This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/zF9eGkhoLr3CbGy9zOkPy25h_YE.roa File: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (raw, json) Hash identifier: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU= Subject key identifier: CC:5F:5E:1A:48:68:2E:BD:C2:6C:6C:BD:CC:E9:0F:CB:6E:61:FD:81 Certificate issuer: /CN=8a6060353b98f53316d022fa01d299d75fff22d6 Certificate serial: 019B77C758D332BCF5F0293BD69BA86484D5 Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/zF9eGkhoLr3CbGy9zOkPy25h_YE.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58245 IP address blocks: 194.33.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 10:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:58:d3:32:bc:f5:f0:29:3b:d6:9b:a8:64:84:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc5f5e1a48682ebdc26c6cbdcce90fcb6e61fd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:83:b7:8e:e8:44:75:e3:49:88:d0:19:b4:24: ee:21:61:57:79:99:c5:d6:9d:c9:01:c0:0e:11:3f: 8e:c9:e7:08:cc:71:7d:d9:b2:5a:8c:2a:f9:64:e8: 9b:47:4b:6d:bc:d4:2c:05:3f:c0:cf:e9:70:61:4a: be:7a:be:8d:c8:19:8e:63:c3:f4:07:9f:35:3b:cb: 50:12:36:80:63:5c:7d:2e:62:5a:28:ee:c3:69:7e: 67:69:65:9b:ac:60:bb:f9:f9:3b:97:a3:0e:57:2a: 29:69:af:db:06:25:00:47:5c:e8:39:f9:b7:d3:5a: 4d:71:c6:63:90:80:ad:86:88:d8:88:a9:cb:ab:12: 94:15:41:b6:a0:70:63:f7:a1:2e:3e:80:c5:77:9d: af:d3:ca:a7:62:6a:f9:d1:d0:ba:78:d4:25:24:a9: 6b:4c:ef:de:c1:39:df:57:31:2b:86:c6:cc:8c:b6: f3:95:6f:52:49:b4:a9:78:99:89:9b:23:bd:5a:b4: ad:3b:0f:22:d2:ce:7f:39:c2:35:b2:f1:bc:dd:31: 2b:61:a3:b1:36:fd:a6:ce:41:c7:a2:ce:60:95:bc: 0a:e1:3a:f6:38:1b:1b:ff:d7:34:40:5f:cc:69:54: 2a:e4:d6:e5:89:5c:e7:d1:06:8f:83:20:af:9d:4a: 90:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5F:5E:1A:48:68:2E:BD:C2:6C:6C:BD:CC:E9:0F:CB:6E:61:FD:81 X509v3 Authority Key Identifier: keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/zF9eGkhoLr3CbGy9zOkPy25h_YE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.109.0/24 Signature Algorithm: sha256WithRSAEncryption 21:dd:89:93:68:e4:25:1a:a3:75:30:0f:ce:fe:e5:65:ba:69: 4d:1f:5f:75:3c:93:a1:a7:f6:ad:05:7f:cd:5a:1a:d0:c8:05: 70:04:68:82:7d:f5:35:30:e6:b9:8b:76:3f:65:6e:77:f9:67: 50:47:61:67:17:27:62:e9:5e:b7:0d:3e:a1:13:92:5c:d2:03: cb:ee:13:5f:73:60:cf:72:87:e6:ea:e5:2f:61:c4:fb:c5:4d: 0f:87:35:97:fd:63:c7:92:fe:5e:de:cd:47:2e:b6:e9:a0:5c: 98:bf:8f:d0:38:a3:03:fc:3b:06:5e:d3:b2:0e:c2:8d:eb:46: 93:7e:5b:15:b3:fc:6f:ad:f3:25:1e:bb:d2:13:8d:23:bb:4c: 26:42:14:ae:89:be:32:13:fd:ad:6b:a6:1b:64:56:4c:91:82: 81:a3:8a:ed:a1:3c:70:46:0f:60:de:59:6f:38:4b:b0:ba:80: b4:1f:90:45:6c:43:30:c3:99:7d:77:02:cf:91:f3:af:e0:8a: f6:23:21:89:c2:84:bc:1f:91:fa:2e:e6:44:fc:3e:59:9a:c2: 5f:f8:a0:61:83:21:7f:60:56:bc:17:ca:50:73:3f:6c:f1:2c: fe:0e:09:05:7f:02:0f:6d:78:5f:e1:58:03:9c:95:8d:21:a4: 5c:a8:df:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1jTMrz18Ck71puoZITVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNjA2MDM1M2I5OGY1MzMxNmQwMjJmYTAxZDI5OWQ3NWZm ZjIyZDYwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzVmNWUxYTQ4NjgyZWJkYzI2YzZjYmRjY2U5MGZjYjZlNjFmZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYO3juhEdeNJiNAZtCTuIWFXeZnF 1p3JAcAOET+OyecIzHF92bJajCr5ZOibR0ttvNQsBT/Az+lwYUq+er6NyBmOY8P0 B581O8tQEjaAY1x9LmJaKO7DaX5naWWbrGC7+fk7l6MOVyopaa/bBiUAR1zoOfm3 01pNccZjkICthojYiKnLqxKUFUG2oHBj96EuPoDFd52v08qnYmr50dC6eNQlJKlr TO/ewTnfVzErhsbMjLbzlW9SSbSpeJmJmyO9WrStOw8i0s5/OcI1svG83TErYaOx Nv2mzkHHos5glbwK4Tr2OBsb/9c0QF/MaVQq5NbliVzn0QaPgyCvnUqQ2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMxfXhpIaC69wmxsvczpD8tuYf2BMB8GA1UdIwQY MBaAFIpgYDU7mPUzFtAi+gHSmddf/yLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUt NTJlZTQzNjQyZTEwLzEvekY5ZUdraG9McjNDYkd5OXpPa1B5MjVoX1lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS85NjlkYzItZmE1Ni00NWI2LWEzZGUtNTJlZTQzNjQyZTEw LzEvaW1CZ05UdVk5VE1XMENMNkFkS1oxMV9fSXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiFtMA0G CSqGSIb3DQEBCwUAA4IBAQAh3YmTaOQlGqN1MA/O/uVlumlNH191PJOhp/atBX/N WhrQyAVwBGiCffU1MOa5i3Y/ZW53+WdQR2FnFydi6V63DT6hE5Jc0gPL7hNfc2DP cofm6uUvYcT7xU0PhzWX/WPHkv5e3s1HLrbpoFyYv4/QOKMD/DsGXtOyDsKN60aT flsVs/xvrfMlHrvSE40ju0wmQhSuib4yE/2ta6YbZFZMkYKBo4rtoTxwRg9g3llv OEuwuoC0H5BFbEMww5l9dwLPkfOv4Ir2IyGJwoS8H5H6LuZE/D5ZmsJf+KBhgyF/ YFa8F8pQcz9s8Sz+DgkFfwIPbXhf4VgDnJWNIaRcqN9r -----END CERTIFICATE-----Generated at Sun Jan 18 17:53:37 2026 by rpki-client