This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/S9AoFvnjp3ZfWPaRfcjLBtxjKJw.roa File: S9AoFvnjp3ZfWPaRfcjLBtxjKJw.roa (raw, json) Hash identifier: KcKMRfjEJimpg3wHDTAgPJLLtBV5jQ0bUr2ldkt0t+8= Subject key identifier: 4B:D0:28:16:F9:E3:A7:76:5F:58:F6:91:7D:C8:CB:06:DC:63:28:9C Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7 Certificate serial: 019B79107023B6CB8DBAF7C3A9E20D275EED Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/S9AoFvnjp3ZfWPaRfcjLBtxjKJw.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211786 IP address blocks: 193.108.200.0/24 maxlen: 24 2a10:92c0::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:70:23:b6:cb:8d:ba:f7:c3:a9:e2:0d:27:5e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bd02816f9e3a7765f58f6917dc8cb06dc63289c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:19:94:a6:d3:5c:bc:ea:d8:9f:1a:38:8d: 9d:15:a7:82:58:79:0e:59:d5:5e:bd:1f:eb:f4:5b: fe:71:67:39:57:82:e0:74:84:65:99:20:d7:c5:d7: 98:cb:3d:25:30:c9:38:c6:0b:6d:18:3b:a9:13:33: e6:f7:8d:ef:41:da:b4:22:de:bc:2a:66:31:04:dc: 9b:ee:85:25:82:61:fb:e8:0c:86:9c:a5:fb:9b:89: 0d:47:36:0d:62:3f:67:fe:94:d0:66:96:d3:f5:e6: 05:15:82:98:40:8e:c9:58:a1:01:af:0a:fd:6f:cc: f0:66:8a:b3:53:ab:16:a8:cd:eb:08:f7:7b:f8:79: f2:7e:50:75:ec:fe:c7:95:ef:3d:ce:00:9c:09:3b: d2:82:35:a3:27:47:61:c4:4d:44:f4:15:a9:ce:69: a8:19:ab:74:ab:9a:71:ae:10:61:58:f3:a4:62:42: c6:9a:cf:96:7a:0f:fc:73:2e:a6:4e:84:63:96:25: 18:52:95:07:c7:39:13:d8:6c:c1:76:fa:bc:13:c2: f8:fe:2a:f8:ba:2a:fd:e1:5c:0c:bf:7c:c9:35:95: 57:9a:cf:50:4a:ab:f0:65:1b:0b:41:ae:66:b1:3a: 59:46:d6:ba:22:63:c3:48:83:9c:1e:8f:46:1e:9c: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D0:28:16:F9:E3:A7:76:5F:58:F6:91:7D:C8:CB:06:DC:63:28:9C X509v3 Authority Key Identifier: keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/S9AoFvnjp3ZfWPaRfcjLBtxjKJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.200.0/24 IPv6: 2a10:92c0::/29 Signature Algorithm: sha256WithRSAEncryption 57:db:01:74:9a:3a:da:31:aa:dd:a2:93:f7:25:c3:ae:80:0f: 15:35:a5:57:9a:7b:b7:72:25:ee:9f:64:39:ad:91:69:9f:81: f1:d0:9f:0f:bc:7a:8f:56:f6:51:33:25:5f:7b:77:07:50:92: c0:e1:e6:36:ca:a1:69:c2:ee:24:8c:74:2a:fb:07:7c:b7:f3: 13:2f:a0:69:38:00:7c:2e:a0:08:3c:bf:17:61:4e:f9:5e:fc: 65:9f:d2:a8:fe:32:91:09:e3:eb:05:de:72:3e:64:43:e3:4c: 07:73:b2:bf:1b:3c:31:82:62:62:c2:17:89:57:d3:9b:57:50: 59:78:f9:50:b6:27:cd:fb:45:e3:4d:b9:d7:30:88:ae:f2:70: c2:d1:19:1f:79:6d:92:6d:a6:73:41:cd:83:26:2e:c7:7e:f7: 7a:2c:23:95:02:b2:90:3c:16:8f:15:2b:0a:b4:0a:5e:de:b3: 12:68:76:d4:a3:69:ef:4b:c4:4f:7a:b1:20:09:fe:ed:a7:1a: b1:9d:d0:75:2d:70:e0:22:6e:e9:91:92:be:de:7c:5c:7f:48: de:a6:87:43:37:98:47:04:b6:09:4e:b3:43:16:c6:27:a1:2d: ad:25:5b:e9:74:9d:9b:2b:76:48:49:7f:bd:13:34:b8:3e:b0: da:2d:be:a3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EHAjtsuNuvfDqeINJ17tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDg4ZGRiN2FlZDcyZGVhM2ZmOGQ2OWNlZDY1MzFhNTI3 OTRhYTcwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmQwMjgxNmY5ZTNhNzc2NWY1OGY2OTE3ZGM4Y2IwNmRjNjMyODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF4ZlKbTXLzq2J8aOI2dFaeCWHkO WdVevR/r9Fv+cWc5V4LgdIRlmSDXxdeYyz0lMMk4xgttGDupEzPm943vQdq0It68 KmYxBNyb7oUlgmH76AyGnKX7m4kNRzYNYj9n/pTQZpbT9eYFFYKYQI7JWKEBrwr9 b8zwZoqzU6sWqM3rCPd7+HnyflB17P7Hle89zgCcCTvSgjWjJ0dhxE1E9BWpzmmo Gat0q5pxrhBhWPOkYkLGms+Weg/8cy6mToRjliUYUpUHxzkT2GzBdvq8E8L4/ir4 uir94VwMv3zJNZVXms9QSqvwZRsLQa5msTpZRta6ImPDSIOcHo9GHpz8rQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEvQKBb546d2X1j2kX3IywbcYyicMB8GA1UdIwQY MBaAFEDYjdt67XLeo/+Nac7WUxpSeUqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUt MzdhMjRlMDgxZjY4LzEvUzlBb0Z2bmpwM1pmV1BhUmZjakxCdHhqS0p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUtMzdhMjRlMDgxZjY4 LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwWzIMA0E AgACMAcDBQMqEJLAMA0GCSqGSIb3DQEBCwUAA4IBAQBX2wF0mjraMardopP3JcOu gA8VNaVXmnu3ciXun2Q5rZFpn4Hx0J8PvHqPVvZRMyVfe3cHUJLA4eY2yqFpwu4k jHQq+wd8t/MTL6BpOAB8LqAIPL8XYU75Xvxln9Ko/jKRCePrBd5yPmRD40wHc7K/ GzwxgmJiwheJV9ObV1BZePlQtifN+0XjTbnXMIiu8nDC0RkfeW2SbaZzQc2DJi7H fvd6LCOVArKQPBaPFSsKtApe3rMSaHbUo2nvS8RPerEgCf7tpxqxndB1LXDgIm7p kZK+3nxcf0jepodDN5hHBLYJTrNDFsYnoS2tJVvpdJ2bK3ZISX+9EzS4PrDaLb6j -----END CERTIFICATE-----Generated at Tue Jan 13 16:15:26 2026 by rpki-client