This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/R9AugSjZGtUl5QbJDGzLrOo7kiQ.roa File: R9AugSjZGtUl5QbJDGzLrOo7kiQ.roa (raw, json) Hash identifier: YTaVUJzrgCb6My35bkphRPYRR1OsleBskFVV/X+sjdQ= Subject key identifier: 47:D0:2E:81:28:D9:1A:D5:25:E5:06:C9:0C:6C:CB:AC:EA:3B:92:24 Certificate issuer: /CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3 Certificate serial: 019B79ED04B18B57BA4BA07CBC9B49A47474 Authority key identifier: CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/R9AugSjZGtUl5QbJDGzLrOo7kiQ.roa Signing time: Thu 01 Jan 2026 14:18:54 +0000 ROA not before: Thu 01 Jan 2026 14:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198012 IP address blocks: 178.255.24.0/21 maxlen: 21 2a13:4540::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.mft rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:04:b1:8b:57:ba:4b:a0:7c:bc:9b:49:a4:74:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb6bf2b89584ec96080048dc3fdc2e3983c277f3 Validity Not Before: Jan 1 14:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47d02e8128d91ad525e506c90c6ccbacea3b9224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:f7:33:68:12:5a:e6:66:55:7b:a0:a5:a5: 46:4d:bb:50:6a:c9:e8:f6:34:96:92:d0:1a:d6:36: 5b:49:7b:33:a9:1f:be:70:cb:03:e7:10:9d:74:69: 57:b4:d1:aa:1e:9b:a4:28:a5:97:4d:1f:39:60:52: f6:4c:f9:20:48:0a:3e:22:c0:af:b0:97:48:af:3b: 81:a2:e9:31:92:93:7b:0b:e5:7b:df:66:48:49:94: 8b:13:c8:8f:18:0b:37:b5:de:dd:c6:77:f5:ad:93: 0c:6d:2f:f0:34:53:27:cf:66:df:64:ed:50:70:55: 1d:f4:b8:d7:d8:d7:1f:5f:52:6b:4c:23:77:b7:6b: 96:08:87:f0:c7:07:41:54:ab:88:fe:64:be:f2:bd: 5a:dc:b6:ed:f2:a9:bf:43:f3:77:c6:e2:78:09:d8: a2:d6:3e:da:85:56:80:f8:be:94:83:b7:fa:52:5d: e9:97:52:58:f2:b0:d4:77:68:01:ae:56:c7:0f:78: ba:e4:5d:09:4f:e7:4b:b2:2e:32:30:50:41:6e:51: 6b:17:d9:a7:f3:97:3e:fd:2e:e1:23:90:fb:d7:a7: 49:e4:22:91:5b:10:1b:7c:16:4a:97:c6:b5:6d:1b: c4:55:c2:f8:a9:53:d0:bc:ab:25:b5:2c:ba:bc:29: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D0:2E:81:28:D9:1A:D5:25:E5:06:C9:0C:6C:CB:AC:EA:3B:92:24 X509v3 Authority Key Identifier: keyid:CB:6B:F2:B8:95:84:EC:96:08:00:48:DC:3F:DC:2E:39:83:C2:77:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2vyuJWE7JYIAEjcP9wuOYPCd_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/R9AugSjZGtUl5QbJDGzLrOo7kiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6a87f1-e197-4a23-953d-10fdfce94513/1/y2vyuJWE7JYIAEjcP9wuOYPCd_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.24.0/21 IPv6: 2a13:4540::/29 Signature Algorithm: sha256WithRSAEncryption 39:27:06:bc:e8:16:9b:4c:b2:29:e8:36:e0:23:43:82:29:3a: 21:f3:c3:17:65:8d:3d:c2:95:45:f7:83:07:f0:31:55:b3:b2: 47:6f:ce:a2:bb:66:8a:7e:4c:11:e1:dc:03:27:f5:fe:cc:d3: fe:c5:27:4c:04:ef:3c:c4:05:c3:27:16:5c:39:5d:26:1e:3f: 32:fc:78:71:b9:3e:b0:70:44:fd:68:46:1c:18:27:00:06:2c: 01:5b:07:3f:bc:5f:a4:75:9b:ab:b3:ae:02:10:88:97:f7:4c: 80:ea:78:96:3b:e8:13:b5:df:12:87:5e:ec:8f:54:5b:13:7b: a9:00:24:dd:c6:ac:fd:87:de:3b:28:5a:a5:36:8f:bb:8d:42: b2:87:c5:db:5d:5d:05:b3:ac:c0:45:82:da:4c:a9:e1:b6:bc: 00:59:6f:be:fd:07:76:00:bd:6e:4d:18:d0:d4:26:c6:5e:be: b1:be:f7:f8:4d:bb:dc:d1:a5:98:92:22:23:10:89:8e:1b:9e: cd:63:e9:8a:32:22:aa:34:9f:b5:bb:eb:fe:73:9a:b8:19:03: 2b:2a:d7:23:0c:d2:7c:ac:ef:63:05:58:b0:05:bd:8d:4c:be: 24:2c:85:0a:96:bf:fd:0b:d3:a5:0a:4d:da:d7:a9:70:e1:ea: 7e:cc:db:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57QSxi1e6S6B8vJtJpHR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiNmJmMmI4OTU4NGVjOTYwODAwNDhkYzNmZGMyZTM5ODNj Mjc3ZjMwHhcNMjYwMTAxMTQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2QwMmU4MTI4ZDkxYWQ1MjVlNTA2YzkwYzZjY2JhY2VhM2I5MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO73M2gSWuZmVXugpaVGTbtQasno 9jSWktAa1jZbSXszqR++cMsD5xCddGlXtNGqHpukKKWXTR85YFL2TPkgSAo+IsCv sJdIrzuBoukxkpN7C+V732ZISZSLE8iPGAs3td7dxnf1rZMMbS/wNFMnz2bfZO1Q cFUd9LjX2NcfX1JrTCN3t2uWCIfwxwdBVKuI/mS+8r1a3Lbt8qm/Q/N3xuJ4Cdii 1j7ahVaA+L6Ug7f6Ul3pl1JY8rDUd2gBrlbHD3i65F0JT+dLsi4yMFBBblFrF9mn 85c+/S7hI5D716dJ5CKRWxAbfBZKl8a1bRvEVcL4qVPQvKsltSy6vClXwwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEfQLoEo2RrVJeUGyQxsy6zqO5IkMB8GA1UdIwQY MBaAFMtr8riVhOyWCABI3D/cLjmDwnfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2Qt MTBmZGZjZTk0NTEzLzEvUjlBdWdTalpHdFVsNVFiSkRHekxyT283a2lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82YTg3ZjEtZTE5Ny00YTIzLTk1M2QtMTBmZGZjZTk0NTEz LzEveTJ2eXVKV0U3SllJQUVqY1A5d3VPWVBDZF9NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDsv8YMA0E AgACMAcDBQMqE0VAMA0GCSqGSIb3DQEBCwUAA4IBAQA5Jwa86BabTLIp6DbgI0OC KToh88MXZY09wpVF94MH8DFVs7JHb86iu2aKfkwR4dwDJ/X+zNP+xSdMBO88xAXD JxZcOV0mHj8y/HhxuT6wcET9aEYcGCcABiwBWwc/vF+kdZurs64CEIiX90yA6niW O+gTtd8Sh17sj1RbE3upACTdxqz9h947KFqlNo+7jUKyh8XbXV0Fs6zARYLaTKnh trwAWW++/Qd2AL1uTRjQ1CbGXr6xvvf4Tbvc0aWYkiIjEImOG57NY+mKMiKqNJ+1 u+v+c5q4GQMrKtcjDNJ8rO9jBViwBb2NTL4kLIUKlr/9C9OlCk3a16lw4ep+zNt5 -----END CERTIFICATE-----Generated at Tue Feb 10 06:02:50 2026 by rpki-client