This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa File: 9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa (raw, json) Hash identifier: 0BBbEj9KrnkzQ7LI3Ja4k/fn10TEbD/JLEqh/Y7YN5Q= Subject key identifier: F4:B1:CA:F2:FF:3E:F4:29:1F:D8:A2:E7:9C:C9:59:12:2A:94:30:13 Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Certificate serial: 019B7C129C85B1726B13AA40DF20FBD441B8 Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48920 IP address blocks: 193.23.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9c:85:b1:72:6b:13:aa:40:df:20:fb:d4:41:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4b1caf2ff3ef4291fd8a2e79cc959122a943013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:8c:47:65:a8:15:11:38:d7:78:eb:a8:09: be:af:c3:2b:34:c9:76:0a:ca:e8:02:53:55:0d:12: 4a:27:c9:62:5c:09:e5:71:ca:68:41:67:f9:87:e2: 8b:ef:35:a2:44:f1:a3:bc:32:ff:5f:bf:20:2d:9c: ed:5f:a7:da:70:b4:99:bd:e6:b0:81:9f:4c:06:e6: 49:12:84:eb:ec:74:b4:d4:c1:b0:92:42:3c:28:33: dd:be:8c:96:0c:f6:25:ec:63:1e:1f:64:9a:77:53: bb:4a:da:92:72:41:98:2d:8c:fb:4d:22:2b:10:58: e8:52:30:5d:1d:30:83:49:07:3a:6c:9a:ca:28:20: 37:e1:ed:fd:eb:9b:6c:e0:26:bb:f9:7e:21:a6:83: 1e:b1:93:e0:83:95:f4:d5:c4:4f:f4:a7:af:8e:a5: 43:e0:b9:d5:29:2d:a7:4a:b4:12:1a:7e:7c:24:9a: 93:d6:27:ff:bc:19:e4:2b:0e:ae:16:ac:86:bc:75: 1c:df:37:df:eb:c1:fb:54:e9:4e:88:f7:5c:89:3d: 13:42:3f:ea:f6:2b:90:fb:c7:60:cc:8a:b5:3d:57: dd:60:cc:db:6e:d9:c4:55:eb:ed:50:43:23:9b:c5: 05:96:9b:01:4a:00:01:c6:0d:8f:14:0d:82:77:43: f1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B1:CA:F2:FF:3E:F4:29:1F:D8:A2:E7:9C:C9:59:12:2A:94:30:13 X509v3 Authority Key Identifier: keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/9LHK8v8-9Ckf2KLnnMlZEiqUMBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.31.0/24 Signature Algorithm: sha256WithRSAEncryption 96:02:fa:41:db:2f:88:78:62:4d:f2:b7:86:25:d1:0e:f4:c8: 28:17:7e:ea:1a:5f:b5:82:b7:7f:86:4d:8c:bc:76:ad:be:af: 55:ff:8e:77:66:53:71:93:32:02:92:35:22:75:f9:00:ef:fc: 6e:75:73:82:51:5c:6f:1c:a4:94:2e:ea:1b:4a:51:21:b3:b1: c1:32:7b:f9:51:48:f0:ef:89:a8:67:77:87:14:78:bf:0d:24: 13:b5:9e:c3:eb:72:64:5e:e9:48:6d:d7:ea:95:ab:eb:05:e9: b9:f1:24:1e:2b:6d:f6:4c:5f:52:a1:ea:2a:74:56:e4:c2:59: 2c:e2:2b:25:61:8d:ce:60:ef:e3:94:62:50:19:1e:90:a5:20: 2f:61:0c:96:00:58:74:b5:33:76:37:5d:90:16:65:ca:5c:47: a2:a5:3e:12:6c:bd:fc:d7:65:fd:bb:45:bb:cc:f1:a2:eb:18: f7:c0:50:0d:8e:96:79:a2:0d:8f:65:ae:31:54:e0:3f:7f:0e: c1:63:31:06:aa:72:2a:ed:ba:3d:2d:29:e6:d6:0f:40:3b:d3: c1:cd:12:44:cf:48:2c:55:d9:f5:7c:25:f3:27:22:d8:79:44: 35:ae:56:68:92:0f:92:71:7a:59:3d:0a:9a:f3:62:5a:93:23: 39:fd:53:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EpyFsXJrE6pA3yD71EG4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZWQyZmJiNzIxM2ZiZjMyYWQ0YzA4N2Y4YjBiMjJjZWNl ZjRmZWEwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGIxY2FmMmZmM2VmNDI5MWZkOGEyZTc5Y2M5NTkxMjJhOTQzMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoyMR2WoFRE413jrqAm+r8MrNMl2 CsroAlNVDRJKJ8liXAnlccpoQWf5h+KL7zWiRPGjvDL/X78gLZztX6facLSZveaw gZ9MBuZJEoTr7HS01MGwkkI8KDPdvoyWDPYl7GMeH2Sad1O7StqSckGYLYz7TSIr EFjoUjBdHTCDSQc6bJrKKCA34e3965ts4Ca7+X4hpoMesZPgg5X01cRP9KevjqVD 4LnVKS2nSrQSGn58JJqT1if/vBnkKw6uFqyGvHUc3zff68H7VOlOiPdciT0TQj/q 9iuQ+8dgzIq1PVfdYMzbbtnEVevtUEMjm8UFlpsBSgABxg2PFA2Cd0PxYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPSxyvL/PvQpH9ii55zJWRIqlDATMB8GA1UdIwQY MBaAFHLtL7tyE/vzKtTAh/iwsizs70/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTkt YTY1MjMzYjNlOTc1LzEvOUxISzh2OC05Q2tmMktMbm5NbFpFaXFVTUJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lNWE4OTItMjNmNS00OWZhLWI2YTktYTY1MjMzYjNlOTc1 LzEvY3UwdnUzSVQtX01xMU1DSC1MQ3lMT3p2VC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRcfMA0G CSqGSIb3DQEBCwUAA4IBAQCWAvpB2y+IeGJN8reGJdEO9MgoF37qGl+1grd/hk2M vHatvq9V/453ZlNxkzICkjUidfkA7/xudXOCUVxvHKSULuobSlEhs7HBMnv5UUjw 74moZ3eHFHi/DSQTtZ7D63JkXulIbdfqlavrBem58SQeK232TF9SoeoqdFbkwlks 4islYY3OYO/jlGJQGR6QpSAvYQyWAFh0tTN2N12QFmXKXEeipT4SbL3812X9u0W7 zPGi6xj3wFANjpZ5og2PZa4xVOA/fw7BYzEGqnIq7bo9LSnm1g9AO9PBzRJEz0gs Vdn1fCXzJyLYeUQ1rlZokg+ScXpZPQqa82JakyM5/VM5 -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:37 2026 by rpki-client