This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/9BS73zT8elgHSFWB2XKVNWna2Io.roa File: 9BS73zT8elgHSFWB2XKVNWna2Io.roa (raw, json) Hash identifier: dMgGKFoR9nggKEcsSk882TEsR7putIwtiK3QsXiPLeY= Subject key identifier: F4:14:BB:DF:34:FC:7A:58:07:48:55:81:D9:72:95:35:69:DA:D8:8A Certificate issuer: /CN=be84ae7c0503ac450934c9f6cff39a1537a5126d Certificate serial: 019B797DFA6F685B93A343053248AB26FF9D Authority key identifier: BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/9BS73zT8elgHSFWB2XKVNWna2Io.roa Signing time: Thu 01 Jan 2026 12:17:37 +0000 ROA not before: Thu 01 Jan 2026 12:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56469 IP address blocks: 193.22.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.mft rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fa:6f:68:5b:93:a3:43:05:32:48:ab:26:ff:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be84ae7c0503ac450934c9f6cff39a1537a5126d Validity Not Before: Jan 1 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f414bbdf34fc7a5807485581d972953569dad88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:14:b0:ab:b7:8d:b7:fc:61:21:e7:e3:94:df: b9:55:bd:c4:0d:c7:3f:35:c7:e7:ed:92:5e:a2:04: 96:df:b0:7a:8c:40:44:9d:59:31:c8:cf:ad:48:a8: 65:13:6b:5a:6a:ae:4c:28:22:76:6b:9f:32:5d:76: dd:23:dc:ff:8b:7e:29:27:b4:0c:e1:53:8f:ea:3c: 3a:f4:e2:ef:ff:9c:99:b4:ac:9a:34:a6:a8:50:57: 9f:f4:a0:79:bb:f0:51:49:65:6b:51:c6:80:df:75: 42:4f:0a:2f:c6:c0:67:5b:a6:d0:ad:7b:f4:8b:f0: 88:ad:78:03:a5:a9:e6:a0:60:c7:00:7e:cd:fe:23: a0:b8:a3:8d:39:f2:6b:d0:57:05:9d:d8:0d:e2:5f: 22:a2:25:25:f4:80:80:85:e6:bd:14:6f:65:83:97: 7a:f4:3f:40:14:d7:29:2a:44:f9:69:9c:f0:94:e3: 94:fd:3f:1c:e6:21:4a:90:6b:1a:be:b6:9c:9b:bd: cc:98:75:83:37:6e:00:ed:a2:95:22:b2:9a:26:f8: 56:dc:c2:42:ef:72:d1:46:ae:b8:7e:c7:5c:fa:fb: c5:ed:85:b7:bd:be:68:ba:a6:d8:10:f7:be:1a:68: 52:c8:00:51:c5:a0:09:0e:b9:d7:2c:24:cc:b0:a6: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:14:BB:DF:34:FC:7A:58:07:48:55:81:D9:72:95:35:69:DA:D8:8A X509v3 Authority Key Identifier: keyid:BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/9BS73zT8elgHSFWB2XKVNWna2Io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.128.0/24 Signature Algorithm: sha256WithRSAEncryption 17:2a:98:f7:75:02:e7:7f:d7:23:8e:4f:06:fc:15:da:c3:bf: 96:fe:17:3e:3c:5e:58:46:21:9e:57:99:a1:61:a8:43:2b:f4: 83:36:c8:1f:03:ea:57:33:e9:fd:ec:b5:fb:35:e0:a9:a4:30: e5:af:ee:ea:5d:0f:3b:45:38:d9:2f:d1:60:61:ca:94:2e:27: 10:86:99:4f:4a:76:9f:0c:e9:02:63:1d:a8:8a:6d:f4:99:10: 01:1c:cc:40:d0:27:32:3d:a0:c7:c5:98:03:c4:dd:02:34:26: 58:cb:24:0c:1d:89:ee:c5:ad:7f:d0:57:de:87:1c:0c:ac:ae: 35:bc:29:c3:7f:da:60:af:e8:ba:95:0f:06:ca:3b:1d:10:d8: 90:d1:d6:36:8f:9a:f5:8b:e9:72:0a:4a:e5:e0:bb:6b:ec:db: 38:c7:9e:50:21:92:f7:aa:12:1b:40:3d:d3:3e:96:4d:a5:5b: 17:16:8c:fd:74:db:1c:fd:67:13:97:24:30:2b:84:9a:b1:03: df:a2:3f:6b:35:15:da:09:e9:8e:a6:e4:27:8e:43:78:3b:0f: b9:20:e1:9b:76:36:78:3e:d0:7f:e3:17:9c:d5:9f:9c:98:bb: 96:23:9b:71:70:37:99:37:d3:50:a3:ef:f2:64:4c:d0:b5:f9: 9a:23:09:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffpvaFuTo0MFMkirJv+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlODRhZTdjMDUwM2FjNDUwOTM0YzlmNmNmZjM5YTE1Mzdh NTEyNmQwHhcNMjYwMTAxMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDE0YmJkZjM0ZmM3YTU4MDc0ODU1ODFkOTcyOTUzNTY5ZGFkODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBSwq7eNt/xhIefjlN+5Vb3EDcc/ Ncfn7ZJeogSW37B6jEBEnVkxyM+tSKhlE2taaq5MKCJ2a58yXXbdI9z/i34pJ7QM 4VOP6jw69OLv/5yZtKyaNKaoUFef9KB5u/BRSWVrUcaA33VCTwovxsBnW6bQrXv0 i/CIrXgDpanmoGDHAH7N/iOguKONOfJr0FcFndgN4l8ioiUl9ICAhea9FG9lg5d6 9D9AFNcpKkT5aZzwlOOU/T8c5iFKkGsavracm73MmHWDN24A7aKVIrKaJvhW3MJC 73LRRq64fsdc+vvF7YW3vb5ouqbYEPe+GmhSyABRxaAJDrnXLCTMsKbpHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPQUu980/HpYB0hVgdlylTVp2tiKMB8GA1UdIwQY MBaAFL6ErnwFA6xFCTTJ9s/zmhU3pRJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm9TdWZBVURyRVVKTk1uMnpfT2FGVGVsRW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hMjA0YTUtMTk1MC00YjQ0LWFjOTAt ODFhMmIzNDdkYTg0LzEvOUJTNzN6VDhlbGdIU0ZXQjJYS1ZOV25hMklvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hMjA0YTUtMTk1MC00YjQ0LWFjOTAtODFhMmIzNDdkYTg0 LzEvdm9TdWZBVURyRVVKTk1uMnpfT2FGVGVsRW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRaAMA0G CSqGSIb3DQEBCwUAA4IBAQAXKpj3dQLnf9cjjk8G/BXaw7+W/hc+PF5YRiGeV5mh YahDK/SDNsgfA+pXM+n97LX7NeCppDDlr+7qXQ87RTjZL9FgYcqULicQhplPSnaf DOkCYx2oim30mRABHMxA0CcyPaDHxZgDxN0CNCZYyyQMHYnuxa1/0FfehxwMrK41 vCnDf9pgr+i6lQ8GyjsdENiQ0dY2j5r1i+lyCkrl4Ltr7Ns4x55QIZL3qhIbQD3T PpZNpVsXFoz9dNsc/WcTlyQwK4SasQPfoj9rNRXaCemOpuQnjkN4Ow+5IOGbdjZ4 PtB/4xec1Z+cmLuWI5txcDeZN9NQo+/yZEzQtfmaIwk8 -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:04 2026 by rpki-client