This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/9dlwjsoeaynXvLD6hU--GhYSrqM.roa File: 9dlwjsoeaynXvLD6hU--GhYSrqM.roa (raw, json) Hash identifier: mUWy20UuJGJ5BznEAMczwLkiJHHJsFmSVmANdbalu+k= Subject key identifier: F5:D9:70:8E:CA:1E:6B:29:D7:BC:B0:FA:85:4F:BE:1A:16:12:AE:A3 Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3 Certificate serial: 019B7C1191403A406336349492DB2E12B994 Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/9dlwjsoeaynXvLD6hU--GhYSrqM.roa Signing time: Fri 02 Jan 2026 00:18:04 +0000 ROA not before: Fri 02 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50869 IP address blocks: 194.126.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.mft rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:91:40:3a:40:63:36:34:94:92:db:2e:12:b9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3 Validity Not Before: Jan 2 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5d9708eca1e6b29d7bcb0fa854fbe1a1612aea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:17:93:d2:90:22:82:3a:45:1c:ba:16:09:ce: c4:46:29:a6:b0:f1:a1:d2:62:f6:ff:85:a3:01:ed: 3d:17:56:62:13:1e:91:79:85:75:2a:fe:c9:5a:49: 23:57:91:48:64:02:c9:cf:d2:15:11:cb:b6:e2:e5: ca:77:dd:fa:fb:34:47:8a:d6:ee:f7:e2:09:23:82: 67:5b:fd:d2:b5:75:f3:00:cc:84:f2:35:22:00:51: eb:74:4c:05:53:0d:f2:2c:b2:23:68:cd:ed:8f:2a: 47:11:ce:42:18:6d:68:28:6f:b4:ca:14:f1:a0:ca: d3:21:59:12:87:04:af:d6:f9:4e:38:ea:16:97:21: 69:e5:61:eb:94:11:53:f5:7f:76:3d:9b:d9:ab:14: 16:0b:14:cc:85:f1:ee:46:01:7f:53:60:5b:a7:4a: 1e:79:08:b0:34:c5:ba:0e:37:47:cd:eb:df:54:12: 06:bd:a8:3f:2a:69:00:05:ed:d2:8c:b1:ac:84:33: 1b:a9:64:aa:76:50:05:a2:d4:8f:56:81:c6:f8:e0: af:1c:64:32:45:71:39:91:91:61:0b:b9:3c:02:d1: 31:05:a2:02:05:2a:5a:00:67:9f:9a:d6:43:d4:cc: d7:39:7e:e2:31:a8:0d:e0:b7:9d:cd:c2:39:08:54: 0a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D9:70:8E:CA:1E:6B:29:D7:BC:B0:FA:85:4F:BE:1A:16:12:AE:A3 X509v3 Authority Key Identifier: keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/9dlwjsoeaynXvLD6hU--GhYSrqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.235.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:a2:4a:66:27:61:22:63:9a:6a:4c:83:d4:2b:15:75:3d:d0: a6:d2:29:35:03:4e:47:92:b1:fe:e0:a4:a4:9b:6a:27:b9:33: 8a:24:fa:d3:2a:bf:64:09:73:0b:04:33:54:d5:5f:26:d1:f9: 9b:9b:8e:e9:7f:68:03:49:64:2a:e3:e6:e0:98:fb:e3:2b:f1: e4:d2:35:e3:f8:82:46:b1:fb:92:1b:b8:ea:f2:ff:86:6a:78: 5a:48:c9:b0:0f:ef:e6:61:f0:77:0b:ae:31:75:28:3a:23:5d: 3c:20:a6:b0:13:11:47:eb:e0:ba:8d:c1:d4:02:cf:35:d2:2f: a4:29:1f:e9:65:e3:8c:34:9e:bc:77:1f:74:fc:06:2a:7e:17: d4:9a:ce:41:7a:58:6b:8e:5c:a7:fe:77:69:e7:79:82:48:49: 37:86:f4:e0:dc:bf:13:91:b5:0e:9d:bf:59:07:0c:ba:d4:8e: 6c:c1:b5:5a:53:1a:28:1f:f0:c5:66:7f:86:90:b7:62:3c:aa: 71:db:b6:54:86:7c:5c:aa:02:b1:31:ee:00:65:0d:ab:c7:a3: a1:2c:e5:c0:e9:f6:e4:1f:cb:b1:8d:b3:57:23:94:24:c5:59: 1f:58:ef:09:a8:60:ea:67:4b:c1:b6:cc:28:a3:0c:de:e0:f8: c8:74:c9:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EZFAOkBjNjSUktsuErmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZTE0NWZlM2I3OWIyYmY2OGFhZGJlMDA3ZGVmNmQ3MmFl ZjJhYzMwHhcNMjYwMTAyMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWQ5NzA4ZWNhMWU2YjI5ZDdiY2IwZmE4NTRmYmUxYTE2MTJhZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBeT0pAigjpFHLoWCc7ERimmsPGh 0mL2/4WjAe09F1ZiEx6ReYV1Kv7JWkkjV5FIZALJz9IVEcu24uXKd936+zRHitbu 9+IJI4JnW/3StXXzAMyE8jUiAFHrdEwFUw3yLLIjaM3tjypHEc5CGG1oKG+0yhTx oMrTIVkShwSv1vlOOOoWlyFp5WHrlBFT9X92PZvZqxQWCxTMhfHuRgF/U2Bbp0oe eQiwNMW6DjdHzevfVBIGvag/KmkABe3SjLGshDMbqWSqdlAFotSPVoHG+OCvHGQy RXE5kZFhC7k8AtExBaICBSpaAGefmtZD1MzXOX7iMagN4LedzcI5CFQK2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPXZcI7KHmsp17yw+oVPvhoWEq6jMB8GA1UdIwQY MBaAFDrhRf47ebK/aKrb4Afe9tcq7yrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84MmYwZjEtMjE0Ny00OWZkLWE0ZDYt YjdiNTc0ZWVkYzMzLzEvOWRsd2pzb2VheW5YdkxENmhVLS1HaFlTcnFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84MmYwZjEtMjE0Ny00OWZkLWE0ZDYtYjdiNTc0ZWVkYzMz LzEvT3VGRl9qdDVzcjlvcXR2Z0I5NzIxeXJ2S3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7rMA0G CSqGSIb3DQEBCwUAA4IBAQB+okpmJ2EiY5pqTIPUKxV1PdCm0ik1A05HkrH+4KSk m2onuTOKJPrTKr9kCXMLBDNU1V8m0fmbm47pf2gDSWQq4+bgmPvjK/Hk0jXj+IJG sfuSG7jq8v+GanhaSMmwD+/mYfB3C64xdSg6I108IKawExFH6+C6jcHUAs810i+k KR/pZeOMNJ68dx90/AYqfhfUms5Belhrjlyn/ndp53mCSEk3hvTg3L8TkbUOnb9Z Bwy61I5swbVaUxooH/DFZn+GkLdiPKpx27ZUhnxcqgKxMe4AZQ2rx6OhLOXA6fbk H8uxjbNXI5QkxVkfWO8JqGDqZ0vBtswoowze4PjIdMmQ -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:50 2026 by rpki-client