This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/9Lw22K23J7w-6XzIDg67QJLRG6o.roa File: 9Lw22K23J7w-6XzIDg67QJLRG6o.roa (raw, json) Hash identifier: ztr8UWAWB/buB6JT5GD2YfXKLhYvXE9x4n0VRU8ceQo= Subject key identifier: F4:BC:36:D8:AD:B7:27:BC:3E:E9:7C:C8:0E:0E:BB:40:92:D1:1B:AA Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Certificate serial: 019B7D5BE49AA8B40BF7564C4399352DAE5B Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/9Lw22K23J7w-6XzIDg67QJLRG6o.roa Signing time: Fri 02 Jan 2026 06:18:52 +0000 ROA not before: Fri 02 Jan 2026 06:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3332 IP address blocks: 193.40.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:e4:9a:a8:b4:0b:f7:56:4c:43:99:35:2d:ae:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6 Validity Not Before: Jan 2 06:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4bc36d8adb727bc3ee97cc80e0ebb4092d11baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7a:c8:93:7a:1d:ee:13:72:c6:e1:ae:04:59: 61:11:ee:cd:21:ea:27:16:db:94:6c:ca:27:10:80: e7:f7:61:e6:17:d4:39:71:cc:7a:e1:7c:52:75:c7: 29:90:d8:c4:cc:34:a1:24:35:f3:df:b8:4a:c0:a5: 5e:bc:29:c6:91:be:70:51:15:a8:06:92:51:c5:98: 53:2a:d4:5f:89:62:ea:7c:7d:4c:6a:e1:d1:86:c3: d0:4d:06:a5:90:3e:3e:9d:8a:d0:1e:ea:64:fb:b7: cb:02:c1:e9:51:0c:5d:c0:14:0e:f2:b8:6d:db:fe: ea:95:63:c7:91:25:1c:e6:e3:93:fb:80:c6:91:ad: b0:45:0f:e7:6a:15:3e:a1:cf:29:a5:06:42:28:23: 08:5c:70:33:6c:3d:e3:ab:3f:4b:bd:07:c3:82:b1: 21:86:85:7e:de:6e:5f:cd:91:7e:b7:4d:59:18:13: 47:3c:9f:05:45:ea:fa:6c:1a:a0:e4:33:55:53:e1: 55:ab:63:44:5c:e3:71:19:36:23:35:83:9c:66:58: 8e:9b:ff:ac:f7:22:86:74:db:b0:ed:18:a3:ee:78: 44:0b:3c:a8:63:46:dd:d3:8c:24:33:d5:0c:b7:84: 0e:00:b5:d6:02:dd:ae:3b:db:90:43:88:89:9a:f8: 6a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BC:36:D8:AD:B7:27:BC:3E:E9:7C:C8:0E:0E:BB:40:92:D1:1B:AA X509v3 Authority Key Identifier: keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/9Lw22K23J7w-6XzIDg67QJLRG6o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.40.195.0/24 Signature Algorithm: sha256WithRSAEncryption 07:d8:90:e3:f1:6b:9b:af:47:8f:f8:a4:8c:92:14:1c:a8:f2: b4:94:8b:ab:ea:08:55:a4:e8:ce:78:22:55:0a:5d:51:c4:85: c5:15:86:48:02:f4:e8:3b:ff:77:14:94:19:f8:3e:68:a6:7b: 84:06:3c:88:17:4f:40:9d:c4:63:71:25:9a:e4:b6:f9:d6:21: c1:ec:7a:76:bd:ce:38:0f:89:4f:12:59:42:19:63:a8:e2:3b: de:ed:53:b0:b8:bf:6e:fc:f8:9e:bf:ce:08:e3:ea:7e:2d:3b: 63:97:e3:e8:f2:32:b8:6e:33:f2:c2:85:41:52:92:f0:3e:23: b7:96:9c:57:f6:d3:55:c0:15:09:98:38:25:c6:22:53:4f:f8: 26:84:3e:5c:b2:f4:2b:f0:3b:41:9c:59:2b:bd:a1:1d:9f:7f: bd:e0:0b:be:cb:73:da:65:eb:9c:41:5a:9f:fb:2f:e9:3c:72: 3a:94:5a:ec:ca:0e:2a:55:1b:28:ed:98:00:29:65:ac:14:bc: cc:dd:7c:ec:a5:4a:55:50:2b:47:f2:1e:83:a6:a5:77:a2:d2: 43:42:91:19:88:70:99:19:54:79:22:39:9f:66:e5:7b:b7:09: ea:4e:f8:23:34:c8:5d:2e:25:1b:13:3d:50:f2:81:1a:66:de: 94:57:6c:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W+SaqLQL91ZMQ5k1La5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTBkZjgyMTIxNDM4MjcxYzkxM2MyNGZmNTBmZDNiNjJk NDBkYzYwHhcNMjYwMTAyMDYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGJjMzZkOGFkYjcyN2JjM2VlOTdjYzgwZTBlYmI0MDkyZDExYmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HrIk3od7hNyxuGuBFlhEe7NIeon FtuUbMonEIDn92HmF9Q5ccx64XxSdccpkNjEzDShJDXz37hKwKVevCnGkb5wURWo BpJRxZhTKtRfiWLqfH1MauHRhsPQTQalkD4+nYrQHupk+7fLAsHpUQxdwBQO8rht 2/7qlWPHkSUc5uOT+4DGka2wRQ/nahU+oc8ppQZCKCMIXHAzbD3jqz9LvQfDgrEh hoV+3m5fzZF+t01ZGBNHPJ8FRer6bBqg5DNVU+FVq2NEXONxGTYjNYOcZliOm/+s 9yKGdNuw7Rij7nhECzyoY0bd04wkM9UMt4QOALXWAt2uO9uQQ4iJmvhqUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPS8Ntittye8Pul8yA4Ou0CS0RuqMB8GA1UdIwQY MBaAFM/g34ISFDgnHJE8JP9Q/Tti1A3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMt ZjJjNzkyMmZhZjMyLzEvOUx3MjJLMjNKN3ctNlh6SURnNjdRSkxSRzZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yNjMzMWMtMzRhMS00YmM1LWI3NWMtZjJjNzkyMmZhZjMy LzEvei1EZmdoSVVPQ2Nja1R3a18xRDlPMkxVRGNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSjDMA0G CSqGSIb3DQEBCwUAA4IBAQAH2JDj8Wubr0eP+KSMkhQcqPK0lIur6ghVpOjOeCJV Cl1RxIXFFYZIAvToO/93FJQZ+D5opnuEBjyIF09AncRjcSWa5Lb51iHB7Hp2vc44 D4lPEllCGWOo4jve7VOwuL9u/Piev84I4+p+LTtjl+Po8jK4bjPywoVBUpLwPiO3 lpxX9tNVwBUJmDglxiJTT/gmhD5csvQr8DtBnFkrvaEdn3+94Au+y3PaZeucQVqf +y/pPHI6lFrsyg4qVRso7ZgAKWWsFLzM3XzspUpVUCtH8h6DpqV3otJDQpEZiHCZ GVR5IjmfZuV7twnqTvgjNMhdLiUbEz1Q8oEaZt6UV2zh -----END CERTIFICATE-----Generated at Tue Jan 20 04:43:02 2026 by rpki-client