This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fZ9gQkItToZ-B0Uah3kgDbVuMPg.roa File: fZ9gQkItToZ-B0Uah3kgDbVuMPg.roa (raw, json) Hash identifier: fLSyNJwtkFMuUD+NwthdflotU0F8LpphaDEBXyD3OSg= Subject key identifier: 7D:9F:60:42:42:2D:4E:86:7E:07:45:1A:87:79:20:0D:B5:6E:30:F8 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14C0DBFE5DED81757CF592CD2161F9 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fZ9gQkItToZ-B0Uah3kgDbVuMPg.roa Signing time: Fri 02 Jan 2026 14:20:25 +0000 ROA not before: Fri 02 Jan 2026 14:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205964 IP address blocks: 135.196.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c0:db:fe:5d:ed:81:75:7c:f5:92:cd:21:61:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d9f6042422d4e867e07451a8779200db56e30f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:b4:8a:cd:75:09:cf:49:fd:09:90:95:ce: 92:0c:fa:85:cf:54:ea:50:33:53:c6:61:93:cc:ce: 0b:81:91:76:95:5b:5a:83:4f:b2:81:cd:8e:d6:da: ea:8b:bb:6c:4a:42:76:08:e1:ae:f4:c1:46:ab:e9: 5b:bb:41:44:ba:92:ca:d5:55:bc:65:21:66:f9:3f: 9c:91:4e:25:df:e9:da:a4:67:b2:70:2e:df:bd:51: 76:ef:73:d8:46:7a:a8:02:67:63:7f:79:7a:00:2f: cd:3e:a6:ca:cc:bc:36:7e:2d:f2:4c:25:ad:0b:f1: 04:ba:6e:e0:29:3e:35:a4:ec:06:be:ef:bd:08:30: 51:af:55:84:ee:e9:01:02:58:aa:84:0a:3c:b7:8c: 38:6b:3b:0d:f9:30:c7:5d:e1:c6:e4:57:3a:0a:f0: d3:e8:03:eb:8f:95:45:8b:3d:54:d9:58:55:10:a8: d3:62:8b:02:74:00:c5:c6:14:9b:bb:3d:6f:8e:47: b4:52:27:fc:60:f7:74:8c:49:b5:58:6f:51:be:fd: c5:9c:a0:5a:45:c7:fa:22:90:e9:6f:ea:b4:f5:47: 4b:0b:5d:11:12:08:7d:a0:b3:29:92:6d:21:aa:6f: 62:e5:fe:83:6f:dd:ea:6a:fc:5c:ce:f3:b5:02:a1: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9F:60:42:42:2D:4E:86:7E:07:45:1A:87:79:20:0D:B5:6E:30:F8 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/fZ9gQkItToZ-B0Uah3kgDbVuMPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 135.196.48.0/20 Signature Algorithm: sha256WithRSAEncryption c1:7c:7e:fb:69:a0:14:54:eb:bd:bb:88:fe:a7:81:07:a5:6c: 99:26:b2:e3:b9:d3:ec:0a:91:6e:b2:f2:1c:44:bb:f1:7b:f9: 73:de:79:6d:9d:ca:ec:c5:ca:b1:02:16:d5:7b:fb:31:76:b6: 2e:3f:10:54:a7:3c:4d:4d:7e:7f:0a:f8:ed:d2:a0:72:77:39: 08:41:57:1c:40:13:93:20:53:1d:82:7c:44:3b:67:38:f3:c6: f6:95:f8:c9:62:5d:c1:d3:bf:fc:b5:1c:05:dd:33:df:01:4b: ea:e9:97:10:96:99:10:8e:fb:66:0c:38:88:9c:20:97:cc:34: 29:83:99:48:e2:1b:2d:5b:c0:fe:4b:22:9f:e0:59:61:05:22: 31:34:f3:97:f6:fc:5c:50:8d:27:38:ab:4c:4e:2d:2c:41:9f: 0a:07:39:cd:5b:f9:9e:96:02:47:f7:33:9c:23:e1:c3:19:a9: 7c:84:0c:14:f2:ad:51:a0:44:3c:30:e0:76:f8:ba:6a:1a:85: ba:5b:fb:3f:64:dd:06:15:76:fd:46:da:fc:60:9a:05:47:21: 3c:10:1f:f7:87:11:d3:63:7e:44:c7:e7:9c:39:7f:1b:46:a6: 95:db:3a:35:7d:e0:da:30:e6:7b:ac:ee:c0:1f:6e:02:ee:b6: fa:1f:2d:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FMDb/l3tgXV89ZLNIWH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDlmNjA0MjQyMmQ0ZTg2N2UwNzQ1MWE4Nzc5MjAwZGI1NmUzMGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvy0is11Cc9J/QmQlc6SDPqFz1Tq UDNTxmGTzM4LgZF2lVtag0+ygc2O1trqi7tsSkJ2COGu9MFGq+lbu0FEupLK1VW8 ZSFm+T+ckU4l3+napGeycC7fvVF273PYRnqoAmdjf3l6AC/NPqbKzLw2fi3yTCWt C/EEum7gKT41pOwGvu+9CDBRr1WE7ukBAliqhAo8t4w4azsN+TDHXeHG5Fc6CvDT 6APrj5VFiz1U2VhVEKjTYosCdADFxhSbuz1vjke0Uif8YPd0jEm1WG9Rvv3FnKBa Rcf6IpDpb+q09UdLC10REgh9oLMpkm0hqm9i5f6Db93qavxczvO1AqEOTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH2fYEJCLU6GfgdFGod5IA21bjD4MB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvZlo5Z1FrSXRUb1otQjBVYWgza2dEYlZ1TVBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEh8QwMA0G CSqGSIb3DQEBCwUAA4IBAQDBfH77aaAUVOu9u4j+p4EHpWyZJrLjudPsCpFusvIc RLvxe/lz3nltncrsxcqxAhbVe/sxdrYuPxBUpzxNTX5/Cvjt0qBydzkIQVccQBOT IFMdgnxEO2c488b2lfjJYl3B07/8tRwF3TPfAUvq6ZcQlpkQjvtmDDiInCCXzDQp g5lI4hstW8D+SyKf4FlhBSIxNPOX9vxcUI0nOKtMTi0sQZ8KBznNW/melgJH9zOc I+HDGal8hAwU8q1RoEQ8MOB2+LpqGoW6W/s/ZN0GFXb9Rtr8YJoFRyE8EB/3hxHT Y35Ex+ecOX8bRqaV2zo1feDaMOZ7rO7AH24C7rb6Hy1L -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:57 2026 by rpki-client