This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/v9_sS4nj_lOVW4H6MtNhrG9u4FU.roa File: v9_sS4nj_lOVW4H6MtNhrG9u4FU.roa (raw, json) Hash identifier: SjjWYkxuZYE6N2PUX9K4ajfsRIqqJHKX4mvq0HWeLaw= Subject key identifier: BF:DF:EC:4B:89:E3:FE:53:95:5B:81:FA:32:D3:61:AC:6F:6E:E0:55 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019BA83A5712115737802AC2A50BBE431EC1 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/v9_sS4nj_lOVW4H6MtNhrG9u4FU.roa Signing time: Sat 10 Jan 2026 14:05:54 +0000 ROA not before: Sat 10 Jan 2026 14:05:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214143 IP address blocks: 144.56.8.0/24 maxlen: 24 144.56.30.0/24 maxlen: 24 144.56.42.0/24 maxlen: 24 144.56.43.0/24 maxlen: 24 144.56.45.0/24 maxlen: 24 144.56.46.0/24 maxlen: 24 144.56.47.0/24 maxlen: 24 144.56.48.0/24 maxlen: 24 144.56.52.0/24 maxlen: 24 144.56.53.0/24 maxlen: 24 144.56.73.0/24 maxlen: 24 144.56.75.0/24 maxlen: 24 144.56.77.0/24 maxlen: 24 144.56.82.0/24 maxlen: 24 144.56.87.0/24 maxlen: 24 144.56.91.0/24 maxlen: 24 144.56.92.0/24 maxlen: 24 144.56.96.0/24 maxlen: 24 144.56.104.0/24 maxlen: 24 144.56.112.0/24 maxlen: 24 144.56.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a8:3a:57:12:11:57:37:80:2a:c2:a5:0b:be:43:1e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 10 14:05:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfdfec4b89e3fe53955b81fa32d361ac6f6ee055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:51:70:42:f4:dd:53:68:8f:69:3c:6c:86:07: 19:59:70:1e:79:0e:8a:bb:55:1a:d3:b8:96:4c:d4: a8:17:80:14:5b:a6:bf:bb:59:fe:a6:c1:3f:18:5f: 67:98:3f:8c:f0:05:be:2d:a2:95:55:ee:32:17:4b: 21:f9:3e:a3:dd:b5:05:c3:4d:09:ee:b9:cf:2b:98: e0:4c:99:c6:c6:05:f8:ed:b9:60:7c:64:bc:c0:da: 52:35:1a:09:bb:9a:18:11:8a:b1:f3:36:e2:b2:2f: 45:cf:0c:08:f2:3f:b0:52:77:da:60:e0:ae:95:8f: f4:4b:17:e0:e0:11:82:9b:ae:3f:f6:33:ea:1b:95: 93:82:9c:f5:3d:43:4d:58:b9:b7:9d:83:05:75:46: 0d:6d:14:8f:9d:51:52:9f:85:1f:96:c1:ae:0c:95: 51:7b:ab:17:0f:f7:d5:3b:34:6f:07:46:0f:e8:c1: 24:bc:09:2a:6e:ea:09:1f:eb:d0:2e:7a:6f:6f:ed: a4:b3:01:80:39:40:37:cb:f0:ca:37:78:44:81:0a: 27:60:12:7a:ad:fe:33:ab:ff:d1:2f:1c:59:5b:9c: 8b:a5:df:ac:d3:63:81:bf:df:bd:1e:cd:c3:45:19: ab:5e:ae:10:89:d0:5e:a1:98:3e:14:7b:9c:f6:8d: 7e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DF:EC:4B:89:E3:FE:53:95:5B:81:FA:32:D3:61:AC:6F:6E:E0:55 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/v9_sS4nj_lOVW4H6MtNhrG9u4FU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.8.0/24 144.56.30.0/24 144.56.42.0/23 144.56.45.0-144.56.48.255 144.56.52.0/23 144.56.73.0/24 144.56.75.0/24 144.56.77.0/24 144.56.82.0/24 144.56.87.0/24 144.56.91.0-144.56.92.255 144.56.96.0/24 144.56.104.0/24 144.56.112.0/24 144.56.123.0/24 Signature Algorithm: sha256WithRSAEncryption 45:3b:23:27:47:98:25:de:3e:d2:b1:62:1b:b3:12:0b:09:a1: 6b:24:86:66:09:1e:82:8f:a4:14:2d:b5:e9:4a:60:a0:b5:9f: 49:77:64:aa:e2:03:42:c7:6c:94:f5:75:da:78:a0:81:a2:bd: 39:2e:b2:df:b6:a4:f0:85:c4:02:ca:ce:8e:27:14:3f:c9:e4: a9:ab:87:0f:7c:af:91:07:2e:1b:5a:c5:b7:41:54:05:ab:d9: 5f:ba:ac:21:2b:3a:e4:bd:fb:f8:35:d9:35:d1:32:b0:56:63: e5:5c:19:d3:4e:f8:46:8e:c1:61:03:8d:f9:ac:0d:3f:ed:2d: 60:9a:46:e0:0d:55:37:e8:5c:df:20:53:09:5e:99:30:38:dd: 94:02:e1:26:a9:b2:4a:cb:cb:1c:e9:41:8a:e7:02:9f:ff:ef: 3d:73:de:40:d4:ef:db:d3:9e:c2:d9:7a:a2:5b:52:08:46:bd: db:65:e5:ba:75:1f:f9:a0:dc:01:4e:13:9d:28:6d:35:bc:7c: 76:6f:f5:70:76:6b:d6:07:1f:5f:c3:30:38:2b:0c:43:de:0f: 85:bd:74:b0:7a:d8:76:74:b2:e0:9b:40:70:2e:a5:aa:f4:7a: ba:11:bf:67:14:36:ae:3a:96:34:3a:02:aa:46:8f:5b:7c:6a: 2b:e5:77:f9 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgISAZuoOlcSEVc3gCrCpQu+Qx7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTEwMTQwNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmRmZWM0Yjg5ZTNmZTUzOTU1YjgxZmEzMmQzNjFhYzZmNmVlMDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklFwQvTdU2iPaTxshgcZWXAeeQ6K u1Ua07iWTNSoF4AUW6a/u1n+psE/GF9nmD+M8AW+LaKVVe4yF0sh+T6j3bUFw00J 7rnPK5jgTJnGxgX47blgfGS8wNpSNRoJu5oYEYqx8zbisi9FzwwI8j+wUnfaYOCu lY/0Sxfg4BGCm64/9jPqG5WTgpz1PUNNWLm3nYMFdUYNbRSPnVFSn4UflsGuDJVR e6sXD/fVOzRvB0YP6MEkvAkqbuoJH+vQLnpvb+2kswGAOUA3y/DKN3hEgQonYBJ6 rf4zq//RLxxZW5yLpd+s02OBv9+9Hs3DRRmrXq4QidBeoZg+FHuc9o1+vwIDAQAB o4ICbjCCAmowHQYDVR0OBBYEFL/f7EuJ4/5TlVuB+jLTYaxvbuBVMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvdjlfc1M0bmpfbE9WVzRINk10TmhyRzl1NEZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAJA4CAME AJA4HgMEAZA4KjAMAwQAkDgtAwQAkDgwAwQBkDg0AwQAkDhJAwQAkDhLAwQAkDhN AwQAkDhSAwQAkDhXMAwDBACQOFsDBACQOFwDBACQOGADBACQOGgDBACQOHADBACQ OHswDQYJKoZIhvcNAQELBQADggEBAEU7IydHmCXePtKxYhuzEgsJoWskhmYJHoKP pBQttelKYKC1n0l3ZKriA0LHbJT1ddp4oIGivTkust+2pPCFxALKzo4nFD/J5Kmr hw98r5EHLhtaxbdBVAWr2V+6rCErOuS9+/g12TXRMrBWY+VcGdNO+EaOwWEDjfms DT/tLWCaRuANVTfoXN8gUwlemTA43ZQC4SapskrLyxzpQYrnAp//7z1z3kDU79vT nsLZeqJbUghGvdtl5bp1H/mg3AFOE50obTW8fHZv9XB2a9YHH1/DMDgrDEPeD4W9 dLB62HZ0suCbQHAupar0eroRv2cUNq46ljQ6AqpGj1t8aivld/k= -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:23 2026 by rpki-client