This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/9XmTiY_H8jaK8nxNmw6DCXZkrL8.roa File: 9XmTiY_H8jaK8nxNmw6DCXZkrL8.roa (raw, json) Hash identifier: qzv4sP0iawufJ5iQxd2v/qGGI7FMui/kqPe0/MuBNTw= Subject key identifier: F5:79:93:89:8F:C7:F2:36:8A:F2:7C:4D:9B:0E:83:09:76:64:AC:BF Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91 Certificate serial: 019B77C66C5BFB935DA76A9524AA5DECDE38 Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/9XmTiY_H8jaK8nxNmw6DCXZkrL8.roa Signing time: Thu 01 Jan 2026 04:17:31 +0000 ROA not before: Thu 01 Jan 2026 04:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57814 IP address blocks: 195.80.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:6c:5b:fb:93:5d:a7:6a:95:24:aa:5d:ec:de:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91 Validity Not Before: Jan 1 04:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f57993898fc7f2368af27c4d9b0e83097664acbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:21:99:26:0b:ae:5a:b2:e2:41:df:00:6e: 38:9a:49:50:dc:e4:17:fb:7b:9c:3b:72:21:3a:77: 92:dc:a3:ae:73:1f:c5:87:eb:61:11:d6:7b:3a:19: 47:90:ef:17:8b:9f:ab:1d:ae:c3:dd:10:f1:a1:1c: a9:5b:b9:87:2c:35:8e:d8:07:bf:0b:7e:48:20:73: 71:00:92:c9:0a:3e:1f:eb:84:62:05:d6:4c:7c:04: 6a:48:c7:61:86:eb:85:14:df:82:bf:cb:16:9d:87: 49:ab:15:1d:42:6e:6b:65:6f:2f:b1:bf:90:d4:3b: 83:91:4b:4b:2e:d0:9f:66:c2:16:1a:f6:9f:2f:14: 4e:aa:51:5c:b9:5d:9c:71:b6:99:52:a5:c9:5a:5b: cd:79:4e:e9:29:af:e9:3e:ad:dd:7e:cc:1a:27:7b: 94:45:88:f1:f9:d7:6b:4d:ea:72:e7:7d:d8:65:d1: 91:04:c1:06:33:a0:1d:f8:ad:ea:d2:70:99:80:9a: d8:e9:1e:f4:3a:6c:a1:48:3a:f7:3d:eb:f6:30:f2: be:81:65:8a:b8:40:b2:f6:1d:37:33:da:1f:63:28: 87:ac:ff:5c:6b:7c:20:c4:e5:c3:8f:11:ed:b3:cd: a6:0c:df:f1:8c:92:79:ac:33:3c:e4:8b:9c:94:5d: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:79:93:89:8F:C7:F2:36:8A:F2:7C:4D:9B:0E:83:09:76:64:AC:BF X509v3 Authority Key Identifier: keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/9XmTiY_H8jaK8nxNmw6DCXZkrL8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.80.233.0/24 Signature Algorithm: sha256WithRSAEncryption 03:3f:e8:25:79:a3:d7:72:d6:f0:75:bb:da:29:a3:1a:cc:3a: db:56:d3:84:c6:3e:c8:aa:27:c9:08:e5:f1:2c:a6:63:f1:59: 3d:dc:8d:37:5c:27:17:4a:61:80:96:c8:d3:6c:64:07:d8:02: cb:09:6b:e4:49:bf:a5:f9:ae:79:4f:86:f8:68:8c:bf:e5:a9: 52:de:17:d6:e9:a7:2e:bd:80:c5:f2:ab:4f:19:57:45:46:72: 36:8b:b5:ff:13:77:a5:8c:8b:18:e8:48:71:d1:85:a1:84:cc: 56:30:1d:33:9d:1f:5a:b5:bc:75:2a:00:33:37:78:67:b3:16: 30:d0:3b:fd:78:de:de:a3:03:7d:24:72:ea:00:a7:18:37:7a: 94:28:a6:dc:4e:fa:33:87:2a:ce:6b:2e:f0:b1:a0:b5:43:0a: 26:91:33:b0:1d:bf:e8:d0:6a:bd:31:90:13:47:06:bd:bd:f9: 92:44:ec:85:51:73:b5:06:7d:20:68:8f:18:f3:d6:f2:15:6f: cd:91:28:8a:c5:20:ea:20:27:33:29:19:8d:fd:ab:ec:80:a3: 0c:7d:b8:59:cb:19:b9:3c:fe:a2:4d:1b:e9:3d:a8:40:2a:a8: e2:aa:e3:1a:b8:51:00:2b:44:0d:cd:a3:06:01:37:c5:7c:b4: 51:cd:19:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmxb+5Ndp2qVJKpd7N44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODhkNGE0YWIxOGE1OWI2NjRkYWJhZmRiMzg4MGRjMzVi MjJiOTEwHhcNMjYwMTAxMDQxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTc5OTM4OThmYzdmMjM2OGFmMjdjNGQ5YjBlODMwOTc2NjRhY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJQhmSYLrlqy4kHfAG44mklQ3OQX +3ucO3IhOneS3KOucx/Fh+thEdZ7OhlHkO8Xi5+rHa7D3RDxoRypW7mHLDWO2Ae/ C35IIHNxAJLJCj4f64RiBdZMfARqSMdhhuuFFN+Cv8sWnYdJqxUdQm5rZW8vsb+Q 1DuDkUtLLtCfZsIWGvafLxROqlFcuV2ccbaZUqXJWlvNeU7pKa/pPq3dfswaJ3uU RYjx+ddrTepy533YZdGRBMEGM6Ad+K3q0nCZgJrY6R70OmyhSDr3Pev2MPK+gWWK uECy9h03M9ofYyiHrP9ca3wgxOXDjxHts82mDN/xjJJ5rDM85IuclF15PQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPV5k4mPx/I2ivJ8TZsOgwl2ZKy/MB8GA1UdIwQY MBaAFHuI1KSrGKWbZk2rr9s4gNw1siuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMt NzQzNzY1YmQwZjNlLzEvOVhtVGlZX0g4amFLOG54Tm13NkRDWFprckw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8yMDQ4ZTQtODE4Yy00NjAxLWIwMjMtNzQzNzY1YmQwZjNl LzEvZTRqVXBLc1lwWnRtVGF1djJ6aUEzRFd5SzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1DpMA0G CSqGSIb3DQEBCwUAA4IBAQADP+gleaPXctbwdbvaKaMazDrbVtOExj7IqifJCOXx LKZj8Vk93I03XCcXSmGAlsjTbGQH2ALLCWvkSb+l+a55T4b4aIy/5alS3hfW6acu vYDF8qtPGVdFRnI2i7X/E3eljIsY6Ehx0YWhhMxWMB0znR9atbx1KgAzN3hnsxYw 0Dv9eN7eowN9JHLqAKcYN3qUKKbcTvozhyrOay7wsaC1QwomkTOwHb/o0Gq9MZAT Rwa9vfmSROyFUXO1Bn0gaI8Y89byFW/NkSiKxSDqICczKRmN/avsgKMMfbhZyxm5 PP6iTRvpPahAKqjiquMauFEAK0QNzaMGATfFfLRRzRn4 -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:54 2026 by rpki-client