This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9CTRikFmDfftuulzmE7oVg4SrXo.roa File: 9CTRikFmDfftuulzmE7oVg4SrXo.roa (raw, json) Hash identifier: QetHPa6rhiOmzCiHhKi65+JEz8i5R3+PHpMQcXOELTs= Subject key identifier: F4:24:D1:8A:41:66:0D:F7:ED:BA:E9:73:98:4E:E8:56:0E:12:AD:7A Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Certificate serial: 019BC2668C9023835E15567DE699FFE38137 Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9CTRikFmDfftuulzmE7oVg4SrXo.roa Signing time: Thu 15 Jan 2026 16:04:19 +0000 ROA not before: Thu 15 Jan 2026 16:04:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397044 IP address blocks: 94.131.48.0/20 maxlen: 24 94.131.48.0/22 maxlen: 24 94.131.52.0/22 maxlen: 24 94.131.56.0/22 maxlen: 24 94.131.56.0/23 maxlen: 24 94.131.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:66:8c:90:23:83:5e:15:56:7d:e6:99:ff:e3:81:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03 Validity Not Before: Jan 15 16:04:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f424d18a41660df7edbae973984ee8560e12ad7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:69:dc:32:77:17:1e:32:17:70:88:6f:73:99: 43:d1:c2:07:c1:c0:7d:3d:50:92:01:b7:3c:39:64: 07:ab:3a:16:66:4f:4f:45:b3:98:1c:2b:06:22:4d: 3a:b7:13:3c:c6:a9:ae:9b:8e:23:d6:c8:8c:bd:48: 1a:92:83:02:1d:a5:e0:22:e8:4d:b8:0d:26:ef:ea: 18:28:01:04:64:98:fd:b9:64:ab:f0:d4:bc:e1:5b: d0:3e:67:76:7e:41:f4:f2:db:54:d1:3a:df:6d:02: 91:11:a9:5d:cd:76:1e:53:9c:f3:0c:a0:11:83:50: 84:70:0e:5f:98:87:57:0e:c7:68:36:49:59:97:07: e3:e2:61:eb:7b:0c:55:3c:3e:ac:1a:db:2b:4e:47: d2:f2:4a:4d:38:9c:0d:bd:0a:d3:0c:1d:14:58:3d: c2:cc:4e:b5:57:0c:6b:88:15:44:34:41:ca:b1:3d: 31:79:31:77:ee:52:5c:84:ba:a7:3b:7e:f9:ab:69: b0:62:1b:86:c8:27:9c:1a:d2:44:12:4f:a4:1b:fc: ad:b8:61:bf:47:1c:55:60:bf:a8:e3:6e:18:aa:b8: 79:39:b0:1e:63:16:b6:ba:57:2c:6c:60:4c:32:72: 07:52:2d:ed:10:ce:9f:53:c7:5f:2f:fd:d4:ea:52: 34:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:D1:8A:41:66:0D:F7:ED:BA:E9:73:98:4E:E8:56:0E:12:AD:7A X509v3 Authority Key Identifier: keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/9CTRikFmDfftuulzmE7oVg4SrXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.131.48.0/20 Signature Algorithm: sha256WithRSAEncryption 46:6d:af:d3:f0:dd:b4:3b:81:5d:28:9c:dc:e1:f4:c6:55:f7: 32:41:1b:ee:d1:64:3d:9c:36:3d:18:6d:c4:7e:26:e2:83:69: 5f:4c:65:14:30:3f:70:a2:f2:57:8b:e0:f4:7d:2a:3b:62:55: 04:b1:80:48:8e:f0:14:d8:a4:39:1c:07:e9:58:6f:48:2b:59: c3:ee:da:5d:f7:3e:4f:2c:b9:2d:82:a2:87:d6:0f:39:8a:5d: a0:ac:42:a7:90:1c:33:00:ad:f9:2a:9c:46:35:d0:3c:6c:a0: a8:8c:3c:86:48:b3:85:7f:8c:06:0e:04:6a:35:78:48:03:0b: 85:9f:b4:c0:9a:fe:93:74:e0:69:ed:dc:93:f3:17:00:1e:c9: 0b:1b:35:a4:bd:de:dc:82:4e:6b:af:0e:7d:2e:ca:1d:b1:1e: 7f:9c:61:c9:2b:73:57:5b:07:19:ce:e2:61:7d:c2:cb:c4:95: 62:50:a4:50:c7:90:8a:84:0a:99:b1:e6:97:a5:63:58:96:d1: 1f:06:85:35:16:66:46:06:f0:25:c4:56:bb:0e:f9:5f:51:ba: 54:34:92:3c:2e:4a:2d:39:b5:d1:cb:d3:73:d9:12:1a:5f:b7: 4a:6a:26:28:0d:c9:89:30:84:19:81:e2:71:e1:3f:b0:7c:45: 10:db:da:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvCZoyQI4NeFVZ95pn/44E3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj NjJhMDMwHhcNMjYwMTE1MTYwNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDI0ZDE4YTQxNjYwZGY3ZWRiYWU5NzM5ODRlZTg1NjBlMTJhZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WncMncXHjIXcIhvc5lD0cIHwcB9 PVCSAbc8OWQHqzoWZk9PRbOYHCsGIk06txM8xqmum44j1siMvUgakoMCHaXgIuhN uA0m7+oYKAEEZJj9uWSr8NS84VvQPmd2fkH08ttU0TrfbQKREaldzXYeU5zzDKAR g1CEcA5fmIdXDsdoNklZlwfj4mHrewxVPD6sGtsrTkfS8kpNOJwNvQrTDB0UWD3C zE61VwxriBVENEHKsT0xeTF37lJchLqnO375q2mwYhuGyCecGtJEEk+kG/ytuGG/ RxxVYL+o424Yqrh5ObAeYxa2ulcsbGBMMnIHUi3tEM6fU8dfL/3U6lI05wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPQk0YpBZg337brpc5hO6FYOEq16MB8GA1UdIwQY MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt ZTk3MjRhN2E2YmM4LzEvOUNUUmlrRm1EZmZ0dXVsem1FN29WZzRTclhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4 LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXoMwMA0G CSqGSIb3DQEBCwUAA4IBAQBGba/T8N20O4FdKJzc4fTGVfcyQRvu0WQ9nDY9GG3E fibig2lfTGUUMD9wovJXi+D0fSo7YlUEsYBIjvAU2KQ5HAfpWG9IK1nD7tpd9z5P LLktgqKH1g85il2grEKnkBwzAK35KpxGNdA8bKCojDyGSLOFf4wGDgRqNXhIAwuF n7TAmv6TdOBp7dyT8xcAHskLGzWkvd7cgk5rrw59LsodsR5/nGHJK3NXWwcZzuJh fcLLxJViUKRQx5CKhAqZseaXpWNYltEfBoU1FmZGBvAlxFa7DvlfUbpUNJI8Lkot ObXRy9Nz2RIaX7dKaiYoDcmJMIQZgeJx4T+wfEUQ29qf -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:42 2026 by rpki-client