This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/9r0G642eSvBuYv8VjLPiZ1Iuz98.roa File: 9r0G642eSvBuYv8VjLPiZ1Iuz98.roa (raw, json) Hash identifier: 47ptNB3mhyn6VxReH973UVzQ37j6THyNlkI9GSSH4Ow= Subject key identifier: F6:BD:06:EB:8D:9E:4A:F0:6E:62:FF:15:8C:B3:E2:67:52:2E:CF:DF Certificate issuer: /CN=1e828de71ddd7804573128d26ee45c03901c8013 Certificate serial: 019B7910F721F952A7D0702124B0F066E5F7 Authority key identifier: 1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/9r0G642eSvBuYv8VjLPiZ1Iuz98.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28815 IP address blocks: 195.46.40.0/22 maxlen: 22 195.46.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.mft rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f7:21:f9:52:a7:d0:70:21:24:b0:f0:66:e5:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e828de71ddd7804573128d26ee45c03901c8013 Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6bd06eb8d9e4af06e62ff158cb3e267522ecfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ef:1a:64:57:0a:1d:2c:7e:4e:e5:6b:21:c2: e9:ee:71:3b:74:33:0d:0f:8c:8b:b0:72:9e:4c:4e: 44:32:9e:ae:0a:77:f6:73:54:44:89:45:94:5a:63: 4f:1c:ac:06:7f:cf:87:ed:a1:0b:27:68:b3:ec:a8: 3a:e6:d7:64:68:fd:7d:18:b4:59:58:3c:d2:da:9d: 78:4c:cf:ed:11:e0:55:7e:ef:44:87:cf:4d:41:1b: 90:cd:73:e9:6b:f1:a0:f2:84:35:8b:2b:7b:46:4e: db:79:32:37:b0:5d:4d:4e:37:fc:55:b7:79:a5:82: 2c:f3:d1:fc:b8:2c:83:9e:1f:5c:93:7b:5a:af:1a: 1d:15:fc:3b:43:d6:d3:2e:37:40:2a:2b:ae:88:03: b3:0f:ec:92:b2:52:82:85:bd:84:67:b5:b5:47:fe: 7a:30:76:86:86:9c:31:dc:d9:0d:09:b4:58:05:0d: 1e:cc:ce:6f:ec:c0:e0:b5:87:6b:9f:a4:d5:ed:e9: f7:e9:f4:94:dd:c8:c0:41:1f:51:74:b5:f3:a4:1c: b4:51:c4:f8:4f:ec:7b:67:44:53:64:81:04:f8:2e: 36:74:21:fa:c3:51:c5:e3:6b:97:f3:d6:7a:67:f1: 90:93:20:74:5d:1b:78:14:a9:61:7c:98:29:4c:2c: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BD:06:EB:8D:9E:4A:F0:6E:62:FF:15:8C:B3:E2:67:52:2E:CF:DF X509v3 Authority Key Identifier: keyid:1E:82:8D:E7:1D:DD:78:04:57:31:28:D2:6E:E4:5C:03:90:1C:80:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoKN5x3deARXMSjSbuRcA5AcgBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/9r0G642eSvBuYv8VjLPiZ1Iuz98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/fc1f57-a259-4abc-a627-70c8c70e32b0/1/HoKN5x3deARXMSjSbuRcA5AcgBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.46.40.0/22 Signature Algorithm: sha256WithRSAEncryption 15:b4:71:da:ac:c0:91:4d:3a:81:c1:e0:49:33:2b:3c:f7:2b: 9e:81:96:4e:dd:48:5c:3a:9e:fe:7a:2e:61:82:26:49:98:c8: 1e:b3:a5:11:46:6d:ff:9a:12:ff:fb:95:92:61:9f:b4:24:48: 1b:18:4c:1c:ab:4c:9b:4b:66:87:e4:45:cc:0b:aa:ef:e2:41: 6b:a2:87:66:34:39:ec:a3:24:54:09:af:58:4e:bb:f2:54:d4: e8:da:91:d1:62:19:ac:5f:e4:93:be:95:fb:0c:4b:75:29:7d: e9:21:61:6e:50:ef:91:b2:19:18:32:3a:22:92:6b:55:6c:3f: 5e:53:94:81:af:a6:75:e0:0a:3b:55:06:4e:a9:da:46:76:f3: 50:3c:ed:4a:df:5f:66:a9:66:af:2b:9f:87:53:b5:6e:9d:3b: dc:25:c0:0a:a5:7b:36:3c:a2:f3:b2:c1:65:b7:cd:0c:e9:f4: a0:09:8f:94:05:be:60:4f:ef:a6:48:2f:7d:93:c2:f6:d9:ee: 5c:38:29:a6:09:1b:d9:ef:a7:92:bd:e6:c5:2e:80:0b:b4:d8: d3:a8:11:f0:eb:bb:27:04:c0:b5:43:ee:67:25:ae:c3:fb:7c: 28:15:06:92:12:6e:6c:1b:71:66:89:a5:9a:d4:c9:ea:13:37: 8e:1b:23:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPch+VKn0HAhJLDwZuX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODI4ZGU3MWRkZDc4MDQ1NzMxMjhkMjZlZTQ1YzAzOTAx YzgwMTMwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmJkMDZlYjhkOWU0YWYwNmU2MmZmMTU4Y2IzZTI2NzUyMmVjZmRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO8aZFcKHSx+TuVrIcLp7nE7dDMN D4yLsHKeTE5EMp6uCnf2c1REiUWUWmNPHKwGf8+H7aELJ2iz7Kg65tdkaP19GLRZ WDzS2p14TM/tEeBVfu9Eh89NQRuQzXPpa/Gg8oQ1iyt7Rk7beTI3sF1NTjf8Vbd5 pYIs89H8uCyDnh9ck3tarxodFfw7Q9bTLjdAKiuuiAOzD+ySslKChb2EZ7W1R/56 MHaGhpwx3NkNCbRYBQ0ezM5v7MDgtYdrn6TV7en36fSU3cjAQR9RdLXzpBy0UcT4 T+x7Z0RTZIEE+C42dCH6w1HF42uX89Z6Z/GQkyB0XRt4FKlhfJgpTCxmFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPa9BuuNnkrwbmL/FYyz4mdSLs/fMB8GA1UdIwQY MBaAFB6Cjecd3XgEVzEo0m7kXAOQHIATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2Mjct NzBjOGM3MGUzMmIwLzEvOXIwRzY0MmVTdkJ1WXY4VmpMUGlaMUl1ejk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9mYzFmNTctYTI1OS00YWJjLWE2MjctNzBjOGM3MGUzMmIw LzEvSG9LTjV4M2RlQVJYTVNqU2J1UmNBNUFjZ0JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwy4oMA0G CSqGSIb3DQEBCwUAA4IBAQAVtHHarMCRTTqBweBJMys89yuegZZO3UhcOp7+ei5h giZJmMges6URRm3/mhL/+5WSYZ+0JEgbGEwcq0ybS2aH5EXMC6rv4kFroodmNDns oyRUCa9YTrvyVNTo2pHRYhmsX+STvpX7DEt1KX3pIWFuUO+RshkYMjoikmtVbD9e U5SBr6Z14Ao7VQZOqdpGdvNQPO1K319mqWavK5+HU7VunTvcJcAKpXs2PKLzssFl t80M6fSgCY+UBb5gT++mSC99k8L22e5cOCmmCRvZ76eSvebFLoALtNjTqBHw67sn BMC1Q+5nJa7D+3woFQaSEm5sG3FmiaWa1MnqEzeOGyP5 -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:22 2026 by rpki-client