This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/9iuRgCooSrQpkxQP20-_tR6nZBQ.roa File: 9iuRgCooSrQpkxQP20-_tR6nZBQ.roa (raw, json) Hash identifier: ZKu4NEB+oi4dQr0xgm8XGd3yiTU7p+T9KmmAk3XKtgg= Subject key identifier: F6:2B:91:80:2A:28:4A:B4:29:93:14:0F:DB:4F:BF:B5:1E:A7:64:14 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019BD2804206B0E29F0255B53A0BFE8AA29D Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/9iuRgCooSrQpkxQP20-_tR6nZBQ.roa Signing time: Sun 18 Jan 2026 19:06:19 +0000 ROA not before: Sun 18 Jan 2026 19:06:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206787 IP address blocks: 194.190.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:80:42:06:b0:e2:9f:02:55:b5:3a:0b:fe:8a:a2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 18 19:06:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f62b91802a284ab42993140fdb4fbfb51ea76414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:22:fb:08:91:5f:f2:ee:70:5d:4c:e2:14: 9e:65:db:b0:a5:f8:3d:e5:bd:40:14:5d:ce:59:4c: 3f:6e:1f:f2:16:59:aa:b7:89:24:55:f4:17:36:b9: c9:98:4e:b2:43:74:b8:5b:d9:33:89:78:62:b2:a3: 33:fd:0b:46:bc:c7:9a:ac:87:83:9e:e8:de:02:0b: c0:3f:f5:97:dd:50:16:b5:a8:29:95:24:ef:b6:55: 1e:10:ca:74:b2:83:7d:b3:9c:e4:d8:87:af:3e:4e: 30:5a:ec:9d:58:7d:8d:04:c9:d5:35:e7:f4:0d:63: 1c:6f:8a:a5:fc:c5:80:2a:f2:fa:44:57:76:86:65: 26:f8:e7:65:6f:8e:35:b9:83:22:e8:32:e6:40:13: a5:3b:05:b1:9d:16:11:9d:97:5a:51:98:e4:39:0e: f8:a7:8c:4c:85:a3:02:0a:bb:65:ae:fd:15:05:d5: 48:1c:cf:e4:07:fc:2d:6d:d6:aa:e0:45:51:b8:a2: 0c:a1:c4:a8:86:7c:b9:cd:c3:6c:35:9f:79:11:5c: c3:25:aa:be:4b:f1:99:16:d9:71:01:4c:d1:6c:00: e9:a2:93:02:4a:9a:ee:06:18:4f:d8:b3:8c:30:96: ff:8f:93:2a:57:d9:07:e2:f0:61:50:9b:7a:cf:ec: d7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2B:91:80:2A:28:4A:B4:29:93:14:0F:DB:4F:BF:B5:1E:A7:64:14 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/9iuRgCooSrQpkxQP20-_tR6nZBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.190.69.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:86:39:3a:32:50:84:2c:cc:22:16:dc:3f:d7:0c:ee:57:e0: 4d:17:7d:f8:3c:04:62:18:2a:40:12:60:70:e8:b5:1b:24:f1: b6:18:14:16:f9:b1:0d:5e:56:b6:7b:c5:06:a3:85:1f:4c:f6: 3b:bd:74:c5:d7:63:71:11:07:f3:31:fe:71:22:eb:ea:88:53: 81:9b:c0:ac:ae:f5:0b:8d:77:e7:d6:50:02:e5:05:21:c3:2a: ec:ae:ac:a9:fd:9f:eb:12:fd:89:cd:c0:67:da:04:43:b6:4c: 2b:65:f5:21:4d:39:8c:0b:7e:c0:3e:fc:7e:33:7b:91:8f:75: f2:67:ea:e8:5d:f0:15:a9:35:42:4e:f6:e1:03:d7:4e:af:88: 78:93:73:e7:6e:fc:41:4e:1a:5a:c9:3b:c1:3b:f5:23:58:4d: b6:fb:f8:7c:77:94:0c:ba:6d:d5:0d:63:57:5b:ba:8c:a3:b2: 04:ef:60:e3:4e:d1:04:15:55:77:b7:87:82:24:79:58:74:35: b0:95:4f:55:06:d5:42:22:1c:e3:73:9e:fb:f1:1b:77:60:03: b0:e6:d0:d2:7b:b5:ef:a0:85:b0:7e:8b:28:56:d9:c7:64:eb: fb:86:e0:97:0a:47:a5:1b:b1:37:f2:2c:81:df:54:04:ee:0d: ec:db:44:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvSgEIGsOKfAlW1Ogv+iqKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTE4MTkwNjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjJiOTE4MDJhMjg0YWI0Mjk5MzE0MGZkYjRmYmZiNTFlYTc2NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v0i+wiRX/LucF1M4hSeZduwpfg9 5b1AFF3OWUw/bh/yFlmqt4kkVfQXNrnJmE6yQ3S4W9kziXhisqMz/QtGvMearIeD nujeAgvAP/WX3VAWtagplSTvtlUeEMp0soN9s5zk2IevPk4wWuydWH2NBMnVNef0 DWMcb4ql/MWAKvL6RFd2hmUm+Odlb441uYMi6DLmQBOlOwWxnRYRnZdaUZjkOQ74 p4xMhaMCCrtlrv0VBdVIHM/kB/wtbdaq4EVRuKIMocSohny5zcNsNZ95EVzDJaq+ S/GZFtlxAUzRbADpopMCSpruBhhP2LOMMJb/j5MqV9kH4vBhUJt6z+zXkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPYrkYAqKEq0KZMUD9tPv7Uep2QUMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvOWl1UmdDb29TclFwa3hRUDIwLV90UjZuWkJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwr5FMA0G CSqGSIb3DQEBCwUAA4IBAQAchjk6MlCELMwiFtw/1wzuV+BNF334PARiGCpAEmBw 6LUbJPG2GBQW+bENXla2e8UGo4UfTPY7vXTF12NxEQfzMf5xIuvqiFOBm8CsrvUL jXfn1lAC5QUhwyrsrqyp/Z/rEv2JzcBn2gRDtkwrZfUhTTmMC37APvx+M3uRj3Xy Z+roXfAVqTVCTvbhA9dOr4h4k3PnbvxBThpayTvBO/UjWE22+/h8d5QMum3VDWNX W7qMo7IE72DjTtEEFVV3t4eCJHlYdDWwlU9VBtVCIhzjc5778Rt3YAOw5tDSe7Xv oIWwfosoVtnHZOv7huCXCkelG7E38iyB31QE7g3s20Ts -----END CERTIFICATE-----Generated at Sun Jan 25 21:16:10 2026 by rpki-client