This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/9TJMpeYqsoOoDUusQBPckUuMx5w.roa File: 9TJMpeYqsoOoDUusQBPckUuMx5w.roa (raw, json) Hash identifier: glgiITvixFtsZGf3Fx9yb2ESkrKPhP/O4mnFOL1v/4c= Subject key identifier: F5:32:4C:A5:E6:2A:B2:83:A8:0D:4B:AC:40:13:DC:91:4B:8C:C7:9C Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED17C0A05A0AD4A996F863A9A4C39B Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/9TJMpeYqsoOoDUusQBPckUuMx5w.roa Signing time: Thu 01 Jan 2026 14:18:59 +0000 ROA not before: Thu 01 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48690 IP address blocks: 195.187.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:17:c0:a0:5a:0a:d4:a9:96:f8:63:a9:a4:c3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5324ca5e62ab283a80d4bac4013dc914b8cc79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8d:8b:e3:dc:5c:f5:31:ad:06:3f:62:f4:92: 6b:15:87:78:93:be:48:c3:8f:d9:3b:cf:a3:c8:52: f3:65:1e:49:0a:89:1f:33:15:9a:35:c2:c5:ca:56: d4:e2:2a:e5:e1:5a:89:7e:1e:d4:bd:1e:74:2f:4c: b1:04:b3:a6:ba:24:65:e5:27:1d:27:dd:04:79:7a: ce:06:15:3b:0c:cf:1d:87:a1:a6:8f:9e:e4:b6:0b: fe:b6:c8:2f:fe:f5:a2:ba:05:b6:04:4b:5e:0b:51: ae:90:fd:88:d9:7b:fd:e4:c9:8b:37:50:d4:fe:17: 95:91:50:58:46:82:b8:11:5a:08:6f:1d:4d:b5:db: c1:06:fa:96:b6:63:c3:75:91:47:93:49:67:ab:d0: 0a:73:b6:b2:db:37:d0:4c:be:93:68:31:a0:80:c0: 41:fb:ab:29:cf:5e:36:66:a4:d5:d9:e3:c9:15:27: 57:e6:a6:c2:53:18:4c:61:04:88:04:32:c4:b6:18: a2:7a:2b:85:0b:46:78:2d:44:fb:ef:56:fa:d8:03: c7:67:76:42:0f:57:9c:34:48:a5:02:e2:38:83:b9: b4:0f:30:25:52:b6:0f:f9:cd:29:24:32:8d:45:3d: 80:d2:3e:ae:ab:00:02:e1:3f:4c:5b:b0:8f:cb:e2: fb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:32:4C:A5:E6:2A:B2:83:A8:0D:4B:AC:40:13:DC:91:4B:8C:C7:9C X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/9TJMpeYqsoOoDUusQBPckUuMx5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.187.141.0/24 Signature Algorithm: sha256WithRSAEncryption 52:73:35:ed:96:1c:4b:8e:77:1e:31:00:d4:21:08:1b:12:62: 6c:e3:99:e2:6d:eb:27:47:df:a0:ec:10:5e:28:f3:0b:3c:eb: 14:ba:68:a9:e2:c5:76:ac:a4:90:76:e3:84:5d:55:22:e5:28: c7:25:ef:8e:50:41:a5:14:55:ae:6a:94:65:de:b1:54:27:88: 78:3b:03:6d:72:1e:5f:5f:f5:10:b1:ed:e8:28:aa:78:41:59: de:01:09:a6:8b:4a:f9:53:14:c4:33:3a:42:91:52:dd:6e:7e: e4:6f:11:56:a4:9c:c8:fb:f5:82:80:57:b8:0b:a9:ca:04:4e: 74:09:b4:9f:34:ea:83:75:51:d4:b1:55:47:63:ac:5b:42:20: 48:0c:dc:61:49:c8:e4:25:19:50:4d:2b:5e:2e:84:fa:b8:0f: 57:a4:9d:43:24:df:b9:b4:df:86:2a:56:12:f3:73:c4:ca:0a: 93:7d:24:a6:ab:26:a4:4a:1d:8b:71:47:8e:b9:b3:7a:27:95: 70:8e:8f:1f:d6:37:9d:d5:e5:a9:69:31:a7:40:89:a0:50:d3: 61:6c:f4:79:6c:0d:0e:f2:2b:f3:4b:16:17:48:16:61:43:ca: be:4e:98:49:ce:8c:33:18:d5:6a:4b:48:dc:78:1a:2a:16:3a: d1:6e:76:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57RfAoFoK1KmW+GOppMObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTMyNGNhNWU2MmFiMjgzYTgwZDRiYWM0MDEzZGM5MTRiOGNjNzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI2L49xc9TGtBj9i9JJrFYd4k75I w4/ZO8+jyFLzZR5JCokfMxWaNcLFylbU4irl4VqJfh7UvR50L0yxBLOmuiRl5Scd J90EeXrOBhU7DM8dh6Gmj57ktgv+tsgv/vWiugW2BEteC1GukP2I2Xv95MmLN1DU /heVkVBYRoK4EVoIbx1NtdvBBvqWtmPDdZFHk0lnq9AKc7ay2zfQTL6TaDGggMBB +6spz142ZqTV2ePJFSdX5qbCUxhMYQSIBDLEthiieiuFC0Z4LUT771b62APHZ3ZC D1ecNEilAuI4g7m0DzAlUrYP+c0pJDKNRT2A0j6uqwAC4T9MW7CPy+L7QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUyTKXmKrKDqA1LrEAT3JFLjMecMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvOVRKTXBlWXFzb09vRFV1c1FCUGNrVXVNeDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7uNMA0G CSqGSIb3DQEBCwUAA4IBAQBSczXtlhxLjnceMQDUIQgbEmJs45nibesnR9+g7BBe KPMLPOsUumip4sV2rKSQduOEXVUi5SjHJe+OUEGlFFWuapRl3rFUJ4h4OwNtch5f X/UQse3oKKp4QVneAQmmi0r5UxTEMzpCkVLdbn7kbxFWpJzI+/WCgFe4C6nKBE50 CbSfNOqDdVHUsVVHY6xbQiBIDNxhScjkJRlQTSteLoT6uA9XpJ1DJN+5tN+GKlYS 83PEygqTfSSmqyakSh2LcUeOubN6J5Vwjo8f1jed1eWpaTGnQImgUNNhbPR5bA0O 8ivzSxYXSBZhQ8q+TphJzowzGNVqS0jceBoqFjrRbnbd -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:32 2026 by rpki-client