This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/I9hNFsiUppOM9VZIcAfH4qbXw_k.roa File: I9hNFsiUppOM9VZIcAfH4qbXw_k.roa (raw, json) Hash identifier: W4bc2pkEjBkLLPhivhIIPW+Vl4uMQLKBx8OjNwjL98A= Subject key identifier: 23:D8:4D:16:C8:94:A6:93:8C:F5:56:48:70:07:C7:E2:A6:D7:C3:F9 Certificate issuer: /CN=11184fb6503a760657f90270e276a3fcb50b8e8f Certificate serial: 019B7758D7AE2289592472D5F54B4120ACEC Authority key identifier: 11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/I9hNFsiUppOM9VZIcAfH4qbXw_k.roa Signing time: Thu 01 Jan 2026 02:17:49 +0000 ROA not before: Thu 01 Jan 2026 02:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 193.110.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.mft rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d7:ae:22:89:59:24:72:d5:f5:4b:41:20:ac:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11184fb6503a760657f90270e276a3fcb50b8e8f Validity Not Before: Jan 1 02:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23d84d16c894a6938cf556487007c7e2a6d7c3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:23:8f:c1:a8:0d:8a:bf:a1:eb:d5:61:04: 0b:18:d6:74:87:39:f3:e6:37:f0:b3:82:e6:1b:ed: 86:54:f0:e8:db:4a:a8:65:8a:79:be:e2:59:be:2b: 92:9d:cd:65:6e:c0:eb:b8:c8:92:bf:dc:da:63:b1: 56:12:8d:77:27:3a:0d:b8:69:da:e4:71:66:ec:3f: b8:c3:22:7f:d4:66:ef:0b:49:47:85:e5:44:96:aa: 5f:aa:a1:89:6c:79:2c:c7:eb:24:ce:ca:3e:11:c7: 2a:4b:4f:50:b0:3f:d6:99:00:71:4e:cb:72:3a:0d: fb:ab:62:a7:e7:74:e0:e5:51:23:78:61:95:9d:ad: c6:d0:03:da:2e:b2:84:13:70:93:c6:95:0e:ed:8b: b0:59:3e:ad:45:82:f3:09:6e:3d:e6:a0:89:6e:6a: e4:ba:33:c2:ee:12:60:df:50:14:a2:25:f2:4c:fd: d0:b8:63:cc:4c:cb:86:6c:ae:f7:75:4b:a3:91:2b: b3:9a:6e:6a:85:c6:66:e2:73:0a:57:03:2b:2a:05: 1b:e3:0d:ae:71:20:3f:92:9b:8d:a6:b5:01:e3:54: de:ee:f7:da:d9:ca:e8:f3:d6:2c:a8:77:9e:73:6e: 76:13:b4:46:f5:4e:89:31:25:75:5b:8b:a5:61:28: 48:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D8:4D:16:C8:94:A6:93:8C:F5:56:48:70:07:C7:E2:A6:D7:C3:F9 X509v3 Authority Key Identifier: keyid:11:18:4F:B6:50:3A:76:06:57:F9:02:70:E2:76:A3:FC:B5:0B:8E:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERhPtlA6dgZX-QJw4naj_LULjo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/I9hNFsiUppOM9VZIcAfH4qbXw_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a733-ef05-4af0-8535-196d666d2b2b/1/ERhPtlA6dgZX-QJw4naj_LULjo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.209.0/24 Signature Algorithm: sha256WithRSAEncryption aa:7f:55:f7:70:04:43:80:da:78:23:46:58:1f:c2:a9:11:9e: cc:d0:b1:b2:c2:87:63:49:1a:7a:d5:00:a1:f7:37:2d:5b:81: 3e:52:a2:97:6a:ec:87:59:63:05:e1:be:77:3a:2e:5c:87:44: 9d:f2:98:c2:c5:fc:b3:f2:5d:3f:f1:dc:62:a6:1f:34:e9:26: f7:13:d7:fe:16:4f:ed:c6:59:96:f2:19:4a:62:5d:35:ab:8c: a2:6d:67:58:28:e0:c8:06:d5:42:50:0f:13:9c:e7:51:10:94: 25:d7:79:2d:cf:ed:6e:e4:ca:b8:14:48:95:c8:7d:4f:e7:c9: 8f:12:85:f2:73:8a:b0:16:b9:f1:32:3f:6f:c6:9e:ca:88:cc: e1:9e:d1:ab:95:08:8a:08:32:dd:75:52:ff:55:1a:38:a7:dc: fe:10:2e:c9:25:e6:93:f3:7d:5e:b9:86:63:74:84:15:0b:c6: e3:e2:ae:72:67:c9:a9:79:0b:c3:3f:6c:1e:24:ec:bb:37:ee: 7d:c7:74:26:0a:00:04:02:e3:fd:f1:da:49:18:ca:31:d1:86: 14:52:cb:01:08:aa:1f:a9:f7:5d:09:83:5b:1f:e2:88:c1:57: 62:50:2e:ae:c0:f2:ad:95:2a:91:26:92:f9:26:40:83:35:01: 9d:e4:cc:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNeuIolZJHLV9UtBIKzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTg0ZmI2NTAzYTc2MDY1N2Y5MDI3MGUyNzZhM2ZjYjUw YjhlOGYwHhcNMjYwMTAxMDIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2Q4NGQxNmM4OTRhNjkzOGNmNTU2NDg3MDA3YzdlMmE2ZDdjM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOUjj8GoDYq/oevVYQQLGNZ0hznz 5jfws4LmG+2GVPDo20qoZYp5vuJZviuSnc1lbsDruMiSv9zaY7FWEo13JzoNuGna 5HFm7D+4wyJ/1GbvC0lHheVElqpfqqGJbHksx+skzso+EccqS09QsD/WmQBxTsty Og37q2Kn53Tg5VEjeGGVna3G0APaLrKEE3CTxpUO7YuwWT6tRYLzCW495qCJbmrk ujPC7hJg31AUoiXyTP3QuGPMTMuGbK73dUujkSuzmm5qhcZm4nMKVwMrKgUb4w2u cSA/kpuNprUB41Te7vfa2cro89YsqHeec252E7RG9U6JMSV1W4ulYShIsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCPYTRbIlKaTjPVWSHAHx+Km18P5MB8GA1UdIwQY MBaAFBEYT7ZQOnYGV/kCcOJ2o/y1C46PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUt MTk2ZDY2NmQyYjJiLzEvSTloTkZzaVVwcE9NOVZaSWNBZkg0cWJYd19rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8zM2E3MzMtZWYwNS00YWYwLTg1MzUtMTk2ZDY2NmQyYjJi LzEvRVJoUHRsQTZkZ1pYLVFKdzRuYWpfTFVMam84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW7RMA0G CSqGSIb3DQEBCwUAA4IBAQCqf1X3cARDgNp4I0ZYH8KpEZ7M0LGywodjSRp61QCh 9zctW4E+UqKXauyHWWMF4b53Oi5ch0Sd8pjCxfyz8l0/8dxiph806Sb3E9f+Fk/t xlmW8hlKYl01q4yibWdYKODIBtVCUA8TnOdREJQl13ktz+1u5Mq4FEiVyH1P58mP EoXyc4qwFrnxMj9vxp7KiMzhntGrlQiKCDLddVL/VRo4p9z+EC7JJeaT831euYZj dIQVC8bj4q5yZ8mpeQvDP2weJOy7N+59x3QmCgAEAuP98dpJGMox0YYUUssBCKof qfddCYNbH+KIwVdiUC6uwPKtlSqRJpL5JkCDNQGd5Myg -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:01 2026 by rpki-client