This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/9OSGu-CL3eoRiBIUAPN11BJFt2o.roa File: 9OSGu-CL3eoRiBIUAPN11BJFt2o.roa (raw, json) Hash identifier: jKTEcw4I25lyqC0/LKz20znUmkmfgUVEV6D5UsdJUAo= Subject key identifier: F4:E4:86:BB:E0:8B:DD:EA:11:88:12:14:00:F3:75:D4:12:45:B7:6A Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965 Certificate serial: 019B76EBA122296354C4BE26DF35AA8322C1 Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/9OSGu-CL3eoRiBIUAPN11BJFt2o.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202987 IP address blocks: 194.246.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a1:22:29:63:54:c4:be:26:df:35:aa:83:22:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e486bbe08bddea1188121400f375d41245b76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:d0:44:ee:fb:bf:85:f7:ea:fe:c6:78:88: 7b:e1:3a:63:ff:3c:6f:51:35:1c:09:93:25:99:91: 32:bd:6a:64:cf:ce:64:58:47:90:3f:4d:90:18:bd: d2:3e:25:f3:00:bf:91:08:7d:13:76:80:4b:f8:32: 0e:b2:b9:f0:5f:72:11:9a:d7:13:d3:27:0b:1f:c6: 19:6b:e3:f9:37:7c:e5:2d:2f:26:91:63:1d:f6:26: 22:ff:36:34:98:28:33:f4:0d:b6:ce:ad:da:84:ee: f0:c3:e8:ab:53:c7:d3:66:f1:f5:94:60:24:33:21: 83:6b:87:d2:31:db:fe:99:22:72:74:0b:df:c6:05: 18:e7:a3:52:06:cc:ed:05:c0:ce:d3:78:d5:f1:bd: 70:f9:17:57:f6:e2:b1:36:d8:86:ba:6d:57:a5:63: 05:8d:21:87:99:9a:a7:e4:5b:a3:7c:dc:52:3e:bc: fa:d0:5d:16:2e:34:7b:1b:25:c0:66:01:01:d2:41: 3e:fd:12:7e:45:d9:d1:b9:8e:f6:f5:7a:ce:0b:c0: 94:c6:97:74:68:10:cb:51:28:8f:0b:87:31:a5:34: 86:47:8f:d9:e1:5e:fa:c0:7d:03:62:b5:fa:94:9c: a8:4d:5d:99:4f:87:a0:6d:18:ce:d7:a7:13:b4:8e: 0f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E4:86:BB:E0:8B:DD:EA:11:88:12:14:00:F3:75:D4:12:45:B7:6A X509v3 Authority Key Identifier: keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/9OSGu-CL3eoRiBIUAPN11BJFt2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.89.0/24 Signature Algorithm: sha256WithRSAEncryption b9:37:7f:76:22:69:f9:03:da:8d:8a:a0:c3:38:63:6b:a8:4f: 38:e7:7f:11:99:8a:35:5e:57:89:73:82:e9:0f:67:7a:7a:8b: 9c:26:86:49:c3:65:75:5c:d0:b9:9f:79:f8:00:05:41:01:fb: 2a:00:35:79:0c:bb:00:fa:15:41:b6:8c:1e:8b:a8:35:35:99: 52:48:a4:69:96:10:81:1f:47:a0:2a:ba:50:09:6d:fd:8d:57: de:d5:34:2c:30:e2:ad:c6:46:dc:fc:12:c5:cd:57:fb:7c:d0: 0b:f1:a3:6b:a1:e4:1d:11:32:5d:65:52:3a:cf:c2:64:e3:c9: 14:dc:fd:00:0c:15:9a:27:d8:96:4e:0d:a4:c6:e3:f9:b6:24: 01:d0:f7:b2:be:99:0f:2a:0d:9d:7f:93:53:30:7a:66:f6:46: 02:38:8d:99:f9:95:90:56:ed:bb:83:8c:d7:12:d7:13:76:62: d8:41:f7:da:4e:a0:51:09:2a:99:be:4e:62:e1:4b:d4:41:ad: ad:7a:95:e1:1c:b1:cb:e2:32:3a:75:3d:d8:85:61:f2:4d:f6: e1:0d:49:58:0a:cd:75:9d:66:64:0e:30:2a:86:ed:61:95:38: a6:ce:8a:3d:11:76:be:7d:14:da:19:a6:72:59:58:22:17:16: 95:b0:15:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266EiKWNUxL4m3zWqgyLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MmM2MGFmNGQ3MzcyNTg0NWNlYWYwYjdiNTg1ZTc3NTcw NjY5NjUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGU0ODZiYmUwOGJkZGVhMTE4ODEyMTQwMGYzNzVkNDEyNDViNzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygvQRO77v4X36v7GeIh74Tpj/zxv UTUcCZMlmZEyvWpkz85kWEeQP02QGL3SPiXzAL+RCH0TdoBL+DIOsrnwX3IRmtcT 0ycLH8YZa+P5N3zlLS8mkWMd9iYi/zY0mCgz9A22zq3ahO7ww+irU8fTZvH1lGAk MyGDa4fSMdv+mSJydAvfxgUY56NSBsztBcDO03jV8b1w+RdX9uKxNtiGum1XpWMF jSGHmZqn5FujfNxSPrz60F0WLjR7GyXAZgEB0kE+/RJ+RdnRuY729XrOC8CUxpd0 aBDLUSiPC4cxpTSGR4/Z4V76wH0DYrX6lJyoTV2ZT4egbRjO16cTtI4PpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPTkhrvgi93qEYgSFADzddQSRbdqMB8GA1UdIwQY MBaAFHYsYK9Nc3JYRc6vC3tYXndXBmllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMt ZDQyMDlmYzdmM2M5LzEvOU9TR3UtQ0wzZW9SaUJJVUFQTjExQkpGdDJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMtZDQyMDlmYzdmM2M5 LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvZZMA0G CSqGSIb3DQEBCwUAA4IBAQC5N392Imn5A9qNiqDDOGNrqE84538RmYo1XleJc4Lp D2d6eoucJoZJw2V1XNC5n3n4AAVBAfsqADV5DLsA+hVBtowei6g1NZlSSKRplhCB H0egKrpQCW39jVfe1TQsMOKtxkbc/BLFzVf7fNAL8aNroeQdETJdZVI6z8Jk48kU 3P0ADBWaJ9iWTg2kxuP5tiQB0PeyvpkPKg2df5NTMHpm9kYCOI2Z+ZWQVu27g4zX EtcTdmLYQffaTqBRCSqZvk5i4UvUQa2tepXhHLHL4jI6dT3YhWHyTfbhDUlYCs11 nWZkDjAqhu1hlTimzoo9EXa+fRTaGaZyWVgiFxaVsBUC -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:26 2026 by rpki-client