This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/9Oi-skDqT11YOFGA1xXs-LnJ9RY.roa File: 9Oi-skDqT11YOFGA1xXs-LnJ9RY.roa (raw, json) Hash identifier: rHObD1OASYFGq7YdeSfBqKYMqx4XVn3mmaRGeO1liZg= Subject key identifier: F4:E8:BE:B2:40:EA:4F:5D:58:38:51:80:D7:15:EC:F8:B9:C9:F5:16 Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f Certificate serial: 019B7E38B22A8BF56A3A0D2B4667E088D601 Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/9Oi-skDqT11YOFGA1xXs-LnJ9RY.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208378 IP address blocks: 193.138.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b2:2a:8b:f5:6a:3a:0d:2b:46:67:e0:88:d6:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e8beb240ea4f5d58385180d715ecf8b9c9f516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ae:a2:0c:ef:bc:3e:5d:02:15:48:c1:fa:75: 32:00:3a:5b:4d:95:67:e0:41:70:ae:02:a4:1c:a6: f0:2f:c4:3d:9b:97:35:a9:6f:68:f9:9a:58:78:b6: 45:32:e9:a9:2f:6c:1c:45:9d:d2:6c:c6:60:64:55: 1a:07:5f:86:a8:cc:1f:74:5e:3e:14:db:8e:19:df: df:d0:f2:77:47:13:4a:23:fc:6b:cd:f4:84:c5:ef: 0b:6d:48:db:ab:4f:84:5e:d3:7f:f5:2a:20:a3:7f: fd:17:42:80:7f:54:98:0e:5a:92:c3:2c:81:30:52: 59:3d:c9:67:d3:83:48:2e:d5:b3:f0:f9:ae:6b:64: 31:c4:82:89:c2:76:ee:9a:2a:fa:df:4b:5b:18:c9: 95:23:74:08:c1:c8:2e:1f:16:37:64:0e:17:50:b3: 54:af:c9:fc:c4:84:2c:19:ab:ea:c7:4f:68:38:10: 4b:04:0f:4e:05:82:c9:e5:10:b3:68:a9:f5:63:6f: 99:81:3c:e3:d7:67:99:85:a0:e3:55:00:af:fb:00: c3:ca:1f:8e:09:bc:7d:06:9e:93:36:d9:03:ea:72: 31:01:86:72:41:66:68:13:3b:c0:43:cf:0f:3b:6f: 24:8a:2b:e6:e4:af:86:f7:d2:ed:e4:c6:ff:2a:d3: 22:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E8:BE:B2:40:EA:4F:5D:58:38:51:80:D7:15:EC:F8:B9:C9:F5:16 X509v3 Authority Key Identifier: keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/9Oi-skDqT11YOFGA1xXs-LnJ9RY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.138.29.0/24 Signature Algorithm: sha256WithRSAEncryption c6:ee:dc:2b:9e:25:c7:9d:f2:04:c9:22:5a:19:50:54:32:43: 08:63:ce:8f:37:fd:28:61:ab:fe:37:ac:7a:db:a2:e9:74:8a: 54:bb:c3:77:36:29:8b:0b:61:2b:01:85:88:04:70:ce:64:d7: 7a:51:17:2e:a0:74:0c:5e:78:9e:85:d4:60:38:9b:e5:b7:11: 21:27:bf:97:1a:09:bd:b6:da:29:0d:90:1b:d1:da:46:fe:2c: 97:74:b1:82:be:72:a5:03:33:73:fe:6a:60:3c:8b:22:cd:0d: 2a:8b:5e:3c:b6:5d:55:59:0f:0f:59:eb:86:c2:48:0e:3d:ea: 40:db:4a:e3:94:4a:c3:bf:52:e2:b0:90:8a:73:b3:14:e6:ab: 89:41:83:da:7b:ea:12:53:c2:0f:60:cf:09:81:9f:d5:73:b2: 22:01:4b:98:b9:03:5d:89:7d:3b:bb:a3:49:d7:96:9c:7a:00: 92:c3:4b:9e:44:d4:06:0e:37:9b:df:38:93:53:b3:fe:d9:03: 72:3f:ae:46:39:80:69:12:1b:2e:d8:9a:29:3b:df:f4:14:42: c5:55:d7:3c:7b:37:a0:2d:23:8a:5f:f9:28:cf:4b:d7:d8:9f: 82:17:34:9e:99:e9:0c:b0:1f:ff:16:86:17:d6:e6:13:13:0c: f4:ef:69:b2 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OLIqi/VqOg0rRmfgiNYBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2Y2NmVkNzQyOGEzOWU2M2YwZDI3MzYwMzdmNDMxYzQx YWEzNGYwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGU4YmViMjQwZWE0ZjVkNTgzODUxODBkNzE1ZWNmOGI5YzlmNTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K6iDO+8Pl0CFUjB+nUyADpbTZVn 4EFwrgKkHKbwL8Q9m5c1qW9o+ZpYeLZFMumpL2wcRZ3SbMZgZFUaB1+GqMwfdF4+ FNuOGd/f0PJ3RxNKI/xrzfSExe8LbUjbq0+EXtN/9Sogo3/9F0KAf1SYDlqSwyyB MFJZPcln04NILtWz8Pmua2QxxIKJwnbumir630tbGMmVI3QIwcguHxY3ZA4XULNU r8n8xIQsGavqx09oOBBLBA9OBYLJ5RCzaKn1Y2+ZgTzj12eZhaDjVQCv+wDDyh+O Cbx9Bp6TNtkD6nIxAYZyQWZoEzvAQ88PO28kiivm5K+G99Lt5Mb/KtMixwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPTovrJA6k9dWDhRgNcV7Pi5yfUWMB8GA1UdIwQY MBaAFPnPZu10KKOeY/DSc2A39DHEGqNPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jOW03WFFvbzU1ajhOSnpZRGYwTWNRYW8wOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgw LWU2MzM3MDNmY2JlZC8xLzlPaS1za0RxVDExWU9GR0ExeFhzLUxuSjlSWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgwLWU2MzM3MDNmY2Jl ZC8xLzEtYzltN1hRb281NWo4Tkp6WURmME1jUWFvMDguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBih0w DQYJKoZIhvcNAQELBQADggEBAMbu3CueJced8gTJIloZUFQyQwhjzo83/Shhq/43 rHrboul0ilS7w3c2KYsLYSsBhYgEcM5k13pRFy6gdAxeeJ6F1GA4m+W3ESEnv5ca Cb222ikNkBvR2kb+LJd0sYK+cqUDM3P+amA8iyLNDSqLXjy2XVVZDw9Z64bCSA49 6kDbSuOUSsO/UuKwkIpzsxTmq4lBg9p76hJTwg9gzwmBn9VzsiIBS5i5A12JfTu7 o0nXlpx6AJLDS55E1AYON5vfOJNTs/7ZA3I/rkY5gGkSGy7Ymik73/QUQsVV1zx7 N6AtI4pf+SjPS9fYn4IXNJ6Z6QywH/8WhhfW5hMTDPTvabI= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:38 2026 by rpki-client