This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/9jOl6Kcb1BJgHqe3R69MAMfscLs.roa File: 9jOl6Kcb1BJgHqe3R69MAMfscLs.roa (raw, json) Hash identifier: mbvLuEee7YAsoidgyrb6OTXZspY1pEAVqK8jJs/3DzY= Subject key identifier: F6:33:A5:E8:A7:1B:D4:12:60:1E:A7:B7:47:AF:4C:00:C7:EC:70:BB Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61 Certificate serial: 019B7E39315D4001F031FDCAB438BA24CA9C Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/9jOl6Kcb1BJgHqe3R69MAMfscLs.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 5.250.254.0/24 maxlen: 24 178.210.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:31:5d:40:01:f0:31:fd:ca:b4:38:ba:24:ca:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f633a5e8a71bd412601ea7b747af4c00c7ec70bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d4:07:1d:00:56:c9:ed:cc:69:0a:c0:af:61: ee:dd:3e:31:de:e5:0c:ce:9f:fd:5c:cf:93:df:82: eb:0c:de:9c:0c:02:1b:42:ec:ff:3c:f9:7d:90:c0: 09:83:ae:5c:78:22:5e:44:a1:f0:e7:41:e6:1d:68: 9b:20:44:13:04:16:b8:87:8a:aa:bd:35:6c:33:3d: f0:d4:47:74:ed:01:ed:04:64:1a:ee:c3:e1:31:57: a9:65:82:37:19:30:a3:78:0c:86:75:ee:9b:57:b6: d8:59:39:fb:fa:75:e9:13:ca:98:b8:2a:67:ed:45: 5d:78:ba:0e:e4:c1:44:9d:2c:34:f0:9f:aa:15:f5: 64:f8:20:b0:16:32:84:3b:d9:88:4b:25:38:c9:60: 16:bf:99:13:b1:5e:fa:31:9a:9e:2d:6f:6b:69:2d: c3:28:f8:8f:75:13:a4:24:b7:ee:e1:f5:f3:47:0e: 92:63:c6:5c:35:40:2c:08:14:70:60:fb:80:b9:04: d9:33:23:5a:be:84:a2:21:e5:03:da:7c:c9:52:12: c7:73:6f:30:ee:18:c2:cf:46:5e:8b:f1:72:7a:f0: 48:5d:ff:95:a9:0c:65:99:ae:bc:a6:ef:35:b1:47: f0:07:00:cd:60:48:a9:cd:05:8e:f1:16:1e:88:e5: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:33:A5:E8:A7:1B:D4:12:60:1E:A7:B7:47:AF:4C:00:C7:EC:70:BB X509v3 Authority Key Identifier: keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/9jOl6Kcb1BJgHqe3R69MAMfscLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.250.254.0/24 178.210.181.0/24 Signature Algorithm: sha256WithRSAEncryption 87:9f:cb:4e:50:ba:55:87:b8:20:2e:57:07:6e:61:d3:41:7b: 0e:46:fa:56:cf:f5:e1:d0:f1:e0:96:b6:28:0a:1f:94:b5:e9: a7:a7:00:f6:bd:e1:48:6a:70:96:c2:a1:33:d1:da:aa:ff:17: 1a:a6:f1:dc:db:7d:43:71:d9:8b:10:0e:a3:15:fd:0d:1f:d6: 0a:35:15:cf:71:7d:88:96:96:6e:73:3e:af:a7:66:69:ac:70: 4c:80:85:b1:56:27:b5:03:3a:64:c2:87:82:3b:b2:2d:00:95: fa:c9:1c:b0:9b:4e:bc:e3:3c:90:05:3e:56:55:14:f8:99:f7: 81:2e:56:12:64:7b:05:26:f2:2d:aa:ff:dd:9c:78:9e:07:5d: a8:de:56:74:ff:4e:d3:60:9c:05:fc:8f:9e:e8:4b:5e:b7:12: 04:03:8c:5d:53:c5:33:35:55:d9:95:15:24:05:f3:fc:b1:07: 68:a3:2b:57:8a:cc:b8:0f:05:9d:3a:55:d5:72:b9:3f:9c:1a: 41:67:01:0d:eb:85:37:f8:44:78:65:00:33:de:f0:32:42:77: a4:ff:5f:7f:46:bd:0a:a1:e9:a8:48:71:14:54:2b:70:c5:c0: 9a:28:c0:d1:a8:34:0d:b9:dc:ee:5b:24:4c:d6:85:e6:c0:d5: 5a:a4:ea:85 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OTFdQAHwMf3KtDi6JMqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzJkZWRhMzFmZThlYWZjZGFkNmUyYTA2ZmRlMjM2ZTdk MTFkNjEwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjMzYTVlOGE3MWJkNDEyNjAxZWE3Yjc0N2FmNGMwMGM3ZWM3MGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tQHHQBWye3MaQrAr2Hu3T4x3uUM zp/9XM+T34LrDN6cDAIbQuz/PPl9kMAJg65ceCJeRKHw50HmHWibIEQTBBa4h4qq vTVsMz3w1Ed07QHtBGQa7sPhMVepZYI3GTCjeAyGde6bV7bYWTn7+nXpE8qYuCpn 7UVdeLoO5MFEnSw08J+qFfVk+CCwFjKEO9mISyU4yWAWv5kTsV76MZqeLW9raS3D KPiPdROkJLfu4fXzRw6SY8ZcNUAsCBRwYPuAuQTZMyNavoSiIeUD2nzJUhLHc28w 7hjCz0Zei/FyevBIXf+VqQxlma68pu81sUfwBwDNYEipzQWO8RYeiOUIFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPYzpeinG9QSYB6nt0evTADH7HC7MB8GA1UdIwQY MBaAFH0y3tox/o6vza1uKgb94jbn0R1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgt NTNmYjAxOGE4YzBlLzEvOWpPbDZLY2IxQkpnSHFlM1I2OU1BTWZzY0xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jNDNlZDItNzBiMy00NWQ4LWFhMjgtNTNmYjAxOGE4YzBl LzEvZlRMZTJqSC1qcV9Oclc0cUJ2M2lOdWZSSFdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABfr+AwQA stK1MA0GCSqGSIb3DQEBCwUAA4IBAQCHn8tOULpVh7ggLlcHbmHTQXsORvpWz/Xh 0PHglrYoCh+UtemnpwD2veFIanCWwqEz0dqq/xcapvHc231DcdmLEA6jFf0NH9YK NRXPcX2IlpZucz6vp2ZprHBMgIWxVie1AzpkwoeCO7ItAJX6yRywm0684zyQBT5W VRT4mfeBLlYSZHsFJvItqv/dnHieB12o3lZ0/07TYJwF/I+e6EtetxIEA4xdU8Uz NVXZlRUkBfP8sQdooytXisy4DwWdOlXVcrk/nBpBZwEN64U3+ER4ZQAz3vAyQnek /19/Rr0KoemoSHEUVCtwxcCaKMDRqDQNudzuWyRM1oXmwNVapOqF -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:01 2026 by rpki-client