This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_ntjTdUvEZjZwrOOzT3uYfGf9Dw.roa File: _ntjTdUvEZjZwrOOzT3uYfGf9Dw.roa (raw, json) Hash identifier: qaWHWM0KL84e5lmniOFuqRP6CItGOVxj3cToG86INZU= Subject key identifier: FE:7B:63:4D:D5:2F:11:98:D9:C2:B3:8E:CD:3D:EE:61:F1:9F:F4:3C Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F555A2668D9BE664DF38A161EFBD1 Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_ntjTdUvEZjZwrOOzT3uYfGf9Dw.roa Signing time: Fri 02 Jan 2026 02:17:58 +0000 ROA not before: Fri 02 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41406 IP address blocks: 194.9.24.0/23 maxlen: 23 194.9.24.0/24 maxlen: 24 194.9.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:55:5a:26:68:d9:be:66:4d:f3:8a:16:1e:fb:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe7b634dd52f1198d9c2b38ecd3dee61f19ff43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:02:5f:e3:5a:f4:5a:a3:98:cd:6f:e8:1e:b1: 27:2d:e5:b2:5f:e2:8b:1f:4b:e4:9d:a7:9a:f7:55: 4d:36:26:aa:e5:30:d8:45:42:d6:7f:f9:12:6c:74: f4:3a:d8:d5:fd:f0:4e:fd:8a:b1:ff:83:6f:62:e0: 98:78:24:ec:86:8a:e6:d5:52:f4:9b:42:c2:91:f6: b0:51:48:54:30:70:eb:f1:18:c7:9c:5b:19:78:92: e1:e5:5f:20:33:8d:86:3f:5d:2d:04:fb:5d:ac:eb: 26:53:5f:00:2f:39:32:18:d1:6d:ab:a0:63:76:60: b4:f6:8d:89:8c:1d:1d:39:0e:0e:fa:e2:f6:67:f8: 16:e0:5d:88:80:c9:7e:73:95:cb:32:51:4c:00:47: 33:22:cf:53:5b:13:40:dc:45:9c:ca:5f:fa:06:0d: 0a:3d:63:9a:42:49:40:b2:eb:c1:0d:5e:ab:dc:b6: 2e:19:0c:d3:c7:79:8f:c1:d7:c2:9a:68:b1:39:e7: fa:e6:71:18:4a:cf:f3:66:75:02:af:92:c6:9b:64: 83:1a:77:f7:8d:bf:dc:e2:3c:31:68:5d:d8:b3:99: ff:1a:8e:38:b1:88:b3:a2:e0:e6:75:83:6c:74:ab: ed:b1:3a:ec:77:f1:35:ff:39:73:71:f0:67:f9:31: 92:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7B:63:4D:D5:2F:11:98:D9:C2:B3:8E:CD:3D:EE:61:F1:9F:F4:3C X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/_ntjTdUvEZjZwrOOzT3uYfGf9Dw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.9.24.0/23 Signature Algorithm: sha256WithRSAEncryption 04:48:a4:b2:1e:e3:75:53:c2:7f:b0:aa:c7:90:9c:ee:7e:36: 3b:5c:f0:22:2a:2a:4b:83:c2:f0:69:0b:28:7a:78:d4:bf:0d: 82:21:45:0d:c1:53:7a:be:67:49:e3:63:01:c0:ca:e9:46:f6: d6:a8:51:ef:59:ae:c8:e7:9f:6e:5b:13:50:6c:34:2a:db:01: 08:51:05:2d:86:13:2d:95:6e:fb:bc:19:c3:2f:c7:f1:b6:4e: 75:22:1e:fd:55:18:bc:7c:57:dd:ad:9b:8f:f3:69:e6:76:56: c8:b8:b7:64:16:d4:b7:c8:3d:a2:82:55:20:1b:8a:3d:6c:df: 15:ab:68:30:35:4c:28:9b:b0:4b:91:9d:4e:2f:f4:99:ec:60: d5:ea:ca:10:28:7a:cf:e8:f1:bc:b0:38:ca:3a:d6:0b:52:ac: 0e:76:6d:17:f5:f0:c6:03:06:18:34:bb:6e:55:60:05:8e:cf: b2:66:ed:6d:17:25:7d:7c:d0:de:ac:49:32:2d:bd:9d:c0:b4: dd:3a:2b:76:57:d7:59:2b:47:51:51:93:bf:92:24:b3:ac:9a: 7e:fe:b9:f5:a8:7c:09:79:a1:a5:8b:66:e8:77:fc:07:ed:c5: a0:05:87:ff:a9:5e:34:9b:0f:18:03:f8:53:e4:44:35:12:73: a1:a7:64:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f1VaJmjZvmZN84oWHvvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTdiNjM0ZGQ1MmYxMTk4ZDljMmIzOGVjZDNkZWU2MWYxOWZmNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wJf41r0WqOYzW/oHrEnLeWyX+KL H0vknaea91VNNiaq5TDYRULWf/kSbHT0OtjV/fBO/Yqx/4NvYuCYeCTshorm1VL0 m0LCkfawUUhUMHDr8RjHnFsZeJLh5V8gM42GP10tBPtdrOsmU18ALzkyGNFtq6Bj dmC09o2JjB0dOQ4O+uL2Z/gW4F2IgMl+c5XLMlFMAEczIs9TWxNA3EWcyl/6Bg0K PWOaQklAsuvBDV6r3LYuGQzTx3mPwdfCmmixOef65nEYSs/zZnUCr5LGm2SDGnf3 jb/c4jwxaF3Ys5n/Go44sYizouDmdYNsdKvtsTrsd/E1/zlzcfBn+TGSOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP57Y03VLxGY2cKzjs097mHxn/Q8MB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvX250alRkVXZFWmpad3JPT3pUM3VZZkdmOUR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwgkYMA0G CSqGSIb3DQEBCwUAA4IBAQAESKSyHuN1U8J/sKrHkJzufjY7XPAiKipLg8LwaQso enjUvw2CIUUNwVN6vmdJ42MBwMrpRvbWqFHvWa7I559uWxNQbDQq2wEIUQUthhMt lW77vBnDL8fxtk51Ih79VRi8fFfdrZuP82nmdlbIuLdkFtS3yD2iglUgG4o9bN8V q2gwNUwom7BLkZ1OL/SZ7GDV6soQKHrP6PG8sDjKOtYLUqwOdm0X9fDGAwYYNLtu VWAFjs+yZu1tFyV9fNDerEkyLb2dwLTdOit2V9dZK0dRUZO/kiSzrJp+/rn1qHwJ eaGli2bod/wH7cWgBYf/qV40mw8YA/hT5EQ1EnOhp2RT -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:16 2026 by rpki-client