This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/k9qT9L4oiwVVutgZqw2789sZSpM.roa File: k9qT9L4oiwVVutgZqw2789sZSpM.roa (raw, json) Hash identifier: 4bUe/2Ktq9Rh6ybQkPrFIzkqDQmO7L4EaOmWWLO3Ybw= Subject key identifier: 93:DA:93:F4:BE:28:8B:05:55:BA:D8:19:AB:0D:BB:F3:DB:19:4A:93 Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019B7B36AD4305D398EAB29ADCB593EAE521 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/k9qT9L4oiwVVutgZqw2789sZSpM.roa Signing time: Thu 01 Jan 2026 20:18:59 +0000 ROA not before: Thu 01 Jan 2026 20:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42728 IP address blocks: 193.232.231.0/24 maxlen: 24 2001:67c:1212::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ad:43:05:d3:98:ea:b2:9a:dc:b5:93:ea:e5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 1 20:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93da93f4be288b0555bad819ab0dbbf3db194a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:11:f9:bf:fd:ab:7f:35:70:ba:99:35:a7:39: 7f:8a:98:f4:de:a3:e3:56:bf:1b:5f:93:a2:c0:7b: ab:b8:5b:90:32:f6:c8:8f:01:01:3a:f2:8e:50:77: 58:5c:01:ab:27:1c:7f:ef:af:4a:0a:74:ae:15:60: 0c:35:3f:f7:cb:51:6e:02:87:24:bd:25:b0:54:f3: 88:b1:e3:e2:bc:d2:97:6a:39:16:d3:dd:17:ca:b9: 40:31:aa:a9:c5:46:9a:aa:4d:84:f4:ab:57:33:89: 23:b4:49:ef:7c:d2:9d:f4:38:55:4c:02:05:8a:d8: 19:e7:97:5e:b2:78:a4:67:f7:76:c2:6e:d4:6f:3b: e8:68:28:05:8b:05:c9:78:35:30:94:b2:b9:8f:02: c4:ff:ef:39:e9:87:9a:c9:00:51:60:89:ec:1b:c8: 97:c1:17:56:a3:88:0b:82:64:4e:28:2a:7b:e7:43: a3:7a:f5:9a:42:05:9d:6d:3c:c1:f3:88:3a:63:df: 24:fa:47:43:f7:93:2f:01:7e:b6:67:46:95:db:96: ac:90:83:b9:85:be:cf:94:6a:4b:29:d6:19:a2:60: 30:72:97:50:67:fb:29:ef:5e:c0:1e:70:b0:b3:3b: c9:0f:40:09:d0:33:3a:92:77:11:1f:32:fd:3c:44: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DA:93:F4:BE:28:8B:05:55:BA:D8:19:AB:0D:BB:F3:DB:19:4A:93 X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/k9qT9L4oiwVVutgZqw2789sZSpM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.231.0/24 IPv6: 2001:67c:1212::/48 Signature Algorithm: sha256WithRSAEncryption 78:6a:67:db:98:65:ee:6b:0a:6a:ee:f2:3a:00:3d:68:d6:e2: 12:a1:6a:91:22:85:16:9b:f6:d8:4a:e5:9f:ac:8b:35:1d:c0: f5:3b:98:50:a0:7e:77:fd:f7:4f:b4:d4:8a:2c:cd:50:fb:ca: 78:38:29:c6:21:62:81:51:26:d7:86:6f:1b:e0:8c:5f:53:57: 12:6e:69:ce:6a:c7:1e:bf:0c:c2:4e:62:97:85:a2:d5:44:88: 5f:dd:6d:a6:5a:a3:33:bc:49:e8:b5:42:7c:bd:e4:d4:7d:d1: 25:58:93:19:ca:56:56:06:38:2d:e1:3f:98:d2:bc:d1:26:2e: 07:c2:14:9a:b6:3c:79:9f:0d:5a:c4:c1:f8:f5:7b:0b:86:d8: fa:87:45:52:68:dd:a1:d4:e4:26:6c:ee:65:3b:19:15:0a:db: 06:49:f7:9b:a7:a0:a5:34:8b:99:cf:fa:bb:71:36:a4:18:6b: e5:e0:a7:22:2d:ae:25:bc:73:c1:fc:3f:93:57:c1:3c:7e:a1: 2b:a2:a2:56:bd:05:84:06:d6:d7:9e:a1:a6:58:80:8f:3c:ae: 53:95:33:06:5d:c1:a7:17:81:c5:de:58:9b:38:b9:1e:90:03: 2c:dc:3d:77:06:83:c3:85:94:b4:aa:35:da:05:86:40:bc:61: 75:f5:02:b4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7Nq1DBdOY6rKa3LWT6uUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTAxMjAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2RhOTNmNGJlMjg4YjA1NTViYWQ4MTlhYjBkYmJmM2RiMTk0YTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hH5v/2rfzVwupk1pzl/ipj03qPj Vr8bX5OiwHuruFuQMvbIjwEBOvKOUHdYXAGrJxx/769KCnSuFWAMNT/3y1FuAock vSWwVPOIsePivNKXajkW090XyrlAMaqpxUaaqk2E9KtXM4kjtEnvfNKd9DhVTAIF itgZ55desnikZ/d2wm7UbzvoaCgFiwXJeDUwlLK5jwLE/+856YeayQBRYInsG8iX wRdWo4gLgmROKCp750OjevWaQgWdbTzB84g6Y98k+kdD95MvAX62Z0aV25askIO5 hb7PlGpLKdYZomAwcpdQZ/sp717AHnCwszvJD0AJ0DM6kncRHzL9PESgHwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJPak/S+KIsFVbrYGasNu/PbGUqTMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvazlxVDlMNG9pd1ZWdXRnWnF3Mjc4OXNaU3BNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwejnMA8E AgACMAkDBwAgAQZ8EhIwDQYJKoZIhvcNAQELBQADggEBAHhqZ9uYZe5rCmru8joA PWjW4hKhapEihRab9thK5Z+sizUdwPU7mFCgfnf990+01IoszVD7yng4KcYhYoFR JteGbxvgjF9TVxJuac5qxx6/DMJOYpeFotVEiF/dbaZaozO8Sei1Qny95NR90SVY kxnKVlYGOC3hP5jSvNEmLgfCFJq2PHmfDVrEwfj1ewuG2PqHRVJo3aHU5CZs7mU7 GRUK2wZJ95unoKU0i5nP+rtxNqQYa+XgpyItriW8c8H8P5NXwTx+oSuiola9BYQG 1teeoaZYgI88rlOVMwZdwacXgcXeWJs4uR6QAyzcPXcGg8OFlLSqNdoFhkC8YXX1 ArQ= -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:12 2026 by rpki-client