This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/no40MMxKtGazjrQJuK_hKTX_kQ4.roa File: no40MMxKtGazjrQJuK_hKTX_kQ4.roa (raw, json) Hash identifier: ZQzvJpr6epq0Aai6epv/lFRS0bDsbahhA2A50WGodXU= Subject key identifier: 9E:8E:34:30:CC:4A:B4:66:B3:8E:B4:09:B8:AF:E1:29:35:FF:91:0E Certificate issuer: /CN=2e85cd69f611697ae24696ac765d56b75df8d3a1 Certificate serial: 019B76EB33BD4633620E19251B4FE2CEA44E Authority key identifier: 2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/no40MMxKtGazjrQJuK_hKTX_kQ4.roa Signing time: Thu 01 Jan 2026 00:18:04 +0000 ROA not before: Thu 01 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33915 IP address blocks: 188.92.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.mft rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:33:bd:46:33:62:0e:19:25:1b:4f:e2:ce:a4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e85cd69f611697ae24696ac765d56b75df8d3a1 Validity Not Before: Jan 1 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e8e3430cc4ab466b38eb409b8afe12935ff910e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:b0:3a:36:bf:a0:61:a0:64:35:f4:9e:29: 53:30:61:68:2b:c2:97:a8:b8:12:17:f4:c9:51:9d: bf:45:66:53:64:2a:b2:18:83:c3:29:94:52:4e:99: e5:d5:64:d1:f8:f9:00:9d:cb:16:54:85:04:0b:af: 8d:d9:7e:2c:53:0b:d4:0a:eb:15:62:5d:36:b8:a5: b2:b4:b1:a7:6a:d6:2f:e6:cb:f3:5c:b5:ba:15:e0: d0:fa:a7:62:76:c7:dc:84:23:37:17:3d:20:c0:3f: 75:d0:13:a3:84:8f:25:0b:85:9b:ea:a2:16:6e:c8: 05:14:00:07:aa:58:1a:ca:97:6b:03:f7:f5:32:50: 55:58:b3:09:bb:aa:58:9f:6e:d6:b6:50:a5:67:02: 8a:77:67:c9:7d:da:94:89:04:5b:76:d9:b6:f4:1c: 4c:f7:ef:b4:79:07:82:61:ea:57:9f:38:8f:1f:f1: 88:91:05:84:08:91:b2:48:4a:ba:7b:7c:ea:57:f4: 8e:1c:87:51:8b:73:22:e7:9d:23:b3:ec:4d:42:c3: 3b:bf:1c:42:0d:2d:72:85:cd:fe:8a:a8:7b:5b:27: a6:30:77:5e:45:9a:fe:11:e5:cf:5f:32:8e:4c:66: ae:d8:78:48:b8:6d:c1:a8:74:0d:6e:e0:36:62:45: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8E:34:30:CC:4A:B4:66:B3:8E:B4:09:B8:AF:E1:29:35:FF:91:0E X509v3 Authority Key Identifier: keyid:2E:85:CD:69:F6:11:69:7A:E2:46:96:AC:76:5D:56:B7:5D:F8:D3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoXNafYRaXriRpasdl1Wt13406E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/no40MMxKtGazjrQJuK_hKTX_kQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/650436-5498-44db-a89a-cfe397dfb5c4/1/LoXNafYRaXriRpasdl1Wt13406E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.92.152.0/23 Signature Algorithm: sha256WithRSAEncryption 63:f2:07:1e:51:14:9c:8c:06:57:e7:a0:e0:0d:11:5a:c5:43: 72:4a:46:99:9a:a1:90:36:f0:7d:23:df:4a:8c:b0:fa:89:dc: 96:63:46:2f:d2:ed:8b:a7:39:dc:6a:aa:ff:71:32:6c:e9:d6: 7f:f2:be:5f:9c:20:7a:2a:c7:a8:a4:4d:cf:ef:65:24:be:05: 82:51:55:d7:69:f7:6b:6c:fe:5c:54:f8:b7:19:ba:21:09:80: d6:43:ee:8c:b5:f5:94:41:83:4b:51:5e:3e:d7:58:f4:d7:26: ff:22:4e:9c:8c:0d:de:b1:fb:db:81:4b:ea:1d:3e:29:a3:f4: 94:c0:d3:b4:79:da:a6:1c:8a:41:d1:17:29:7e:c9:f5:e9:9f: fe:34:21:b3:d2:24:41:c7:1e:8d:fd:c6:cb:3c:2e:f1:db:db: a1:80:4f:2f:55:b7:4f:2f:be:6f:bc:d8:94:06:d3:b7:3b:18: 21:e1:81:b5:5d:a2:97:01:6b:09:6e:e2:12:1b:38:1d:43:9f: f2:4e:55:a3:52:ed:7b:1b:4c:ac:02:8c:ce:46:f0:38:00:65: a3:b7:a6:90:12:cf:f1:06:54:84:6c:30:25:1b:14:f8:81:1b: 2d:54:b5:f8:e9:54:1a:75:be:7b:cf:a8:15:fd:5c:47:7f:9a: 26:1c:c9:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26zO9RjNiDhklG0/izqROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODVjZDY5ZjYxMTY5N2FlMjQ2OTZhYzc2NWQ1NmI3NWRm OGQzYTEwHhcNMjYwMTAxMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZThlMzQzMGNjNGFiNDY2YjM4ZWI0MDliOGFmZTEyOTM1ZmY5MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdSwOja/oGGgZDX0nilTMGFoK8KX qLgSF/TJUZ2/RWZTZCqyGIPDKZRSTpnl1WTR+PkAncsWVIUEC6+N2X4sUwvUCusV Yl02uKWytLGnatYv5svzXLW6FeDQ+qdidsfchCM3Fz0gwD910BOjhI8lC4Wb6qIW bsgFFAAHqlgaypdrA/f1MlBVWLMJu6pYn27WtlClZwKKd2fJfdqUiQRbdtm29BxM 9++0eQeCYepXnziPH/GIkQWECJGySEq6e3zqV/SOHIdRi3Mi550js+xNQsM7vxxC DS1yhc3+iqh7WyemMHdeRZr+EeXPXzKOTGau2HhIuG3BqHQNbuA2YkV8dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ6ONDDMSrRms460Cbiv4Sk1/5EOMB8GA1UdIwQY MBaAFC6FzWn2EWl64kaWrHZdVrdd+NOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82NTA0MzYtNTQ5OC00NGRiLWE4OWEt Y2ZlMzk3ZGZiNWM0LzEvbm80ME1NeEt0R2F6anJRSnVLX2hLVFhfa1E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy82NTA0MzYtNTQ5OC00NGRiLWE4OWEtY2ZlMzk3ZGZiNWM0 LzEvTG9YTmFmWVJhWHJpUnBhc2RsMVd0MTM0MDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvFyYMA0G CSqGSIb3DQEBCwUAA4IBAQBj8gceURScjAZX56DgDRFaxUNySkaZmqGQNvB9I99K jLD6idyWY0Yv0u2Lpzncaqr/cTJs6dZ/8r5fnCB6KseopE3P72UkvgWCUVXXafdr bP5cVPi3GbohCYDWQ+6MtfWUQYNLUV4+11j01yb/Ik6cjA3esfvbgUvqHT4po/SU wNO0edqmHIpB0Rcpfsn16Z/+NCGz0iRBxx6N/cbLPC7x29uhgE8vVbdPL75vvNiU BtO3Oxgh4YG1XaKXAWsJbuISGzgdQ5/yTlWjUu17G0ysAozORvA4AGWjt6aQEs/x BlSEbDAlGxT4gRstVLX46VQadb57z6gV/VxHf5omHMlu -----END CERTIFICATE-----Generated at Mon Jan 26 22:37:38 2026 by rpki-client