This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/9WiLMBOOIFui37XsSkkIFcDbunw.roa File: 9WiLMBOOIFui37XsSkkIFcDbunw.roa (raw, json) Hash identifier: 41f5PwE35LBjKoYTvONiL6ypIZadvUiy3rHjOLDko1A= Subject key identifier: F5:68:8B:30:13:8E:20:5B:A2:DF:B5:EC:4A:49:08:15:C0:DB:BA:7C Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Certificate serial: 019B775926BB689408B714C7F36761A3546C Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/9WiLMBOOIFui37XsSkkIFcDbunw.roa Signing time: Thu 01 Jan 2026 02:18:09 +0000 ROA not before: Thu 01 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197889 IP address blocks: 193.188.192.0/24 maxlen: 24 193.188.193.0/24 maxlen: 24 193.188.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:26:bb:68:94:08:b7:14:c7:f3:67:61:a3:54:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d Validity Not Before: Jan 1 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5688b30138e205ba2dfb5ec4a490815c0dbba7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e9:3b:3d:74:b2:9a:06:30:ec:fd:1d:c4:5e: ab:3c:7f:33:35:9f:cc:78:43:a0:e1:6d:1e:52:1e: 4f:81:c0:51:10:45:dd:c2:55:c3:f4:cf:ae:64:f0: 4d:54:bf:00:9d:62:33:b2:ad:42:c2:9e:1d:4b:10: e8:43:55:3d:2c:4d:1f:b0:b4:f9:bf:8a:96:ed:8e: 92:c5:44:39:ae:78:ef:5e:c4:09:aa:4d:81:f2:3f: d0:de:46:aa:88:2c:d3:61:f0:f6:74:35:0f:25:ae: 4e:05:67:53:cb:e0:fe:6e:62:58:76:ba:88:01:b6: f8:c0:00:71:13:90:91:4d:84:69:38:fd:c0:ea:fd: 1a:ef:c7:14:29:fc:2d:20:e3:6a:7b:c7:74:1d:31: e0:11:84:01:74:b9:f6:dd:be:77:95:41:79:f4:56: ff:fd:7e:46:df:6f:b1:53:d1:ff:cf:74:71:84:fc: 3f:63:7e:73:10:cc:59:ab:6f:11:6b:0b:e6:98:63: 98:4e:60:ed:9c:04:e3:e7:5d:6d:4d:b3:f9:ca:96: 6a:d8:15:d2:08:c7:76:ae:11:7d:8c:3d:1a:1b:f9: 2c:21:60:05:b9:79:bb:2a:c7:f9:15:f3:ef:87:84: 3a:b2:ae:1e:82:46:46:53:dd:10:d3:53:71:e9:f7: 9a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:68:8B:30:13:8E:20:5B:A2:DF:B5:EC:4A:49:08:15:C0:DB:BA:7C X509v3 Authority Key Identifier: keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/9WiLMBOOIFui37XsSkkIFcDbunw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.188.192.0-193.188.194.255 Signature Algorithm: sha256WithRSAEncryption 8c:4b:da:ac:80:92:4d:d8:5c:07:d7:1b:30:28:0f:62:6b:5c: f0:12:63:6e:72:47:fa:c5:2c:85:0d:a4:2c:ac:1a:0f:e8:8c: bb:e8:b5:e3:78:bb:4b:a1:f2:25:31:39:9e:f5:af:4a:11:a5: 1e:d9:bf:b4:11:82:b7:7e:51:d0:c4:7d:ff:35:32:b9:c2:46: ec:27:41:75:f6:a3:fb:6e:86:79:1c:42:fb:12:f0:69:ac:b8: c8:43:01:6a:11:10:9c:2e:cb:77:a7:9a:e1:c0:ef:0e:4d:52: 24:77:2e:cc:ae:20:68:06:1d:fb:db:30:2d:33:3c:b3:c4:78: 81:ae:1f:b8:3f:99:6f:48:14:0b:80:07:37:e7:c7:16:c2:ee: c6:58:b1:dd:38:71:cb:53:92:69:c5:a8:83:51:3e:89:e9:f4: 27:47:b4:97:4c:d8:98:ba:14:a4:af:fe:e5:7d:2d:a5:da:97: 9c:85:3c:bd:ca:6c:05:c4:08:7f:44:15:ea:7e:ba:a1:f6:67: 94:c1:77:bc:5d:db:2f:bd:5a:9a:7c:53:1c:68:0c:e4:ec:1b: db:cf:d0:5d:d5:e3:22:a4:49:a3:e2:46:ac:5b:36:17:fd:36: 73:1c:66:01:3e:3d:2c:f1:10:43:88:a5:8f:ce:d6:55:2a:7e: 79:88:e3:d4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WSa7aJQItxTH82dho1RsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0OGY1ZTI2ZjFjMDhmNDQ4NmM5OTExYzhiNjA5ZWFlOGI2 Y2I3NGQwHhcNMjYwMTAxMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTY4OGIzMDEzOGUyMDViYTJkZmI1ZWM0YTQ5MDgxNWMwZGJiYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoek7PXSymgYw7P0dxF6rPH8zNZ/M eEOg4W0eUh5PgcBREEXdwlXD9M+uZPBNVL8AnWIzsq1Cwp4dSxDoQ1U9LE0fsLT5 v4qW7Y6SxUQ5rnjvXsQJqk2B8j/Q3kaqiCzTYfD2dDUPJa5OBWdTy+D+bmJYdrqI Abb4wABxE5CRTYRpOP3A6v0a78cUKfwtIONqe8d0HTHgEYQBdLn23b53lUF59Fb/ /X5G32+xU9H/z3RxhPw/Y35zEMxZq28RawvmmGOYTmDtnATj511tTbP5ypZq2BXS CMd2rhF9jD0aG/ksIWAFuXm7Ksf5FfPvh4Q6sq4egkZGU90Q01Nx6feakQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPVoizATjiBbot+17EpJCBXA27p8MB8GA1UdIwQY MBaAFCSPXibxwI9EhsmRHItgnq6LbLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYt MDEzN2IxZjc1ZDAyLzEvOVdpTE1CT09JRnVpMzdYc1Nra0lGY0RidW53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9kYWU4YjAtOTdkMC00OGQ0LTliMjYtMDEzN2IxZjc1ZDAy LzEvSkk5ZUp2SEFqMFNHeVpFY2kyQ2Vyb3RzdDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAbBvMAD BADBvMIwDQYJKoZIhvcNAQELBQADggEBAIxL2qyAkk3YXAfXGzAoD2JrXPASY25y R/rFLIUNpCysGg/ojLvoteN4u0uh8iUxOZ71r0oRpR7Zv7QRgrd+UdDEff81MrnC RuwnQXX2o/tuhnkcQvsS8GmsuMhDAWoREJwuy3enmuHA7w5NUiR3LsyuIGgGHfvb MC0zPLPEeIGuH7g/mW9IFAuABzfnxxbC7sZYsd04cctTkmnFqINRPonp9CdHtJdM 2Ji6FKSv/uV9LaXal5yFPL3KbAXECH9EFep+uqH2Z5TBd7xd2y+9Wpp8UxxoDOTs G9vP0F3V4yKkSaPiRqxbNhf9NnMcZgE+PSzxEEOIpY/O1lUqfnmI49Q= -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:32 2026 by rpki-client