This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/TR9cohMhMoQQxWhWiR1qGs1BMC8.roa File: TR9cohMhMoQQxWhWiR1qGs1BMC8.roa (raw, json) Hash identifier: LYdTaX6pjmd3oJ4vpjV9U20LQlY3HXHKSPGaKNT6k0M= Subject key identifier: 4D:1F:5C:A2:13:21:32:84:10:C5:68:56:89:1D:6A:1A:CD:41:30:2F Certificate issuer: /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Certificate serial: 019B7BA4008A74C0E78B5CCF9FE888B28F9B Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/TR9cohMhMoQQxWhWiR1qGs1BMC8.roa Signing time: Thu 01 Jan 2026 22:18:24 +0000 ROA not before: Thu 01 Jan 2026 22:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8434 IP address blocks: 194.246.8.0/23 maxlen: 23 194.246.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:00:8a:74:c0:e7:8b:5c:cf:9f:e8:88:b2:8f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3 Validity Not Before: Jan 1 22:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d1f5ca21321328410c56856891d6a1acd41302f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:79:cd:c0:c5:56:77:a8:1c:68:5a:be:ad:ff: b3:d7:35:af:c2:b9:d0:74:28:10:12:71:af:0e:2c: 92:3d:fb:2a:d3:38:fb:20:2b:e6:f5:a1:b0:0e:59: d7:ea:a0:f2:a8:d1:17:d6:5d:a3:58:35:d0:ed:3b: 9f:fc:bf:94:3a:c5:ba:4d:c5:f0:7e:e5:d1:a9:14: f3:bc:7e:77:b5:df:c0:e6:89:0b:af:f7:55:61:19: ac:af:24:e0:5d:81:76:d4:84:40:a5:21:bd:67:3e: a5:b7:ce:40:d4:ca:9b:64:71:a7:90:8b:2a:78:c6: f0:79:ae:a0:35:81:fb:db:a6:5e:23:ad:9b:3b:58: 41:80:00:7a:cd:11:c5:2a:1d:fe:ce:4f:e1:66:3c: 39:e7:8f:f1:b8:48:9a:96:92:65:11:2f:9a:b7:0a: 34:aa:cb:71:43:5f:ff:e1:5d:2c:4f:5c:7b:c8:de: 31:2a:e3:24:bd:e5:90:93:07:ba:f3:d5:81:74:9c: b1:25:0c:84:41:2f:7c:93:3c:14:78:d4:34:5e:24: fd:82:07:48:ca:d2:ad:1b:21:08:dd:5b:3b:d2:c2: 0d:17:88:e7:92:ec:c1:ba:b2:d6:a7:7d:14:7b:20: 7b:db:67:35:7e:e1:df:b9:ef:45:a5:ce:cd:18:57: ee:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1F:5C:A2:13:21:32:84:10:C5:68:56:89:1D:6A:1A:CD:41:30:2F X509v3 Authority Key Identifier: keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/TR9cohMhMoQQxWhWiR1qGs1BMC8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.8.0/23 194.246.14.0/23 Signature Algorithm: sha256WithRSAEncryption b2:f1:7b:3b:b9:c6:ed:28:b7:ed:1e:3b:38:39:fb:ca:18:2e: cc:4c:f1:ab:85:c1:fd:c2:e4:69:ac:dc:1d:c2:53:4f:a8:6f: 30:56:41:9f:7e:d4:55:b4:73:78:3f:28:e8:fd:40:8c:87:26: 0b:fe:95:ca:0e:a8:f6:00:33:24:c5:6e:8f:e4:fe:39:4e:d2: f6:65:16:45:b3:3d:73:d6:b3:1f:ae:21:73:79:72:de:db:df: 91:4c:00:0b:f3:80:4f:2f:6b:b9:51:bd:a3:82:78:ac:eb:29: 01:3a:29:b2:f4:71:77:77:3f:76:72:84:23:65:d6:72:27:3b: 66:19:99:b1:10:df:36:80:d1:21:14:f3:bf:41:8b:bf:d2:bb: 30:96:35:8f:7c:3a:0b:2d:d2:2f:ef:9c:28:39:45:eb:16:86: 43:66:9f:86:bb:9f:64:38:62:96:16:3b:b4:f6:70:cb:e6:cc: b9:75:5a:3f:19:b5:29:1d:e9:20:0e:e8:fd:2a:1f:0e:32:4e: 1d:64:0f:16:ee:82:f8:9e:dd:9a:32:fa:a0:ca:e2:f9:38:0a: 56:1b:c3:a7:86:49:40:eb:31:66:ed:0b:a1:e2:7b:95:0d:ef: 82:5c:5a:a9:7e:35:6a:69:8c:76:ca:7a:f3:b0:72:e7:87:57: c8:db:77:c0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pACKdMDni1zPn+iIso+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTZjZWNmZmQ5YjhiYmExOGQ0NzRlN2IzOTkzZTBhMWQx NGRiYjMwHhcNMjYwMTAxMjIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDFmNWNhMjEzMjEzMjg0MTBjNTY4NTY4OTFkNmExYWNkNDEzMDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunnNwMVWd6gcaFq+rf+z1zWvwrnQ dCgQEnGvDiySPfsq0zj7ICvm9aGwDlnX6qDyqNEX1l2jWDXQ7Tuf/L+UOsW6TcXw fuXRqRTzvH53td/A5okLr/dVYRmsryTgXYF21IRApSG9Zz6lt85A1MqbZHGnkIsq eMbwea6gNYH726ZeI62bO1hBgAB6zRHFKh3+zk/hZjw554/xuEialpJlES+atwo0 qstxQ1//4V0sT1x7yN4xKuMkveWQkwe689WBdJyxJQyEQS98kzwUeNQ0XiT9ggdI ytKtGyEI3Vs70sINF4jnkuzBurLWp30UeyB722c1fuHfue9Fpc7NGFfunwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE0fXKITITKEEMVoVokdahrNQTAvMB8GA1UdIwQY MBaAFD7mzs/9m4u6GNR057OZPgodFNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEt NzMyNDkxMzk3NWQ1LzEvVFI5Y29oTWhNb1FReFdoV2lSMXFHczFCTUM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEtNzMyNDkxMzk3NWQ1 LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwvYIAwQB wvYOMA0GCSqGSIb3DQEBCwUAA4IBAQCy8Xs7ucbtKLftHjs4OfvKGC7MTPGrhcH9 wuRprNwdwlNPqG8wVkGfftRVtHN4Pyjo/UCMhyYL/pXKDqj2ADMkxW6P5P45TtL2 ZRZFsz1z1rMfriFzeXLe29+RTAAL84BPL2u5Ub2jgnis6ykBOimy9HF3dz92coQj ZdZyJztmGZmxEN82gNEhFPO/QYu/0rswljWPfDoLLdIv75woOUXrFoZDZp+Gu59k OGKWFju09nDL5sy5dVo/GbUpHekgDuj9Kh8OMk4dZA8W7oL4nt2aMvqgyuL5OApW G8OnhklA6zFm7Quh4nuVDe+CXFqpfjVqaYx2ynrzsHLnh1fI23fA -----END CERTIFICATE-----Generated at Mon Jan 26 14:13:30 2026 by rpki-client