This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/c9tDeMPTH5mlJ0EdMGvrzteTxhc.roa File: c9tDeMPTH5mlJ0EdMGvrzteTxhc.roa (raw, json) Hash identifier: zl7915Lf0abpky3RCa7AEvnrzE92IFir8OeFbsq9Nu0= Subject key identifier: 73:DB:43:78:C3:D3:1F:99:A5:27:41:1D:30:6B:EB:CE:D7:93:C6:17 Certificate issuer: /CN=5b95a94adad3a2896c72074d667c1b62075958cb Certificate serial: 019B7EA50B0E57DD887ADC064A56E7CDC9BE Authority key identifier: 5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/c9tDeMPTH5mlJ0EdMGvrzteTxhc.roa Signing time: Fri 02 Jan 2026 12:18:24 +0000 ROA not before: Fri 02 Jan 2026 12:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34933 IP address blocks: 193.238.224.0/24 maxlen: 24 193.238.225.0/24 maxlen: 24 193.238.226.0/24 maxlen: 24 193.238.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:0b:0e:57:dd:88:7a:dc:06:4a:56:e7:cd:c9:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b95a94adad3a2896c72074d667c1b62075958cb Validity Not Before: Jan 2 12:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73db4378c3d31f99a527411d306bebced793c617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:f9:e0:79:ae:c2:51:aa:8e:bd:d6:0e:82: 1b:b0:88:90:24:41:06:d4:b1:c8:a9:7c:7e:57:81: 91:80:1e:17:6f:19:91:f0:60:96:32:15:58:70:41: 3c:f9:ee:f2:3f:34:3f:37:3e:ef:c3:c9:ec:44:64: 33:6f:ed:e9:d6:4e:b4:b2:73:4f:eb:a0:0b:30:56: 2b:98:82:d9:3b:c9:f2:9c:1e:d3:79:65:ea:2d:63: fd:ed:fa:30:13:16:11:05:d3:e4:0b:89:1e:56:13: 8e:8e:11:f4:5e:c9:ab:5d:e0:be:8e:99:ac:49:4c: ac:45:f1:b0:e3:33:7d:b1:b3:f0:79:8d:ee:94:78: 43:7d:5e:d5:11:9a:e3:58:aa:24:80:b6:e8:c3:d9: 06:5e:75:fd:81:0c:c0:cc:98:8d:58:93:e5:ea:7f: b1:5b:5e:82:7c:c6:53:04:66:3e:ad:ec:7c:24:eb: 1e:93:44:e6:fb:54:42:7f:0a:49:72:11:95:88:07: 04:c4:d7:e3:c5:c0:35:a6:29:17:23:6c:e0:af:2a: 79:ed:21:e1:b2:52:63:30:7d:db:6f:c9:68:da:63: f5:c8:42:95:a5:61:d4:7e:99:6b:af:0b:66:91:0d: c6:e3:74:cb:25:b9:36:31:63:8d:34:31:8d:67:cd: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DB:43:78:C3:D3:1F:99:A5:27:41:1D:30:6B:EB:CE:D7:93:C6:17 X509v3 Authority Key Identifier: keyid:5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/c9tDeMPTH5mlJ0EdMGvrzteTxhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.238.224.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:bf:4c:fa:b2:2b:04:85:53:04:4f:06:31:c0:31:66:f1:68: 83:95:0b:05:a6:36:ac:12:29:14:d1:30:82:c1:af:64:de:04: a2:ef:ca:f2:b3:3c:6f:2b:0d:38:59:d5:74:2b:ce:db:a9:cf: 0f:68:c6:1b:2d:95:0e:f0:f2:63:a6:f8:6e:b8:b7:9d:d1:93: 65:d8:f2:78:81:76:23:01:16:e7:a0:8e:29:c3:62:f7:62:31: 81:a9:8a:b0:55:49:c3:a4:2f:a2:ea:df:01:1f:db:a4:d2:a2: 84:26:7c:5d:81:18:72:fa:06:af:53:27:6d:59:66:ce:dd:57: 38:6b:4d:e2:91:8c:3a:9f:05:22:1e:b0:1f:1f:07:4b:a0:2a: 34:06:18:97:08:c9:84:78:b2:d0:2a:35:fd:5f:b0:58:b0:84: 72:32:eb:4e:ca:ea:e0:85:1d:69:33:67:55:9a:4d:82:ae:6b: 30:0e:35:ab:42:1d:05:a6:5d:8b:30:18:c8:81:ba:5e:59:30: e0:b3:0f:fb:f8:9f:9a:d5:80:0a:d1:33:b4:c3:d8:a3:20:02: ac:4f:4a:d9:90:b5:81:e2:c6:65:04:d0:f1:2b:e6:5b:52:0a: ab:b5:60:d0:75:33:04:15:62:88:af:b5:06:1c:0d:f7:af:b1: 3a:99:0f:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pQsOV92IetwGSlbnzcm+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOTVhOTRhZGFkM2EyODk2YzcyMDc0ZDY2N2MxYjYyMDc1 OTU4Y2IwHhcNMjYwMTAyMTIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2RiNDM3OGMzZDMxZjk5YTUyNzQxMWQzMDZiZWJjZWQ3OTNjNjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOL54HmuwlGqjr3WDoIbsIiQJEEG 1LHIqXx+V4GRgB4XbxmR8GCWMhVYcEE8+e7yPzQ/Nz7vw8nsRGQzb+3p1k60snNP 66ALMFYrmILZO8nynB7TeWXqLWP97fowExYRBdPkC4keVhOOjhH0XsmrXeC+jpms SUysRfGw4zN9sbPweY3ulHhDfV7VEZrjWKokgLbow9kGXnX9gQzAzJiNWJPl6n+x W16CfMZTBGY+rex8JOsek0Tm+1RCfwpJchGViAcExNfjxcA1pikXI2zgryp57SHh slJjMH3bb8lo2mP1yEKVpWHUfplrrwtmkQ3G43TLJbk2MWONNDGNZ81w2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHPbQ3jD0x+ZpSdBHTBr687Xk8YXMB8GA1UdIwQY MBaAFFuVqUra06KJbHIHTWZ8G2IHWVjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84Mzk5MjUtMTU1NS00ZmY2LWJjNDYt N2ZlYWI0OGVlZTYxLzEvYzl0RGVNUFRINW1sSjBFZE1HdnJ6dGVUeGhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84Mzk5MjUtMTU1NS00ZmY2LWJjNDYtN2ZlYWI0OGVlZTYx LzEvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwe7gMA0G CSqGSIb3DQEBCwUAA4IBAQCav0z6sisEhVMETwYxwDFm8WiDlQsFpjasEikU0TCC wa9k3gSi78ryszxvKw04WdV0K87bqc8PaMYbLZUO8PJjpvhuuLed0ZNl2PJ4gXYj ARbnoI4pw2L3YjGBqYqwVUnDpC+i6t8BH9uk0qKEJnxdgRhy+gavUydtWWbO3Vc4 a03ikYw6nwUiHrAfHwdLoCo0BhiXCMmEeLLQKjX9X7BYsIRyMutOyurghR1pM2dV mk2CrmswDjWrQh0Fpl2LMBjIgbpeWTDgsw/7+J+a1YAK0TO0w9ijIAKsT0rZkLWB 4sZlBNDxK+ZbUgqrtWDQdTMEFWKIr7UGHA33r7E6mQ+E -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:48 2026 by rpki-client