This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/x9QsQ2MvWpON4kKDHpcRaSQsYcw.roa File: x9QsQ2MvWpON4kKDHpcRaSQsYcw.roa (raw, json) Hash identifier: 4Sqz3nDe+SLiXa/m3KHMeflziRuyuGIJ470KTQ8nem4= Subject key identifier: C7:D4:2C:43:63:2F:5A:93:8D:E2:42:83:1E:97:11:69:24:2C:61:CC Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173 Certificate serial: 019B78A329A9E9647FA30EF2791882B548DF Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/x9QsQ2MvWpON4kKDHpcRaSQsYcw.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29561 IP address blocks: 194.146.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:29:a9:e9:64:7f:a3:0e:f2:79:18:82:b5:48:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce235c504019c504021e0662f70133b7ee733173 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7d42c43632f5a938de242831e971169242c61cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:b2:f4:00:8c:2e:70:46:a3:7e:b2:a1:45: 62:da:70:2f:af:c2:32:f7:73:a4:fb:d9:c0:5e:29: 33:fd:2a:f4:e0:40:f7:31:f7:7c:c6:76:02:21:f5: 44:7f:b1:fc:d8:2c:9b:33:02:34:bd:b6:2f:77:1a: 37:fe:37:8e:72:1a:4e:0f:79:6f:54:25:8d:46:7d: 47:f8:cf:4c:f2:6b:8e:ba:57:5b:c6:38:3f:06:76: 61:4c:52:7c:08:9f:70:13:99:b5:f2:ae:32:37:f9: aa:6b:9a:e7:43:6c:33:4b:2e:e4:aa:05:c4:48:39: 03:3c:e7:ea:f3:b3:ea:19:ee:d3:e6:34:d8:ec:a9: a5:d6:74:b3:55:ee:96:a7:8d:f3:a1:b4:06:a1:ae: e4:ad:7b:7a:ad:c6:0d:8f:43:a3:7b:56:6e:82:5e: 45:9b:35:42:b9:54:75:f7:5d:53:5b:d7:f6:d7:03: 41:ae:d2:a4:08:c0:cd:38:74:76:f8:cd:f2:1a:ff: b5:07:7b:69:47:98:9c:21:e7:26:08:41:b9:73:77: dc:e6:cd:d8:a8:92:66:92:f7:87:2a:4c:88:76:c2: c8:94:b7:ef:bc:63:ab:88:34:68:24:c0:a0:41:17: 58:e8:14:6f:2a:67:16:b8:db:96:f2:5d:b5:db:f8: 97:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D4:2C:43:63:2F:5A:93:8D:E2:42:83:1E:97:11:69:24:2C:61:CC X509v3 Authority Key Identifier: keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/x9QsQ2MvWpON4kKDHpcRaSQsYcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.146.119.0/24 Signature Algorithm: sha256WithRSAEncryption 65:60:cb:9c:fb:8b:7b:dd:86:e3:9b:f0:71:f6:44:22:57:16: ca:87:4c:3d:12:75:2b:17:03:c5:12:61:9e:17:e7:ec:12:dc: 21:cb:b9:b2:52:87:a2:31:d7:ac:48:c7:01:5a:45:e4:84:10: 39:8c:52:28:74:9b:8e:2c:b2:16:c8:22:89:fd:5e:b0:3c:40: b9:73:6c:c0:55:30:05:90:7a:af:8f:00:92:99:66:11:39:3e: 37:f0:a0:ce:6e:cb:4e:45:25:6e:9f:bc:9c:1e:e2:c9:6c:ab: 89:95:24:4f:fe:8e:31:8e:22:53:3d:f9:1a:de:48:e0:74:20: d6:bd:41:0a:07:cb:28:2d:55:01:40:5b:c4:b4:b5:1a:1e:89: 63:37:4f:ca:f3:a1:5e:5d:78:e6:91:f8:c2:03:3c:16:50:53: a4:3b:1d:8a:3b:92:4f:45:5a:ea:90:3e:bf:e7:fb:4b:f2:44: 4c:33:ce:8d:dd:c6:fd:5b:40:cd:01:d5:88:2e:64:7e:1e:c4: 4b:35:d2:53:79:73:b0:69:22:a1:06:69:55:ba:d8:1e:af:4b: 19:02:31:44:1f:6a:59:ef:a2:e9:97:15:41:38:ee:bb:9c:7d: fd:d5:e4:1c:ea:e9:e7:7c:46:42:ba:23:ce:c6:00:d4:40:74: a2:61:bb:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oymp6WR/ow7yeRiCtUjfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjM1YzUwNDAxOWM1MDQwMjFlMDY2MmY3MDEzM2I3ZWU3 MzMxNzMwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2Q0MmM0MzYzMmY1YTkzOGRlMjQyODMxZTk3MTE2OTI0MmM2MWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwryy9ACMLnBGo36yoUVi2nAvr8Iy 93Ok+9nAXikz/Sr04ED3Mfd8xnYCIfVEf7H82CybMwI0vbYvdxo3/jeOchpOD3lv VCWNRn1H+M9M8muOuldbxjg/BnZhTFJ8CJ9wE5m18q4yN/mqa5rnQ2wzSy7kqgXE SDkDPOfq87PqGe7T5jTY7Kml1nSzVe6Wp43zobQGoa7krXt6rcYNj0Oje1Zugl5F mzVCuVR1911TW9f21wNBrtKkCMDNOHR2+M3yGv+1B3tpR5icIecmCEG5c3fc5s3Y qJJmkveHKkyIdsLIlLfvvGOriDRoJMCgQRdY6BRvKmcWuNuW8l212/iXSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfULENjL1qTjeJCgx6XEWkkLGHMMB8GA1UdIwQY MBaAFM4jXFBAGcUEAh4GYvcBM7fuczFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zOTEwOTItODJmMy00OGJjLWI0MjYt ZmNjNmQyN2Y0NDRmLzEveDlRc1EyTXZXcE9ONGtLREhwY1JhU1FzWWN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zOTEwOTItODJmMy00OGJjLWI0MjYtZmNjNmQyN2Y0NDRm LzEvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpJ3MA0G CSqGSIb3DQEBCwUAA4IBAQBlYMuc+4t73Ybjm/Bx9kQiVxbKh0w9EnUrFwPFEmGe F+fsEtwhy7myUoeiMdesSMcBWkXkhBA5jFIodJuOLLIWyCKJ/V6wPEC5c2zAVTAF kHqvjwCSmWYROT438KDObstORSVun7ycHuLJbKuJlSRP/o4xjiJTPfka3kjgdCDW vUEKB8soLVUBQFvEtLUaHoljN0/K86FeXXjmkfjCAzwWUFOkOx2KO5JPRVrqkD6/ 5/tL8kRMM86N3cb9W0DNAdWILmR+HsRLNdJTeXOwaSKhBmlVutger0sZAjFEH2pZ 76LplxVBOO67nH391eQc6unnfEZCuiPOxgDUQHSiYbsQ -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:38 2026 by rpki-client