This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/9RIul5Zn6bDrYoSEwH-F9VjPj90.roa File: 9RIul5Zn6bDrYoSEwH-F9VjPj90.roa (raw, json) Hash identifier: TgLUe76crf1ZfuVvMt46nRjJNUuVYse/OBKVYJWUUrc= Subject key identifier: F5:12:2E:97:96:67:E9:B0:EB:62:84:84:C0:7F:85:F5:58:CF:8F:DD Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37C1282D6A524A686B26AFD4FED9F9 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/9RIul5Zn6bDrYoSEwH-F9VjPj90.roa Signing time: Fri 02 Jan 2026 10:19:01 +0000 ROA not before: Fri 02 Jan 2026 10:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199058 IP address blocks: 158.173.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:c1:28:2d:6a:52:4a:68:6b:26:af:d4:fe:d9:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5122e979667e9b0eb628484c07f85f558cf8fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:62:72:87:ae:74:2e:7e:bc:25:96:d2:ad: 53:1d:ed:b5:09:0b:8e:cd:cd:83:44:76:7c:e1:5e: 5a:27:06:1e:24:dd:64:33:c0:48:c7:94:9a:f5:5f: 91:54:12:2a:fb:2f:9b:5c:cf:3f:72:e8:3d:92:17: c8:28:fb:cf:06:81:92:1c:26:4d:d8:89:d0:9b:a7: 07:c7:6d:3b:71:0e:04:37:20:46:73:2c:ff:a0:d9: db:24:c9:34:67:86:79:76:84:fe:f9:45:85:38:1e: a4:3f:9c:66:8a:81:d3:03:55:04:95:8b:d9:9b:1a: 60:a8:4d:56:34:ad:dd:83:b7:7a:06:ef:14:32:01: 1c:ff:76:28:70:1f:44:b6:4b:79:5e:7b:b3:53:8b: 34:ba:40:91:ef:8b:38:2a:59:c6:fe:b9:e4:e6:a0: 9c:5a:ed:a7:6d:52:02:91:a7:fd:e3:da:02:77:93: c0:97:d0:9c:8b:34:6c:7b:e4:2d:c9:7a:ab:12:84: 77:82:9a:b6:3c:c0:78:15:3e:f2:2a:3a:a6:2b:f8: 63:fb:f8:91:ba:10:a0:64:64:ff:f8:80:82:9b:fb: c7:96:ca:7c:27:84:2d:2f:27:e2:f3:77:1e:c0:a7: 66:ec:1a:12:d7:40:bd:b0:86:fb:36:ac:e2:ad:f5: c6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:12:2E:97:96:67:E9:B0:EB:62:84:84:C0:7F:85:F5:58:CF:8F:DD X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/9RIul5Zn6bDrYoSEwH-F9VjPj90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.203.0/24 Signature Algorithm: sha256WithRSAEncryption b9:59:5e:2d:96:d6:f9:69:1d:bf:94:74:3e:a4:a4:b7:77:f9: 64:8f:0e:c7:cd:95:6c:1a:ec:40:20:22:d3:48:20:93:a1:1e: f7:a5:03:f8:93:fe:34:c4:7a:8f:3f:c0:42:92:21:f8:a7:18: e9:d8:f7:6b:c0:34:46:36:a5:ee:fb:3a:db:3e:91:0b:62:f1: fe:f9:c6:84:4d:53:ea:ca:74:f2:a5:a5:4e:59:68:a9:86:37: a7:fb:54:59:a8:11:09:d2:c8:40:41:09:3b:b0:b0:ef:4c:ea: ec:75:75:f9:70:10:58:e3:06:e9:ef:69:20:fd:3a:df:f7:d2: a5:6e:66:d3:42:6c:d1:65:1d:b5:de:00:f9:3f:66:2c:33:57: e7:37:be:2a:05:0f:ab:57:4f:78:26:1f:1a:6e:bb:53:d2:a2: d1:79:bf:4b:e3:a3:b2:f9:ed:fb:7a:de:41:05:6c:a4:1a:e5: 28:a8:b3:0b:c8:ed:d4:f5:60:f4:03:c8:8c:84:47:bb:3d:2f: b5:52:f0:d0:db:fa:86:07:f3:4a:0e:06:d7:10:3d:91:2e:33: 7e:50:da:32:fa:f0:b8:f6:00:b1:02:87:43:76:b4:73:8b:9d: 0c:ea:33:81:b3:5a:f1:8b:cc:a6:c4:75:5c:a0:fa:a2:36:eb: 31:d8:9f:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N8EoLWpSSmhrJq/U/tn5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTEyMmU5Nzk2NjdlOWIwZWI2Mjg0ODRjMDdmODVmNTU4Y2Y4ZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArclicoeudC5+vCWW0q1THe21CQuO zc2DRHZ84V5aJwYeJN1kM8BIx5Sa9V+RVBIq+y+bXM8/cug9khfIKPvPBoGSHCZN 2InQm6cHx207cQ4ENyBGcyz/oNnbJMk0Z4Z5doT++UWFOB6kP5xmioHTA1UElYvZ mxpgqE1WNK3dg7d6Bu8UMgEc/3YocB9Etkt5XnuzU4s0ukCR74s4KlnG/rnk5qCc Wu2nbVICkaf949oCd5PAl9CcizRse+QtyXqrEoR3gpq2PMB4FT7yKjqmK/hj+/iR uhCgZGT/+ICCm/vHlsp8J4QtLyfi83cewKdm7BoS10C9sIb7NqzirfXG6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUSLpeWZ+mw62KEhMB/hfVYz4/dMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvOVJJdWw1Wm42YkRyWW9TRXdILUY5VmpQajkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq3LMA0G CSqGSIb3DQEBCwUAA4IBAQC5WV4tltb5aR2/lHQ+pKS3d/lkjw7HzZVsGuxAICLT SCCToR73pQP4k/40xHqPP8BCkiH4pxjp2PdrwDRGNqXu+zrbPpELYvH++caETVPq ynTypaVOWWiphjen+1RZqBEJ0shAQQk7sLDvTOrsdXX5cBBY4wbp72kg/Trf99Kl bmbTQmzRZR213gD5P2YsM1fnN74qBQ+rV094Jh8abrtT0qLReb9L46Oy+e37et5B BWykGuUoqLMLyO3U9WD0A8iMhEe7PS+1UvDQ2/qGB/NKDgbXED2RLjN+UNoy+vC4 9gCxAodDdrRzi50M6jOBs1rxi8ymxHVcoPqiNusx2J/a -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:09 2026 by rpki-client