This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa File: A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa (raw, json) Hash identifier: hGqa87j1hJEPJY71+olnlQtsA2Cb1R1Sm325ratdVxY= Subject key identifier: 03:D2:D6:D0:D9:A0:B3:FE:C8:DC:12:17:B5:D3:9A:24:76:05:7C:04 Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Certificate serial: 019B7C118F564795A9FD157CB584103D0F63 Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa Signing time: Fri 02 Jan 2026 00:18:04 +0000 ROA not before: Fri 02 Jan 2026 00:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55002 IP address blocks: 194.37.250.0/23 maxlen: 24 194.39.78.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:8f:56:47:95:a9:fd:15:7c:b5:84:10:3d:0f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4 Validity Not Before: Jan 2 00:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03d2d6d0d9a0b3fec8dc1217b5d39a2476057c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:bd:0b:0b:7c:76:36:8b:7b:93:74:1a:77: d7:31:80:77:8f:3e:0e:3c:9a:c5:40:a8:89:9a:7a: 4d:f4:fb:9c:90:a7:f1:ad:34:4f:0e:8a:68:31:ad: 24:f4:fc:e0:3d:0b:b6:f4:aa:a8:8f:45:0b:8e:85: 37:1f:0d:80:75:95:57:b6:f5:33:dc:bf:3b:90:b6: 6c:08:e4:6f:e7:73:de:3c:84:f7:10:5d:e4:2a:a4: a3:f8:cf:87:3e:78:d3:e6:3e:a2:ed:33:5b:23:f6: 5c:5b:61:c7:dd:d7:bf:1e:c4:ff:53:27:58:24:4e: 55:c1:54:46:44:15:af:ed:30:6d:c8:0f:5f:ce:2d: 87:4b:e1:8d:83:50:db:69:ac:e6:de:43:ce:40:2e: 31:c2:62:b1:b5:b5:e6:1d:89:5f:4a:87:7f:92:e7: 50:c1:9e:dd:d6:c3:da:8a:08:f6:cf:64:dc:7d:8e: f9:19:f7:04:38:1c:d1:d8:34:30:2b:36:3e:69:e5: fa:56:c1:7c:e9:99:6a:82:d7:6e:53:e4:f6:06:f4: 6a:1c:ac:c1:05:c2:2f:b9:29:2d:5a:7f:7f:d7:ef: 8f:67:73:1e:0b:42:20:f8:27:fb:99:af:82:7f:cf: ac:f4:20:79:db:37:5b:ac:8b:e2:a3:26:e2:0b:01: c2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D2:D6:D0:D9:A0:B3:FE:C8:DC:12:17:B5:D3:9A:24:76:05:7C:04 X509v3 Authority Key Identifier: keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/A9LW0Nmgs_7I3BIXtdOaJHYFfAQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.37.250.0/23 194.39.78.0/23 Signature Algorithm: sha256WithRSAEncryption b5:07:d7:02:03:54:68:b8:88:3b:92:7d:0c:b1:72:3f:6e:e0: 83:6c:86:71:e0:c7:e4:cf:f8:49:92:01:be:b8:ae:f6:df:d4: 45:26:30:cc:39:ea:eb:25:b8:e7:da:64:12:89:bb:62:9c:a1: 17:0d:a0:09:af:8b:87:3e:bf:a7:50:aa:f2:62:db:68:a4:10: 6c:c5:44:7b:cc:30:d1:2f:6d:dc:fb:0c:0c:e2:9f:41:15:41: b3:00:f7:e0:91:27:c0:23:65:42:a0:00:fd:07:fa:d2:29:4c: 29:6b:fc:14:c7:73:64:f6:67:2d:e5:dd:2f:8d:49:fd:f2:d7: 30:e8:ad:5d:78:68:7b:30:93:b4:85:54:c4:15:e8:65:0a:16: 00:8a:63:67:ef:12:3c:f6:1d:5c:29:ea:8c:0b:8f:5f:d9:ed: db:25:b5:6f:58:da:e9:c9:95:02:29:31:73:9d:e9:b9:ed:af: 77:f4:d4:89:55:c0:4d:bd:ca:7f:dd:dd:59:e4:a9:a6:26:ca: 57:c8:38:fb:58:da:5d:7b:e9:ad:3c:11:55:1f:d9:6b:53:fa: 38:f4:c4:c2:1b:61:d8:f7:88:a5:80:03:1a:e5:a4:1e:12:98: 3a:45:0c:d5:ec:b4:a4:3f:73:81:8d:53:f0:f0:4e:a6:8e:a1: a7:c5:82:14 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EY9WR5Wp/RV8tYQQPQ9jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw MDg3ZDQwHhcNMjYwMTAyMDAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2QyZDZkMGQ5YTBiM2ZlYzhkYzEyMTdiNWQzOWEyNDc2MDU3YzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfu9Cwt8djaLe5N0GnfXMYB3jz4O PJrFQKiJmnpN9PuckKfxrTRPDopoMa0k9PzgPQu29Kqoj0ULjoU3Hw2AdZVXtvUz 3L87kLZsCORv53PePIT3EF3kKqSj+M+HPnjT5j6i7TNbI/ZcW2HH3de/HsT/UydY JE5VwVRGRBWv7TBtyA9fzi2HS+GNg1Dbaazm3kPOQC4xwmKxtbXmHYlfSod/kudQ wZ7d1sPaigj2z2TcfY75GfcEOBzR2DQwKzY+aeX6VsF86ZlqgtduU+T2BvRqHKzB BcIvuSktWn9/1++PZ3MeC0Ig+Cf7ma+Cf8+s9CB52zdbrIvioybiCwHCbwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAPS1tDZoLP+yNwSF7XTmiR2BXwEMB8GA1UdIwQY MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt ZTVmY2ViZGFhN2YyLzEvQTlMVzBObWdzXzdJM0JJWHRkT2FKSFlGZkFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwiX6AwQB widOMA0GCSqGSIb3DQEBCwUAA4IBAQC1B9cCA1RouIg7kn0MsXI/buCDbIZx4Mfk z/hJkgG+uK7239RFJjDMOerrJbjn2mQSibtinKEXDaAJr4uHPr+nUKryYttopBBs xUR7zDDRL23c+wwM4p9BFUGzAPfgkSfAI2VCoAD9B/rSKUwpa/wUx3Nk9mct5d0v jUn98tcw6K1deGh7MJO0hVTEFehlChYAimNn7xI89h1cKeqMC49f2e3bJbVvWNrp yZUCKTFznem57a939NSJVcBNvcp/3d1Z5KmmJspXyDj7WNpde+mtPBFVH9lrU/o4 9MTCG2HY94ilgAMa5aQeEpg6RQzV7LSkP3OBjVPw8E6mjqGnxYIU -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:51 2026 by rpki-client