This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/n9HVc9jXy-5kSTXXda8Xr34gSvU.roa File: n9HVc9jXy-5kSTXXda8Xr34gSvU.roa (raw, json) Hash identifier: MqEDA2fkjY/ksPoKTLXf6vTXjBjZBwdFpg8kiND3eJ8= Subject key identifier: 9F:D1:D5:73:D8:D7:CB:EE:64:49:35:D7:75:AF:17:AF:7E:20:4A:F5 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CED0231E4985B2E910DFBD4E5CB5E30 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/n9HVc9jXy-5kSTXXda8Xr34gSvU.roa Signing time: Fri 02 Jan 2026 04:17:45 +0000 ROA not before: Fri 02 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20551 IP address blocks: 194.177.216.0/24 maxlen: 24 195.251.8.0/21 maxlen: 21 2001:648:2590::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:02:31:e4:98:5b:2e:91:0d:fb:d4:e5:cb:5e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fd1d573d8d7cbee644935d775af17af7e204af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:ce:9e:eb:b0:92:d0:c9:bc:f4:ac:1e:d4: 19:05:1a:1c:c9:48:24:3f:35:d0:96:8c:96:a7:3c: af:d3:a8:64:90:59:fe:2f:09:64:bc:68:44:c2:fb: 67:06:92:31:3a:fc:b3:b6:5a:2a:f1:36:68:2e:91: c7:b5:17:d0:97:8b:36:05:db:d5:6f:fd:66:45:65: 86:06:1d:8e:4e:51:90:78:e9:bf:af:2d:bb:9e:c3: 7c:f2:da:5a:44:a8:0a:3a:bb:34:5a:bd:e2:95:9a: 40:bb:70:7e:52:d4:35:33:ed:90:9a:39:b8:10:47: fc:da:2b:e8:f1:f2:00:75:57:dc:e0:db:3c:b1:da: 07:ae:50:41:47:6a:84:5d:a2:24:25:26:14:df:02: f9:94:1d:27:8a:03:7d:42:54:f1:64:f1:b4:21:d2: 9e:03:03:d2:c7:65:c8:76:23:5c:51:43:39:df:d0: f0:47:b8:97:04:94:4b:e8:c2:c5:d9:34:6d:95:73: 03:05:34:f8:00:17:6a:d4:cc:2b:c2:fe:91:b0:8d: 88:4c:75:38:c1:a2:1f:67:61:5f:ec:3c:b4:98:07: 23:e7:5c:d9:ab:f4:0b:7f:6d:f2:a3:48:03:7d:e4: 82:78:dc:1e:54:ae:25:cb:0e:0e:e4:b2:e0:c2:c2: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D1:D5:73:D8:D7:CB:EE:64:49:35:D7:75:AF:17:AF:7E:20:4A:F5 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/n9HVc9jXy-5kSTXXda8Xr34gSvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.177.216.0/24 195.251.8.0/21 IPv6: 2001:648:2590::/48 Signature Algorithm: sha256WithRSAEncryption 23:ea:83:e8:e0:99:7e:05:3e:d7:63:f4:ff:87:4b:2c:80:cc: c7:45:66:3c:0f:84:92:d8:c1:2a:43:bc:97:ce:7b:b3:90:d3: 13:45:40:e3:00:69:2f:71:1e:52:00:a3:a4:74:ac:8c:7d:98: 73:bd:69:5b:d0:33:2b:2b:f9:36:dd:bd:bb:4b:0e:7d:03:20: 1f:5d:d4:ca:58:dc:22:69:1d:a9:77:8d:59:27:23:dc:8f:37: 6a:54:62:55:b8:63:46:94:21:92:64:72:1e:69:bc:46:ed:69: f1:7e:bd:07:b9:fe:e0:80:ad:44:92:ff:b0:fa:32:80:47:22: af:03:ae:b7:fc:0f:38:32:06:7a:a4:67:01:dc:bd:33:a6:18: 07:8e:1a:b5:52:d5:09:40:54:23:eb:37:1a:e7:e7:72:9a:fc: 02:74:13:d1:d6:a3:db:96:b1:11:38:0d:26:4a:ea:a8:cb:29: 71:bf:eb:8a:82:b5:c0:a5:b4:98:e5:d8:c8:0a:89:fe:0a:32: a8:7b:9f:6f:78:79:92:29:55:bc:7f:47:2e:77:0c:08:d9:df: 37:ef:b4:d6:5f:15:84:10:33:2d:e8:61:6a:b1:8f:4e:b4:dd: 90:e1:fc:72:e2:08:ab:00:8b:ac:5b:94:cc:6e:24:57:30:1c: 0b:9f:2a:6f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt87QIx5JhbLpEN+9Tly14wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmQxZDU3M2Q4ZDdjYmVlNjQ0OTM1ZDc3NWFmMTdhZjdlMjA0YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK/OnuuwktDJvPSsHtQZBRocyUgk PzXQloyWpzyv06hkkFn+LwlkvGhEwvtnBpIxOvyztloq8TZoLpHHtRfQl4s2BdvV b/1mRWWGBh2OTlGQeOm/ry27nsN88tpaRKgKOrs0Wr3ilZpAu3B+UtQ1M+2Qmjm4 EEf82ivo8fIAdVfc4Ns8sdoHrlBBR2qEXaIkJSYU3wL5lB0nigN9QlTxZPG0IdKe AwPSx2XIdiNcUUM539DwR7iXBJRL6MLF2TRtlXMDBTT4ABdq1Mwrwv6RsI2ITHU4 waIfZ2Ff7Dy0mAcj51zZq/QLf23yo0gDfeSCeNweVK4lyw4O5LLgwsKOzwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFJ/R1XPY18vuZEk113WvF69+IEr1MB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvbjlIVmM5alh5LTVrU1RYWGRhOFhyMzRnU3ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwrHYAwQD w/sIMA8EAgACMAkDBwAgAQZIJZAwDQYJKoZIhvcNAQELBQADggEBACPqg+jgmX4F Ptdj9P+HSyyAzMdFZjwPhJLYwSpDvJfOe7OQ0xNFQOMAaS9xHlIAo6R0rIx9mHO9 aVvQMysr+TbdvbtLDn0DIB9d1MpY3CJpHal3jVknI9yPN2pUYlW4Y0aUIZJkch5p vEbtafF+vQe5/uCArUSS/7D6MoBHIq8Drrf8DzgyBnqkZwHcvTOmGAeOGrVS1QlA VCPrNxrn53Ka/AJ0E9HWo9uWsRE4DSZK6qjLKXG/64qCtcCltJjl2MgKif4KMqh7 n294eZIpVbx/Ry53DAjZ3zfvtNZfFYQQMy3oYWqxj0603ZDh/HLiCKsAi6xblMxu JFcwHAufKm8= -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:26 2026 by rpki-client