This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9eZbtQEM8rWJtfGOwnvciNu2a8g.roa File: 9eZbtQEM8rWJtfGOwnvciNu2a8g.roa (raw, json) Hash identifier: 5x8A/mhnGhf5eH5FJBt+8QKJCZYCUcq4JsOyhEpmTjk= Subject key identifier: F5:E6:5B:B5:01:0C:F2:B5:89:B5:F1:8E:C2:7B:DC:88:DB:B6:6B:C8 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB6DC83E8BD2FE03F72F47013E1C5F Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9eZbtQEM8rWJtfGOwnvciNu2a8g.roa Signing time: Fri 02 Jan 2026 08:20:42 +0000 ROA not before: Fri 02 Jan 2026 08:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57549 IP address blocks: 194.104.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:6d:c8:3e:8b:d2:fe:03:f7:2f:47:01:3e:1c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5e65bb5010cf2b589b5f18ec27bdc88dbb66bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:fd:c1:cb:48:a1:64:f0:52:82:48:d6:a5: ac:38:f8:3a:6c:fb:7e:c6:7d:3b:e0:e2:2f:0a:4f: 8d:f3:af:e8:fc:e5:71:8a:96:f3:62:42:36:08:c6: 8c:28:03:10:72:da:00:d7:d1:eb:c0:b6:50:16:70: 32:a9:04:bd:9e:79:37:ab:37:92:68:ab:fd:3c:e5: a2:ba:ac:00:e3:66:8d:41:cf:c0:c7:19:37:af:ce: b7:30:3f:49:41:da:68:5f:80:95:ea:51:4e:39:76: 2a:8e:dd:36:05:7c:e0:9c:5b:e8:9f:1b:72:a4:4d: b5:45:24:01:09:e7:7f:71:1c:87:60:ab:a6:34:31: cf:43:dc:43:9c:18:bf:53:e3:54:11:10:6d:ff:14: 1a:b9:36:8a:b6:19:c2:ee:84:36:dd:a1:d5:88:36: e0:6c:0c:4c:e7:7e:02:c3:dd:c4:dc:c7:5c:90:99: 18:12:b8:fa:44:b7:65:87:75:94:60:b3:27:25:04: 30:83:a5:8a:cd:e7:14:93:10:b6:8d:48:64:59:c6: 33:92:9f:c3:19:8e:b7:18:24:26:ac:4b:86:78:8a: 09:9a:8b:5c:7b:48:fd:30:0c:bd:5a:04:a9:e1:22: 0e:16:41:a5:f7:ad:2b:9a:c3:a6:f7:80:ef:04:1d: c3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E6:5B:B5:01:0C:F2:B5:89:B5:F1:8E:C2:7B:DC:88:DB:B6:6B:C8 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9eZbtQEM8rWJtfGOwnvciNu2a8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.233.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:1d:c8:ca:5e:d9:56:95:b7:85:ae:2f:c1:64:e9:0e:ea:6c: c5:13:26:63:16:4d:bb:dd:a2:1c:19:9b:38:4d:8f:7b:fd:89: 5d:1c:dc:f3:d7:27:29:1e:cf:b5:79:6e:61:48:a4:61:b1:27: 4b:42:1c:ff:72:44:6f:cf:ab:bb:12:00:cb:f5:0a:a1:ec:c7: 8f:bd:25:25:65:11:42:ed:99:92:17:5f:4b:33:02:bc:c5:1f: 50:98:f9:ba:df:f7:6f:7a:e2:b7:6e:52:f1:82:fb:0d:8d:d3: 45:00:65:01:6b:34:85:01:78:65:c6:38:4e:69:79:78:08:c6: 99:ab:ad:d2:d0:49:1e:a0:0b:aa:20:8b:6f:25:be:58:f1:06: 7b:69:d0:6e:1d:d3:5e:b2:01:0b:b9:0b:78:d9:d4:76:81:91: 44:4f:6b:35:33:70:80:1c:f3:5f:55:bf:98:c7:eb:30:62:16: 83:b0:2e:49:1c:52:8e:ff:03:4f:10:7a:cb:59:14:4d:03:63: 5f:f5:5e:1e:c9:4b:b9:97:68:2c:fc:11:27:de:f8:0f:a0:ef: 4c:41:e6:fa:30:45:ed:bb:08:ed:0b:c9:79:63:a4:b4:49:fa: 18:94:cb:d4:0b:c3:11:4a:96:2d:80:be:28:36:0b:75:e6:21: 67:f7:e5:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y23IPovS/gP3L0cBPhxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWU2NWJiNTAxMGNmMmI1ODliNWYxOGVjMjdiZGM4OGRiYjY2YmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF39wctIoWTwUoJI1qWsOPg6bPt+ xn074OIvCk+N86/o/OVxipbzYkI2CMaMKAMQctoA19HrwLZQFnAyqQS9nnk3qzeS aKv9POWiuqwA42aNQc/Axxk3r863MD9JQdpoX4CV6lFOOXYqjt02BXzgnFvonxty pE21RSQBCed/cRyHYKumNDHPQ9xDnBi/U+NUERBt/xQauTaKthnC7oQ23aHViDbg bAxM534Cw93E3MdckJkYErj6RLdlh3WUYLMnJQQwg6WKzecUkxC2jUhkWcYzkp/D GY63GCQmrEuGeIoJmotce0j9MAy9WgSp4SIOFkGl960rmsOm94DvBB3D7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPXmW7UBDPK1ibXxjsJ73IjbtmvIMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvOWVaYnRRRU04cldKdGZHT3dudmNpTnUyYThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmjpMA0G CSqGSIb3DQEBCwUAA4IBAQA7HcjKXtlWlbeFri/BZOkO6mzFEyZjFk273aIcGZs4 TY97/YldHNzz1ycpHs+1eW5hSKRhsSdLQhz/ckRvz6u7EgDL9Qqh7MePvSUlZRFC 7ZmSF19LMwK8xR9QmPm63/dveuK3blLxgvsNjdNFAGUBazSFAXhlxjhOaXl4CMaZ q63S0EkeoAuqIItvJb5Y8QZ7adBuHdNesgELuQt42dR2gZFET2s1M3CAHPNfVb+Y x+swYhaDsC5JHFKO/wNPEHrLWRRNA2Nf9V4eyUu5l2gs/BEn3vgPoO9MQeb6MEXt uwjtC8l5Y6S0SfoYlMvUC8MRSpYtgL4oNgt15iFn9+U7 -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:54 2026 by rpki-client