This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/9eLIJ6RTK5BSD3tLbgAyaNclDYI.roa File: 9eLIJ6RTK5BSD3tLbgAyaNclDYI.roa (raw, json) Hash identifier: XSIKM2J7ehZpb0tQX1yj15wm/mofvKw8ffgNRz1IrEo= Subject key identifier: F5:E2:C8:27:A4:53:2B:90:52:0F:7B:4B:6E:00:32:68:D7:25:0D:82 Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7 Certificate serial: 019B7E38D652EDB05828BA84406473172EC9 Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/9eLIJ6RTK5BSD3tLbgAyaNclDYI.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21422 IP address blocks: 193.110.240.0/21 maxlen: 21 193.110.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d6:52:ed:b0:58:28:ba:84:40:64:73:17:2e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7 Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5e2c827a4532b90520f7b4b6e003268d7250d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:48:86:69:14:48:b7:b6:4c:05:22:6b:ad: cf:7e:8f:f4:dc:16:23:35:aa:2f:b6:a4:c0:e4:8a: e0:5c:50:29:2c:e1:4a:73:5c:bf:c4:fa:07:7e:17: 6e:cc:25:e3:4b:39:70:a1:d4:3c:0c:8e:4f:98:da: 1b:2f:ce:6f:e6:d9:a4:2f:f7:e6:fe:41:64:a3:ad: ae:42:53:95:7c:02:e6:63:6a:0f:67:45:42:92:8d: 0b:1f:fd:e6:d5:1e:cb:ab:b9:31:87:b4:30:70:cf: cb:8c:44:1f:d1:fd:87:9c:60:37:a5:41:62:a7:f2: 46:a0:52:1b:fc:11:98:11:6c:4e:db:94:c1:60:49: 05:18:8b:03:60:0a:84:2c:3b:17:37:d0:2b:d9:e2: f5:79:b1:66:5f:26:5d:9c:b4:29:5e:a5:5f:cb:05: 94:29:9a:fa:13:2c:33:f3:78:93:2d:37:c5:22:75: 5f:0c:4a:83:dc:b9:79:77:3a:c2:e6:78:17:d4:ba: ab:d7:a8:eb:46:89:3e:65:c3:cd:77:55:54:45:21: 4b:8e:22:1d:b6:83:6b:4a:ff:50:50:eb:11:f7:1c: a6:4c:4a:cb:1b:26:6f:bf:ac:0b:fd:73:d0:96:fe: f1:74:5d:fc:11:c7:19:11:32:c2:71:ab:cc:bd:fb: a9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E2:C8:27:A4:53:2B:90:52:0F:7B:4B:6E:00:32:68:D7:25:0D:82 X509v3 Authority Key Identifier: keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/9eLIJ6RTK5BSD3tLbgAyaNclDYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.240.0/21 Signature Algorithm: sha256WithRSAEncryption ab:24:c9:1b:fa:59:ad:ab:d8:81:96:74:70:50:e6:c8:7e:a1: 71:c3:1f:f7:a3:fe:7f:9d:34:46:00:5f:65:0d:52:9f:da:f1: 4d:51:6d:17:5e:63:cf:b0:73:78:4a:05:9a:2b:c3:18:12:da: 9e:16:31:5f:a5:18:76:31:a4:0f:6a:b0:a2:57:7f:fe:d8:d9: e3:81:b2:54:0c:80:b5:41:ee:9d:b3:08:f6:17:74:d0:2b:4d: fc:b1:a6:7b:2f:ce:a0:a9:d9:5b:4b:16:b8:10:09:d2:d6:dd: 99:ad:20:95:0f:09:f5:72:50:a2:40:11:8d:b8:c2:6e:d1:d0: d8:ff:e7:94:b7:1c:ec:0f:fe:d7:4c:92:96:af:f3:1d:4f:75: c6:1b:3e:f7:fa:5c:63:7f:e9:07:e1:0f:84:2f:b3:ab:49:57: 45:4f:19:ef:7d:96:f1:2e:15:44:a0:85:20:67:30:36:6e:32: 3a:de:9b:3e:91:f9:89:31:ce:6e:4e:da:66:9b:e8:77:50:ad: 55:7a:f7:d7:d3:6e:b3:1e:35:43:86:17:89:97:a8:8b:0f:b2: 0f:7f:ae:e2:85:b3:55:7e:e3:81:26:5b:c0:3e:1c:c3:10:d5: af:cc:3d:8f:a0:33:a7:8b:43:7a:8f:87:d3:e4:43:31:28:c2: 35:d0:e2:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ONZS7bBYKLqEQGRzFy7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNGQzMWFiMThlNDFmOGQ5NTlhMDlkNTU2NjBkZDMyYWE5 YzQ1ZjcwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWUyYzgyN2E0NTMyYjkwNTIwZjdiNGI2ZTAwMzI2OGQ3MjUwZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszdIhmkUSLe2TAUia63Pfo/03BYj NaovtqTA5IrgXFApLOFKc1y/xPoHfhduzCXjSzlwodQ8DI5PmNobL85v5tmkL/fm /kFko62uQlOVfALmY2oPZ0VCko0LH/3m1R7Lq7kxh7QwcM/LjEQf0f2HnGA3pUFi p/JGoFIb/BGYEWxO25TBYEkFGIsDYAqELDsXN9Ar2eL1ebFmXyZdnLQpXqVfywWU KZr6Eywz83iTLTfFInVfDEqD3Ll5dzrC5ngX1Lqr16jrRok+ZcPNd1VURSFLjiId toNrSv9QUOsR9xymTErLGyZvv6wL/XPQlv7xdF38EccZETLCcavMvfupJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPXiyCekUyuQUg97S24AMmjXJQ2CMB8GA1UdIwQY MBaAFHtNMasY5B+NlZoJ1VZg3TKqnEX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85YzI1MDgtMTFmMS00YWU3LTg3MjAt YmZmMDIzYjM0NGY3LzEvOWVMSUo2UlRLNUJTRDN0TGJnQXlhTmNsRFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85YzI1MDgtMTFmMS00YWU3LTg3MjAtYmZmMDIzYjM0NGY3 LzEvZTAweHF4amtINDJWbWduVlZtRGRNcXFjUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwW7wMA0G CSqGSIb3DQEBCwUAA4IBAQCrJMkb+lmtq9iBlnRwUObIfqFxwx/3o/5/nTRGAF9l DVKf2vFNUW0XXmPPsHN4SgWaK8MYEtqeFjFfpRh2MaQParCiV3/+2NnjgbJUDIC1 Qe6dswj2F3TQK038saZ7L86gqdlbSxa4EAnS1t2ZrSCVDwn1clCiQBGNuMJu0dDY /+eUtxzsD/7XTJKWr/MdT3XGGz73+lxjf+kH4Q+EL7OrSVdFTxnvfZbxLhVEoIUg ZzA2bjI63ps+kfmJMc5uTtpmm+h3UK1VevfX026zHjVDhheJl6iLD7IPf67ihbNV fuOBJlvAPhzDENWvzD2PoDOni0N6j4fT5EMxKMI10OLq -----END CERTIFICATE-----Generated at Mon Jan 12 12:03:58 2026 by rpki-client