This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/9RWhzRxq8FPw1YkS-zkDw9ykoNg.roa File: 9RWhzRxq8FPw1YkS-zkDw9ykoNg.roa (raw, json) Hash identifier: KHfuWgWaHX6Mz8Yo4JI6aEe/kuXdFK4S2I7AeBzy96w= Subject key identifier: F5:15:A1:CD:1C:6A:F0:53:F0:D5:89:12:FB:39:03:C3:DC:A4:A0:D8 Certificate issuer: /CN=1b6828113bba3423d15731964fe57b5f252bfde6 Certificate serial: 019B7AC7F7581A5966BF3070B9DFB1ABF55D Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/9RWhzRxq8FPw1YkS-zkDw9ykoNg.roa Signing time: Thu 01 Jan 2026 18:18:03 +0000 ROA not before: Thu 01 Jan 2026 18:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41294 IP address blocks: 193.134.112.0/22 maxlen: 22 194.176.104.0/24 maxlen: 24 2001:67c:90c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f7:58:1a:59:66:bf:30:70:b9:df:b1:ab:f5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6 Validity Not Before: Jan 1 18:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f515a1cd1c6af053f0d58912fb3903c3dca4a0d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:69:a7:22:f1:3e:d3:bf:d6:5d:09:6d:73:06: 32:1e:fb:2b:97:1b:e4:ce:22:b4:42:09:97:9a:d6: 91:47:9b:e2:4d:2e:85:a2:09:2e:e8:ac:88:73:ed: 94:bd:6c:aa:96:58:23:76:98:e0:d6:ee:fe:3b:fb: 88:cc:44:d1:bd:3a:92:03:ac:69:76:12:db:8e:a7: 24:0b:49:bc:e6:da:ce:77:b3:fb:19:2a:09:53:89: 2d:b0:eb:41:97:58:7c:03:c5:fa:9b:26:7d:f8:47: 45:80:0b:ae:97:96:e4:80:a6:1b:8e:17:c4:b8:13: e5:81:1b:03:c9:aa:21:24:3a:38:a0:85:2f:f0:6d: 21:1d:eb:16:45:b4:d6:76:40:9d:2a:a9:84:91:06: f8:16:5e:91:72:29:0c:88:b8:f5:c6:a3:16:d5:86: 94:79:50:6f:44:8d:d8:29:d3:a0:50:b5:14:79:f3: f8:2f:f4:2e:70:d7:8e:36:3c:21:33:bc:92:27:85: d1:c6:9a:24:3e:16:08:27:83:0e:0a:54:c9:92:87: c4:da:ac:25:8a:62:a8:13:2c:78:8f:a0:d5:56:f6: 77:ec:98:91:ae:70:71:b0:68:8e:ac:42:ba:95:e4: 1a:45:6b:ca:3d:f1:e0:77:ea:74:07:98:c1:67:01: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:15:A1:CD:1C:6A:F0:53:F0:D5:89:12:FB:39:03:C3:DC:A4:A0:D8 X509v3 Authority Key Identifier: keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/9RWhzRxq8FPw1YkS-zkDw9ykoNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.112.0/22 194.176.104.0/24 IPv6: 2001:67c:90c::/48 Signature Algorithm: sha256WithRSAEncryption 93:b4:79:86:22:98:17:b3:9c:d5:00:00:af:3d:64:74:e8:93: 64:8f:d7:7c:d9:ad:c9:43:02:9c:03:52:3a:76:7d:a7:11:f8: 24:3e:89:a1:67:b2:98:bf:c6:dc:fa:2a:fe:d7:31:52:46:71: b4:7c:3e:5b:a0:06:98:15:23:c1:90:86:e0:38:92:a0:d4:b3: e5:bb:5e:29:fd:fb:b9:65:ad:30:ed:ef:29:cf:2f:32:5c:fb: ff:33:26:39:e3:80:76:82:64:6d:b2:99:ad:96:d1:24:c1:e1: 3f:2e:51:43:4f:56:2a:69:ec:e7:0e:8a:40:b0:1d:5a:6c:2a: 20:15:82:5e:ea:8f:f5:f7:57:8b:4c:39:1e:5f:d5:18:8a:63: e4:82:b2:21:99:8c:30:da:d5:21:51:ce:40:7b:fa:04:52:c7: 08:6a:f9:dc:61:b4:7d:20:19:09:cb:15:c7:e3:c0:a7:8d:4b: a2:22:76:df:ba:ea:54:87:92:5f:be:45:39:92:11:8b:b6:e4: e4:f3:e8:43:64:48:4d:7d:65:61:40:3d:19:16:3f:89:d6:72: f4:aa:fe:c2:b6:a5:8c:6e:3c:73:d6:79:0f:c3:47:03:b7:64: e3:23:f6:7a:4d:7e:a4:b2:05:06:78:5d:d9:d9:ba:e6:4b:2c: 1a:9d:aa:ab -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6x/dYGllmvzBwud+xq/VdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjgyODExM2JiYTM0MjNkMTU3MzE5NjRmZTU3YjVmMjUy YmZkZTYwHhcNMjYwMTAxMTgxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTE1YTFjZDFjNmFmMDUzZjBkNTg5MTJmYjM5MDNjM2RjYTRhMGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWmnIvE+07/WXQltcwYyHvsrlxvk ziK0QgmXmtaRR5viTS6Fogku6KyIc+2UvWyqllgjdpjg1u7+O/uIzETRvTqSA6xp dhLbjqckC0m85trOd7P7GSoJU4ktsOtBl1h8A8X6myZ9+EdFgAuul5bkgKYbjhfE uBPlgRsDyaohJDo4oIUv8G0hHesWRbTWdkCdKqmEkQb4Fl6RcikMiLj1xqMW1YaU eVBvRI3YKdOgULUUefP4L/QucNeONjwhM7ySJ4XRxpokPhYIJ4MOClTJkofE2qwl imKoEyx4j6DVVvZ37JiRrnBxsGiOrEK6leQaRWvKPfHgd+p0B5jBZwHK0QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFPUVoc0cavBT8NWJEvs5A8PcpKDYMB8GA1UdIwQY MBaAFBtoKBE7ujQj0Vcxlk/le18lK/3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEt MDNiYzYzY2EyNWEzLzEvOVJXaHpSeHE4RlB3MVlrUy16a0R3OXlrb05nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80ZjU5NTEtMjA0Ny00NGJjLWI2OWEtMDNiYzYzY2EyNWEz LzEvRzJnb0VUdTZOQ1BSVnpHV1QtVjdYeVVyX2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCwYZwAwQA wrBoMA8EAgACMAkDBwAgAQZ8CQwwDQYJKoZIhvcNAQELBQADggEBAJO0eYYimBez nNUAAK89ZHTok2SP13zZrclDApwDUjp2facR+CQ+iaFnspi/xtz6Kv7XMVJGcbR8 PlugBpgVI8GQhuA4kqDUs+W7Xin9+7llrTDt7ynPLzJc+/8zJjnjgHaCZG2yma2W 0STB4T8uUUNPVipp7OcOikCwHVpsKiAVgl7qj/X3V4tMOR5f1RiKY+SCsiGZjDDa 1SFRzkB7+gRSxwhq+dxhtH0gGQnLFcfjwKeNS6Iidt+66lSHkl++RTmSEYu25OTz 6ENkSE19ZWFAPRkWP4nWcvSq/sK2pYxuPHPWeQ/DRwO3ZOMj9npNfqSyBQZ4XdnZ uuZLLBqdqqs= -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:13 2026 by rpki-client