This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/K9_4CpntBLOvMEDnKhqNBu7SoZA.roa File: K9_4CpntBLOvMEDnKhqNBu7SoZA.roa (raw, json) Hash identifier: OTRSlqVwxM3FVwoxRVSPz7oWV0SpiqYOgPWN/+iIXpM= Subject key identifier: 2B:DF:F8:0A:99:ED:04:B3:AF:30:40:E7:2A:1A:8D:06:EE:D2:A1:90 Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35 Certificate serial: 019B7A5B733B2F267BDEA1737CCDF598BD0C Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/K9_4CpntBLOvMEDnKhqNBu7SoZA.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210653 IP address blocks: 194.8.86.0/23 maxlen: 24 194.9.0.0/23 maxlen: 24 2a0f:ee80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:73:3b:2f:26:7b:de:a1:73:7c:cd:f5:98:bd:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bdff80a99ed04b3af3040e72a1a8d06eed2a190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:95:5a:ad:79:f4:b0:ce:6a:e7:88:3d:a8:a8: dd:58:8e:06:5d:60:29:4d:ee:b3:9c:c8:50:12:ac: f0:ed:a4:50:7f:4e:e9:69:12:23:81:7f:5e:38:91: 5b:ea:93:d8:f5:4e:6a:08:bb:e1:c2:e4:c8:f2:8c: c0:5f:be:83:8d:44:3c:3a:a5:36:e3:30:9e:e1:97: b7:49:e1:03:c1:a9:3c:bd:d1:55:56:50:15:25:94: 81:36:cf:a0:8c:3b:1e:93:4c:3e:e6:5e:7b:11:46: 95:ef:c2:c7:59:8d:d4:63:68:e9:77:8a:d0:77:97: 95:0e:7c:55:9a:7d:a1:c3:da:04:b7:6b:e2:69:3e: 38:e2:ef:ef:dd:cd:0e:98:ec:3d:35:fa:c9:b5:49: ba:bd:99:9f:56:1b:61:32:25:a0:34:2f:12:24:b5: 88:67:c8:72:87:e5:07:d4:79:a1:24:53:27:db:2b: 03:11:66:41:f1:b4:ab:e1:5b:9f:28:26:6e:d3:4b: f2:ad:4e:d5:46:5a:fc:07:19:17:df:80:49:ba:9b: 15:ad:b9:e6:70:49:11:a2:52:29:25:5d:05:88:ad: 38:1f:d9:49:c6:d6:94:bb:9e:b1:5b:90:59:44:05: 06:75:fc:54:38:47:43:d6:a5:58:32:00:ab:71:da: 1c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DF:F8:0A:99:ED:04:B3:AF:30:40:E7:2A:1A:8D:06:EE:D2:A1:90 X509v3 Authority Key Identifier: keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/K9_4CpntBLOvMEDnKhqNBu7SoZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.86.0/23 194.9.0.0/23 IPv6: 2a0f:ee80::/29 Signature Algorithm: sha256WithRSAEncryption 7e:f4:48:ba:29:ac:a7:bc:bc:47:4d:aa:88:ce:6a:8f:40:1e: 0f:ea:95:c6:1d:de:2d:30:41:b6:96:02:05:be:eb:1b:82:2d: 3e:52:cb:9d:05:d4:72:b0:99:7a:52:d0:9e:10:a8:86:3b:fe: 22:33:3d:3c:43:f3:e7:7e:31:d7:c8:37:f9:16:d8:b5:0e:52: 4a:9b:35:18:e4:41:e6:3f:17:42:1e:f9:e5:d1:43:69:0f:e3: 6b:1a:20:ff:47:6a:07:eb:54:bb:22:1a:a0:8a:b7:bd:8e:f7: fc:ad:f3:09:9b:68:ba:db:6d:9b:f0:a2:36:65:b4:f8:66:37: 9c:0e:2e:ba:09:b6:b1:70:b4:ae:31:8a:84:e6:ab:f2:a0:a8: 34:95:75:24:b9:39:de:f4:2c:e7:c7:78:0d:86:5f:06:c9:62: 45:83:b5:09:ca:50:cc:d4:9b:d6:a8:15:e1:c3:3f:e1:bd:9f: ec:0a:52:6c:17:5c:d6:0b:c4:6b:6c:4f:a3:9f:35:ff:d1:ea: b3:1c:56:71:3c:f5:37:84:71:33:5a:26:95:7b:ba:d1:90:65: 8b:69:9d:c9:95:a2:52:2b:31:61:18:87:42:70:38:1b:d2:bd: 20:6b:fe:c0:75:2b:72:30:b2:b8:ee:39:f6:e0:2c:e2:ba:8f: e7:48:84:01 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W3M7LyZ73qFzfM31mL0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzI2YTk2MTMzNmZiZTc4MjBiM2Q3NDhlODEyZjQ5NWM4 NzJkMzUwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmRmZjgwYTk5ZWQwNGIzYWYzMDQwZTcyYTFhOGQwNmVlZDJhMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpVarXn0sM5q54g9qKjdWI4GXWAp Te6znMhQEqzw7aRQf07paRIjgX9eOJFb6pPY9U5qCLvhwuTI8ozAX76DjUQ8OqU2 4zCe4Ze3SeEDwak8vdFVVlAVJZSBNs+gjDsek0w+5l57EUaV78LHWY3UY2jpd4rQ d5eVDnxVmn2hw9oEt2viaT444u/v3c0OmOw9NfrJtUm6vZmfVhthMiWgNC8SJLWI Z8hyh+UH1HmhJFMn2ysDEWZB8bSr4VufKCZu00vyrU7VRlr8BxkX34BJupsVrbnm cEkRolIpJV0FiK04H9lJxtaUu56xW5BZRAUGdfxUOEdD1qVYMgCrcdocmwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCvf+AqZ7QSzrzBA5yoajQbu0qGQMB8GA1UdIwQY MBaAFGlyapYTNvvnggs9dI6BL0lchy01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUt YzAxNjZkOTcwMTBkLzEvSzlfNENwbnRCTE92TUVEbktocU5CdTdTb1pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUtYzAxNjZkOTcwMTBk LzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwghWAwQB wgkAMA0EAgACMAcDBQMqD+6AMA0GCSqGSIb3DQEBCwUAA4IBAQB+9Ei6KaynvLxH TaqIzmqPQB4P6pXGHd4tMEG2lgIFvusbgi0+UsudBdRysJl6UtCeEKiGO/4iMz08 Q/PnfjHXyDf5Fti1DlJKmzUY5EHmPxdCHvnl0UNpD+NrGiD/R2oH61S7Ihqgire9 jvf8rfMJm2i6222b8KI2ZbT4ZjecDi66CbaxcLSuMYqE5qvyoKg0lXUkuTne9Czn x3gNhl8GyWJFg7UJylDM1JvWqBXhwz/hvZ/sClJsF1zWC8RrbE+jnzX/0eqzHFZx PPU3hHEzWiaVe7rRkGWLaZ3JlaJSKzFhGIdCcDgb0r0ga/7AdStyMLK47jn24Czi uo/nSIQB -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:05 2026 by rpki-client