This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/inTxP1fNTlYLSntsJ5IWnkC3vvw.roa File: inTxP1fNTlYLSntsJ5IWnkC3vvw.roa (raw, json) Hash identifier: s1HiLTrRvWZ9MRHjrAc8u/SRsW3eRbZ59sgpFA6oQ5Q= Subject key identifier: 8A:74:F1:3F:57:CD:4E:56:0B:4A:7B:6C:27:92:16:9E:40:B7:BE:FC Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31 Certificate serial: 019B7C7F071FE715453C7F48704F7A0D391B Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/inTxP1fNTlYLSntsJ5IWnkC3vvw.roa Signing time: Fri 02 Jan 2026 02:17:38 +0000 ROA not before: Fri 02 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30768 IP address blocks: 193.19.82.0/23 maxlen: 24 194.165.0.0/23 maxlen: 24 194.165.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:07:1f:e7:15:45:3c:7f:48:70:4f:7a:0d:39:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31 Validity Not Before: Jan 2 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a74f13f57cd4e560b4a7b6c2792169e40b7befc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:11:26:a0:36:23:7c:32:f0:1c:c9:88:ae:0d: bf:1e:1d:58:5b:ba:5c:85:78:35:7e:a8:06:b7:1c: c4:d6:53:fe:ab:10:37:65:ff:85:de:8e:fd:c8:f2: 91:30:36:5f:d7:44:85:e4:b6:8f:78:de:3b:a1:9a: 81:b3:26:59:a0:63:ef:c9:d1:d9:53:d1:d3:20:fb: 73:75:e7:cf:f3:12:a6:3e:6f:b4:b8:ea:63:ce:e1: 72:1b:a3:7d:e9:b9:12:0b:05:63:ae:5b:6f:66:81: 6d:cf:13:a2:b0:89:a5:1d:ce:64:72:e4:1c:6f:4b: be:93:90:11:ec:60:66:db:d8:8a:a3:93:5a:14:f3: 50:d6:e5:9a:ed:64:39:94:58:98:ff:2d:7d:0e:a0: 04:77:5d:10:4b:34:e1:2d:d7:49:d8:9a:0c:61:80: 15:c7:dd:0d:60:c9:37:bc:5d:88:77:b6:60:af:86: fd:35:d2:da:d4:46:26:8f:c4:4f:99:5c:2d:86:92: 90:88:75:06:ca:6e:fc:eb:e3:55:4c:35:c0:aa:f1: f3:fb:41:de:e4:91:97:fd:2d:70:48:74:cf:3b:59: de:2e:c9:1f:a4:14:82:29:1b:ed:b1:a8:45:33:15: 35:d7:8a:78:7a:23:62:9e:c2:42:76:45:bc:11:97: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:74:F1:3F:57:CD:4E:56:0B:4A:7B:6C:27:92:16:9E:40:B7:BE:FC X509v3 Authority Key Identifier: keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/inTxP1fNTlYLSntsJ5IWnkC3vvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.82.0/23 194.165.0.0/23 Signature Algorithm: sha256WithRSAEncryption 65:95:7a:a8:36:77:32:b0:53:0a:f4:e8:68:d8:ab:3b:2f:52: fe:80:c4:e0:35:c2:d4:d5:02:da:50:b0:6b:68:5b:22:57:d5: a5:46:8a:4c:79:66:df:0f:09:e6:2d:51:5d:c2:12:01:79:4c: 6d:78:f7:65:9c:4b:47:ae:84:d1:3f:6f:f2:5a:fb:d8:3e:7a: 16:b2:88:9c:d8:d1:91:38:8b:4f:d3:63:0a:e0:44:92:ed:dc: 56:ff:7d:d1:c9:b8:5f:a3:1b:d5:45:7a:fb:17:ce:d3:ac:85: 75:98:f0:fc:a8:85:e6:5d:2a:d7:a4:ce:7b:21:38:98:24:e8: 1a:60:4f:48:29:ec:87:d5:89:43:9a:a7:f3:30:4d:8f:67:d3: 39:3e:60:a0:c0:60:cf:92:72:18:13:26:0c:53:53:36:86:ee: 89:37:46:e9:1b:e8:ed:11:91:e7:b5:f3:3e:ab:93:6d:3c:82: 50:6e:ab:c5:84:bf:3b:a8:ae:ce:fa:3d:f8:df:08:6e:e5:ab: 7f:00:cd:39:35:41:1b:bf:b0:bd:e4:0e:27:6c:0a:e7:e5:59: 71:a1:0a:37:f8:46:17:2d:25:32:50:bf:40:9a:75:19:2a:fb: 98:ae:82:bf:f6:69:5c:5a:25:1e:c2:cb:7b:24:34:c0:3a:03: 99:f8:a4:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8fwcf5xVFPH9IcE96DTkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwOWViNmVhYWE0OWRkNmI0ODNlMDRiMTQzNGU0ZGFjNzll ZDlkMzEwHhcNMjYwMTAyMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTc0ZjEzZjU3Y2Q0ZTU2MGI0YTdiNmMyNzkyMTY5ZTQwYjdiZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxEmoDYjfDLwHMmIrg2/Hh1YW7pc hXg1fqgGtxzE1lP+qxA3Zf+F3o79yPKRMDZf10SF5LaPeN47oZqBsyZZoGPvydHZ U9HTIPtzdefP8xKmPm+0uOpjzuFyG6N96bkSCwVjrltvZoFtzxOisImlHc5kcuQc b0u+k5AR7GBm29iKo5NaFPNQ1uWa7WQ5lFiY/y19DqAEd10QSzThLddJ2JoMYYAV x90NYMk3vF2Id7Zgr4b9NdLa1EYmj8RPmVwthpKQiHUGym786+NVTDXAqvHz+0He 5JGX/S1wSHTPO1neLskfpBSCKRvtsahFMxU114p4eiNinsJCdkW8EZeRjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIp08T9XzU5WC0p7bCeSFp5At778MB8GA1UdIwQY MBaAFHCetuqqSd1rSD4EsUNOTax57Z0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAt OWY2ZmEwZTFhNWE1LzEvaW5UeFAxZk5UbFlMU250c0o1SVdua0MzdnZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAtOWY2ZmEwZTFhNWE1 LzEvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwRNSAwQB wqUAMA0GCSqGSIb3DQEBCwUAA4IBAQBllXqoNncysFMK9Oho2Ks7L1L+gMTgNcLU 1QLaULBraFsiV9WlRopMeWbfDwnmLVFdwhIBeUxtePdlnEtHroTRP2/yWvvYPnoW soic2NGROItP02MK4ESS7dxW/33RybhfoxvVRXr7F87TrIV1mPD8qIXmXSrXpM57 ITiYJOgaYE9IKeyH1YlDmqfzME2PZ9M5PmCgwGDPknIYEyYMU1M2hu6JN0bpG+jt EZHntfM+q5NtPIJQbqvFhL87qK7O+j343whu5at/AM05NUEbv7C95A4nbArn5Vlx oQo3+EYXLSUyUL9AmnUZKvuYroK/9mlcWiUewst7JDTAOgOZ+KQx -----END CERTIFICATE-----Generated at Tue Feb 10 11:33:40 2026 by rpki-client