This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/k0b9VtGawXwWdQgfJzcdEYCCg_o.roa File: k0b9VtGawXwWdQgfJzcdEYCCg_o.roa (raw, json) Hash identifier: dIXVCTmcfL3HOBzfVAxTvQR3ANPXcc/eVpPbv90sMfE= Subject key identifier: 93:46:FD:56:D1:9A:C1:7C:16:75:08:1F:27:37:1D:11:80:82:83:FA Certificate issuer: /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca Certificate serial: 019B7EA6A0A7B44D453E907361BF53A681B8 Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/k0b9VtGawXwWdQgfJzcdEYCCg_o.roa Signing time: Fri 02 Jan 2026 12:20:07 +0000 ROA not before: Fri 02 Jan 2026 12:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24951 IP address blocks: 193.169.2.0/24 maxlen: 24 193.169.3.0/24 maxlen: 24 195.66.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a0:a7:b4:4d:45:3e:90:73:61:bf:53:a6:81:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca Validity Not Before: Jan 2 12:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9346fd56d19ac17c1675081f27371d11808283fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c1:a4:0b:c5:13:90:98:f7:fa:b0:1b:00:19: 3a:b3:8c:95:d0:51:fe:1c:89:0f:ad:bc:05:52:30: c1:af:4d:09:68:8f:77:7d:4b:2f:d3:84:41:90:ac: f3:28:8a:50:b8:78:81:22:31:f7:c7:4b:ed:57:d3: b8:87:7b:3c:49:98:db:60:7f:20:26:a7:a5:1d:b6: a9:b2:97:f4:d8:64:26:ee:54:21:f1:82:c5:a9:66: 1a:27:fc:79:5a:b4:18:d3:79:ad:53:3c:ba:8d:92: d7:ad:f1:55:3e:dc:22:1d:5d:0e:06:21:41:00:da: e6:38:01:23:b2:1a:99:e0:3c:71:0c:9e:f4:e7:ae: d3:a0:d5:67:94:9d:0f:88:99:8e:a3:90:f3:79:38: 27:51:60:ec:98:6d:b0:de:c2:62:d2:e3:27:42:b9: 31:d8:c0:60:97:70:6f:62:13:a1:ae:2b:21:b3:b8: c2:4a:93:b4:75:dd:c0:34:9c:2d:a0:37:b4:a6:eb: c4:00:19:13:32:bc:7c:37:bc:39:50:16:8c:5e:b5: a5:96:c1:44:66:97:20:67:39:20:c2:72:2f:b2:d4: 27:9f:6a:4e:8e:68:2a:40:62:15:8a:96:5b:99:de: 72:b4:12:79:51:fa:b5:5f:f9:ec:ed:09:03:70:51: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:46:FD:56:D1:9A:C1:7C:16:75:08:1F:27:37:1D:11:80:82:83:FA X509v3 Authority Key Identifier: keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/k0b9VtGawXwWdQgfJzcdEYCCg_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.169.2.0/23 195.66.85.0/24 Signature Algorithm: sha256WithRSAEncryption 45:fa:39:06:fe:bf:cb:b5:d0:55:b6:3f:cb:53:9e:06:85:40: 48:1b:28:c2:5f:4b:3b:d2:19:b3:9d:9a:2e:65:a8:ce:86:58: 45:bc:18:0b:41:92:07:7b:b8:4a:3d:1e:85:83:af:fa:77:73: 0d:54:af:3a:ee:81:51:39:fe:a2:62:68:47:2e:3e:82:2f:b0: 77:b1:d1:0b:fd:4b:10:d9:ef:f7:0d:e8:c8:70:4e:7f:62:45: 32:02:0f:cb:74:13:d6:c5:48:fa:bd:ba:55:91:d2:72:56:df: c6:63:c0:95:a0:5f:dc:47:9d:71:a5:71:40:cd:85:71:32:04: 7c:7d:8c:29:6b:b5:af:8f:e1:fb:f9:40:ff:1b:f5:f4:f6:b1: b9:db:51:60:52:b5:07:6f:df:ce:b8:92:de:fe:8e:f4:84:e6: 01:94:4e:8b:8d:aa:2f:59:18:b9:f0:6f:d9:e3:c8:b9:39:cc: cd:c3:6d:9a:ad:e6:0a:61:93:c1:27:8e:07:b9:54:a2:41:1c: 2c:fa:ca:62:64:ee:2b:01:d8:d4:fd:32:b4:6c:af:c2:70:1e: ff:ef:f5:63:67:6b:05:ab:a6:fd:91:41:bd:43:7d:8a:19:98: de:65:98:4f:d8:43:57:23:33:9c:c6:1d:7d:dc:5d:f1:23:e2: b7:4a:eb:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pqCntE1FPpBzYb9TpoG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDc1YjdhODFhZjQ5ZGVmZmI2YzgzNWM1NjA4ZWUwYjg4 NDMyY2EwHhcNMjYwMTAyMTIyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzQ2ZmQ1NmQxOWFjMTdjMTY3NTA4MWYyNzM3MWQxMTgwODI4M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsGkC8UTkJj3+rAbABk6s4yV0FH+ HIkPrbwFUjDBr00JaI93fUsv04RBkKzzKIpQuHiBIjH3x0vtV9O4h3s8SZjbYH8g JqelHbapspf02GQm7lQh8YLFqWYaJ/x5WrQY03mtUzy6jZLXrfFVPtwiHV0OBiFB ANrmOAEjshqZ4DxxDJ70567ToNVnlJ0PiJmOo5DzeTgnUWDsmG2w3sJi0uMnQrkx 2MBgl3BvYhOhrishs7jCSpO0dd3ANJwtoDe0puvEABkTMrx8N7w5UBaMXrWllsFE ZpcgZzkgwnIvstQnn2pOjmgqQGIVipZbmd5ytBJ5Ufq1X/ns7QkDcFGW5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJNG/VbRmsF8FnUIHyc3HRGAgoP6MB8GA1UdIwQY MBaAFMEHW3qBr0ne/7bINcVgjuC4hDLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FkYmVvR3ZTZDdfdHNnMXhXQ080TGlFTXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8yYTgyOWItMzJiMy00OTZhLTgwY2Ut YTAyNDY3ZjY0MjVmLzEvazBiOVZ0R2F3WHdXZFFnZkp6Y2RFWUNDZ19vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8yYTgyOWItMzJiMy00OTZhLTgwY2UtYTAyNDY3ZjY0MjVm LzEvd1FkYmVvR3ZTZDdfdHNnMXhXQ080TGlFTXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwakCAwQA w0JVMA0GCSqGSIb3DQEBCwUAA4IBAQBF+jkG/r/LtdBVtj/LU54GhUBIGyjCX0s7 0hmznZouZajOhlhFvBgLQZIHe7hKPR6Fg6/6d3MNVK867oFROf6iYmhHLj6CL7B3 sdEL/UsQ2e/3DejIcE5/YkUyAg/LdBPWxUj6vbpVkdJyVt/GY8CVoF/cR51xpXFA zYVxMgR8fYwpa7Wvj+H7+UD/G/X09rG521FgUrUHb9/OuJLe/o70hOYBlE6Ljaov WRi58G/Z48i5OczNw22areYKYZPBJ44HuVSiQRws+spiZO4rAdjU/TK0bK/CcB7/ 7/VjZ2sFq6b9kUG9Q32KGZjeZZhP2ENXIzOcxh193F3xI+K3SutT -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:37 2026 by rpki-client