This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa File: 1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa (raw, json) Hash identifier: GVSG8HQq960x0d4CpK5jN+FSCHq1SzLhEkFhDXdwhwI= Subject key identifier: FA:BF:6A:60:50:A5:B8:A1:FB:31:AF:13:43:F0:24:CA:5B:5F:D4:B7 Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e Certificate serial: 019BB30B827444B7F8BEF6AA8E050950FEA0 Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa Signing time: Mon 12 Jan 2026 16:30:34 +0000 ROA not before: Mon 12 Jan 2026 16:30:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31034 IP address blocks: 147.189.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:0b:82:74:44:b7:f8:be:f6:aa:8e:05:09:50:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e Validity Not Before: Jan 12 16:30:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fabf6a6050a5b8a1fb31af1343f024ca5b5fd4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:97:91:bc:7d:2d:46:33:ac:49:c5:c0:6b:35: 07:bd:5b:ba:6d:d0:8b:3b:87:36:44:67:8b:63:cf: ba:49:1d:09:35:a2:35:06:61:11:82:7d:b8:f2:a2: dc:93:4f:0d:34:7f:3e:67:86:60:f2:64:03:2f:78: da:c8:c9:4b:4f:c0:8a:15:83:b9:b1:5c:0e:e4:bb: fe:06:95:21:99:0d:e4:f7:bc:13:27:e0:e6:a4:23: 26:f9:64:83:a8:3d:b8:62:2b:15:70:38:34:a7:4d: 87:1f:55:1b:52:05:54:62:9d:b9:96:68:48:03:81: 66:b4:74:1b:e3:63:c6:42:95:a8:10:b3:a2:37:94: 69:78:30:74:93:10:53:c5:58:d0:d6:bc:c9:15:33: 72:e5:3c:9e:e1:1a:5f:10:f4:d2:9b:69:37:c4:af: 1f:da:17:be:e6:b6:54:37:36:60:6e:51:41:f1:56: 0d:f5:6b:37:ea:4e:5d:28:bf:85:8d:f3:2e:79:22: 72:b3:84:27:6f:a8:a9:92:0e:36:7d:f4:9b:31:59: 6d:b7:a5:8a:fe:78:69:95:71:4c:21:4a:0f:76:70: 34:ae:74:06:3a:43:c4:31:49:57:9a:1c:73:65:31: 9f:f4:0c:69:57:45:21:aa:cb:21:7a:2a:ed:c8:70: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BF:6A:60:50:A5:B8:A1:FB:31:AF:13:43:F0:24:CA:5B:5F:D4:B7 X509v3 Authority Key Identifier: keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.210.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:d3:b2:ef:fd:17:7a:96:e4:4e:f1:bb:a7:04:1b:1f:00:22: a5:82:d4:46:66:e6:00:0c:41:2c:9f:5e:cd:f1:c8:92:83:c0: 2b:cb:85:24:6d:8e:b9:bf:1b:3f:97:6c:02:1f:dd:37:d5:9b: a4:97:4b:d1:b1:ef:6c:fb:5f:ac:50:d2:71:c2:b6:3e:52:4a: 01:8c:67:68:82:87:8a:69:42:05:3a:b5:d2:4f:46:c6:ab:a3: 6e:ca:22:8a:62:5b:20:fd:d2:ce:0f:e8:57:b7:ba:f1:8e:c2: 15:d7:22:22:ab:c3:b0:d7:28:f4:17:bd:91:55:80:57:7d:d7: 68:5f:4e:f4:4e:38:bc:60:09:87:e5:9d:3d:50:79:77:83:4d: 46:b7:90:84:ce:c0:64:0b:21:b3:57:5d:4b:ac:7f:40:bd:29: d8:1c:d1:65:8b:5e:a4:01:21:d4:6a:6e:89:5e:f7:6b:9f:36: 76:9a:4e:aa:3b:40:30:d1:7e:ee:95:49:bb:15:bb:8c:1b:17: e8:28:2d:3b:bd:61:19:96:e3:16:be:44:0e:0f:11:4e:76:77: 5b:1a:ab:05:78:59:19:cd:da:fd:87:cc:9a:85:86:17:be:94: ac:0d:62:43:25:3e:f9:c4:9a:e5:ba:86:9b:86:9e:b2:a2:79: 1b:a6:bc:bb -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZuzC4J0RLf4vvaqjgUJUP6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3 MzgzOGUwHhcNMjYwMTEyMTYzMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWJmNmE2MDUwYTViOGExZmIzMWFmMTM0M2YwMjRjYTViNWZkNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJeRvH0tRjOsScXAazUHvVu6bdCL O4c2RGeLY8+6SR0JNaI1BmERgn248qLck08NNH8+Z4Zg8mQDL3jayMlLT8CKFYO5 sVwO5Lv+BpUhmQ3k97wTJ+DmpCMm+WSDqD24YisVcDg0p02HH1UbUgVUYp25lmhI A4FmtHQb42PGQpWoELOiN5RpeDB0kxBTxVjQ1rzJFTNy5Tye4RpfEPTSm2k3xK8f 2he+5rZUNzZgblFB8VYN9Ws36k5dKL+FjfMueSJys4Qnb6ipkg42ffSbMVltt6WK /nhplXFMIUoPdnA0rnQGOkPEMUlXmhxzZTGf9AxpV0UhqssheirtyHC8EQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPq/amBQpbih+zGvE0PwJMpbX9S3MB8GA1UdIwQY MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt NWNlZjA0Yjc5NzM3LzEvMS1yOXFZRkNsdUtIN01hOFRRX0FreWx0ZjFMYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjEvNzJmYWVkLWE4ZjgtNGEzMy04ZGRjLTVjZWYwNGI3OTcz Ny8xL0RTTUdUanduN0pLMzZyWm5aSjBnVGxaemc0NC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJO90jAN BgkqhkiG9w0BAQsFAAOCAQEAD9Oy7/0XepbkTvG7pwQbHwAipYLURmbmAAxBLJ9e zfHIkoPAK8uFJG2Oub8bP5dsAh/dN9WbpJdL0bHvbPtfrFDSccK2PlJKAYxnaIKH imlCBTq10k9GxqujbsoiimJbIP3Szg/oV7e68Y7CFdciIqvDsNco9Be9kVWAV33X aF9O9E44vGAJh+WdPVB5d4NNRreQhM7AZAshs1ddS6x/QL0p2BzRZYtepAEh1Gpu iV73a582dppOqjtAMNF+7pVJuxW7jBsX6CgtO71hGZbjFr5EDg8RTnZ3WxqrBXhZ Gc3a/YfMmoWGF76UrA1iQyU++cSa5bqGm4aesqJ5G6a8uw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:38 2026 by rpki-client