This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/IjQ6OXkHd97zyTTXFkCYM_KMp5w.roa File: IjQ6OXkHd97zyTTXFkCYM_KMp5w.roa (raw, json) Hash identifier: 60iQn92KHp6H4icJkgsF/2o05bPMtszkQ7f+dqj/Mrs= Subject key identifier: 22:34:3A:39:79:07:77:DE:F3:C9:34:D7:16:40:98:33:F2:8C:A7:9C Certificate issuer: /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b Certificate serial: 019B7CECC3ADDADCD26E4837EF4D8527FE4B Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/IjQ6OXkHd97zyTTXFkCYM_KMp5w.roa Signing time: Fri 02 Jan 2026 04:17:29 +0000 ROA not before: Fri 02 Jan 2026 04:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208040 IP address blocks: 193.161.24.0/23 maxlen: 23 193.161.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c3:ad:da:dc:d2:6e:48:37:ef:4d:85:27:fe:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b Validity Not Before: Jan 2 04:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22343a39790777def3c934d716409833f28ca79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:46:55:f2:43:3d:da:d7:da:41:ec:45:09: f7:ea:4d:fb:95:ee:54:cf:43:8d:6a:ee:a8:42:b6: 95:e3:60:d6:a2:49:f6:16:a0:37:f4:e1:a1:85:6a: 72:81:04:8f:5f:44:64:7b:e4:27:77:73:30:15:08: 41:64:f5:9b:3a:6a:c4:a8:40:23:73:03:55:a5:1e: 94:a1:a1:88:a5:b0:30:61:d3:ef:9c:bb:71:ee:98: 56:ce:f9:7f:b7:10:b9:45:bd:4f:be:f1:19:03:97: 33:5c:39:06:f5:60:1b:80:81:5f:fa:98:db:01:75: 7f:9c:82:7e:90:39:c5:89:aa:90:24:e9:5c:aa:44: 0b:7d:86:ce:ad:2c:52:b8:8b:fa:ce:76:e8:ee:25: e7:05:1f:ee:05:78:41:2f:3c:a9:63:2c:c3:13:ba: 0a:2c:65:55:79:8b:d7:75:97:67:95:df:d2:f3:ed: bc:22:a6:88:18:0c:86:3f:f1:7b:a4:38:8d:fe:2a: 5d:39:cc:30:ed:75:39:46:6c:d6:32:c3:9e:af:09: 81:4d:7a:ba:fa:73:02:75:c8:26:ab:57:a4:39:f7: 1b:ec:d1:0a:a3:7e:0d:c6:06:30:01:fe:8d:2c:82: ae:00:a3:9e:3a:eb:06:77:46:4e:3e:7d:8b:10:72: 3e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:34:3A:39:79:07:77:DE:F3:C9:34:D7:16:40:98:33:F2:8C:A7:9C X509v3 Authority Key Identifier: keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/IjQ6OXkHd97zyTTXFkCYM_KMp5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.24.0/23 193.161.28.0/23 Signature Algorithm: sha256WithRSAEncryption 04:1f:c9:b0:39:ab:b4:cc:6c:4c:c4:95:5a:f7:81:5d:54:83: 7f:fc:a9:dd:7a:fc:a6:1f:11:06:9c:ad:35:41:d2:1b:d4:2b: 37:ba:32:2d:40:a2:57:5e:6b:43:4a:6a:07:e4:72:a8:68:2f: b2:1d:8b:9a:c4:79:aa:f6:9d:af:8e:74:e9:5a:46:e8:53:42: d4:d1:5c:90:3d:20:26:2e:d5:f1:9c:2c:f3:a3:a3:14:31:fd: de:3c:d1:1c:ee:a3:ca:34:fa:19:61:b4:41:83:bd:9f:4a:a9: 6e:96:f9:1d:62:e0:5e:98:4f:5b:e4:d0:e0:71:51:4a:ef:f9: fd:5c:b1:16:ed:91:9d:02:e7:33:54:2d:42:8c:a3:e0:f6:2d: 02:17:c2:5b:e7:63:17:1e:21:02:7a:98:1b:80:42:d0:23:57: 85:73:28:1e:b7:37:75:08:e9:f7:56:83:fd:4c:da:bf:51:e3: 46:0f:90:15:3c:c6:78:fa:f5:91:82:3d:16:6b:b6:df:91:38: ef:64:e7:b0:9b:36:9d:25:8d:f0:13:3e:90:90:c1:91:82:ef: 49:e1:91:04:0f:4c:f4:a4:82:ca:8d:f4:9c:2c:00:39:3b:ae: 87:dd:6c:21:ba:df:45:79:85:c6:59:c6:d2:e1:45:2a:54:8a: 6a:1c:2b:f9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt87MOt2tzSbkg3702FJ/5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2QyOTgwYzFjNzhiY2Y2YmI5YjgwYTA3OTIwNThiMGJj YWVkNGIwHhcNMjYwMTAyMDQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjM0M2EzOTc5MDc3N2RlZjNjOTM0ZDcxNjQwOTgzM2YyOGNhNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjBGVfJDPdrX2kHsRQn36k37le5U z0ONau6oQraV42DWokn2FqA39OGhhWpygQSPX0Rke+Qnd3MwFQhBZPWbOmrEqEAj cwNVpR6UoaGIpbAwYdPvnLtx7phWzvl/txC5Rb1PvvEZA5czXDkG9WAbgIFf+pjb AXV/nIJ+kDnFiaqQJOlcqkQLfYbOrSxSuIv6znbo7iXnBR/uBXhBLzypYyzDE7oK LGVVeYvXdZdnld/S8+28IqaIGAyGP/F7pDiN/ipdOcww7XU5RmzWMsOerwmBTXq6 +nMCdcgmq1ekOfcb7NEKo34NxgYwAf6NLIKuAKOeOusGd0ZOPn2LEHI+cwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCI0Ojl5B3fe88k01xZAmDPyjKecMB8GA1UdIwQY MBaAFPnNKYDBx4vPa7m4CgeSBYsLyu1LMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jMHBnTUhIaTg5cnViZ0tCNUlGaXd2SzdVcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYzg3OTdiLTAyZTAtNDcxOC1iZGZk LTA5MjljYmNkYjdhYS8xL0lqUTZPWGtIZDk3enlUVFhGa0NZTV9LTXA1dy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzIvYzg3OTdiLTAyZTAtNDcxOC1iZGZkLTA5MjljYmNkYjdh YS8xLzEtYzBwZ01ISGk4OXJ1YmdLQjVJRml3dks3VXMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAHBoRgD BAHBoRwwDQYJKoZIhvcNAQELBQADggEBAAQfybA5q7TMbEzElVr3gV1Ug3/8qd16 /KYfEQacrTVB0hvUKze6Mi1Aoldea0NKagfkcqhoL7Idi5rEear2na+OdOlaRuhT QtTRXJA9ICYu1fGcLPOjoxQx/d480Rzuo8o0+hlhtEGDvZ9KqW6W+R1i4F6YT1vk 0OBxUUrv+f1csRbtkZ0C5zNULUKMo+D2LQIXwlvnYxceIQJ6mBuAQtAjV4VzKB63 N3UI6fdWg/1M2r9R40YPkBU8xnj69ZGCPRZrtt+ROO9k57CbNp0ljfATPpCQwZGC 70nhkQQPTPSkgsqN9JwsADk7rofdbCG630V5hcZZxtLhRSpUimocK/k= -----END CERTIFICATE-----Generated at Mon Jan 26 21:47:48 2026 by rpki-client