This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/9efBt3OrM2Y3RkHyaXFBEgWsA8M.roa File: 9efBt3OrM2Y3RkHyaXFBEgWsA8M.roa (raw, json) Hash identifier: EkSeGu8EIQcSrfpH6x8y/Izet2DAT1YLJaItWMqmRt0= Subject key identifier: F5:E7:C1:B7:73:AB:33:66:37:46:41:F2:69:71:41:12:05:AC:03:C3 Certificate issuer: /CN=aaf2288014995932737ae7f9fc224df102141255 Certificate serial: 019B7B3680D371CF6A83DEB93D11AC41346A Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/9efBt3OrM2Y3RkHyaXFBEgWsA8M.roa Signing time: Thu 01 Jan 2026 20:18:47 +0000 ROA not before: Thu 01 Jan 2026 20:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198199 IP address blocks: 193.38.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:80:d3:71:cf:6a:83:de:b9:3d:11:ac:41:34:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf2288014995932737ae7f9fc224df102141255 Validity Not Before: Jan 1 20:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5e7c1b773ab3366374641f26971411205ac03c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:db:ab:0a:7f:56:e1:c3:e7:d8:d5:8d:34: c7:d0:a5:56:14:65:0d:f0:74:dd:9d:e1:ed:93:b8: 1f:fc:52:21:ac:2f:5f:4f:41:bb:ba:ae:94:3a:73: e7:de:c2:93:4a:b8:bf:33:3f:81:61:8d:c3:67:d9: 3e:28:b8:a9:ea:64:5f:2d:03:f9:f2:7c:97:41:7d: 6d:37:28:df:bb:1e:49:76:eb:c7:66:10:e1:b3:62: 89:5e:2f:7d:67:f6:19:84:fc:0a:7e:9a:ac:a1:c9: f5:b9:42:d6:69:5a:45:8e:af:0d:9d:7c:db:c9:67: 84:4c:11:7c:60:65:94:59:26:cf:d9:6d:32:0d:62: 68:f6:13:84:aa:a2:db:fe:82:e0:d7:d6:b2:c3:01: d3:56:39:e4:1d:04:75:61:4b:a6:0a:08:ee:65:ec: b4:e3:f0:20:93:c8:d6:35:e9:15:7b:84:3a:c0:3d: 04:de:a1:e9:77:ed:18:26:ab:ed:78:fd:7a:4b:52: 54:9d:97:ed:25:35:9b:31:59:d3:93:40:63:9c:a6: 69:fa:13:7f:ef:54:34:26:03:7c:51:73:30:c3:7d: 2e:d2:cb:65:81:30:60:57:54:c7:2b:f1:03:2a:ab: 99:2e:67:da:58:0f:83:4c:48:18:64:22:63:62:d3: ce:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E7:C1:B7:73:AB:33:66:37:46:41:F2:69:71:41:12:05:AC:03:C3 X509v3 Authority Key Identifier: keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/9efBt3OrM2Y3RkHyaXFBEgWsA8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.48.0/24 Signature Algorithm: sha256WithRSAEncryption 13:d5:5f:2a:b4:85:c3:b9:55:ff:31:ce:81:fa:23:e2:a7:a1: 99:dd:f5:52:e1:f8:72:17:78:ce:8e:25:04:83:a1:55:9f:38: 46:25:4c:36:33:58:44:ff:c2:86:cc:a6:e8:86:57:97:5b:ff: d5:f7:8f:08:82:80:cd:ac:44:47:02:19:15:10:9f:23:d7:3c: d3:4c:28:66:61:02:25:29:1e:56:b2:36:fd:46:51:3e:5b:ed: 86:e5:03:75:d5:83:56:9a:a1:ba:f0:c3:e6:a5:fc:ea:b3:45: a1:a1:45:ae:d3:56:1d:f2:06:0e:cc:4b:7b:1b:37:0e:55:98: 4a:af:9a:2e:91:1b:db:24:ab:16:68:68:c7:56:ce:49:7d:f1: 0e:1f:48:04:d9:bc:ec:92:88:76:0d:6a:cf:02:a3:24:04:dc: 7e:de:b2:77:b0:f5:ed:a6:22:02:30:75:1d:ef:e7:8f:4c:71: 41:9f:da:df:3e:d9:9a:a4:ea:5e:d8:f4:53:80:b3:f0:fc:d0: b3:2e:ce:ea:f2:ab:30:0e:fd:93:c7:dc:67:54:ed:96:13:4f: c6:ad:94:3a:7c:55:8b:ad:a0:06:ff:ca:82:8c:63:bc:57:76: b0:da:98:eb:e2:b4:d1:91:2f:9a:1d:a5:e7:38:fc:84:69:89: 66:32:8a:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NoDTcc9qg965PRGsQTRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhZjIyODgwMTQ5OTU5MzI3MzdhZTdmOWZjMjI0ZGYxMDIx NDEyNTUwHhcNMjYwMTAxMjAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWU3YzFiNzczYWIzMzY2Mzc0NjQxZjI2OTcxNDExMjA1YWMwM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHHbqwp/VuHD59jVjTTH0KVWFGUN 8HTdneHtk7gf/FIhrC9fT0G7uq6UOnPn3sKTSri/Mz+BYY3DZ9k+KLip6mRfLQP5 8nyXQX1tNyjfux5JduvHZhDhs2KJXi99Z/YZhPwKfpqsocn1uULWaVpFjq8NnXzb yWeETBF8YGWUWSbP2W0yDWJo9hOEqqLb/oLg19aywwHTVjnkHQR1YUumCgjuZey0 4/Agk8jWNekVe4Q6wD0E3qHpd+0YJqvteP16S1JUnZftJTWbMVnTk0BjnKZp+hN/ 71Q0JgN8UXMww30u0stlgTBgV1THK/EDKquZLmfaWA+DTEgYZCJjYtPONwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPXnwbdzqzNmN0ZB8mlxQRIFrAPDMB8GA1UdIwQY MBaAFKryKIAUmVkyc3rn+fwiTfECFBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lYTA2MjMtMzZjMS00ZjNhLWJmZjMt NjMxNGI5OGJkYTQyLzEvOWVmQnQzT3JNMlkzUmtIeWFYRkJFZ1dzQThNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9lYTA2MjMtMzZjMS00ZjNhLWJmZjMtNjMxNGI5OGJkYTQy LzEvcXZJb2dCU1pXVEp6ZXVmNV9DSk44UUlVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSYwMA0G CSqGSIb3DQEBCwUAA4IBAQAT1V8qtIXDuVX/Mc6B+iPip6GZ3fVS4fhyF3jOjiUE g6FVnzhGJUw2M1hE/8KGzKbohleXW//V948IgoDNrERHAhkVEJ8j1zzTTChmYQIl KR5Wsjb9RlE+W+2G5QN11YNWmqG68MPmpfzqs0WhoUWu01Yd8gYOzEt7GzcOVZhK r5oukRvbJKsWaGjHVs5JffEOH0gE2bzskoh2DWrPAqMkBNx+3rJ3sPXtpiICMHUd 7+ePTHFBn9rfPtmapOpe2PRTgLPw/NCzLs7q8qswDv2Tx9xnVO2WE0/GrZQ6fFWL raAG/8qCjGO8V3aw2pjr4rTRkS+aHaXnOPyEaYlmMoqR -----END CERTIFICATE-----Generated at Mon Feb 9 22:57:58 2026 by rpki-client