This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/SU9l9n5tTaHoiwwtJtq99KggAas.roa File: SU9l9n5tTaHoiwwtJtq99KggAas.roa (raw, json) Hash identifier: 7Jnaa+yaZEgfZ0pJI5V9JYe56J0Eyz54F3utpVXqqBs= Subject key identifier: 49:4F:65:F6:7E:6D:4D:A1:E8:8B:0C:2D:26:DA:BD:F4:A8:20:01:AB Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10 Certificate serial: 019B7E382C5922DB6FB19DB93A2279129386 Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/SU9l9n5tTaHoiwwtJtq99KggAas.roa Signing time: Fri 02 Jan 2026 10:19:29 +0000 ROA not before: Fri 02 Jan 2026 10:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198380 IP address blocks: 193.24.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.mft rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:2c:59:22:db:6f:b1:9d:b9:3a:22:79:12:93:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10 Validity Not Before: Jan 2 10:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=494f65f67e6d4da1e88b0c2d26dabdf4a82001ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f5:ea:8c:a0:49:e4:ef:55:29:1b:08:22:c2: f6:0f:0b:47:66:67:20:8e:fd:fd:92:46:8e:a9:6c: 99:84:5b:ca:21:11:22:f2:34:e4:bb:50:e3:db:3a: 0d:55:86:ff:62:38:22:98:e0:93:15:0b:8d:a0:9e: 1e:2e:00:cf:9c:ab:33:a8:e7:83:69:dc:82:a5:62: 74:be:ed:22:55:a4:68:aa:62:40:cf:5f:58:85:64: a7:f2:66:04:a7:c8:0f:0e:46:7d:10:fd:f7:6e:17: 69:69:0b:bd:a2:bf:0c:80:06:30:2f:e1:54:55:81: a3:10:ef:3d:09:d5:bf:a2:a6:fe:3f:3d:69:0a:43: e3:f6:60:7f:d8:8e:7c:88:04:a1:2e:f0:2f:bd:66: f0:70:36:97:39:a2:99:8e:b6:52:4e:65:0d:61:81: ee:c3:09:95:7b:45:b9:f0:67:4e:91:fc:4e:74:c5: 15:a6:fd:30:64:13:28:f0:5a:c4:6b:3a:b1:0a:60: d9:e3:68:12:c6:74:2d:bb:4e:cb:0e:dd:32:b5:4c: cd:ac:5c:89:93:13:07:79:26:87:00:d5:bd:97:32: 99:11:b2:4b:bf:e3:d9:ad:87:34:c6:42:a1:d8:29: 77:e1:ba:84:5b:97:f1:c2:fa:f2:f7:65:b7:54:ac: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4F:65:F6:7E:6D:4D:A1:E8:8B:0C:2D:26:DA:BD:F4:A8:20:01:AB X509v3 Authority Key Identifier: keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/SU9l9n5tTaHoiwwtJtq99KggAas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.40.0/23 Signature Algorithm: sha256WithRSAEncryption b4:23:32:c1:0f:14:27:ea:01:be:e7:2c:31:df:e2:91:50:df: 1d:cd:85:a2:eb:4d:5b:53:f3:3b:b4:a4:aa:2a:d4:20:3b:c6: 7c:c8:00:43:60:67:1a:45:06:59:66:83:14:00:f1:c6:4f:0b: 2e:2c:9f:52:70:43:34:4b:98:96:aa:dc:7b:cc:ba:b5:14:65: c6:08:8d:6e:36:52:73:ae:7c:53:fa:e8:b6:78:31:b6:db:af: e9:34:b7:7c:6c:df:a9:f1:c1:e2:c0:f3:b1:f9:c8:d4:8e:12: c0:5a:f1:0a:e1:74:e4:90:93:cc:0c:bf:ca:db:89:98:90:30: 5b:6d:0e:04:1d:8e:31:0f:3e:b7:a4:ab:9e:6c:58:6c:00:8b: b1:0c:7c:b5:5f:11:9a:73:b2:c3:6e:77:df:3a:3b:32:cc:dd: 8a:99:b4:45:c8:56:77:29:55:af:9c:c4:b2:a4:c3:c4:e0:f1: 79:34:95:5d:f0:ff:3a:4b:e6:e8:e5:47:f3:cd:b2:70:7f:7c: de:52:88:80:0a:df:b5:a8:24:82:79:d9:ff:6d:8f:9f:54:42: 25:f0:47:27:eb:d3:38:05:61:5c:f1:cd:40:c9:16:b8:5d:26: 0e:c8:51:d8:a0:82:cb:cf:15:a0:ce:f4:12:5e:6e:7d:f3:31: fe:d8:a7:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCxZIttvsZ25OiJ5EpOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3 YzBlMTAwHhcNMjYwMTAyMTAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTRmNjVmNjdlNmQ0ZGExZTg4YjBjMmQyNmRhYmRmNGE4MjAwMWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/XqjKBJ5O9VKRsIIsL2DwtHZmcg jv39kkaOqWyZhFvKIREi8jTku1Dj2zoNVYb/YjgimOCTFQuNoJ4eLgDPnKszqOeD adyCpWJ0vu0iVaRoqmJAz19YhWSn8mYEp8gPDkZ9EP33bhdpaQu9or8MgAYwL+FU VYGjEO89CdW/oqb+Pz1pCkPj9mB/2I58iAShLvAvvWbwcDaXOaKZjrZSTmUNYYHu wwmVe0W58GdOkfxOdMUVpv0wZBMo8FrEazqxCmDZ42gSxnQtu07LDt0ytUzNrFyJ kxMHeSaHANW9lzKZEbJLv+PZrYc0xkKh2Cl34bqEW5fxwvry92W3VKxarQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFElPZfZ+bU2h6IsMLSbavfSoIAGrMB8GA1UdIwQY MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt MDdlMzZlZmM1ZTQyLzEvU1U5bDluNXRUYUhvaXd3dEp0cTk5S2dnQWFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRgoMA0G CSqGSIb3DQEBCwUAA4IBAQC0IzLBDxQn6gG+5ywx3+KRUN8dzYWi601bU/M7tKSq KtQgO8Z8yABDYGcaRQZZZoMUAPHGTwsuLJ9ScEM0S5iWqtx7zLq1FGXGCI1uNlJz rnxT+ui2eDG226/pNLd8bN+p8cHiwPOx+cjUjhLAWvEK4XTkkJPMDL/K24mYkDBb bQ4EHY4xDz63pKuebFhsAIuxDHy1XxGac7LDbnffOjsyzN2KmbRFyFZ3KVWvnMSy pMPE4PF5NJVd8P86S+bo5UfzzbJwf3zeUoiACt+1qCSCedn/bY+fVEIl8Ecn69M4 BWFc8c1AyRa4XSYOyFHYoILLzxWgzvQSXm598zH+2KdC -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:59 2026 by rpki-client