This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/9tWF1GqvjRro3KCeTjhlXGOeJnk.roa File: 9tWF1GqvjRro3KCeTjhlXGOeJnk.roa (raw, json) Hash identifier: teh4jlkHAaykmKjheyxnAjMWR2tE22/CA39+lQwLfBY= Subject key identifier: F6:D5:85:D4:6A:AF:8D:1A:E8:DC:A0:9E:4E:38:65:5C:63:9E:26:79 Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E389091CCF11D84589EB1F6A1B69D26 Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/9tWF1GqvjRro3KCeTjhlXGOeJnk.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52017 IP address blocks: 194.44.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:90:91:cc:f1:1d:84:58:9e:b1:f6:a1:b6:9d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6d585d46aaf8d1ae8dca09e4e38655c639e2679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:17:dd:85:5f:57:66:26:d8:1e:c0:31:8e:c0: bb:a9:83:37:61:e9:9f:d3:1f:e9:9d:16:6c:58:c3: 92:69:6b:89:57:7f:dc:85:f1:55:fd:72:21:ba:6d: ad:c5:6f:6d:4b:21:8a:89:78:64:d5:ae:00:51:d2: 3a:50:2f:e3:3c:99:71:fb:b8:f5:ae:69:97:96:fc: ab:bf:64:ce:d6:75:44:c1:76:a7:9f:5c:d2:00:1a: c3:bd:ab:03:8c:33:ab:bc:1c:b3:ce:52:d4:d4:b8: c6:9e:0f:e5:7b:89:26:21:e1:e6:63:2f:86:74:db: 6b:25:ae:22:c5:0d:a0:cd:26:b1:ef:a2:b0:6b:c8: 2e:5a:a0:62:d6:1e:bb:24:cb:b2:d8:3d:6d:9b:7d: 88:a0:7e:aa:4c:ec:cf:a8:37:43:d9:2c:05:cf:ad: 9a:95:f3:25:df:5e:56:7d:ed:f9:45:fb:bc:2e:eb: a1:73:49:62:64:36:53:96:ff:a7:ac:97:40:a7:cb: c6:d8:0b:6d:a7:00:c2:0b:f2:b7:e0:9b:0d:ed:ad: f7:44:ff:f4:14:47:68:8e:c3:06:18:59:5d:bc:cc: 45:4b:eb:9e:68:3c:98:26:4e:39:9b:84:85:e4:9f: 04:64:f1:0b:cd:c3:1e:b7:23:1d:9c:5b:98:70:6b: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D5:85:D4:6A:AF:8D:1A:E8:DC:A0:9E:4E:38:65:5C:63:9E:26:79 X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/9tWF1GqvjRro3KCeTjhlXGOeJnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.44.203.0/24 Signature Algorithm: sha256WithRSAEncryption 82:bd:69:b9:7b:cf:20:31:71:e6:ca:d0:ea:9f:de:26:27:e7: ec:ab:28:4f:c6:00:7f:59:34:e5:aa:33:ed:24:04:9b:a0:e1: 23:b9:06:35:9e:57:e3:d5:47:eb:01:3c:60:bb:86:aa:82:66: 31:ad:cd:1d:8e:5a:76:72:ac:dd:4a:14:6b:fb:bf:7c:2a:b1: f4:6f:21:0b:06:e5:ae:45:29:0e:dc:4a:4d:f3:21:08:7c:0d: d2:7c:f0:e1:51:21:db:6a:80:3d:c4:80:62:6b:e0:3e:26:8e: c1:2c:44:01:5d:67:3b:6c:9a:72:1f:11:de:7f:25:00:b7:0c: bf:6b:1b:53:59:0c:0e:d4:39:10:fc:95:d1:8e:3c:c9:cc:71: 53:a7:e1:cc:96:03:c1:29:ce:82:3a:25:ae:4b:ec:11:b3:a5: cd:3d:06:12:23:f5:bf:0a:12:07:75:d6:b7:1d:63:58:e5:d5: 2d:b9:c7:23:58:4c:3a:f7:c3:f0:40:1d:4d:5e:38:5b:fd:bc: 79:7a:a6:21:dd:22:e8:68:15:05:b3:bc:4c:6e:1b:c7:67:c5: b3:13:0c:5d:99:2d:02:b2:fd:d5:19:9e:57:79:14:ed:7d:e4: 8f:d0:85:78:ae:06:39:e6:23:d3:1d:27:cf:97:89:ac:55:fd: 1b:2b:6c:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJCRzPEdhFiesfahtp0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmQ1ODVkNDZhYWY4ZDFhZThkY2EwOWU0ZTM4NjU1YzYzOWUyNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRfdhV9XZibYHsAxjsC7qYM3Yemf 0x/pnRZsWMOSaWuJV3/chfFV/XIhum2txW9tSyGKiXhk1a4AUdI6UC/jPJlx+7j1 rmmXlvyrv2TO1nVEwXann1zSABrDvasDjDOrvByzzlLU1LjGng/le4kmIeHmYy+G dNtrJa4ixQ2gzSax76Kwa8guWqBi1h67JMuy2D1tm32IoH6qTOzPqDdD2SwFz62a lfMl315Wfe35Rfu8Luuhc0liZDZTlv+nrJdAp8vG2AttpwDCC/K34JsN7a33RP/0 FEdojsMGGFldvMxFS+ueaDyYJk45m4SF5J8EZPELzcMetyMdnFuYcGsTrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPbVhdRqr40a6Nygnk44ZVxjniZ5MB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvOXRXRjFHcXZqUnJvM0tDZVRqaGxYR09lSm5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwizLMA0G CSqGSIb3DQEBCwUAA4IBAQCCvWm5e88gMXHmytDqn94mJ+fsqyhPxgB/WTTlqjPt JASboOEjuQY1nlfj1UfrATxgu4aqgmYxrc0djlp2cqzdShRr+798KrH0byELBuWu RSkO3EpN8yEIfA3SfPDhUSHbaoA9xIBia+A+Jo7BLEQBXWc7bJpyHxHefyUAtwy/ axtTWQwO1DkQ/JXRjjzJzHFTp+HMlgPBKc6COiWuS+wRs6XNPQYSI/W/ChIHdda3 HWNY5dUtuccjWEw698PwQB1NXjhb/bx5eqYh3SLoaBUFs7xMbhvHZ8WzEwxdmS0C sv3VGZ5XeRTtfeSP0IV4rgY55iPTHSfPl4msVf0bK2wW -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:13 2026 by rpki-client