This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/cD9wvj6mToK3BwoVk9v5bRHsAFA.roa File: cD9wvj6mToK3BwoVk9v5bRHsAFA.roa (raw, json) Hash identifier: +y5AYPBE4wxb1Gl4H5BQVpHN0yW4rayfjMN4VA5eP3U= Subject key identifier: 70:3F:70:BE:3E:A6:4E:82:B7:07:0A:15:93:DB:F9:6D:11:EC:00:50 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB6C39A10F6042297A9CA398F51190 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/cD9wvj6mToK3BwoVk9v5bRHsAFA.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56516 IP address blocks: 192.144.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:6c:39:a1:0f:60:42:29:7a:9c:a3:98:f5:11:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=703f70be3ea64e82b7070a1593dbf96d11ec0050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:34:3c:f3:0e:dd:16:a4:8a:9f:54:55:e4:7c: 39:eb:0f:3b:77:ee:db:27:5b:50:f5:0d:29:bc:45: f1:66:83:fb:e3:06:16:e8:c1:30:39:6c:45:9d:a0: 4f:db:07:57:71:0d:d4:f4:66:54:f9:0d:fe:09:0c: ca:76:14:e2:17:41:2d:89:b6:e4:8c:54:0f:f2:69: 88:f7:35:1a:c1:82:83:66:b8:1e:da:44:21:36:0e: c4:ef:fb:20:63:0e:d0:3d:ce:67:00:e5:72:40:0f: e3:84:10:d0:28:2b:a2:d8:e8:bd:fd:46:98:1a:f5: 25:0b:db:65:3d:a1:cd:ec:a9:d5:88:a7:b0:cb:62: 7b:07:d5:45:1e:a8:54:e2:29:0e:c8:d5:0f:18:e2: 2a:69:96:ef:e7:1d:6f:6b:94:d6:2f:52:c1:a6:df: 2d:f2:43:8b:6f:80:6a:73:bd:59:87:cb:4f:a7:2e: 0f:8a:38:9a:0e:9d:44:e5:2c:70:96:03:73:c2:81: bb:10:6f:b9:11:72:de:4c:4c:e5:69:8a:c2:bd:29: 2e:ca:2c:7b:69:1b:82:e3:3f:71:04:1e:60:79:c9: 38:2c:f6:9c:90:55:09:4a:7f:d4:a1:5f:de:6a:b2: 02:07:12:83:b8:57:5f:21:bc:3f:67:e5:92:5a:0c: 5b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3F:70:BE:3E:A6:4E:82:B7:07:0A:15:93:DB:F9:6D:11:EC:00:50 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/cD9wvj6mToK3BwoVk9v5bRHsAFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.144.29.0/24 Signature Algorithm: sha256WithRSAEncryption 06:78:b5:85:4c:5c:75:59:97:34:13:52:3b:b8:dd:fe:9b:65: 29:71:e3:55:5b:5f:ec:0f:63:95:ac:37:63:36:5b:78:5f:ae: 87:a9:e7:36:71:62:31:25:73:9f:b4:1b:07:c1:5c:cf:56:0b: c5:02:81:7b:3b:62:ae:62:61:48:e6:97:d7:a9:90:a1:2a:b9: 93:54:21:9a:d7:99:c3:76:fe:3a:b8:03:2e:e0:d7:b6:cc:6e: b3:dc:3c:b0:88:98:b8:d1:33:a9:61:70:b8:62:4d:f4:c6:0f: 7d:40:05:98:4c:31:b1:f3:9d:d3:cb:3e:85:67:6a:5b:5a:5c: a2:16:90:2c:d5:bc:9e:5a:77:56:6f:8a:96:87:6e:7f:0b:5f: 67:e0:3d:31:62:25:94:9a:db:57:d3:07:93:5f:1e:62:9c:05: 6d:b8:3c:db:0d:31:1a:d4:08:17:20:fa:80:68:94:de:4d:c0: 75:a3:59:9e:b6:a9:4e:fb:c1:f7:6b:19:fd:a6:68:8e:5c:d8: 20:51:08:8e:73:ac:c4:b8:73:60:bf:f5:7a:6a:e5:18:f7:58: ec:ef:9d:34:d0:b8:22:22:ca:a4:c0:a6:e8:d7:b4:c6:10:e8: ba:64:6a:d6:e8:2b:c6:7d:a1:df:4a:dc:92:91:b4:08:cd:78: d6:4b:6c:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2w5oQ9gQil6nKOY9RGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDNmNzBiZTNlYTY0ZTgyYjcwNzBhMTU5M2RiZjk2ZDExZWMwMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jQ88w7dFqSKn1RV5Hw56w87d+7b J1tQ9Q0pvEXxZoP74wYW6MEwOWxFnaBP2wdXcQ3U9GZU+Q3+CQzKdhTiF0Etibbk jFQP8mmI9zUawYKDZrge2kQhNg7E7/sgYw7QPc5nAOVyQA/jhBDQKCui2Oi9/UaY GvUlC9tlPaHN7KnViKewy2J7B9VFHqhU4ikOyNUPGOIqaZbv5x1va5TWL1LBpt8t 8kOLb4Bqc71Zh8tPpy4PijiaDp1E5SxwlgNzwoG7EG+5EXLeTEzlaYrCvSkuyix7 aRuC4z9xBB5geck4LPackFUJSn/UoV/earICBxKDuFdfIbw/Z+WSWgxbOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHA/cL4+pk6CtwcKFZPb+W0R7ABQMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvY0Q5d3ZqNm1Ub0szQndvVms5djViUkhzQUZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJAdMA0G CSqGSIb3DQEBCwUAA4IBAQAGeLWFTFx1WZc0E1I7uN3+m2UpceNVW1/sD2OVrDdj Nlt4X66Hqec2cWIxJXOftBsHwVzPVgvFAoF7O2KuYmFI5pfXqZChKrmTVCGa15nD dv46uAMu4Ne2zG6z3DywiJi40TOpYXC4Yk30xg99QAWYTDGx853Tyz6FZ2pbWlyi FpAs1byeWndWb4qWh25/C19n4D0xYiWUmttX0weTXx5inAVtuDzbDTEa1AgXIPqA aJTeTcB1o1metqlO+8H3axn9pmiOXNggUQiOc6zEuHNgv/V6auUY91js75000Lgi IsqkwKbo17TGEOi6ZGrW6CvGfaHfStySkbQIzXjWS2xz -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:06 2026 by rpki-client