This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa File: 9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa (raw, json) Hash identifier: OkUtbla+KQC+6tAPqsg9uxnsiQTpUI77ifjU89ybPE0= Subject key identifier: F4:E0:E0:18:3C:C5:27:6F:6C:65:B3:B9:63:4F:B1:B3:23:63:2B:87 Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Certificate serial: 019B7B3630E27841614341C57BAA76FC1316 Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa Signing time: Thu 01 Jan 2026 20:18:27 +0000 ROA not before: Thu 01 Jan 2026 20:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29296 IP address blocks: 193.135.64.0/19 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:30:e2:78:41:61:43:41:c5:7b:aa:76:fc:13:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632 Validity Not Before: Jan 1 20:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e0e0183cc5276f6c65b3b9634fb1b323632b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:5c:e6:18:32:87:dd:29:67:07:95:8a:52: 91:58:57:97:50:05:6c:31:17:6d:51:0b:78:64:12: 7f:eb:96:cd:00:79:b0:cf:88:28:f1:bb:89:b3:60: c1:d6:b3:ac:85:d5:b6:ca:83:ba:53:04:09:49:93: e4:98:a8:76:ea:43:16:ab:cd:64:26:0e:79:ee:f2: cb:12:74:cc:3c:27:cd:b7:a8:93:82:2f:1d:d1:75: a2:e6:07:40:e2:97:d3:75:3e:ac:4f:22:2e:ba:9c: b0:a0:a1:9b:ac:9a:19:af:1e:f8:fc:bd:39:ab:2a: 34:79:8a:a2:df:14:d9:97:fd:6b:d3:b8:d3:59:60: 1b:e0:90:ab:da:1a:68:21:70:3f:e8:15:34:d0:b6: a0:43:c9:64:ab:3a:81:b9:08:25:bd:7a:d1:49:93: 16:fb:20:e5:74:7e:e8:9e:73:2e:2d:c5:87:99:8a: d1:74:e9:4e:0a:7a:a4:bb:7c:ff:30:7c:f9:b9:5b: 72:0b:90:ad:c9:87:dc:5d:e6:04:a3:f9:de:d4:30: 19:9b:ad:e9:3a:4e:c6:ee:00:c5:57:31:02:6a:fa: 95:d7:78:9b:ae:79:7b:79:6d:b5:a1:58:7b:94:d9: dc:14:91:3c:90:a5:7b:e8:bd:ea:cd:d4:64:34:e6: 2d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E0:E0:18:3C:C5:27:6F:6C:65:B3:B9:63:4F:B1:B3:23:63:2B:87 X509v3 Authority Key Identifier: keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.135.64.0/19 Signature Algorithm: sha256WithRSAEncryption 63:f3:b2:3c:62:32:27:96:f5:86:4c:0e:fa:a9:ad:38:31:6d: e0:9b:df:59:dd:4e:78:c5:d7:89:d6:4e:5a:df:ec:b7:05:cc: 13:ad:ac:70:d6:99:88:9b:43:3f:22:e8:2b:1f:ef:e5:0f:d6: 74:bb:05:fe:58:60:45:f0:f6:42:10:38:51:7f:77:35:94:1d: 5c:c4:3c:98:b1:b3:bc:a7:f3:fc:7e:f2:5f:90:ca:7c:52:59: f8:ab:00:df:3b:c0:92:fb:7c:81:33:af:44:27:21:a5:7a:e2: 5c:94:bc:1c:ef:3b:8b:62:07:19:87:c8:c7:01:28:33:3a:b2: 03:06:6c:d8:2b:a9:87:4a:c7:36:9e:40:6c:35:12:37:69:4d: c5:80:0d:74:9d:5d:10:41:26:25:a9:43:61:3b:b0:2f:d5:26: a3:7d:23:b2:1b:bc:b5:58:e9:9d:28:77:ba:05:f8:2c:b7:98: 4d:92:e4:b7:53:9b:f2:69:ce:fc:4a:de:d3:ea:ca:ac:62:2c: c7:ee:3d:b6:f7:bb:a7:d1:ed:e8:a7:94:f5:1b:8d:44:13:28: 4e:1b:66:c1:17:a1:d3:f2:28:3d:5e:c9:2e:61:cb:88:ae:e8: 60:20:89:47:dd:ae:b3:59:9e:11:53:2e:25:9a:54:69:e1:85: 4b:46:06:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NjDieEFhQ0HFe6p2/BMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDI3MWMzZmE5MDNhNTkwZmRmNTQ4OTk0NDllNjk4ZjJl OWM2MzIwHhcNMjYwMTAxMjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGUwZTAxODNjYzUyNzZmNmM2NWIzYjk2MzRmYjFiMzIzNjMyYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vJc5hgyh90pZweVilKRWFeXUAVs MRdtUQt4ZBJ/65bNAHmwz4go8buJs2DB1rOshdW2yoO6UwQJSZPkmKh26kMWq81k Jg557vLLEnTMPCfNt6iTgi8d0XWi5gdA4pfTdT6sTyIuupywoKGbrJoZrx74/L05 qyo0eYqi3xTZl/1r07jTWWAb4JCr2hpoIXA/6BU00LagQ8lkqzqBuQglvXrRSZMW +yDldH7onnMuLcWHmYrRdOlOCnqku3z/MHz5uVtyC5CtyYfcXeYEo/ne1DAZm63p Ok7G7gDFVzECavqV13ibrnl7eW21oVh7lNncFJE8kKV76L3qzdRkNOYt3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPTg4Bg8xSdvbGWzuWNPsbMjYyuHMB8GA1UdIwQY MBaAFOTSccP6kDpZD99UiZRJ5pjy6cYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYt NWYyMDUyMzZkZTFmLzEvOU9EZ0dEekZKMjlzWmJPNVkwLXhzeU5qSzRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYtNWYyMDUyMzZkZTFm LzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFwYdAMA0G CSqGSIb3DQEBCwUAA4IBAQBj87I8YjInlvWGTA76qa04MW3gm99Z3U54xdeJ1k5a 3+y3BcwTraxw1pmIm0M/IugrH+/lD9Z0uwX+WGBF8PZCEDhRf3c1lB1cxDyYsbO8 p/P8fvJfkMp8Uln4qwDfO8CS+3yBM69EJyGleuJclLwc7zuLYgcZh8jHASgzOrID BmzYK6mHSsc2nkBsNRI3aU3FgA10nV0QQSYlqUNhO7Av1SajfSOyG7y1WOmdKHe6 Bfgst5hNkuS3U5vyac78St7T6sqsYizH7j2297un0e3op5T1G41EEyhOG2bBF6HT 8ig9XskuYcuIruhgIIlH3a6zWZ4RUy4lmlRp4YVLRgac -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:39 2026 by rpki-client