This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/9Iq_uFn7lRh-tQAiHIkLmewE_1E.roa File: 9Iq_uFn7lRh-tQAiHIkLmewE_1E.roa (raw, json) Hash identifier: OJCXmXG7WwlTCrAqRIAIwma12baEae1VhFyXFu0RHaY= Subject key identifier: F4:8A:BF:B8:59:FB:95:18:7E:B5:00:22:1C:89:0B:99:EC:04:FF:51 Certificate issuer: /CN=a73d640d90bf3d67f2498138cc371f654647ddad Certificate serial: 019B78A32AE58258B44628EBDBD38D05B106 Authority key identifier: A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/9Iq_uFn7lRh-tQAiHIkLmewE_1E.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41970 IP address blocks: 194.60.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2a:e5:82:58:b4:46:28:eb:db:d3:8d:05:b1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a73d640d90bf3d67f2498138cc371f654647ddad Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f48abfb859fb95187eb500221c890b99ec04ff51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:8b:81:82:ee:63:2a:e0:67:78:84:14:c1: 66:41:f4:01:9c:2b:e4:dd:06:de:6c:c5:9f:8c:c3: 9b:7a:1f:13:3e:f6:59:1a:ff:1a:fb:c6:f3:0d:d9: e2:46:be:dc:1f:49:20:53:be:73:cd:5e:30:01:5f: eb:14:8a:45:eb:ef:42:c2:94:f4:b1:5e:4f:12:a8: 16:34:1f:38:38:ca:fb:97:3d:33:36:2f:9d:15:bd: fc:37:0d:90:6c:c7:0f:fb:0e:20:19:66:71:bc:b0: 55:5b:e1:a5:69:5b:51:f0:97:ab:65:91:cd:a9:bb: f9:d5:05:05:38:b5:ce:de:64:e8:54:e5:a9:4e:16: ad:7f:cc:04:61:da:fe:f5:e6:25:73:f6:19:1f:cd: 32:01:7d:ba:b9:e1:5a:8f:60:3e:71:08:26:27:f7: 29:57:2b:7d:cb:0d:2c:b7:e6:ea:71:3b:e3:96:42: 8b:47:d3:47:ed:bc:bd:52:1d:2c:ea:73:f4:a8:d7: 8b:d9:f4:53:94:20:54:ee:60:80:f7:75:0f:a6:a7: 66:ee:67:91:fb:33:c4:48:cf:28:62:df:0a:62:9f: d8:b0:f4:14:48:a4:77:02:8a:2d:e6:f7:f1:c3:03: ac:43:e2:5f:7b:fe:5b:65:6d:c1:6d:3c:e5:86:43: 56:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:BF:B8:59:FB:95:18:7E:B5:00:22:1C:89:0B:99:EC:04:FF:51 X509v3 Authority Key Identifier: keyid:A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/9Iq_uFn7lRh-tQAiHIkLmewE_1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.60.74.0/24 Signature Algorithm: sha256WithRSAEncryption 43:47:83:dd:73:dc:34:9c:e6:38:03:62:01:0d:e7:c2:41:8f: 27:43:fc:91:92:06:af:c5:d7:d9:13:77:72:98:ce:cb:2c:c7: 08:21:9e:15:43:15:0f:17:52:e1:46:20:23:67:40:49:1a:8e: 3f:b6:d0:67:0b:45:f9:43:f0:aa:3e:93:ca:95:e7:2a:53:d9: be:5e:84:60:4d:8c:cf:14:b0:56:f3:fb:9d:63:6b:c7:ef:43: 6f:dd:4c:a3:fa:91:ff:33:b3:5e:c3:80:ec:2a:43:93:39:78: 4f:7a:bd:a7:de:0c:51:2d:6a:ae:ec:2e:54:55:91:e7:86:91: d4:99:3a:82:59:56:21:2f:3d:f3:0f:57:84:63:34:3d:05:94: c9:ff:53:cd:2a:c8:6f:f6:0b:4a:74:f1:0a:ed:f6:c3:9a:77: ea:28:76:cb:7d:a3:e6:e2:a7:3d:7f:94:02:4d:f0:90:e6:fc: 06:30:33:65:bc:5c:3e:05:84:4e:43:09:97:0a:d5:5a:55:d4: 92:ad:b1:65:75:4e:8f:d3:0d:06:ce:4b:2f:90:74:b3:3a:af: 5e:c5:94:b0:93:7d:dc:c0:a9:e2:4e:a1:ef:a9:69:78:aa:6b: 4c:f0:b7:a5:4b:bc:09:8b:86:77:11:33:45:d9:36:70:6b:0e: 51:48:e2:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyrlgli0Rijr29ONBbEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3M2Q2NDBkOTBiZjNkNjdmMjQ5ODEzOGNjMzcxZjY1NDY0 N2RkYWQwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDhhYmZiODU5ZmI5NTE4N2ViNTAwMjIxYzg5MGI5OWVjMDRmZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop2LgYLuYyrgZ3iEFMFmQfQBnCvk 3QbebMWfjMObeh8TPvZZGv8a+8bzDdniRr7cH0kgU75zzV4wAV/rFIpF6+9CwpT0 sV5PEqgWNB84OMr7lz0zNi+dFb38Nw2QbMcP+w4gGWZxvLBVW+GlaVtR8JerZZHN qbv51QUFOLXO3mToVOWpThatf8wEYdr+9eYlc/YZH80yAX26ueFaj2A+cQgmJ/cp Vyt9yw0st+bqcTvjlkKLR9NH7by9Uh0s6nP0qNeL2fRTlCBU7mCA93UPpqdm7meR +zPESM8oYt8KYp/YsPQUSKR3Aoot5vfxwwOsQ+Jfe/5bZW3BbTzlhkNW2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPSKv7hZ+5UYfrUAIhyJC5nsBP9RMB8GA1UdIwQY MBaAFKc9ZA2Qvz1n8kmBOMw3H2VGR92tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHoxa0RaQ19QV2Z5U1lFNHpEY2ZaVVpIM2EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83Mjg5MmEtM2JjMC00ZjU3LWJjNWIt NzUwMzk3NTBiZDY4LzEvOUlxX3VGbjdsUmgtdFFBaUhJa0xtZXdFXzFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83Mjg5MmEtM2JjMC00ZjU3LWJjNWItNzUwMzk3NTBiZDY4 LzEvcHoxa0RaQ19QV2Z5U1lFNHpEY2ZaVVpIM2EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjxKMA0G CSqGSIb3DQEBCwUAA4IBAQBDR4Pdc9w0nOY4A2IBDefCQY8nQ/yRkgavxdfZE3dy mM7LLMcIIZ4VQxUPF1LhRiAjZ0BJGo4/ttBnC0X5Q/CqPpPKlecqU9m+XoRgTYzP FLBW8/udY2vH70Nv3Uyj+pH/M7New4DsKkOTOXhPer2n3gxRLWqu7C5UVZHnhpHU mTqCWVYhLz3zD1eEYzQ9BZTJ/1PNKshv9gtKdPEK7fbDmnfqKHbLfaPm4qc9f5QC TfCQ5vwGMDNlvFw+BYROQwmXCtVaVdSSrbFldU6P0w0GzksvkHSzOq9exZSwk33c wKniTqHvqWl4qmtM8LelS7wJi4Z3ETNF2TZwaw5RSOKc -----END CERTIFICATE-----Generated at Sat Jan 3 06:52:07 2026 by rpki-client