This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/9tVe1cWkeYt1M8DUyjkUiER9-Eo.roa File: 9tVe1cWkeYt1M8DUyjkUiER9-Eo.roa (raw, json) Hash identifier: wE6I1csBO6GEmAQaIzNTh2tvdzqwUCjixq3m2Z3pzSw= Subject key identifier: F6:D5:5E:D5:C5:A4:79:8B:75:33:C0:D4:CA:39:14:88:44:7D:F8:4A Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3 Certificate serial: 019B7BA54094402FB7013E7A5F2698D96538 Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/9tVe1cWkeYt1M8DUyjkUiER9-Eo.roa Signing time: Thu 01 Jan 2026 22:19:45 +0000 ROA not before: Thu 01 Jan 2026 22:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47196 IP address blocks: 195.22.148.0/24 maxlen: 24 195.22.149.0/24 maxlen: 24 195.22.152.0/24 maxlen: 24 195.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:40:94:40:2f:b7:01:3e:7a:5f:26:98:d9:65:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3 Validity Not Before: Jan 1 22:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6d55ed5c5a4798b7533c0d4ca391488447df84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:86:73:33:b8:2e:a1:89:64:0d:fe:55:e3: 5c:1a:8f:49:58:fe:89:4c:a6:7a:f5:a1:3e:cf:44: bd:1d:ff:8a:cc:b7:c0:2a:51:dc:3d:af:9b:f8:5e: da:24:35:d3:6e:05:61:f8:e5:e6:8a:7f:d6:9f:f9: ab:c0:f9:e7:31:45:5d:6f:98:50:9b:52:69:55:ce: 11:57:f3:82:60:b0:37:1c:1d:7e:af:a2:7b:95:a9: 1b:c6:81:7c:4d:97:9e:c3:7d:49:eb:54:00:0e:d3: 34:8c:ed:42:f5:dd:06:27:f1:58:64:b9:92:d4:f4: e0:9e:9b:8f:7e:e3:5e:34:cd:74:9a:d4:f3:85:e0: 6c:49:d1:9e:5d:1a:cc:51:f2:6d:3f:ab:0f:7e:78: 1f:91:de:31:37:9f:44:b4:6c:59:51:a6:5c:b2:e3: 4b:da:17:3e:ec:cb:6d:35:0a:03:4f:08:73:ac:00: 42:66:05:a1:d2:d4:24:0d:56:26:fe:2a:7b:2d:59: 5d:76:1d:ed:b9:1f:dd:b3:5c:f5:09:40:3d:77:f2: 72:85:ee:58:45:0a:ca:f4:44:8c:80:51:0f:35:20: b1:10:e3:fe:ab:cd:ed:3b:8c:8a:6e:3c:33:70:4c: 1e:a9:03:02:45:02:d0:0c:a4:ab:b8:e2:05:98:46: d5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D5:5E:D5:C5:A4:79:8B:75:33:C0:D4:CA:39:14:88:44:7D:F8:4A X509v3 Authority Key Identifier: keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/9tVe1cWkeYt1M8DUyjkUiER9-Eo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.22.148.0/23 195.22.152.0/23 Signature Algorithm: sha256WithRSAEncryption 98:ba:1c:51:b3:4d:ba:24:6a:7d:2b:13:87:5e:08:bd:37:62: bd:9c:c7:19:35:20:f7:a5:02:d7:f3:d5:bc:b4:09:3a:1a:96: ea:90:f0:96:0b:dc:c2:c4:25:6a:8e:8c:31:65:a2:ce:b3:3d: 46:27:bf:db:88:ea:bc:5d:ad:a2:18:b5:da:e0:0b:03:85:7a: 72:f0:bc:53:c4:f2:54:45:b4:d7:66:1c:93:97:4d:30:93:f7: b4:93:c6:8c:9d:82:e3:92:f1:06:f0:c2:b6:6a:3f:1b:c9:0c: 42:78:a8:30:ed:6f:b5:2f:01:f9:42:63:6b:4a:70:57:0a:ab: d3:5e:a9:f5:f3:2d:a0:b1:ea:8e:5d:d9:d0:ff:8a:ac:21:26: 9c:69:15:40:e1:81:d8:6d:c1:a1:28:b4:ff:c3:13:4c:ca:16: 18:82:db:79:a7:bc:b9:66:7e:09:87:d6:fa:8b:5b:2b:65:d1: 2b:62:14:b6:29:60:ab:d3:78:d2:ab:59:68:e2:06:26:08:91: 6e:5c:6b:ad:0c:fa:9b:c6:bd:bd:14:6e:8a:e5:85:0b:66:a4: 7b:3f:1b:40:3e:2c:a3:b6:9a:a1:13:39:6a:1f:d3:57:e6:f9: db:e4:6c:6e:b3:22:5e:d8:c8:be:43:d2:e9:94:53:fe:26:99: f2:46:87:cd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pUCUQC+3AT56XyaY2WU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNDY1NDI3MjY2Njg0MzZmYTkzZTc1N2ZlZWY0ZDQ1ZTI0 Y2Q2ZTMwHhcNMjYwMTAxMjIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmQ1NWVkNWM1YTQ3OThiNzUzM2MwZDRjYTM5MTQ4ODQ0N2RmODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YOGczO4LqGJZA3+VeNcGo9JWP6J TKZ69aE+z0S9Hf+KzLfAKlHcPa+b+F7aJDXTbgVh+OXmin/Wn/mrwPnnMUVdb5hQ m1JpVc4RV/OCYLA3HB1+r6J7lakbxoF8TZeew31J61QADtM0jO1C9d0GJ/FYZLmS 1PTgnpuPfuNeNM10mtTzheBsSdGeXRrMUfJtP6sPfngfkd4xN59EtGxZUaZcsuNL 2hc+7MttNQoDTwhzrABCZgWh0tQkDVYm/ip7LVlddh3tuR/ds1z1CUA9d/Jyhe5Y RQrK9ESMgFEPNSCxEOP+q83tO4yKbjwzcEweqQMCRQLQDKSruOIFmEbV3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPbVXtXFpHmLdTPA1Mo5FIhEffhKMB8GA1UdIwQY MBaAFJ1GVCcmZoQ2+pPnV/7vTUXiTNbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQt MjllMzVhZTkxMmRhLzEvOXRWZTFjV2tlWXQxTThEVXlqa1VpRVI5LUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQtMjllMzVhZTkxMmRh LzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwxaUAwQB wxaYMA0GCSqGSIb3DQEBCwUAA4IBAQCYuhxRs026JGp9KxOHXgi9N2K9nMcZNSD3 pQLX89W8tAk6GpbqkPCWC9zCxCVqjowxZaLOsz1GJ7/biOq8Xa2iGLXa4AsDhXpy 8LxTxPJURbTXZhyTl00wk/e0k8aMnYLjkvEG8MK2aj8byQxCeKgw7W+1LwH5QmNr SnBXCqvTXqn18y2gseqOXdnQ/4qsISacaRVA4YHYbcGhKLT/wxNMyhYYgtt5p7y5 Zn4Jh9b6i1srZdErYhS2KWCr03jSq1lo4gYmCJFuXGutDPqbxr29FG6K5YULZqR7 PxtAPiyjtpqhEzlqH9NX5vnb5GxusyJe2Mi+Q9LplFP+JpnyRofN -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:56 2026 by rpki-client