This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/FMdvNunKljn8ofGnpjf1LZVHjq8.roa File: FMdvNunKljn8ofGnpjf1LZVHjq8.roa (raw, json) Hash identifier: 8mvnTEy6JbB2XqN3FH0fr8TfsaVsZ+l1QCmyb/WMQRQ= Subject key identifier: 14:C7:6F:36:E9:CA:96:39:FC:A1:F1:A7:A6:37:F5:2D:95:47:8E:AF Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Certificate serial: 019B7DCA7F7A4FB5E9B4DBF9243E254122C7 Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/FMdvNunKljn8ofGnpjf1LZVHjq8.roa Signing time: Fri 02 Jan 2026 08:19:41 +0000 ROA not before: Fri 02 Jan 2026 08:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9087 IP address blocks: 194.59.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:7f:7a:4f:b5:e9:b4:db:f9:24:3e:25:41:22:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a Validity Not Before: Jan 2 08:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14c76f36e9ca9639fca1f1a7a637f52d95478eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:c0:75:58:c4:33:28:95:ba:93:05:3b:39: e3:fe:5b:5e:29:e0:bf:5f:a9:80:19:e4:4d:3c:b4: 55:e4:f0:18:c2:b6:bc:06:d5:ca:8d:6b:a1:f6:d0: a3:c9:d1:6b:34:fa:08:05:c0:a2:1a:d2:39:2f:18: 03:4e:e9:ac:69:8c:bb:bf:35:f1:03:09:6c:7f:70: ad:b0:8b:d7:f9:18:76:fd:b0:f7:74:1c:22:2f:70: 40:06:83:a3:07:a8:2c:80:16:20:cd:7e:55:35:bb: 18:22:c2:0a:f4:71:28:43:ce:2b:11:0e:de:1c:38: b1:a9:42:0a:22:b3:d0:7d:85:0d:f2:65:6a:c3:b5: 19:57:97:b6:77:4e:ff:33:60:b0:09:46:90:0f:b9: 05:0c:1f:2a:bb:cb:10:36:29:d3:ea:f7:78:7c:78: 77:9d:60:f3:56:90:3c:6d:5d:6e:6b:54:ea:6a:e0: 75:04:bb:b5:89:11:1a:29:75:40:33:97:f9:4f:fd: d4:31:df:f2:9b:66:db:32:78:17:d3:85:99:91:c8: db:59:3f:88:e6:02:e4:d0:3a:2f:df:34:33:c3:89: 39:63:11:05:83:c0:cf:74:fe:20:2e:fd:25:63:c4: ce:db:ec:45:4e:9c:a1:77:65:55:1b:35:5f:c1:63: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C7:6F:36:E9:CA:96:39:FC:A1:F1:A7:A6:37:F5:2D:95:47:8E:AF X509v3 Authority Key Identifier: keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/FMdvNunKljn8ofGnpjf1LZVHjq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.59.9.0/24 Signature Algorithm: sha256WithRSAEncryption 98:0d:09:70:46:dd:35:9e:05:2c:cb:b3:0d:8a:51:6a:1d:d5: 94:72:a1:16:cb:b2:ee:0b:d8:20:4f:49:be:4b:b0:8d:8d:fc: 7d:41:c4:43:2c:73:ad:65:bd:f1:4e:80:cd:8e:4f:4d:ee:ed: 4e:b5:a4:c0:86:32:e1:b5:c8:b1:c3:79:09:74:bd:92:97:51: 09:f4:89:4e:d6:69:26:38:76:3e:a1:6e:69:4f:62:10:83:2c: e8:2c:32:4d:44:c7:aa:0f:23:c3:cc:c3:47:63:43:90:cc:08: 9d:ab:0b:d5:77:f0:cf:f5:84:0b:9d:4b:34:e2:a4:04:42:45: 1b:69:9d:65:8e:d1:ad:f7:b0:bd:14:c7:34:88:43:ae:24:96: 1c:a1:4e:9b:ce:05:8c:42:b5:3c:c9:7b:33:50:f6:13:46:33: 23:f4:d1:87:23:cd:92:f4:0e:9e:06:13:d2:cf:b6:25:62:6d: 19:1f:e0:02:11:ae:f6:e6:a4:aa:99:f5:40:b0:92:41:26:62: 94:bc:17:38:df:b0:eb:e2:3c:5d:f1:85:1d:f8:03:25:66:e6: 15:7c:48:21:20:bb:9c:97:8a:d8:c2:b9:fb:24:8b:b1:24:cd: 13:53:66:e7:4e:c9:2d:6c:22:b0:d7:fc:b1:32:c2:e1:ca:54: c2:56:9f:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yn96T7XptNv5JD4lQSLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3 YTI2NmEwHhcNMjYwMTAyMDgxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGM3NmYzNmU5Y2E5NjM5ZmNhMWYxYTdhNjM3ZjUyZDk1NDc4ZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4nAdVjEMyiVupMFOznj/lteKeC/ X6mAGeRNPLRV5PAYwra8BtXKjWuh9tCjydFrNPoIBcCiGtI5LxgDTumsaYy7vzXx Awlsf3CtsIvX+Rh2/bD3dBwiL3BABoOjB6gsgBYgzX5VNbsYIsIK9HEoQ84rEQ7e HDixqUIKIrPQfYUN8mVqw7UZV5e2d07/M2CwCUaQD7kFDB8qu8sQNinT6vd4fHh3 nWDzVpA8bV1ua1TqauB1BLu1iREaKXVAM5f5T/3UMd/ym2bbMngX04WZkcjbWT+I 5gLk0Dov3zQzw4k5YxEFg8DPdP4gLv0lY8TO2+xFTpyhd2VVGzVfwWNxyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBTHbzbpypY5/KHxp6Y39S2VR46vMB8GA1UdIwQY MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt YWRhNWMyMGUzZjdiLzEvRk1kdk51bktsam44b2ZHbnBqZjFMWlZIanE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsJMA0G CSqGSIb3DQEBCwUAA4IBAQCYDQlwRt01ngUsy7MNilFqHdWUcqEWy7LuC9ggT0m+ S7CNjfx9QcRDLHOtZb3xToDNjk9N7u1OtaTAhjLhtcixw3kJdL2Sl1EJ9IlO1mkm OHY+oW5pT2IQgyzoLDJNRMeqDyPDzMNHY0OQzAidqwvVd/DP9YQLnUs04qQEQkUb aZ1ljtGt97C9FMc0iEOuJJYcoU6bzgWMQrU8yXszUPYTRjMj9NGHI82S9A6eBhPS z7YlYm0ZH+ACEa725qSqmfVAsJJBJmKUvBc437Dr4jxd8YUd+AMlZuYVfEghILuc l4rYwrn7JIuxJM0TU2bnTsktbCKw1/yxMsLhylTCVp8e -----END CERTIFICATE-----Generated at Wed Jan 21 15:37:10 2026 by rpki-client