This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/t9KGy1qG2DvkQWdhb1FRDyvK6s0.roa File: t9KGy1qG2DvkQWdhb1FRDyvK6s0.roa (raw, json) Hash identifier: ki42FXAAg8haZqCpCZJQOhHeXKOtdrbD0CI3TOMSUc4= Subject key identifier: B7:D2:86:CB:5A:86:D8:3B:E4:41:67:61:6F:51:51:0F:2B:CA:EA:CD Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910659089D5395F2E8D6A647565ACC9 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/t9KGy1qG2DvkQWdhb1FRDyvK6s0.roa Signing time: Thu 01 Jan 2026 10:17:56 +0000 ROA not before: Thu 01 Jan 2026 10:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209604 IP address blocks: 188.132.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:65:90:89:d5:39:5f:2e:8d:6a:64:75:65:ac:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7d286cb5a86d83be44167616f51510f2bcaeacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fe:39:85:88:77:58:96:ee:7d:12:1a:29:d1: 64:08:75:96:9b:6a:57:2d:f2:29:a7:d7:fe:0f:29: c6:d9:c5:b7:c1:da:e3:f9:49:be:25:e6:44:72:42: 2f:9e:ce:08:e2:70:17:53:24:65:99:e2:48:92:0a: 0a:76:1e:f0:43:54:ce:6e:30:af:0e:a5:cc:f1:34: e7:9d:e8:de:fb:00:58:22:1e:b0:6f:20:0a:f2:6c: 7e:80:d3:dc:cb:78:e4:6d:73:f2:6e:92:53:a5:92: f3:11:45:23:ac:78:e0:fe:60:ab:00:1e:2d:a8:1e: 68:c9:a7:00:2b:4f:87:c6:1d:3f:8a:a2:63:de:80: 83:eb:75:08:a2:b6:ae:3d:23:f6:38:f1:e4:41:7f: 20:d7:a4:47:f9:9d:7b:80:06:b2:80:a3:db:ae:da: 98:6c:d0:2e:6c:c9:46:ca:97:35:f7:de:09:57:b9: 09:90:48:59:96:b7:7b:e9:55:fa:78:50:6e:a8:ee: e3:5c:b8:f1:3e:56:1b:08:62:a4:06:0d:6c:71:fa: c7:bf:da:6d:d2:d7:7d:52:c6:58:7c:17:e7:04:09: 1a:1d:34:22:91:93:e6:d4:72:35:82:e1:24:49:73: 92:8e:90:69:bd:35:11:31:5e:05:b0:f4:fe:dc:19: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D2:86:CB:5A:86:D8:3B:E4:41:67:61:6F:51:51:0F:2B:CA:EA:CD X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/t9KGy1qG2DvkQWdhb1FRDyvK6s0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.209.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:dd:b1:90:a5:85:ec:76:17:1f:ac:5e:ed:16:94:25:98:c2: a8:46:4c:a9:cf:f4:a5:9c:8e:41:4c:56:9b:e6:4a:12:5b:23: ae:20:e9:8e:99:c3:50:c1:1e:3a:92:41:38:3b:d9:83:45:5d: 28:2c:2c:62:13:4c:bb:8c:8f:3c:ad:8a:45:84:c9:57:58:1b: 9d:f9:7b:ea:02:a1:5e:fd:c4:a9:75:aa:e4:2d:08:ee:72:1c: f2:78:f6:bf:87:ab:03:3e:d8:24:05:e3:4b:d9:1f:fe:28:2a: 03:eb:f6:a0:e1:a3:97:ad:07:91:e6:44:42:0b:b1:d1:8d:ff: db:a6:00:e0:60:db:ea:b3:ac:15:8e:82:7c:4c:76:95:8c:c7: ef:ae:87:70:03:3a:3e:e8:07:93:5d:29:35:51:51:30:b3:0f: 6d:8b:fd:a6:48:2a:3e:00:9d:9e:2a:82:c4:b0:78:29:0b:33: d4:b4:f7:c7:c2:45:d5:9c:71:a1:9e:bb:6b:69:a3:20:c5:2b: 46:81:4a:9a:d8:a9:62:62:78:6f:ca:10:45:1b:71:ee:0d:50: e3:f8:f0:f4:e0:07:c8:4c:4e:10:5f:63:46:29:6f:18:cc:bf: 01:0b:f8:d2:3a:bc:f8:14:e1:f2:c5:d3:72:ef:77:90:c9:ce: c9:3d:24:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGWQidU5Xy6NamR1ZazJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2QyODZjYjVhODZkODNiZTQ0MTY3NjE2ZjUxNTEwZjJiY2FlYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv45hYh3WJbufRIaKdFkCHWWm2pX LfIpp9f+DynG2cW3wdrj+Um+JeZEckIvns4I4nAXUyRlmeJIkgoKdh7wQ1TObjCv DqXM8TTnneje+wBYIh6wbyAK8mx+gNPcy3jkbXPybpJTpZLzEUUjrHjg/mCrAB4t qB5oyacAK0+Hxh0/iqJj3oCD63UIorauPSP2OPHkQX8g16RH+Z17gAaygKPbrtqY bNAubMlGypc1994JV7kJkEhZlrd76VX6eFBuqO7jXLjxPlYbCGKkBg1scfrHv9pt 0td9UsZYfBfnBAkaHTQikZPm1HI1guEkSXOSjpBpvTURMV4FsPT+3Bmo5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfShstahtg75EFnYW9RUQ8ryurNMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvdDlLR3kxcUcyRHZrUVdkaGIxRlJEeXZLNnMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITRMA0G CSqGSIb3DQEBCwUAA4IBAQBq3bGQpYXsdhcfrF7tFpQlmMKoRkypz/SlnI5BTFab 5koSWyOuIOmOmcNQwR46kkE4O9mDRV0oLCxiE0y7jI88rYpFhMlXWBud+XvqAqFe /cSpdarkLQjuchzyePa/h6sDPtgkBeNL2R/+KCoD6/ag4aOXrQeR5kRCC7HRjf/b pgDgYNvqs6wVjoJ8THaVjMfvrodwAzo+6AeTXSk1UVEwsw9ti/2mSCo+AJ2eKoLE sHgpCzPUtPfHwkXVnHGhnrtraaMgxStGgUqa2KliYnhvyhBFG3HuDVDj+PD04AfI TE4QX2NGKW8YzL8BC/jSOrz4FOHyxdNy73eQyc7JPSRk -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:50 2026 by rpki-client