This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/S9kGmLdkpv2ILDDQ-SlcOK9Lj1o.roa File: S9kGmLdkpv2ILDDQ-SlcOK9Lj1o.roa (raw, json) Hash identifier: QivYNDVsph6A7kkTjUq1Ljk/FMFPW+uo2Qe8RGmCL8g= Subject key identifier: 4B:D9:06:98:B7:64:A6:FD:88:2C:30:D0:F9:29:5C:38:AF:4B:8F:5A Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Certificate serial: 019B77C6B420F5F5BCF6C0C1D860402BF5D2 Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/S9kGmLdkpv2ILDDQ-SlcOK9Lj1o.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59451 IP address blocks: 194.165.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b4:20:f5:f5:bc:f6:c0:c1:d8:60:40:2b:f5:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bd90698b764a6fd882c30d0f9295c38af4b8f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:28:7f:49:9e:ac:ab:93:81:70:53:9b:7c: 5a:1d:f4:14:3b:21:a6:9b:69:db:6a:9b:3c:be:05: fa:04:5a:4a:a0:e7:2d:8c:41:b4:10:c0:12:f6:04: bd:81:9b:dd:ba:10:ec:7c:c2:72:6e:95:0f:2f:7f: 19:77:6c:7d:5b:da:e4:9a:88:10:9f:dd:04:3d:17: da:35:8d:8f:a5:6b:da:90:64:a2:db:5f:da:fb:61: 7f:3b:f4:42:57:b2:ae:68:dc:2e:46:cf:3c:34:55: e8:be:c6:17:f7:dc:c3:69:60:13:63:25:56:60:32: 14:70:bf:31:73:30:b4:03:64:7d:39:93:cf:81:2c: fa:64:5d:f8:2d:b7:bf:f1:be:9f:e0:8b:9c:3c:72: d8:86:03:c9:f5:73:2a:1b:5a:bb:55:b7:db:8b:93: fa:09:6e:6f:31:d5:fd:0b:5e:2b:27:93:01:af:15: 9c:43:84:aa:72:ee:a9:80:df:3a:c5:d8:ff:bb:a0: 65:7f:55:1f:30:f7:8c:e9:df:cc:f0:f5:7b:5d:89: 31:1c:e2:c7:33:ed:78:9d:81:c7:00:48:fb:00:2e: cc:cf:78:ee:50:c3:47:8b:db:19:74:22:67:07:b0: 8f:ea:7d:8c:82:62:21:be:0b:0f:d5:10:73:4b:38: e3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D9:06:98:B7:64:A6:FD:88:2C:30:D0:F9:29:5C:38:AF:4B:8F:5A X509v3 Authority Key Identifier: keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/S9kGmLdkpv2ILDDQ-SlcOK9Lj1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.165.131.0/24 Signature Algorithm: sha256WithRSAEncryption 41:c0:49:fb:87:8a:0e:80:b4:33:2b:73:b0:81:a4:0c:a5:db: d1:ce:fd:38:c0:d1:06:df:6d:cc:99:ae:ee:e0:1e:ce:3e:bb: 7e:f6:96:63:d2:a9:ec:9b:1b:44:48:9b:61:3e:29:34:d6:f5: 73:ee:2c:5c:35:87:af:b3:96:8b:c3:1b:e4:48:04:80:3b:38: ef:cc:47:3f:94:43:ee:40:6d:99:6a:4f:c9:43:bf:4b:b6:e2: c0:7b:3b:e2:f2:68:e3:e1:42:18:1b:dc:c2:00:dc:60:f7:8a: 38:45:1b:38:c9:40:5a:2f:b1:7e:58:8b:7e:87:9f:05:e1:66: 3d:96:d2:66:e7:ca:d3:cd:ae:36:5b:c4:97:77:5a:36:2b:8b: 57:c9:94:38:cb:15:ea:f1:45:45:e0:21:a0:3f:b8:db:8a:6a: aa:b6:0f:7c:c2:7c:74:fb:66:c7:8b:f5:a5:26:ef:97:57:2c: 80:07:b7:f9:5c:58:2e:1a:af:66:cd:1e:59:04:22:aa:24:ab: 66:e6:10:8a:fc:90:93:8b:21:09:f4:96:da:82:82:ca:1d:07: 2e:00:db:1a:33:30:f8:97:98:dc:1c:f1:73:c6:5f:e5:e6:ca: db:be:d5:77:39:23:a5:12:46:ee:da:a9:d8:ff:81:fc:3a:ef: 93:fb:92:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrQg9fW89sDB2GBAK/XSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz NmNiYzYwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmQ5MDY5OGI3NjRhNmZkODgyYzMwZDBmOTI5NWMzOGFmNGI4ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ0of0merKuTgXBTm3xaHfQUOyGm m2nbaps8vgX6BFpKoOctjEG0EMAS9gS9gZvduhDsfMJybpUPL38Zd2x9W9rkmogQ n90EPRfaNY2PpWvakGSi21/a+2F/O/RCV7KuaNwuRs88NFXovsYX99zDaWATYyVW YDIUcL8xczC0A2R9OZPPgSz6ZF34Lbe/8b6f4IucPHLYhgPJ9XMqG1q7Vbfbi5P6 CW5vMdX9C14rJ5MBrxWcQ4Sqcu6pgN86xdj/u6Blf1UfMPeM6d/M8PV7XYkxHOLH M+14nYHHAEj7AC7Mz3juUMNHi9sZdCJnB7CP6n2MgmIhvgsP1RBzSzjjVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEvZBpi3ZKb9iCww0PkpXDivS49aMB8GA1UdIwQY MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt OGI4ZDcyMTcyMDkwLzEvUzlrR21MZGtwdjJJTEREUS1TbGNPSzlMajFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqWDMA0G CSqGSIb3DQEBCwUAA4IBAQBBwEn7h4oOgLQzK3OwgaQMpdvRzv04wNEG323Mma7u 4B7OPrt+9pZj0qnsmxtESJthPik01vVz7ixcNYevs5aLwxvkSASAOzjvzEc/lEPu QG2Zak/JQ79LtuLAezvi8mjj4UIYG9zCANxg94o4RRs4yUBaL7F+WIt+h58F4WY9 ltJm58rTza42W8SXd1o2K4tXyZQ4yxXq8UVF4CGgP7jbimqqtg98wnx0+2bHi/Wl Ju+XVyyAB7f5XFguGq9mzR5ZBCKqJKtm5hCK/JCTiyEJ9JbagoLKHQcuANsaMzD4 l5jcHPFzxl/l5srbvtV3OSOlEkbu2qnY/4H8Ou+T+5Jv -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:42 2026 by rpki-client