This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/T9cSaSwYnIVACSgEZaOJ4hp-zQ8.roa File: T9cSaSwYnIVACSgEZaOJ4hp-zQ8.roa (raw, json) Hash identifier: BdZpQBzjSlLSgygUDm0WCtbsBnX9aj9dxvKQ9BvJl+k= Subject key identifier: 4F:D7:12:69:2C:18:9C:85:40:09:28:04:65:A3:89:E2:1A:7E:CD:0F Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D60CB8D868C1F2D53D5FFAAF7CB68 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/T9cSaSwYnIVACSgEZaOJ4hp-zQ8.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215442 IP address blocks: 93.114.193.0/24 maxlen: 24 194.76.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:60:cb:8d:86:8c:1f:2d:53:d5:ff:aa:f7:cb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fd712692c189c854009280465a389e21a7ecd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:98:7b:60:de:c3:39:27:63:e7:eb:53:fd: 63:00:39:26:cb:6b:c1:be:29:e6:11:cc:20:ad:a3: a9:d1:4b:68:2f:42:24:bd:86:1b:c8:18:5b:22:4b: 12:53:1e:40:0d:1e:08:12:b1:f0:cd:d4:e9:95:18: 07:81:c1:c1:55:18:92:13:52:ee:8c:56:2c:20:f7: ff:cb:81:19:78:dc:fa:52:5d:28:c4:b8:9a:44:08: b6:a5:38:a9:58:ac:1a:66:09:e2:02:c1:16:50:d2: af:25:ab:c0:e8:f2:35:cc:2f:0f:d0:19:11:46:a6: 0a:92:81:17:4d:2b:b8:75:f7:5f:0b:f1:46:c1:67: 24:94:80:15:83:fd:a7:49:d4:65:90:4c:8f:a5:b5: 21:f3:d2:4d:2e:f8:89:81:19:bb:59:0b:0a:78:54: 88:a5:b0:ed:59:31:ad:ea:62:6b:43:40:98:07:76: 67:46:0e:df:6c:39:3c:87:57:bd:08:39:d1:f3:50: 58:fa:0c:4f:53:d1:9c:06:e1:76:09:4d:d2:ba:c8: e0:09:85:16:7a:fd:74:34:c2:be:18:ca:6b:65:a1: 0f:5f:6e:5e:20:b5:07:34:34:78:81:f5:8f:f9:f7: ce:e2:9c:30:92:5d:c2:f3:cd:e0:c3:6a:e8:74:8a: ff:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D7:12:69:2C:18:9C:85:40:09:28:04:65:A3:89:E2:1A:7E:CD:0F X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/T9cSaSwYnIVACSgEZaOJ4hp-zQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.114.193.0/24 194.76.134.0/24 Signature Algorithm: sha256WithRSAEncryption 77:e3:4b:9b:0e:0e:c1:a6:69:d9:a9:2b:79:7a:69:21:97:f5: fc:2f:bb:3b:13:5e:2e:52:cd:a9:7c:fd:cf:d9:91:b4:f6:3c: 9f:5f:53:ae:d2:98:99:46:6f:04:dc:25:c0:2c:6e:97:5e:eb: 90:d9:7c:fb:95:65:5e:5b:d8:05:60:3f:20:58:09:cb:74:f5: 77:89:4f:1c:69:41:85:1f:dd:cb:76:13:1e:ad:d3:ed:dc:64: 5e:db:3a:01:c9:0e:91:d7:44:63:e5:64:47:1b:0d:c9:35:5d: 59:52:ba:a8:4f:01:2d:62:c7:45:6e:f6:d6:38:4c:d9:c2:6d: 41:18:b9:d0:2a:46:f5:63:20:8f:e4:99:90:59:f5:db:31:53: c5:53:9b:15:2c:8f:68:3a:6e:9d:6c:0f:3b:4a:e7:c1:fb:6f: 8a:07:40:7f:73:83:19:00:07:70:90:ab:d4:32:63:6c:a8:f0: db:27:fc:65:89:91:da:02:d0:8b:48:33:15:6d:c8:d3:5b:3f: 24:d9:06:80:52:2f:f3:d7:cf:8f:1d:41:7e:05:c2:7f:f4:91: be:50:81:7b:66:96:d9:56:6c:08:07:1f:31:29:7e:cb:6c:dd: 82:ac:53:5c:6d:a8:4b:cb:6a:af:d6:d4:aa:bd:3b:6e:ec:21: 14:a0:06:c3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XWDLjYaMHy1T1f+q98toMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmQ3MTI2OTJjMTg5Yzg1NDAwOTI4MDQ2NWEzODllMjFhN2VjZDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIuYe2DewzknY+frU/1jADkmy2vB vinmEcwgraOp0UtoL0IkvYYbyBhbIksSUx5ADR4IErHwzdTplRgHgcHBVRiSE1Lu jFYsIPf/y4EZeNz6Ul0oxLiaRAi2pTipWKwaZgniAsEWUNKvJavA6PI1zC8P0BkR RqYKkoEXTSu4dfdfC/FGwWcklIAVg/2nSdRlkEyPpbUh89JNLviJgRm7WQsKeFSI pbDtWTGt6mJrQ0CYB3ZnRg7fbDk8h1e9CDnR81BY+gxPU9GcBuF2CU3SusjgCYUW ev10NMK+GMprZaEPX25eILUHNDR4gfWP+ffO4pwwkl3C883gw2rodIr/ewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE/XEmksGJyFQAkoBGWjieIafs0PMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvVDljU2FTd1luSVZBQ1NnRVphT0o0aHAtelE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXLBAwQA wkyGMA0GCSqGSIb3DQEBCwUAA4IBAQB340ubDg7BpmnZqSt5emkhl/X8L7s7E14u Us2pfP3P2ZG09jyfX1Ou0piZRm8E3CXALG6XXuuQ2Xz7lWVeW9gFYD8gWAnLdPV3 iU8caUGFH93LdhMerdPt3GRe2zoByQ6R10Rj5WRHGw3JNV1ZUrqoTwEtYsdFbvbW OEzZwm1BGLnQKkb1YyCP5JmQWfXbMVPFU5sVLI9oOm6dbA87SufB+2+KB0B/c4MZ AAdwkKvUMmNsqPDbJ/xliZHaAtCLSDMVbcjTWz8k2QaAUi/z18+PHUF+BcJ/9JG+ UIF7ZpbZVmwIBx8xKX7LbN2CrFNcbahLy2qv1tSqvTtu7CEUoAbD -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:03 2026 by rpki-client