This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/w9M7qFYAM8Bc_3Ry_zHFbT7tXaQ.roa File: w9M7qFYAM8Bc_3Ry_zHFbT7tXaQ.roa (raw, json) Hash identifier: S9cgU4aODgbYFlt1oo6eD08eYcxMr87FOJ/xbk/bpB0= Subject key identifier: C3:D3:3B:A8:56:00:33:C0:5C:FF:74:72:FF:31:C5:6D:3E:ED:5D:A4 Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422 Certificate serial: 019B7C80A3C84923D0C287BE8B65677AB01B Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/w9M7qFYAM8Bc_3Ry_zHFbT7tXaQ.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 194.15.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a3:c8:49:23:d0:c2:87:be:8b:65:67:7a:b0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3d33ba8560033c05cff7472ff31c56d3eed5da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5f:0f:a0:a9:67:4d:b0:49:66:0d:95:be:10: 65:98:ba:38:15:aa:79:b0:27:48:ec:97:3f:88:bf: d6:76:bf:87:29:3d:3a:14:f0:89:4c:86:3f:30:7f: d9:b5:30:db:dd:ea:1c:64:7a:6a:fd:42:06:e9:ca: 5b:da:1d:d5:b0:5e:54:c2:23:ca:ce:3c:39:d9:f0: 78:30:d8:e6:57:2a:91:7c:c5:47:07:f5:eb:b7:9c: 5b:1b:0a:82:4c:d6:28:0f:c9:51:25:9f:64:e2:ef: fb:46:da:7d:cf:26:d6:1b:88:da:e6:6d:ed:64:3b: 8d:c7:c4:dc:40:10:1d:09:27:bb:43:c9:77:33:4f: 7e:23:d7:cd:65:12:32:a9:08:29:a1:57:77:1a:ed: 89:f4:6e:9a:c5:38:5a:40:34:2e:9f:bd:cb:e8:29: 2b:04:d7:15:44:32:e9:f5:e3:4d:68:69:71:39:33: 1f:34:28:34:01:14:e9:bd:e9:54:49:9c:8f:ca:5d: ee:88:fb:64:88:11:f8:d5:be:1d:e7:82:23:ed:e1: 7d:31:f9:04:b8:36:58:71:2c:17:af:7e:e7:74:fe: 06:06:91:01:c6:92:c1:aa:5a:8b:bd:62:ef:1a:2a: 53:7b:a5:61:1c:70:cb:88:3d:14:49:54:ab:2f:c2: 1d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D3:3B:A8:56:00:33:C0:5C:FF:74:72:FF:31:C5:6D:3E:ED:5D:A4 X509v3 Authority Key Identifier: keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/w9M7qFYAM8Bc_3Ry_zHFbT7tXaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.138.0/23 Signature Algorithm: sha256WithRSAEncryption 73:97:44:2d:b6:29:52:84:56:51:ed:ca:4c:25:f6:08:59:98: 21:0a:9b:8a:a4:4a:a3:3e:f8:f9:11:78:7b:e3:40:6b:71:f5: 50:8e:8e:f8:db:cd:1c:0b:30:64:a4:73:4b:41:87:2e:a5:7a: ec:d9:30:fb:fc:cb:52:22:2f:11:37:57:40:01:0a:49:50:91: df:90:ab:9a:16:9d:d3:57:4a:95:6b:c6:23:8d:51:c3:53:78: 6d:e3:02:f2:5a:74:96:57:e7:ae:11:55:e9:87:7b:b4:02:4c: 43:d8:c6:63:6a:f5:01:07:ee:d0:28:22:eb:b5:ae:9c:b8:74: 29:78:cb:bd:d3:d5:e6:62:95:a5:40:bd:c5:ef:fa:59:3d:05: 60:13:a4:17:90:03:5c:6a:37:cd:0a:44:45:f8:be:43:c5:f8: 0c:9b:34:08:ae:81:54:6b:0d:c0:25:3a:b4:42:51:20:cd:e1: 57:98:50:09:9b:7f:d7:ea:a6:a2:a8:a5:9d:92:ff:a4:10:a2: fb:3c:a3:da:3f:d1:1a:70:03:22:63:15:5d:ab:73:0a:21:55: 03:24:5b:18:b4:49:2c:aa:e0:16:aa:0c:cf:68:65:b7:53:36: a2:bc:d3:82:8e:97:d1:7e:e4:ac:41:3b:70:7d:2c:07:e0:fa: 29:b9:40:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKPISSPQwoe+i2VnerAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNjlhYjZmMDk1NzJhZmI0NmU5ZjhlOWEwNjM5ZDgyMGI5 Njk0MjIwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2QzM2JhODU2MDAzM2MwNWNmZjc0NzJmZjMxYzU2ZDNlZWQ1ZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6V8PoKlnTbBJZg2VvhBlmLo4Fap5 sCdI7Jc/iL/Wdr+HKT06FPCJTIY/MH/ZtTDb3eocZHpq/UIG6cpb2h3VsF5UwiPK zjw52fB4MNjmVyqRfMVHB/Xrt5xbGwqCTNYoD8lRJZ9k4u/7Rtp9zybWG4ja5m3t ZDuNx8TcQBAdCSe7Q8l3M09+I9fNZRIyqQgpoVd3Gu2J9G6axThaQDQun73L6Ckr BNcVRDLp9eNNaGlxOTMfNCg0ARTpvelUSZyPyl3uiPtkiBH41b4d54Ij7eF9MfkE uDZYcSwXr37ndP4GBpEBxpLBqlqLvWLvGipTe6VhHHDLiD0USVSrL8IdcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMPTO6hWADPAXP90cv8xxW0+7V2kMB8GA1UdIwQY MBaAFOBpq28JVyr7Run46aBjnYILlpQiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9hYTVjYzAtYmI1Ni00YjQ3LWI3YzEt NDRmNDFkOWUxMjc3LzEvdzlNN3FGWUFNOEJjXzNSeV96SEZiVDd0WGFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9hYTVjYzAtYmI1Ni00YjQ3LWI3YzEtNDRmNDFkOWUxMjc3 LzEvNEdtcmJ3bFhLdnRHNmZqcG9HT2RnZ3VXbENJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwg+KMA0G CSqGSIb3DQEBCwUAA4IBAQBzl0QttilShFZR7cpMJfYIWZghCpuKpEqjPvj5EXh7 40BrcfVQjo74280cCzBkpHNLQYcupXrs2TD7/MtSIi8RN1dAAQpJUJHfkKuaFp3T V0qVa8YjjVHDU3ht4wLyWnSWV+euEVXph3u0AkxD2MZjavUBB+7QKCLrta6cuHQp eMu909XmYpWlQL3F7/pZPQVgE6QXkANcajfNCkRF+L5DxfgMmzQIroFUaw3AJTq0 QlEgzeFXmFAJm3/X6qaiqKWdkv+kEKL7PKPaP9EacAMiYxVdq3MKIVUDJFsYtEks quAWqgzPaGW3UzaivNOCjpfRfuSsQTtwfSwH4PopuUDp -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:54 2026 by rpki-client