This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9ToN4TSDwehpRIDLoLnsKDu2_Cc.roa File: 9ToN4TSDwehpRIDLoLnsKDu2_Cc.roa (raw, json) Hash identifier: g1YoabNIfNNl6rOt8KrFu7RkfmymZmhNC05ulJ4h44E= Subject key identifier: F5:3A:0D:E1:34:83:C1:E8:69:44:80:CB:A0:B9:EC:28:3B:B6:FC:27 Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B79100168762D24D99C075E1DC0BD08B4 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9ToN4TSDwehpRIDLoLnsKDu2_Cc.roa Signing time: Thu 01 Jan 2026 10:17:30 +0000 ROA not before: Thu 01 Jan 2026 10:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202654 IP address blocks: 185.30.162.0/23 maxlen: 23 185.30.162.0/24 maxlen: 24 185.30.163.0/24 maxlen: 24 194.8.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:01:68:76:2d:24:d9:9c:07:5e:1d:c0:bd:08:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f53a0de13483c1e8694480cba0b9ec283bb6fc27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3b:d4:a2:9a:4e:fe:63:ea:97:28:b0:44:89: e2:84:0c:31:fa:f6:23:96:bf:50:38:f6:39:d8:ef: 62:da:d3:99:b4:8e:98:55:e4:15:23:ac:c6:ea:38: f2:f7:71:bd:0d:48:13:6f:dd:98:4e:31:58:08:f2: 2e:a8:df:e5:d2:19:68:62:29:db:6f:1c:9b:bb:9a: a2:91:3a:15:3a:f9:82:3f:82:fa:d2:e0:15:77:6a: 68:f7:ef:f3:c9:a7:a9:7e:42:42:e0:c7:57:da:ec: 86:24:b0:13:07:eb:e6:45:85:1f:3c:a8:d1:b6:49: 80:ac:5c:ed:bf:c3:3c:90:25:28:be:01:5b:b8:ee: c3:6a:13:26:2e:96:a3:8e:96:e9:8f:5d:ca:c0:13: f8:b5:bd:4f:cd:d8:c8:37:15:61:40:5d:68:6a:f4: ef:c0:9b:91:c6:e6:60:c8:94:8e:85:95:45:35:b7: d4:28:cf:1a:d6:26:95:b4:f8:cb:7b:e7:db:1b:a8: df:27:ed:8f:14:fe:f9:f0:55:47:9b:c1:53:50:a5: 21:7d:a0:05:0a:7c:4f:1e:01:3e:2a:14:32:81:3e: b9:7e:e9:4c:39:37:fc:91:14:b1:03:e4:cb:3f:b9: 2d:f9:2e:fb:cd:3c:f0:7d:f0:d1:22:ec:76:4b:e3: da:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3A:0D:E1:34:83:C1:E8:69:44:80:CB:A0:B9:EC:28:3B:B6:FC:27 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9ToN4TSDwehpRIDLoLnsKDu2_Cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.162.0/23 194.8.239.0/24 Signature Algorithm: sha256WithRSAEncryption 65:8f:15:92:38:24:47:8f:2e:13:31:09:db:c3:a8:ed:70:fa: 87:16:1a:3b:ec:48:fa:fc:10:5c:a5:63:51:96:85:c6:9d:4f: 7b:40:8d:df:b8:7a:db:f9:ff:a4:9f:8f:10:50:d6:65:68:2b: c1:43:81:06:51:ee:52:c1:10:84:b8:65:33:0d:3c:a6:d9:f8: e8:ae:a5:5c:24:80:38:11:c0:2f:03:3a:be:7a:52:ef:73:3a: 26:a1:a1:a1:41:e5:a2:9d:ab:65:50:4a:a3:e7:0f:83:c6:b6: 91:3b:24:fd:3c:c2:5d:ec:97:ea:73:87:8e:e5:a2:42:09:0d: 11:cf:39:c2:04:8a:ca:a5:a2:da:2c:84:7e:be:52:f4:72:e2: 0d:87:74:31:78:0b:97:da:ff:5b:c8:d6:3f:31:52:91:5b:b0: 92:36:57:29:c3:b1:be:05:d3:ee:01:a5:c4:70:97:a9:f1:6b: 0d:0e:1a:37:6d:5f:df:64:28:02:66:56:55:8b:b7:6f:f2:dc: 76:22:82:82:1c:b9:41:5e:55:af:05:c1:69:5e:d3:58:f4:64: 1b:71:6e:73:2d:56:70:1c:09:1b:e7:39:5b:d3:2d:88:6c:ee: 34:ea:ef:31:0a:20:72:23:ba:32:e7:da:ac:58:da:b2:88:48: 22:5a:65:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EAFodi0k2ZwHXh3AvQi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTNhMGRlMTM0ODNjMWU4Njk0NDgwY2JhMGI5ZWMyODNiYjZmYzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDvUoppO/mPqlyiwRInihAwx+vYj lr9QOPY52O9i2tOZtI6YVeQVI6zG6jjy93G9DUgTb92YTjFYCPIuqN/l0hloYinb bxybu5qikToVOvmCP4L60uAVd2po9+/zyaepfkJC4MdX2uyGJLATB+vmRYUfPKjR tkmArFztv8M8kCUovgFbuO7DahMmLpajjpbpj13KwBP4tb1PzdjINxVhQF1oavTv wJuRxuZgyJSOhZVFNbfUKM8a1iaVtPjLe+fbG6jfJ+2PFP758FVHm8FTUKUhfaAF CnxPHgE+KhQygT65fulMOTf8kRSxA+TLP7kt+S77zTzwffDRIux2S+PajQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPU6DeE0g8HoaUSAy6C57Cg7tvwnMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvOVRvTjRUU0R3ZWhwUklETG9MbnNLRHUyX0NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuR6iAwQA wgjvMA0GCSqGSIb3DQEBCwUAA4IBAQBljxWSOCRHjy4TMQnbw6jtcPqHFho77Ej6 /BBcpWNRloXGnU97QI3fuHrb+f+kn48QUNZlaCvBQ4EGUe5SwRCEuGUzDTym2fjo rqVcJIA4EcAvAzq+elLvczomoaGhQeWinatlUEqj5w+DxraROyT9PMJd7Jfqc4eO 5aJCCQ0RzznCBIrKpaLaLIR+vlL0cuINh3QxeAuX2v9byNY/MVKRW7CSNlcpw7G+ BdPuAaXEcJep8WsNDho3bV/fZCgCZlZVi7dv8tx2IoKCHLlBXlWvBcFpXtNY9GQb cW5zLVZwHAkb5zlb0y2IbO406u8xCiByI7oy59qsWNqyiEgiWmUs -----END CERTIFICATE-----Generated at Sun Jan 25 13:31:18 2026 by rpki-client