This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/a6e3sASUiAxUoLrPtfCHLqgPz1A.roa File: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (raw, json) Hash identifier: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg= Subject key identifier: 6B:A7:B7:B0:04:94:88:0C:54:A0:BA:CF:B5:F0:87:2E:A8:0F:CF:50 Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b Certificate serial: 019B7EA4DE27780EF7745F1632EE1AE7D7BD Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/a6e3sASUiAxUoLrPtfCHLqgPz1A.roa Signing time: Fri 02 Jan 2026 12:18:12 +0000 ROA not before: Fri 02 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51561 IP address blocks: 193.161.9.0/24 maxlen: 24 193.161.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:de:27:78:0e:f7:74:5f:16:32:ee:1a:e7:d7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b Validity Not Before: Jan 2 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ba7b7b00494880c54a0bacfb5f0872ea80fcf50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:dc:46:c6:3a:39:b7:67:29:d7:2a:f0:46: fa:a2:8e:30:25:87:13:bf:22:bb:b0:d2:e5:c0:ac: 01:4e:f9:ab:65:70:50:52:46:5f:a7:25:a0:5e:49: 8c:93:1c:dd:3b:46:cd:5d:ae:99:cb:57:c1:eb:5e: 95:af:16:f6:d4:8c:83:6c:57:d0:f5:95:b4:b6:6f: ad:ee:59:7b:65:2d:9c:83:0d:ad:3d:b0:88:8e:ca: a3:23:1a:ba:fb:c4:c3:2d:b2:76:c6:fd:8c:2c:7e: c1:bb:6a:a9:3b:ae:db:d6:40:78:12:1f:ad:35:3d: cc:5e:17:fa:81:86:62:52:70:28:e8:f6:92:7c:f0: 52:c0:42:3b:eb:b3:49:a5:3c:fa:be:b8:ce:84:ed: db:b3:dd:3e:b6:b6:01:f4:2b:34:e6:94:bd:57:0e: 0c:7b:30:bb:55:23:ea:db:cc:71:01:31:23:f7:c4: 04:ea:c5:12:90:1f:a1:6e:d7:d6:5c:66:9a:0e:fb: e6:03:f9:05:bc:1d:41:45:2f:82:ed:ab:ba:00:43: bf:ac:18:ee:5f:b6:28:7f:69:44:8f:02:bd:8a:92: ec:94:13:3c:3d:b5:c7:c8:5f:53:01:f4:41:38:08: cb:cc:7e:ac:a7:56:a0:8d:45:9b:b8:f4:22:9a:ba: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A7:B7:B0:04:94:88:0C:54:A0:BA:CF:B5:F0:87:2E:A8:0F:CF:50 X509v3 Authority Key Identifier: keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/a6e3sASUiAxUoLrPtfCHLqgPz1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.9.0-193.161.10.255 Signature Algorithm: sha256WithRSAEncryption 13:66:13:82:41:69:a9:cf:5f:cc:64:7a:34:e3:a4:b9:8b:2f: 98:a8:9f:72:13:02:6b:c9:df:8d:5f:77:75:ae:70:e2:bb:2d: 72:59:72:63:d0:3b:12:89:73:52:3d:ed:e7:9a:b4:bd:2f:02: b4:c0:cd:14:8a:5f:76:1d:ee:db:e1:80:59:8a:75:73:cc:fd: 17:58:63:26:8a:d1:23:72:44:e7:89:63:b0:66:4c:b6:70:fc: c2:07:ae:7b:6b:e5:6c:47:16:21:be:af:8f:3e:df:97:18:32: a1:3d:a0:b6:47:d4:3e:f0:b8:6d:4b:40:c7:c1:39:8f:65:79: b2:ef:1a:33:72:71:12:6a:cc:5e:b7:56:39:7c:61:f4:e9:79: 31:46:c9:6f:88:41:2f:82:8b:b4:93:86:cb:d7:6e:80:a4:81: 12:fb:86:f3:06:89:00:2e:bb:01:5c:9e:cf:6e:b6:16:cd:74: 94:02:b0:18:1a:80:6a:9b:de:cc:30:e5:d5:38:f8:e6:ed:a2: 04:ec:a5:ed:2f:1c:f6:a7:b4:16:31:65:23:10:ad:f9:48:18: 4c:9a:41:1c:8b:77:62:fb:6b:12:4f:f6:f7:40:46:84:d7:76: 77:6a:81:20:93:b3:0e:2e:d1:bf:2d:b1:17:b6:29:14:d3:4b: 01:d8:de:f0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pN4neA73dF8WMu4a59e9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YjhmYjkyMjgwYWIwNWI0NDMyZTQzYjk1NDUwZTczYjI3 NzNkNWIwHhcNMjYwMTAyMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmE3YjdiMDA0OTQ4ODBjNTRhMGJhY2ZiNWYwODcyZWE4MGZjZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoncRsY6ObdnKdcq8Eb6oo4wJYcT vyK7sNLlwKwBTvmrZXBQUkZfpyWgXkmMkxzdO0bNXa6Zy1fB616Vrxb21IyDbFfQ 9ZW0tm+t7ll7ZS2cgw2tPbCIjsqjIxq6+8TDLbJ2xv2MLH7Bu2qpO67b1kB4Eh+t NT3MXhf6gYZiUnAo6PaSfPBSwEI767NJpTz6vrjOhO3bs90+trYB9Cs05pS9Vw4M ezC7VSPq28xxATEj98QE6sUSkB+hbtfWXGaaDvvmA/kFvB1BRS+C7au6AEO/rBju X7Yof2lEjwK9ipLslBM8PbXHyF9TAfRBOAjLzH6sp1agjUWbuPQimrqiCQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGunt7AElIgMVKC6z7Xwhy6oD89QMB8GA1UdIwQY MBaAFAm4+5IoCrBbRDLkO5VFDnOydz1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTkt ZGE3Mzk4NTZjZmI4LzEvYTZlM3NBU1VpQXhVb0xyUHRmQ0hMcWdQejFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTktZGE3Mzk4NTZjZmI4 LzEvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBoQkD BADBoQowDQYJKoZIhvcNAQELBQADggEBABNmE4JBaanPX8xkejTjpLmLL5ion3IT AmvJ341fd3WucOK7LXJZcmPQOxKJc1I97eeatL0vArTAzRSKX3Yd7tvhgFmKdXPM /RdYYyaK0SNyROeJY7BmTLZw/MIHrntr5WxHFiG+r48+35cYMqE9oLZH1D7wuG1L QMfBOY9lebLvGjNycRJqzF63Vjl8YfTpeTFGyW+IQS+Ci7SThsvXboCkgRL7hvMG iQAuuwFcns9uthbNdJQCsBgagGqb3sww5dU4+ObtogTspe0vHPantBYxZSMQrflI GEyaQRyLd2L7axJP9vdARoTXdndqgSCTsw4u0b8tsRe2KRTTSwHY3vA= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:28 2026 by rpki-client