This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/9JzTDncsepWBIyeXDgZbgzh-hNA.roa File: 9JzTDncsepWBIyeXDgZbgzh-hNA.roa (raw, json) Hash identifier: EEJ8BD1UQFBZFgZQFrtwhkvF1euS2AFglnhzeTI1Kl4= Subject key identifier: F4:9C:D3:0E:77:2C:7A:95:81:23:27:97:0E:06:5B:83:38:7E:84:D0 Certificate issuer: /CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Certificate serial: 019B7C7FB64FA15DDCFE83E36E64F356F344 Authority key identifier: 69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/9JzTDncsepWBIyeXDgZbgzh-hNA.roa Signing time: Fri 02 Jan 2026 02:18:22 +0000 ROA not before: Fri 02 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 159.46.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.mft rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:b6:4f:a1:5d:dc:fe:83:e3:6e:64:f3:56:f3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=692cf8572344c0a674a67d0f4b51f186e8a71c4b Validity Not Before: Jan 2 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f49cd30e772c7a95812327970e065b83387e84d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0c:f4:9d:fc:08:e3:c3:29:82:e2:c5:a4:f1: 3c:46:10:1b:a3:bf:5a:6d:54:35:55:e6:8c:32:f8: b6:23:80:50:58:67:1a:39:7c:be:f8:5d:80:e2:70: e2:95:69:0b:99:aa:3e:57:7d:17:e0:8b:61:71:c8: 89:13:70:07:f6:fb:50:15:4f:af:91:d5:68:68:84: 94:0a:9a:34:cb:ba:44:df:c7:8f:e5:19:2c:2b:b3: 0a:fc:51:22:45:ff:2a:db:cf:10:ac:8a:e2:77:79: 3e:73:5c:28:f9:e1:e4:22:d3:b6:7a:7c:16:97:eb: 48:12:aa:da:67:e4:95:11:b1:d3:78:b3:d6:d5:11: 4b:8e:ae:49:ca:13:f8:4b:b3:80:95:5b:a4:02:75: 3f:e8:26:28:fc:70:91:78:07:fb:6c:15:92:60:a1: c3:a4:9f:d1:80:f1:d5:e6:a8:cd:41:2a:b1:4e:bd: c2:b1:88:cd:79:91:22:2c:6e:80:e7:f4:a6:e7:5c: 01:ef:f9:aa:e8:dd:fc:df:aa:ee:d2:0d:1c:9e:e3: cd:a4:55:2b:23:c2:dd:67:51:02:41:0a:eb:d8:64: af:7c:ab:8c:94:88:52:f6:b5:d3:8f:8f:eb:93:ea: f0:84:05:f7:18:3e:90:27:e7:43:70:5d:4e:e2:1f: a3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9C:D3:0E:77:2C:7A:95:81:23:27:97:0E:06:5B:83:38:7E:84:D0 X509v3 Authority Key Identifier: keyid:69:2C:F8:57:23:44:C0:A6:74:A6:7D:0F:4B:51:F1:86:E8:A7:1C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSz4VyNEwKZ0pn0PS1HxhuinHEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/9JzTDncsepWBIyeXDgZbgzh-hNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/054b50-a7b1-46f3-9d18-af39bb03097f/1/aSz4VyNEwKZ0pn0PS1HxhuinHEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.46.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9f:1f:51:80:46:d5:ed:da:51:ef:dc:31:bb:95:38:a6:d4:ee: ad:dd:df:2b:24:80:fe:f4:6c:8e:ad:33:b1:aa:a8:78:16:48: 4a:81:7d:13:e1:67:d4:10:af:6c:0a:fc:6e:b4:5f:1e:0c:81: 91:69:b3:7b:26:66:30:01:76:aa:ef:ee:a4:d0:73:7d:dd:57: 33:18:1a:b0:05:92:46:ae:b2:c9:f3:c0:a4:42:76:53:41:50: 34:96:b6:eb:18:b7:fd:4f:29:c2:d3:25:87:f8:d6:0e:e2:ae: 95:fc:a5:3d:5e:f6:a4:5b:d9:ad:f1:21:55:e0:a7:48:eb:51: 21:42:c2:fb:fd:fe:d4:53:d2:88:50:82:66:61:c8:63:ed:32: 80:fc:71:41:41:ab:12:18:36:a7:88:5e:29:03:57:cb:2b:46: ec:7c:bc:d7:7f:92:c9:12:d4:2e:18:5d:30:05:71:0a:fa:74: be:b7:65:fe:5c:6e:00:38:92:16:c8:e9:64:c2:c7:0f:d0:42: 2a:4c:47:f2:46:f0:72:7f:46:ad:d7:21:11:c3:ba:ab:b6:4a: c6:19:0d:64:5d:bf:9a:58:bc:99:dd:09:ec:e0:21:98:6e:d7: aa:37:e1:f3:ed:6b:fd:8d:a7:f7:6e:b4:3f:bb:0a:09:e7:c8: 90:85:49:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f7ZPoV3c/oPjbmTzVvNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MmNmODU3MjM0NGMwYTY3NGE2N2QwZjRiNTFmMTg2ZThh NzFjNGIwHhcNMjYwMTAyMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDljZDMwZTc3MmM3YTk1ODEyMzI3OTcwZTA2NWI4MzM4N2U4NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwz0nfwI48MpguLFpPE8RhAbo79a bVQ1VeaMMvi2I4BQWGcaOXy++F2A4nDilWkLmao+V30X4IthcciJE3AH9vtQFU+v kdVoaISUCpo0y7pE38eP5RksK7MK/FEiRf8q288QrIrid3k+c1wo+eHkItO2enwW l+tIEqraZ+SVEbHTeLPW1RFLjq5JyhP4S7OAlVukAnU/6CYo/HCReAf7bBWSYKHD pJ/RgPHV5qjNQSqxTr3CsYjNeZEiLG6A5/Sm51wB7/mq6N3836ru0g0cnuPNpFUr I8LdZ1ECQQrr2GSvfKuMlIhS9rXTj4/rk+rwhAX3GD6QJ+dDcF1O4h+jIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPSc0w53LHqVgSMnlw4GW4M4foTQMB8GA1UdIwQY MBaAFGks+FcjRMCmdKZ9D0tR8YbopxxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgt YWYzOWJiMDMwOTdmLzEvOUp6VERuY3NlcFdCSXllWERnWmJnemgtaE5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wNTRiNTAtYTdiMS00NmYzLTlkMTgtYWYzOWJiMDMwOTdm LzEvYVN6NFZ5TkV3S1owcG4wUFMxSHhodWluSEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGny7AMA0G CSqGSIb3DQEBCwUAA4IBAQCfH1GARtXt2lHv3DG7lTim1O6t3d8rJID+9GyOrTOx qqh4FkhKgX0T4WfUEK9sCvxutF8eDIGRabN7JmYwAXaq7+6k0HN93VczGBqwBZJG rrLJ88CkQnZTQVA0lrbrGLf9TynC0yWH+NYO4q6V/KU9XvakW9mt8SFV4KdI61Eh QsL7/f7UU9KIUIJmYchj7TKA/HFBQasSGDaniF4pA1fLK0bsfLzXf5LJEtQuGF0w BXEK+nS+t2X+XG4AOJIWyOlkwscP0EIqTEfyRvByf0at1yERw7qrtkrGGQ1kXb+a WLyZ3Qns4CGYbteqN+Hz7Wv9jaf3brQ/uwoJ58iQhUm1 -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:13 2026 by rpki-client