:1E:B4:FA:61:DF:0D:63:82:12:F1:90:07 X509v3 Authority Key Identifier: keyid:9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/9fa8ImL1VcEetPph3w1jghLxkAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.193.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:4a:ef:c1:5f:8d:68:08:a8:56:6f:49:4b:45:9c:78:92:82: a3:1a:a0:da:ba:0d:76:b9:7c:e1:78:51:7c:81:1a:76:d1:83: 5c:82:ec:32:d3:33:4f:5e:ef:cd:4b:b0:dc:4a:4c:59:70:00: 54:b3:81:5d:ed:a8:e6:21:63:aa:05:b6:74:b3:d1:47:6d:86: 66:78:fa:94:a2:05:a0:0e:c2:2a:90:58:f8:01:ce:2e:e1:31: e7:ba:0e:44:c2:29:04:53:1f:12:2a:8b:68:73:3c:46:c6:74: b3:fc:cd:b2:8b:0b:83:a7:09:6d:4d:e0:38:e2:36:26:52:a6: b0:08:2d:7a:12:9d:68:04:ce:06:7c:b5:fa:ef:11:9d:28:b7: b2:b8:b3:54:94:02:7a:4a:15:db:17:cc:e5:cc:6b:74:2a:b8: 34:a9:ac:42:52:56:a6:ae:57:22:45:85:44:5c:c3:43:d4:d5: fb:ca:d7:f7:97:3d:c3:4a:09:ca:16:bc:3e:12:44:86:d7:6e: 84:e2:c4:12:7f:fb:2e:5e:b0:7a:9b:20:80:da:d6:d2:41:6f: b0:97:6e:43:30:15:7a:b8:04:41:4f:e0:ad:b5:0a:50:6c:89: 6c:0f:1c:20:5a:e5:cc:61:b6:20:55:d9:23:ff:92:6c:ae:d0: 8e:77:4c:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fm1g+np9u2z2pbadP4XdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNmMwYjlmYjEzZjQzMTZlZDZjYTNmODZmZmM3MTg1YzA5 ZGIzZDcwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWY2YmMyMjYyZjU1NWMxMWViNGZhNjFkZjBkNjM4MjEyZjE5MDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/TSBouEt7y1zGbjTHshV2IprLG+0 KZOR5uszUDnt9vfEYvkxg3oBXu1uWsU9sWzhbQbzwAguZBshngTt8kGm4+1P5Jdl l+0yK2iNmkWQgixn5CMwkvF7YohaMALGeUTVomJ84w6lYFAffczVM5NmSCCqctR+ 3bioTMepVYnyhkRO7gWbP3Y49i6AKcVjBWgbPFskyzF2mgVEtPGNoHNpy/Y7QnpQ xNwz8dSq/2ahF8IHxTHt4aDd1kNATwWcdp2CZDSsSfmpjG3/Y7+d135CGKodJxAC toKryrosUl5liufLBZZ+4VrFO8is252YpunfI9uA5C1hIvPODoJAe7hwawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPX2vCJi9VXBHrT6Yd8NY4IS8ZAHMB8GA1UdIwQY MBaAFJpsC5+xP0MW7Wyj+G/8cYXAnbPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW13TG43RV9ReGJ0YktQNGJfeHhoY0NkczljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81MGEyMzktZDViYy00MmZlLTk1YTUt MWFjMDhlOGE4Y2I0LzEvOWZhOEltTDFWY0VldFBwaDN3MWpnaEx4a0FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81MGEyMzktZDViYy00MmZlLTk1YTUtMWFjMDhlOGE4Y2I0 LzEvbW13TG43RV9ReGJ0YktQNGJfeHhoY0NkczljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaHBMA0G CSqGSIb3DQEBCwUAA4IBAQAsSu/BX41oCKhWb0lLRZx4koKjGqDaug12uXzheFF8 gRp20YNcguwy0zNPXu/NS7DcSkxZcABUs4Fd7ajmIWOqBbZ0s9FHbYZmePqUogWg DsIqkFj4Ac4u4THnug5EwikEUx8SKotoczxGxnSz/M2yiwuDpwltTeA44jYmUqaw CC16Ep1oBM4GfLX67xGdKLeyuLNUlAJ6ShXbF8zlzGt0Krg0qaxCUlamrlciRYVE XMND1NX7ytf3lz3DSgnKFrw+EkSG126E4sQSf/suXrB6myCA2tbSQW+wl25DMBV6 uARBT+CttQpQbIlsDxwgWuXMYbYgVdkj/5JsrtCOd0yU -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:11 2026 by rpki-client