This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/9GKzto8F8VSvC2cabKjYXdbXzwM.roa File: 9GKzto8F8VSvC2cabKjYXdbXzwM.roa (raw, json) Hash identifier: 3PzwakewoGlY9+PpIdZTrhAHAsAZ3tnyJrCLep3Ietc= Subject key identifier: F4:62:B3:B6:8F:05:F1:54:AF:0B:67:1A:6C:A8:D8:5D:D6:D7:CF:03 Certificate issuer: /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e Certificate serial: 019B77594172E15D1A4A75A0BD25D9BF0B8C Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/9GKzto8F8VSvC2cabKjYXdbXzwM.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 194.50.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:41:72:e1:5d:1a:4a:75:a0:bd:25:d9:bf:0b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f462b3b68f05f154af0b671a6ca8d85dd6d7cf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8e:4a:f5:60:f1:05:f7:79:d2:f8:5e:6d:9c: cf:ac:3d:4c:c7:71:73:1c:8b:96:bd:85:f4:23:8e: d9:e7:94:14:8e:c8:65:70:32:b1:62:0e:1d:2e:38: 66:7a:aa:e3:42:b5:20:4f:a8:be:1c:3e:72:8c:b0: ac:1f:7f:4c:19:b8:14:fa:ce:8b:bd:03:57:be:e3: bc:1d:ab:74:b1:45:51:29:1d:f0:c8:38:48:dd:0d: 7b:9a:d8:3b:89:3d:f4:73:e5:5b:0c:55:1e:9e:93: 45:cb:23:dc:5f:f6:3f:4d:f4:bf:aa:db:01:41:f7: 7d:3d:d5:1b:ee:67:59:29:b8:b5:40:68:cc:6a:74: b7:15:3b:8f:28:78:e6:1f:a7:ca:03:99:e8:de:7a: 8d:78:98:6e:7e:64:58:85:cc:79:13:dd:f9:40:18: cb:9b:23:38:83:f3:52:ef:cf:c7:bf:4e:e8:d1:a3: 3c:f9:3e:57:42:59:1a:bc:de:33:3c:96:db:65:e6: 8a:74:b5:03:c8:fe:f4:ea:e6:b3:9f:80:24:bf:30: 0a:1e:03:11:1c:e4:c6:30:84:94:4b:50:36:51:c5: 1e:73:8f:82:e6:83:f6:37:0e:de:64:6b:bc:e1:a0: 6c:79:c9:50:0c:b0:30:b5:3e:53:d6:6b:c1:3e:1c: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:62:B3:B6:8F:05:F1:54:AF:0B:67:1A:6C:A8:D8:5D:D6:D7:CF:03 X509v3 Authority Key Identifier: keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/9GKzto8F8VSvC2cabKjYXdbXzwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.173.0/24 Signature Algorithm: sha256WithRSAEncryption c7:94:0a:8c:19:93:61:85:b6:72:15:a6:9f:84:f9:0a:ac:aa: 50:9f:ef:0b:2a:12:76:0d:92:73:bd:b8:6b:11:58:e6:08:59: bb:1d:de:ad:d8:31:8a:36:bd:99:66:be:17:2b:c2:7c:77:67: c5:f2:f9:6f:f3:4f:6f:e6:ba:8b:49:a2:03:3b:45:18:66:94: 67:ab:8b:ee:a6:d2:c4:b2:4a:f9:34:58:86:15:c4:f0:79:37: 34:bd:4a:34:47:cd:74:4d:01:61:92:1f:64:d2:54:f0:c2:5b: dc:c8:eb:b0:d6:97:fa:13:f4:c9:61:a4:1e:89:ed:10:00:aa: 9d:f2:bb:80:8c:96:10:22:08:cb:b4:d2:42:02:5b:d8:e3:1e: 2a:1f:92:aa:0c:c3:ec:2a:f3:fc:13:49:22:de:30:ed:8c:e7: 42:c7:ec:9b:86:c1:a1:0e:b2:c6:73:72:67:63:f2:bb:46:3c: 66:c3:04:c1:2d:72:29:09:2c:4c:fa:be:6e:e8:d3:4b:c3:35: 0e:10:0c:43:27:e1:09:8d:88:41:ce:c9:9b:69:23:5a:90:72: 21:86:4e:7a:2e:7d:e8:2c:85:71:26:b6:17:0a:d8:5d:ed:45: 53:ca:03:1d:af:5f:a1:41:11:b3:ef:d0:44:8b:bc:04:df:41: fa:b3:d7:40 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUFy4V0aSnWgvSXZvwuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NDRlMWVhZmFhZDNjYjA5MWYyMGVlNWJmMWMwNDgyNDg3 YzMwNmUwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDYyYjNiNjhmMDVmMTU0YWYwYjY3MWE2Y2E4ZDg1ZGQ2ZDdjZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y5K9WDxBfd50vhebZzPrD1Mx3Fz HIuWvYX0I47Z55QUjshlcDKxYg4dLjhmeqrjQrUgT6i+HD5yjLCsH39MGbgU+s6L vQNXvuO8Hat0sUVRKR3wyDhI3Q17mtg7iT30c+VbDFUenpNFyyPcX/Y/TfS/qtsB Qfd9PdUb7mdZKbi1QGjManS3FTuPKHjmH6fKA5no3nqNeJhufmRYhcx5E935QBjL myM4g/NS78/Hv07o0aM8+T5XQlkavN4zPJbbZeaKdLUDyP706uazn4AkvzAKHgMR HOTGMISUS1A2UcUec4+C5oP2Nw7eZGu84aBseclQDLAwtT5T1mvBPhwj9wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPRis7aPBfFUrwtnGmyo2F3W188DMB8GA1UdIwQY MBaAFPhE4er6rTywkfIO5b8cBIJIfDBuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FVGg2dnF0UExDUjhnN2x2eHdFZ2toOE1HNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUvZjNjYTIzLTg2ZWMtNDBkMC1hNTIw LTY5YTM2NGU1NjI5ZS8xLzlHS3p0bzhGOFZTdkMyY2FiS2pZWGRiWHp3TS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWUvZjNjYTIzLTg2ZWMtNDBkMC1hNTIwLTY5YTM2NGU1NjI5 ZS8xLzEtRVRoNnZxdFBMQ1I4Zzdsdnh3RWdraDhNRzQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCMq0w DQYJKoZIhvcNAQELBQADggEBAMeUCowZk2GFtnIVpp+E+QqsqlCf7wsqEnYNknO9 uGsRWOYIWbsd3q3YMYo2vZlmvhcrwnx3Z8Xy+W/zT2/muotJogM7RRhmlGeri+6m 0sSySvk0WIYVxPB5NzS9SjRHzXRNAWGSH2TSVPDCW9zI67DWl/oT9MlhpB6J7RAA qp3yu4CMlhAiCMu00kICW9jjHiofkqoMw+wq8/wTSSLeMO2M50LH7JuGwaEOssZz cmdj8rtGPGbDBMEtcikJLEz6vm7o00vDNQ4QDEMn4QmNiEHOyZtpI1qQciGGTnou fegshXEmthcK2F3tRVPKAx2vX6FBEbPv0ESLvATfQfqz10A= -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:57 2026 by rpki-client