This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/9RXKGNoQqaoli9DhcQsdjNmIZDM.roa File: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (raw, json) Hash identifier: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA= Subject key identifier: F5:15:CA:18:DA:10:A9:AA:25:8B:D0:E1:71:0B:1D:8C:D9:88:64:33 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135D33227BC6C68F237DD26FC1BC7C Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/9RXKGNoQqaoli9DhcQsdjNmIZDM.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39877 IP address blocks: 188.214.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5d:33:22:7b:c6:c6:8f:23:7d:d2:6f:c1:bc:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f515ca18da10a9aa258bd0e1710b1d8cd9886433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:b4:cc:b7:68:22:b6:7a:54:19:21:c5:72: af:2d:56:98:7f:46:7c:6c:e2:71:41:a1:a4:da:5c: ec:ce:33:7c:8c:8d:2b:6a:ce:86:56:4a:fc:5f:cf: d6:f4:83:81:d0:61:28:1a:70:2a:49:b8:f5:f7:56: 6c:81:1d:50:7b:7b:da:63:a0:e5:83:c1:6f:46:da: d3:d5:a6:77:04:51:d6:fd:20:50:1c:f9:5b:10:6e: 33:66:d8:69:f3:22:6e:6c:01:d2:a5:96:4b:20:87: 8b:af:4c:37:84:08:67:f6:02:a6:fe:a4:fe:d1:b1: cb:ec:0f:1f:7a:52:8c:5e:9a:2f:ae:54:2e:67:6e: 9e:b8:94:c6:46:68:d5:2d:7f:7a:95:3b:fc:d6:de: 1e:2f:05:00:4f:74:64:36:0b:a9:d2:a0:62:0a:b5: 3b:24:dd:1a:6f:4a:c9:6f:a4:1e:76:b3:73:22:e7: 60:f3:c6:44:3e:e0:e4:ea:66:f7:ac:b4:7e:92:23: 56:ee:6d:29:68:95:29:ef:d8:9d:21:d4:bb:75:95: cf:02:ac:c4:95:1a:75:45:73:4f:a3:9f:90:1b:44: a7:d3:a9:c9:c6:36:b7:b1:1e:fa:01:c9:20:07:f4: 93:3f:d5:6c:09:80:c7:d8:9f:43:3d:52:36:c7:8e: 5c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:15:CA:18:DA:10:A9:AA:25:8B:D0:E1:71:0B:1D:8C:D9:88:64:33 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/9RXKGNoQqaoli9DhcQsdjNmIZDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.214.227.0/24 Signature Algorithm: sha256WithRSAEncryption ad:41:95:a1:d8:d0:15:51:bc:b8:ec:8d:d2:9c:ce:e7:07:6d: 52:d4:b8:91:fa:c5:6b:ee:bd:e8:3c:5c:53:67:ca:88:e1:e1: 5b:22:8a:53:91:6f:8b:72:57:79:8c:62:0a:2e:36:17:5e:ea: f8:0c:5d:19:f8:0f:2e:a6:d5:eb:5d:6e:37:f8:ae:2f:da:13: a6:f2:98:43:d2:1e:9a:44:96:fa:39:8f:ad:da:06:48:9b:b3: 9a:e7:79:9c:4f:2a:47:32:b6:87:3e:e0:1b:29:84:8c:0d:52: 6f:67:dc:d4:cb:f6:51:b6:ed:8a:15:11:02:a2:d0:3d:29:4a: 3f:9c:7c:3c:bb:ae:58:25:4d:6a:16:ad:27:cb:9f:76:ae:f4: f6:92:c1:c6:10:c9:6c:77:74:0c:24:62:07:c9:0a:0b:4e:48: 92:b6:37:8c:63:65:fa:0b:d0:6b:40:d1:b2:0b:e6:e6:c3:4b: 3e:ca:55:24:48:a0:76:ce:91:3b:c8:3c:68:f3:a5:70:d0:69: 52:f4:cb:4f:76:b4:9b:90:b5:f0:c0:45:2a:f9:c9:eb:4d:50: d9:a7:c8:08:0b:42:83:37:e4:28:6e:1e:b7:ff:df:d1:e6:01: 59:5f:f7:a1:b0:0b:bc:da:48:98:63:ba:ae:0a:e1:fa:20:07: e7:8c:42:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E10zInvGxo8jfdJvwbx8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTE1Y2ExOGRhMTBhOWFhMjU4YmQwZTE3MTBiMWQ4Y2Q5ODg2NDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZO0zLdoIrZ6VBkhxXKvLVaYf0Z8 bOJxQaGk2lzszjN8jI0ras6GVkr8X8/W9IOB0GEoGnAqSbj191ZsgR1Qe3vaY6Dl g8FvRtrT1aZ3BFHW/SBQHPlbEG4zZthp8yJubAHSpZZLIIeLr0w3hAhn9gKm/qT+ 0bHL7A8felKMXpovrlQuZ26euJTGRmjVLX96lTv81t4eLwUAT3RkNgup0qBiCrU7 JN0ab0rJb6QedrNzIudg88ZEPuDk6mb3rLR+kiNW7m0paJUp79idIdS7dZXPAqzE lRp1RXNPo5+QG0Sn06nJxja3sR76AckgB/STP9VsCYDH2J9DPVI2x45cPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUVyhjaEKmqJYvQ4XELHYzZiGQzMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvOVJYS0dOb1FxYW9saTlEaGNRc2RqTm1JWkRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNbjMA0G CSqGSIb3DQEBCwUAA4IBAQCtQZWh2NAVUby47I3SnM7nB21S1LiR+sVr7r3oPFxT Z8qI4eFbIopTkW+Lcld5jGIKLjYXXur4DF0Z+A8uptXrXW43+K4v2hOm8phD0h6a RJb6OY+t2gZIm7Oa53mcTypHMraHPuAbKYSMDVJvZ9zUy/ZRtu2KFRECotA9KUo/ nHw8u65YJU1qFq0ny592rvT2ksHGEMlsd3QMJGIHyQoLTkiStjeMY2X6C9BrQNGy C+bmw0s+ylUkSKB2zpE7yDxo86Vw0GlS9MtPdrSbkLXwwEUq+cnrTVDZp8gIC0KD N+Qobh63/9/R5gFZX/ehsAu82kiYY7quCuH6IAfnjEIL -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:40 2026 by rpki-client