This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/9CTzlnPFvIq3T_H5OTBDue8Fp_Y.roa File: 9CTzlnPFvIq3T_H5OTBDue8Fp_Y.roa (raw, json) Hash identifier: /64m6pcbXCI/USW9luQgRTop6wq7w1tWU4vkxTTIED0= Subject key identifier: F4:24:F3:96:73:C5:BC:8A:B7:4F:F1:F9:39:30:43:B9:EF:05:A7:F6 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 019B78A25660B3423D5AD785601B228520B8 Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/9CTzlnPFvIq3T_H5OTBDue8Fp_Y.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3313 IP address blocks: 194.20.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:56:60:b3:42:3d:5a:d7:85:60:1b:22:85:20:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f424f39673c5bc8ab74ff1f9393043b9ef05a7f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:59:cd:03:e7:39:a5:e5:85:65:91:fc:5a:bb: ff:13:80:c2:89:29:23:52:c0:31:61:ca:fd:7e:aa: 05:34:e9:53:9a:56:a1:a0:af:cd:ad:45:57:a9:ea: e7:31:57:dd:2d:ce:69:ad:90:55:fc:36:03:c8:ad: dc:29:10:ba:25:63:81:c1:66:4a:0d:b1:be:af:49: e6:68:45:fa:8c:7d:47:52:9e:36:1a:11:73:6e:a8: 0b:a0:6a:f7:ae:e9:15:3d:b8:b8:c7:70:f7:de:f8: 93:2b:fe:21:87:6e:bb:99:25:25:a3:2d:d9:5f:da: b6:22:e4:17:fa:b4:40:7f:c7:ff:f7:2a:f4:a1:97: 8e:cf:cd:60:d5:dd:f4:cc:ae:68:01:6a:d7:76:20: 32:a2:0a:b5:85:bd:ca:59:a9:f1:43:71:e2:ba:49: 48:1b:45:47:ed:c1:5c:25:fb:89:2a:24:10:e0:0d: 1c:f1:ad:40:56:44:d4:f6:15:6e:69:88:b1:1e:f0: e5:a7:bf:8b:aa:3b:32:a6:09:60:0b:b4:f5:85:e5: 19:60:46:02:79:4e:df:1b:5d:b7:cd:33:9d:97:0b: 62:8a:8f:bd:b1:fa:0b:34:46:a0:5b:e3:1a:f1:a4: 82:e6:96:b3:0b:6a:33:77:e1:52:85:c7:1e:58:3a: 8d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:F3:96:73:C5:BC:8A:B7:4F:F1:F9:39:30:43:B9:EF:05:A7:F6 X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/9CTzlnPFvIq3T_H5OTBDue8Fp_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.20.8.0/21 Signature Algorithm: sha256WithRSAEncryption d3:ca:ea:61:2b:35:02:99:ba:5c:9a:3d:42:4a:25:53:c8:33: 4f:28:cc:23:e3:02:65:6a:ea:b3:18:b6:83:a0:2d:5d:52:80: 10:d6:95:0a:80:a7:96:9f:a6:f9:42:99:c2:46:c9:ad:d5:32: 1b:6a:0e:6d:51:ba:4d:9f:99:a8:09:fe:17:ff:1a:5c:ee:c6: 35:74:2e:d1:bd:75:1b:8e:8f:c2:4a:d0:e2:1f:dd:d6:32:b0: 70:00:85:14:a5:4d:83:da:06:83:ab:8b:47:f0:f1:dc:bf:2f: aa:49:8e:78:de:04:ba:29:74:fb:03:99:08:ce:9d:84:3d:09: b9:6b:7d:1b:c3:9a:68:02:ea:94:54:bd:c0:f0:7e:fb:d4:ec: 1e:87:10:18:89:10:e7:9f:09:69:74:2a:6e:28:18:7b:22:9c: 53:56:5f:76:3f:1c:c0:fc:78:34:ea:d7:21:54:2e:f1:12:3b: 5e:58:3e:e8:04:54:05:54:99:d8:ef:c4:ce:ea:33:9b:78:f0: 38:c7:39:2e:33:a8:a0:06:9d:39:ce:73:0c:6c:48:88:5e:f3: 4e:73:c0:98:4a:bb:01:cf:48:d2:a6:98:2f:90:0a:5e:7d:f8: 3e:3f:17:47:00:9b:23:ed:ae:fb:56:0d:1a:cd:8b:40:bd:14: 52:71:a7:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4olZgs0I9WteFYBsihSC4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDI0ZjM5NjczYzViYzhhYjc0ZmYxZjkzOTMwNDNiOWVmMDVhN2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VnNA+c5peWFZZH8Wrv/E4DCiSkj UsAxYcr9fqoFNOlTmlahoK/NrUVXqernMVfdLc5prZBV/DYDyK3cKRC6JWOBwWZK DbG+r0nmaEX6jH1HUp42GhFzbqgLoGr3rukVPbi4x3D33viTK/4hh267mSUloy3Z X9q2IuQX+rRAf8f/9yr0oZeOz81g1d30zK5oAWrXdiAyogq1hb3KWanxQ3HiuklI G0VH7cFcJfuJKiQQ4A0c8a1AVkTU9hVuaYixHvDlp7+LqjsypglgC7T1heUZYEYC eU7fG123zTOdlwtiio+9sfoLNEagW+Ma8aSC5pazC2ozd+FShcceWDqNpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPQk85ZzxbyKt0/x+TkwQ7nvBaf2MB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvOUNUemxuUEZ2SXEzVF9INU9UQkR1ZThGcF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwhQIMA0G CSqGSIb3DQEBCwUAA4IBAQDTyuphKzUCmbpcmj1CSiVTyDNPKMwj4wJlauqzGLaD oC1dUoAQ1pUKgKeWn6b5QpnCRsmt1TIbag5tUbpNn5moCf4X/xpc7sY1dC7RvXUb jo/CStDiH93WMrBwAIUUpU2D2gaDq4tH8PHcvy+qSY543gS6KXT7A5kIzp2EPQm5 a30bw5poAuqUVL3A8H771OwehxAYiRDnnwlpdCpuKBh7IpxTVl92PxzA/Hg06tch VC7xEjteWD7oBFQFVJnY78TO6jObePA4xzkuM6igBp05znMMbEiIXvNOc8CYSrsB z0jSppgvkApeffg+PxdHAJsj7a77Vg0azYtAvRRScacj -----END CERTIFICATE-----Generated at Tue Jan 27 05:42:02 2026 by rpki-client