This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/9Q6nU6Ov__KOkTwmSpk1ZBP9x4s.roa File: 9Q6nU6Ov__KOkTwmSpk1ZBP9x4s.roa (raw, json) Hash identifier: zRA5CI+R45kbSe5Kp/RvwdAAuwY45TD/QhpgQ2cow9Q= Subject key identifier: F5:0E:A7:53:A3:AF:FF:F2:8E:91:3C:26:4A:99:35:64:13:FD:C7:8B Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117 Certificate serial: 019C037B08CED05A34CD420BAF55098CB427 Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/9Q6nU6Ov__KOkTwmSpk1ZBP9x4s.roa Signing time: Wed 28 Jan 2026 07:22:00 +0000 ROA not before: Wed 28 Jan 2026 07:22:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 378 IP address blocks: 132.74.0.0/15 maxlen: 24 132.74.0.0/16 maxlen: 24 132.75.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:7b:08:ce:d0:5a:34:cd:42:0b:af:55:09:8c:b4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117 Validity Not Before: Jan 28 07:22:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f50ea753a3affff28e913c264a99356413fdc78b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:9a:b5:f3:30:6d:4e:a6:26:82:c9:56:28: 13:0e:08:80:45:a0:fb:65:f1:76:f1:a0:37:f3:03: fa:0f:d2:3c:cc:77:90:39:47:18:63:f3:c4:b6:b1: c5:ae:e4:04:46:0d:01:bf:8d:85:72:30:d8:35:d7: 1b:64:33:e0:04:64:7e:bf:41:38:08:a4:5e:a7:f4: cd:7b:ee:b9:b5:2d:e8:cb:c4:0d:b8:af:c6:d5:c0: f3:5c:8c:8d:14:81:cd:3e:4b:ff:ea:5d:07:d2:6f: 29:bb:bc:36:bf:a7:b6:09:ea:b0:59:f5:85:ac:1c: 13:f0:58:cc:cc:e3:d0:72:31:d2:b0:a1:65:ce:4b: d8:4a:71:fb:7e:87:59:ae:20:b7:1a:9a:4e:32:0a: 83:2f:1d:6e:fa:f6:42:db:2e:dc:ae:1e:ee:a7:03: 05:af:7f:4a:e8:c4:d8:25:81:14:21:bf:77:9c:19: 85:15:1e:f4:62:c5:c0:18:f0:52:fd:87:7f:fb:ae: 7a:24:c3:5e:63:90:99:82:d0:6a:61:f1:17:c9:cc: 21:75:58:ba:99:d1:1f:9b:00:0b:a8:8a:0e:21:fc: 8c:7c:9c:f1:e1:70:b0:46:6c:31:aa:05:09:2f:34: 3a:4a:8b:dc:ab:6e:c3:80:04:93:e6:35:b4:f2:e8: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0E:A7:53:A3:AF:FF:F2:8E:91:3C:26:4A:99:35:64:13:FD:C7:8B X509v3 Authority Key Identifier: keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/9Q6nU6Ov__KOkTwmSpk1ZBP9x4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.74.0.0/15 Signature Algorithm: sha256WithRSAEncryption 4c:ef:7f:46:21:74:ee:50:32:68:d9:6e:9d:32:b3:a2:a9:77: 47:fe:ac:77:e3:31:2b:f4:95:f3:6a:92:7f:b6:a7:6a:f8:17: 0b:fe:e9:1c:04:cd:6f:df:9a:2d:3e:fd:b2:6d:c3:d7:b1:90: b6:c3:33:72:9d:02:32:08:d0:9b:69:4c:e1:a1:c1:e7:75:b5: c1:98:2e:26:fd:42:87:33:17:68:71:c4:99:1b:e1:86:93:e7: 25:24:f5:5c:af:c8:eb:3d:cc:e8:d3:ba:e9:e0:1f:65:c3:01: 26:3b:3d:87:d7:cc:87:89:64:2e:dc:72:e0:4f:9d:bf:10:98: c3:b1:68:1a:b0:c5:93:51:4a:09:9a:ea:8c:6a:f1:c9:b6:73: 46:e1:9f:e0:f1:80:2f:ee:81:08:a8:22:14:b6:18:93:fd:3f: 81:98:c8:a1:78:02:12:fd:05:bf:c0:46:6e:d2:d6:54:54:1b: 18:9d:22:56:70:bf:5c:67:05:62:e4:42:3e:6e:43:9e:b1:f9: 05:49:bf:b1:6c:39:75:b1:83:c0:0c:26:18:b2:b6:75:a8:54: e8:4f:be:40:db:b4:8a:be:70:4b:83:e9:cc:78:24:2e:56:d2: 6d:4d:fa:22:11:1a:79:7a:d6:dd:cb:58:e3:0d:1f:59:94:21: 8b:21:b1:68 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZwDewjO0Fo0zUILr1UJjLQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDI1MWM0YmZkNTI2ZGEwNjJkNGNlMmFmNTZiNmU0NmU5 MjUxMTcwHhcNMjYwMTI4MDcyMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTBlYTc1M2EzYWZmZmYyOGU5MTNjMjY0YTk5MzU2NDEzZmRjNzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyOatfMwbU6mJoLJVigTDgiARaD7 ZfF28aA38wP6D9I8zHeQOUcYY/PEtrHFruQERg0Bv42FcjDYNdcbZDPgBGR+v0E4 CKRep/TNe+65tS3oy8QNuK/G1cDzXIyNFIHNPkv/6l0H0m8pu7w2v6e2CeqwWfWF rBwT8FjMzOPQcjHSsKFlzkvYSnH7fodZriC3GppOMgqDLx1u+vZC2y7crh7upwMF r39K6MTYJYEUIb93nBmFFR70YsXAGPBS/Yd/+656JMNeY5CZgtBqYfEXycwhdVi6 mdEfmwALqIoOIfyMfJzx4XCwRmwxqgUJLzQ6Sovcq27DgAST5jW08uhwcwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFPUOp1Ojr//yjpE8JkqZNWQT/ceLMB8GA1UdIwQY MBaAFLjSUcS/1SbaBi1M4q9WtuRuklEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAt NDJiM2Q2OGI1Njc2LzEvOVE2blU2T3ZfX0tPa1R3bVNwazFaQlA5eDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAtNDJiM2Q2OGI1Njc2 LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEowDQYJ KoZIhvcNAQELBQADggEBAEzvf0YhdO5QMmjZbp0ys6Kpd0f+rHfjMSv0lfNqkn+2 p2r4Fwv+6RwEzW/fmi0+/bJtw9exkLbDM3KdAjII0JtpTOGhwed1tcGYLib9Qocz F2hxxJkb4YaT5yUk9VyvyOs9zOjTuungH2XDASY7PYfXzIeJZC7ccuBPnb8QmMOx aBqwxZNRSgma6oxq8cm2c0bhn+DxgC/ugQioIhS2GJP9P4GYyKF4AhL9Bb/ARm7S 1lRUGxidIlZwv1xnBWLkQj5uQ56x+QVJv7FsOXWxg8AMJhiytnWoVOhPvkDbtIq+ cEuD6cx4JC5W0m1N+iIRGnl61t3LWOMNH1mUIYshsWg= -----END CERTIFICATE-----Generated at Sat Feb 7 20:25:02 2026 by rpki-client