This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/9JzB_fLsIZkzxzin2R8Wl5zsThg.roa File: 9JzB_fLsIZkzxzin2R8Wl5zsThg.roa (raw, json) Hash identifier: zo4ZNsXVTAK6EOsgV3BJxS3TB/kgAKw2MtLEp37xiy8= Subject key identifier: F4:9C:C1:FD:F2:EC:21:99:33:C7:38:A7:D9:1F:16:97:9C:EC:4E:18 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019BE96B2083407EF063C2BB9F9A761717A6 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/9JzB_fLsIZkzxzin2R8Wl5zsThg.roa Signing time: Fri 23 Jan 2026 05:54:30 +0000 ROA not before: Fri 23 Jan 2026 05:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208450 IP address blocks: 212.116.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:6b:20:83:40:7e:f0:63:c2:bb:9f:9a:76:17:17:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 23 05:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f49cc1fdf2ec219933c738a7d91f16979cec4e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:b8:4f:98:5e:39:89:02:64:c0:2a:c3:38: 9f:3e:05:38:38:de:33:5d:2a:9c:f2:d8:ac:29:21: 04:67:20:9f:70:32:c0:b4:74:8d:70:61:fd:b9:eb: 37:59:32:47:5e:73:f6:8d:27:5a:27:83:d5:8e:37: 51:06:97:c7:df:92:fc:73:ac:12:1c:32:5d:de:90: e0:92:7c:ce:a0:15:4a:a9:06:af:7e:c9:23:20:08: 0a:bc:21:43:d7:ee:75:1e:d9:92:6d:82:a8:5a:fe: 83:9f:72:e2:96:c8:7c:77:e9:90:f5:61:e9:cf:5a: 8a:71:fa:cd:d2:2f:4d:b3:6e:99:f4:d6:4b:7f:ee: 28:9c:a2:c3:59:a8:77:99:82:f8:3d:ff:04:39:a2: 52:d3:8b:87:7f:71:1b:88:6d:e6:8b:c0:6f:ec:5e: 92:b0:81:fb:27:26:ed:8a:4d:d4:9f:4d:d5:ae:76: fa:63:c1:61:0c:90:86:9b:a0:d3:24:b9:f8:d4:68: 2d:24:a5:05:b6:7e:da:1e:09:dc:2f:22:7f:8e:39: 3a:4b:8c:92:f7:7c:51:f4:90:47:ef:a5:24:8b:bb: f1:e9:cb:c9:f5:14:27:c2:c8:8b:da:29:99:d5:18: 4e:ac:4a:ce:fa:b2:1e:b9:cf:04:d1:19:b8:3d:77: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9C:C1:FD:F2:EC:21:99:33:C7:38:A7:D9:1F:16:97:9C:EC:4E:18 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/9JzB_fLsIZkzxzin2R8Wl5zsThg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.240.0/24 Signature Algorithm: sha256WithRSAEncryption 22:42:e8:0d:b0:72:48:18:ca:36:07:bd:5a:d8:b6:d5:92:5c: 75:4c:7a:81:7e:43:40:ed:85:61:a5:7a:0b:e0:a3:23:14:f6: 93:c1:32:f0:d9:1e:22:3c:57:f3:7b:df:c4:37:b8:49:65:7b: e2:62:9a:2a:53:3a:50:33:c2:47:10:e0:fc:0b:26:a1:78:8a: 28:cf:ef:80:31:5b:37:3b:e0:9c:c2:a3:3f:97:bf:6d:bf:c2: af:2e:28:e7:5c:a3:b4:49:c4:1c:c8:b2:f1:e7:a2:2c:49:20: 59:97:af:b7:0d:b0:30:d7:06:62:a3:4d:6f:d1:50:2a:2c:bf: 39:4e:88:fb:77:77:eb:6f:44:fc:f9:85:fe:25:1c:05:e3:75: 75:8a:6c:a8:b2:18:6c:a9:c1:fd:74:e5:2f:d0:4c:17:f5:7d: 20:70:bc:dc:37:db:9f:fa:5c:07:68:f0:3f:a3:33:1c:19:de: db:8c:3b:ff:53:37:f4:51:97:14:01:8d:60:ee:6b:1b:f7:51: 21:36:46:98:66:86:2a:50:4f:da:9c:b1:16:7b:65:13:ef:5f: 3e:fe:15:45:df:e7:b5:f5:42:3b:9d:4b:b2:37:4e:1a:07:18: 91:b4:85:1a:17:80:33:c7:c4:f3:74:73:fa:7e:f0:57:cc:4b: 71:d4:27:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvpayCDQH7wY8K7n5p2FxemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTIzMDU1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDljYzFmZGYyZWMyMTk5MzNjNzM4YTdkOTFmMTY5NzljZWM0ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3O4T5heOYkCZMAqwzifPgU4ON4z XSqc8tisKSEEZyCfcDLAtHSNcGH9ues3WTJHXnP2jSdaJ4PVjjdRBpfH35L8c6wS HDJd3pDgknzOoBVKqQavfskjIAgKvCFD1+51HtmSbYKoWv6Dn3Lilsh8d+mQ9WHp z1qKcfrN0i9Ns26Z9NZLf+4onKLDWah3mYL4Pf8EOaJS04uHf3EbiG3mi8Bv7F6S sIH7Jybtik3Un03Vrnb6Y8FhDJCGm6DTJLn41GgtJKUFtn7aHgncLyJ/jjk6S4yS 93xR9JBH76Uki7vx6cvJ9RQnwsiL2imZ1RhOrErO+rIeuc8E0Rm4PXd/BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPScwf3y7CGZM8c4p9kfFpec7E4YMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvOUp6Ql9mTHNJWmt6eHppbjJSOFdsNXpzVGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HTwMA0G CSqGSIb3DQEBCwUAA4IBAQAiQugNsHJIGMo2B71a2LbVklx1THqBfkNA7YVhpXoL 4KMjFPaTwTLw2R4iPFfze9/EN7hJZXviYpoqUzpQM8JHEOD8CyaheIooz++AMVs3 O+CcwqM/l79tv8KvLijnXKO0ScQcyLLx56IsSSBZl6+3DbAw1wZio01v0VAqLL85 Toj7d3frb0T8+YX+JRwF43V1imyoshhsqcH9dOUv0EwX9X0gcLzcN9uf+lwHaPA/ ozMcGd7bjDv/Uzf0UZcUAY1g7msb91EhNkaYZoYqUE/anLEWe2UT718+/hVF3+e1 9UI7nUuyN04aBxiRtIUaF4Azx8TzdHP6fvBXzEtx1Ce2 -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:50 2026 by rpki-client