This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/r1jTlTOR57K4XjS1gHs66uNbmVQ.roa File: r1jTlTOR57K4XjS1gHs66uNbmVQ.roa (raw, json) Hash identifier: 9z/BkXXPVQB2pzHDQpJLjCalHkbxzSYovegO7Zp9jJY= Subject key identifier: AF:58:D3:95:33:91:E7:B2:B8:5E:34:B5:80:7B:3A:EA:E3:5B:99:54 Certificate issuer: /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b Certificate serial: 019B7BA44B1BFCCB18C71C8092AEA0F24324 Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/r1jTlTOR57K4XjS1gHs66uNbmVQ.roa Signing time: Thu 01 Jan 2026 22:18:43 +0000 ROA not before: Thu 01 Jan 2026 22:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 193.106.248.0/24 maxlen: 24 193.106.249.0/24 maxlen: 24 193.106.250.0/24 maxlen: 24 193.106.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:4b:1b:fc:cb:18:c7:1c:80:92:ae:a0:f2:43:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b Validity Not Before: Jan 1 22:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af58d3953391e7b2b85e34b5807b3aeae35b9954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:cd:93:42:2c:fe:bf:81:64:19:3d:23:35: 4c:e2:4c:c9:ef:7f:5f:6f:a3:11:53:90:6e:b3:fe: f1:80:ea:34:ca:5c:11:ab:69:10:7e:3d:f1:f0:79: d5:bd:1b:cd:83:11:08:d2:4a:ab:80:73:d2:b8:7a: 1b:e1:98:21:02:a0:f8:6e:97:d5:38:d3:7e:29:9e: 9d:86:f0:b5:13:1b:74:ae:4a:71:8e:ad:7d:d4:d1: 06:1c:e3:d9:21:0e:d4:47:fc:a6:9b:a5:d8:e7:74: da:89:d6:c1:df:1a:9c:be:e4:f1:5b:7c:cd:ea:29: 0b:ce:5e:7c:3c:16:77:08:4d:03:12:a1:99:38:bf: bb:69:53:f0:0d:b9:e0:bf:7b:e0:24:46:c2:6c:a2: 2d:50:c2:c2:d6:68:cd:c5:7d:fc:72:b3:18:1e:45: 5e:c1:0f:ab:2a:1f:c3:a0:31:b0:14:83:7b:a7:30: dc:ee:fc:01:21:ae:1a:41:e8:22:14:a0:d4:d2:f6: 59:77:c6:c8:6b:d1:5e:e7:68:d9:ee:7e:8c:eb:ab: 95:4c:74:61:02:46:ae:5b:47:96:c2:60:7b:01:8f: c2:b5:ac:22:66:c2:0b:87:63:61:99:26:ae:a5:dc: 32:96:01:bb:7c:aa:0b:94:f3:aa:9e:4c:59:f9:18: 69:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:58:D3:95:33:91:E7:B2:B8:5E:34:B5:80:7B:3A:EA:E3:5B:99:54 X509v3 Authority Key Identifier: keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/r1jTlTOR57K4XjS1gHs66uNbmVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.106.248.0/22 Signature Algorithm: sha256WithRSAEncryption a4:47:2f:ff:6a:fa:80:e3:07:3b:ff:bf:fb:2f:61:68:11:c1: b0:44:06:87:1c:ac:5a:3e:b6:ee:83:9d:fe:fa:05:af:dd:09: f0:13:00:3d:2d:44:55:52:85:e6:c0:46:a4:8c:96:9f:c5:d0: 3d:7d:c1:61:ac:2c:90:60:84:19:e5:2c:54:a8:54:e7:9f:2f: bb:7f:e7:b7:90:0d:be:39:24:af:e2:df:11:63:e7:93:4c:66: c9:a4:c4:f5:14:30:a3:9e:61:1a:64:3e:87:8e:1f:76:af:ae: 3a:c8:37:65:06:39:71:b5:c6:ff:30:ab:81:db:13:c1:79:76: 77:62:39:1d:0d:0c:3e:1b:6d:d3:5a:e6:52:e3:77:55:7e:cb: cc:e5:91:6f:05:d3:90:ca:6a:52:3d:37:6a:25:ee:59:86:d9: 10:02:4a:16:7a:c8:a0:24:5f:af:95:8a:97:62:c5:6d:a1:65: 1e:2a:a5:d1:bd:29:09:ed:da:fc:e8:86:2d:a6:aa:96:95:d3: 31:3e:d2:5c:60:4c:8c:4f:6e:d0:05:0f:cb:27:7b:f5:26:62: a5:75:d6:4c:1a:c7:88:d9:74:7b:6b:56:6a:1c:9d:10:42:c7: 4a:5d:8d:a4:1e:0a:79:5b:71:da:74:2f:e3:aa:91:2f:92:93: f8:14:b0:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pEsb/MsYxxyAkq6g8kMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMjA5MTU3YmY3ODllNmJiYTM0ZTBkYmQzZWZlY2Q5YjIw ZGQwNmIwHhcNMjYwMTAxMjIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjU4ZDM5NTMzOTFlN2IyYjg1ZTM0YjU4MDdiM2FlYWUzNWI5OTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1rNk0Is/r+BZBk9IzVM4kzJ739f b6MRU5Bus/7xgOo0ylwRq2kQfj3x8HnVvRvNgxEI0kqrgHPSuHob4ZghAqD4bpfV ONN+KZ6dhvC1Ext0rkpxjq191NEGHOPZIQ7UR/ymm6XY53TaidbB3xqcvuTxW3zN 6ikLzl58PBZ3CE0DEqGZOL+7aVPwDbngv3vgJEbCbKItUMLC1mjNxX38crMYHkVe wQ+rKh/DoDGwFIN7pzDc7vwBIa4aQegiFKDU0vZZd8bIa9Fe52jZ7n6M66uVTHRh AkauW0eWwmB7AY/CtawiZsILh2NhmSaupdwylgG7fKoLlPOqnkxZ+RhpywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK9Y05UzkeeyuF40tYB7OurjW5lUMB8GA1UdIwQY MBaAFJwgkVe/eJ5rujTg29Pv7NmyDdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgt MTE2OTA5ZTQzODI0LzEvcjFqVGxUT1I1N0s0WGpTMWdIczY2dU5ibVZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi81NDg5ZTYtM2UzMy00ZGYyLTkwYjgtMTE2OTA5ZTQzODI0 LzEvbkNDUlY3OTRubXU2Tk9EYjAtX3MyYklOMEdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWr4MA0G CSqGSIb3DQEBCwUAA4IBAQCkRy//avqA4wc7/7/7L2FoEcGwRAaHHKxaPrbug53+ +gWv3QnwEwA9LURVUoXmwEakjJafxdA9fcFhrCyQYIQZ5SxUqFTnny+7f+e3kA2+ OSSv4t8RY+eTTGbJpMT1FDCjnmEaZD6Hjh92r646yDdlBjlxtcb/MKuB2xPBeXZ3 YjkdDQw+G23TWuZS43dVfsvM5ZFvBdOQympSPTdqJe5ZhtkQAkoWesigJF+vlYqX YsVtoWUeKqXRvSkJ7dr86IYtpqqWldMxPtJcYEyMT27QBQ/LJ3v1JmKlddZMGseI 2XR7a1ZqHJ0QQsdKXY2kHgp5W3HadC/jqpEvkpP4FLD9 -----END CERTIFICATE-----Generated at Mon Jan 19 18:05:56 2026 by rpki-client