This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/k9c2O8_Xy_eChgcz-yhyQZaZprY.roa File: k9c2O8_Xy_eChgcz-yhyQZaZprY.roa (raw, json) Hash identifier: +knLZsYjdnVF7uKOf0qT11DuyDMhYqWK5WJnzaJ/tgc= Subject key identifier: 93:D7:36:3B:CF:D7:CB:F7:82:86:07:33:FB:28:72:41:96:99:A6:B6 Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02 Certificate serial: 019B7F15D61CA3DF09B9C27402B82CE8DF8C Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/k9c2O8_Xy_eChgcz-yhyQZaZprY.roa Signing time: Fri 02 Jan 2026 14:21:36 +0000 ROA not before: Fri 02 Jan 2026 14:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197197 IP address blocks: 109.224.64.0/18 maxlen: 18 2a00:7e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d6:1c:a3:df:09:b9:c2:74:02:b8:2c:e8:df:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02 Validity Not Before: Jan 2 14:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93d7363bcfd7cbf782860733fb2872419699a6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:1b:3f:7d:e2:fe:f3:0d:de:d2:43:df:8a:3f: 3a:97:64:46:0a:70:37:48:e6:1b:68:8c:19:d7:c0: 84:9a:bf:67:88:55:77:e1:f1:18:a7:be:4c:fb:ac: 67:66:ae:0b:b0:f6:72:15:ed:a2:72:5e:08:83:4d: 88:9c:3a:e0:0d:7c:c3:95:5d:5a:31:4a:90:68:ef: 37:0a:25:0c:e2:77:c6:a3:90:f3:92:87:b7:d6:7d: bd:b2:6d:30:f6:80:65:59:f6:0b:7e:3c:c9:d3:e5: 72:b0:36:8f:3d:76:26:0f:86:0b:63:4b:ea:78:4a: c8:cf:0a:cd:31:ad:7d:01:21:a6:a5:d3:8d:68:86: 30:02:c5:e2:e7:f8:47:f9:65:d1:07:a4:e1:a9:e5: 87:44:5f:33:28:7c:fe:21:7d:eb:ec:5d:46:b8:c5: 90:f4:98:18:f8:9a:4f:b1:75:34:19:35:93:d5:aa: 4c:1d:03:21:5e:14:e0:e7:24:c7:ea:85:e5:06:26: cf:0d:58:29:c3:68:fe:2f:f1:df:83:62:cf:e7:27: 83:55:99:99:85:b0:23:0a:69:84:41:8c:6e:82:6b: 01:2d:1f:5a:40:da:e7:75:4a:0f:b9:b7:c4:3d:3a: 94:5c:16:63:f7:20:86:4d:eb:15:97:49:95:6d:b2: 42:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D7:36:3B:CF:D7:CB:F7:82:86:07:33:FB:28:72:41:96:99:A6:B6 X509v3 Authority Key Identifier: keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/k9c2O8_Xy_eChgcz-yhyQZaZprY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.224.64.0/18 IPv6: 2a00:7e80::/32 Signature Algorithm: sha256WithRSAEncryption 5f:66:f9:be:7a:dc:6a:43:93:27:b2:d1:d7:10:58:f4:5d:aa: f6:63:d9:ef:dc:c6:69:80:dc:f7:1d:49:67:4c:5d:c0:7e:bf: 42:22:30:b4:9b:9f:ef:89:b9:df:cb:ce:13:73:30:63:82:6d: a2:31:8e:d3:5d:7b:e7:1e:3d:22:b5:c1:bd:a8:05:a0:d6:6f: b7:a8:0f:b6:f7:d3:47:9c:b3:65:ac:19:bb:2e:d2:b0:c3:90: ed:9e:7f:fa:e3:a0:e2:01:ee:72:91:6b:8a:1d:eb:16:52:36: 2c:6b:29:ed:d9:5a:45:8f:57:74:08:2a:19:f3:cc:66:51:1c: 55:f4:83:11:bd:53:0a:38:1d:7d:b6:69:d6:af:57:c9:28:e3: c6:bd:50:e7:6f:1e:bc:db:dc:5e:39:cc:62:8d:24:c8:82:07: 1f:1f:09:52:ac:7b:2e:69:6a:b5:62:c1:77:cf:9e:a6:98:8c: c7:2a:2e:cb:a6:44:0b:c0:6f:96:df:29:8a:54:06:d3:db:cb: cc:14:15:eb:fe:bd:80:37:53:50:7e:d5:c2:db:f6:75:0d:d3: c0:37:a0:89:8e:54:1e:df:2c:eb:83:dd:a4:5f:6b:d6:70:71: a3:78:b3:f2:7f:ee:6f:1b:0e:3f:41:a3:d1:7e:e5:7b:ca:f6: f8:a1:25:bb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FdYco98JucJ0Args6N+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMmFmOTA2MGMxZjQyYzYyOGZjZmI4ZjA3ODFkN2E1YmMy MWZjMDIwHhcNMjYwMTAyMTQyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2Q3MzYzYmNmZDdjYmY3ODI4NjA3MzNmYjI4NzI0MTk2OTlhNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hs/feL+8w3e0kPfij86l2RGCnA3 SOYbaIwZ18CEmr9niFV34fEYp75M+6xnZq4LsPZyFe2icl4Ig02InDrgDXzDlV1a MUqQaO83CiUM4nfGo5Dzkoe31n29sm0w9oBlWfYLfjzJ0+VysDaPPXYmD4YLY0vq eErIzwrNMa19ASGmpdONaIYwAsXi5/hH+WXRB6ThqeWHRF8zKHz+IX3r7F1GuMWQ 9JgY+JpPsXU0GTWT1apMHQMhXhTg5yTH6oXlBibPDVgpw2j+L/Hfg2LP5yeDVZmZ hbAjCmmEQYxugmsBLR9aQNrndUoPubfEPTqUXBZj9yCGTesVl0mVbbJCVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFJPXNjvP18v3goYHM/sockGWmaa2MB8GA1UdIwQY MBaAFP0q+QYMH0LGKPz7jweB16W8IfwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDct YmZjZjlhOTIyYThiLzEvazljMk84X1h5X2VDaGdjei15aHlRWmFacHJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hOThlNGEtNDVhYS00MDhjLWI4MDctYmZjZjlhOTIyYThi LzEvX1NyNUJnd2ZRc1lvX1B1UEI0SFhwYndoX0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGbeBAMA0E AgACMAcDBQAqAH6AMA0GCSqGSIb3DQEBCwUAA4IBAQBfZvm+etxqQ5MnstHXEFj0 Xar2Y9nv3MZpgNz3HUlnTF3Afr9CIjC0m5/vibnfy84TczBjgm2iMY7TXXvnHj0i tcG9qAWg1m+3qA+299NHnLNlrBm7LtKww5Dtnn/646DiAe5ykWuKHesWUjYsaynt 2VpFj1d0CCoZ88xmURxV9IMRvVMKOB19tmnWr1fJKOPGvVDnbx6829xeOcxijSTI ggcfHwlSrHsuaWq1YsF3z56mmIzHKi7LpkQLwG+W3ymKVAbT28vMFBXr/r2AN1NQ ftXC2/Z1DdPAN6CJjlQe3yzrg92kX2vWcHGjeLPyf+5vGw4/QaPRfuV7yvb4oSW7 -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:04 2026 by rpki-client