This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/1-9N19a_GzIg8H0hwCPKyw-xfmbg.roa File: 1-9N19a_GzIg8H0hwCPKyw-xfmbg.roa (raw, json) Hash identifier: F/RcT6jJFR9ljteJFuF0791elb6u75/JCwlm7zNLBlI= Subject key identifier: FB:D3:75:F5:AF:C6:CC:88:3C:1F:48:70:08:F2:B2:C3:EC:5F:99:B8 Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d Certificate serial: 019B7CEDAFF8C28A60FDD391C47D13E914AB Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/1-9N19a_GzIg8H0hwCPKyw-xfmbg.roa Signing time: Fri 02 Jan 2026 04:18:30 +0000 ROA not before: Fri 02 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16101 IP address blocks: 193.41.194.0/24 maxlen: 24 2001:67c:2b38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:af:f8:c2:8a:60:fd:d3:91:c4:7d:13:e9:14:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d Validity Not Before: Jan 2 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbd375f5afc6cc883c1f487008f2b2c3ec5f99b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4a:de:40:9d:27:e5:0e:91:ab:83:d4:7e:2f: 51:64:7f:79:29:7e:37:80:88:22:d0:51:62:52:95: a8:5e:a5:0c:96:3b:88:9b:d8:c3:d1:2a:04:93:e0: 0b:5a:3d:02:d6:89:72:f8:4d:cd:3c:9a:0f:48:6b: 45:e8:6a:d5:ea:c1:bd:a5:8c:46:3c:2c:07:0d:1f: e6:2a:bf:a2:b5:b5:3d:71:5a:ac:e0:8a:8b:ea:89: bb:48:71:75:0f:10:1c:5f:33:97:1b:36:63:ec:2c: 51:3e:c9:58:28:5b:33:fa:5a:66:07:15:2b:14:13: 84:dd:39:ca:25:0e:93:00:d5:10:26:b8:01:90:9e: 5f:a6:c2:d6:41:fa:28:4d:5f:37:85:ef:3d:f7:ad: 33:68:f3:fd:92:b1:73:90:fd:3a:45:08:38:a6:d6: 0f:b2:86:75:e8:71:27:85:91:b1:6f:0c:6c:06:6d: f7:81:bc:07:62:80:a6:f7:46:70:86:7f:fd:16:0b: 4e:04:d7:a0:f9:ca:e2:07:07:b3:08:5b:af:89:90: 39:7f:eb:d4:d2:5a:5c:58:0b:92:45:e8:e9:a0:54: 7c:b1:97:25:79:af:81:f4:d2:a9:07:46:e1:5f:a1: 6e:b9:18:d9:a2:57:69:7c:4e:f8:2e:3d:4d:57:54: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:75:F5:AF:C6:CC:88:3C:1F:48:70:08:F2:B2:C3:EC:5F:99:B8 X509v3 Authority Key Identifier: keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/1-9N19a_GzIg8H0hwCPKyw-xfmbg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.41.194.0/24 IPv6: 2001:67c:2b38::/48 Signature Algorithm: sha256WithRSAEncryption 1d:a6:6b:a4:00:22:eb:1f:d8:f1:02:e5:26:73:f6:0b:a5:68: 69:1c:92:e4:38:a5:c2:3f:c7:0e:30:6d:a4:0a:24:72:b4:72: 8f:30:59:13:5c:ab:36:1a:fc:f1:e8:8a:f4:0c:2d:66:af:18: a0:ed:da:0a:3a:39:96:52:4d:1c:0b:a3:aa:b1:8c:79:2d:a1: 28:f0:38:71:11:d9:b7:b0:cd:e8:e3:c3:fa:0e:d4:b8:ef:b2: d1:78:d1:31:95:89:a4:3d:89:ae:fa:ce:be:c7:d9:80:2f:42: 65:29:0c:ea:5e:8d:f0:0a:14:81:1d:56:27:71:56:d5:f9:a9: 99:12:cb:1d:cd:bc:7c:7e:f4:f4:c1:ef:2f:73:33:bd:8e:b1: 5e:c5:dd:ea:01:68:c1:ab:71:69:f1:4d:30:00:63:65:43:a9: b0:b9:77:57:ff:31:91:d7:cd:aa:75:17:20:06:79:86:9c:49: b8:58:88:1c:6c:bc:32:8a:b2:70:5d:4f:61:5d:84:9e:81:0e: 62:10:14:66:1c:6f:9d:7d:f5:60:48:2f:49:a9:b5:cc:13:e1: 5a:69:54:17:c3:d2:23:6f:f3:99:b1:5f:2f:de:fb:05:20:66: 14:ef:12:be:3e:a5:51:09:90:e5:2e:d0:62:8e:9d:06:f4:f4: 89:bd:de:85 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt87a/4wopg/dORxH0T6RSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3YTVkYmJjODMzY2M1YWIyZDRhZTkyOTdlMmVhYjk3NWYx YzE5N2QwHhcNMjYwMTAyMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmQzNzVmNWFmYzZjYzg4M2MxZjQ4NzAwOGYyYjJjM2VjNWY5OWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEreQJ0n5Q6Rq4PUfi9RZH95KX43 gIgi0FFiUpWoXqUMljuIm9jD0SoEk+ALWj0C1oly+E3NPJoPSGtF6GrV6sG9pYxG PCwHDR/mKr+itbU9cVqs4IqL6om7SHF1DxAcXzOXGzZj7CxRPslYKFsz+lpmBxUr FBOE3TnKJQ6TANUQJrgBkJ5fpsLWQfooTV83he89960zaPP9krFzkP06RQg4ptYP soZ16HEnhZGxbwxsBm33gbwHYoCm90Zwhn/9FgtOBNeg+criBwezCFuviZA5f+vU 0lpcWAuSRejpoFR8sZclea+B9NKpB0bhX6FuuRjZoldpfE74Lj1NV1SQUwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPvTdfWvxsyIPB9IcAjyssPsX5m4MB8GA1UdIwQY MBaAFLel27yDPMWrLUrpKX4uq5dfHBl9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDZYYnZJTTh4YXN0U3VrcGZpNnJsMThjR1gwLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MjlmZjktMDI2NS00NzZmLTkwMzUt NDE5MmEzNTdlYWI3LzEvMS05TjE5YV9HeklnOEgwaHdDUEt5dy14Zm1iZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjIvNDI5ZmY5LTAyNjUtNDc2Zi05MDM1LTQxOTJhMzU3ZWFi Ny8xL3Q2WGJ2SU04eGFzdFN1a3BmaTZybDE4Y0dYMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMEpwjAP BAIAAjAJAwcAIAEGfCs4MA0GCSqGSIb3DQEBCwUAA4IBAQAdpmukACLrH9jxAuUm c/YLpWhpHJLkOKXCP8cOMG2kCiRytHKPMFkTXKs2Gvzx6Ir0DC1mrxig7doKOjmW Uk0cC6OqsYx5LaEo8DhxEdm3sM3o48P6DtS477LReNExlYmkPYmu+s6+x9mAL0Jl KQzqXo3wChSBHVYncVbV+amZEssdzbx8fvT0we8vczO9jrFexd3qAWjBq3Fp8U0w AGNlQ6mwuXdX/zGR182qdRcgBnmGnEm4WIgcbLwyirJwXU9hXYSegQ5iEBRmHG+d ffVgSC9JqbXME+FaaVQXw9Ijb/OZsV8v3vsFIGYU7xK+PqVRCZDlLtBijp0G9PSJ vd6F -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:06 2026 by rpki-client