This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/9PbzP8qeLurzCOR3dnQ6jsHoYao.roa File: 9PbzP8qeLurzCOR3dnQ6jsHoYao.roa (raw, json) Hash identifier: PeVhHyvWI7MP2U+BHZvU1jOgwKtHxhXWcKdeG/dNuZE= Subject key identifier: F4:F6:F3:3F:CA:9E:2E:EA:F3:08:E4:77:76:74:3A:8E:C1:E8:61:AA Certificate issuer: /CN=15286f0225c141d95857fe74646949e75dd96f28 Certificate serial: 019B7F83EA1584BFC857AAC63802645F5C4A Authority key identifier: 15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/9PbzP8qeLurzCOR3dnQ6jsHoYao.roa Signing time: Fri 02 Jan 2026 16:21:50 +0000 ROA not before: Fri 02 Jan 2026 16:21:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34397 IP address blocks: 193.8.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:ea:15:84:bf:c8:57:aa:c6:38:02:64:5f:5c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15286f0225c141d95857fe74646949e75dd96f28 Validity Not Before: Jan 2 16:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4f6f33fca9e2eeaf308e47776743a8ec1e861aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:a0:11:8b:7d:11:81:c5:51:27:54:83:3a: 1b:45:ed:ad:c4:93:48:18:d1:09:ea:8d:36:2e:1a: fd:6f:0a:d2:86:0a:e4:28:f7:fd:09:1f:34:a1:52: d3:2f:e7:a5:26:81:75:b3:f5:66:1a:45:03:f1:c4: 99:5d:dc:22:47:41:79:a9:d6:d8:c5:cc:77:39:09: 5c:30:1f:e9:5f:e2:c3:d8:50:6a:57:4a:96:cd:92: e9:13:22:c7:52:ce:31:46:38:1c:ee:d0:71:c7:58: 7f:06:f9:95:83:a9:1e:d7:a7:51:54:00:e2:b8:62: be:10:cd:4f:8b:68:20:34:65:e7:3e:71:57:03:ca: f5:7d:1c:f5:7f:60:3d:4d:2c:a6:25:e7:6e:e9:12: ee:d0:09:f4:c2:8e:1b:bd:ad:ae:1d:94:56:d7:04: 6c:a0:1b:5d:27:9b:4c:56:39:ab:33:bb:d2:90:63: 55:54:65:6a:49:78:a3:e7:b7:a6:6e:47:2f:37:e3: 88:e9:3c:7c:6a:f8:46:c9:1d:2e:27:2a:bf:e0:c9: 1e:87:67:17:50:78:f3:83:38:bb:97:d1:9d:f4:e8: 71:cf:1b:ed:20:76:ea:5f:d1:08:27:e5:1c:8a:74: ce:3d:68:1a:2f:79:19:2c:eb:25:be:af:8e:fb:f5: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F6:F3:3F:CA:9E:2E:EA:F3:08:E4:77:76:74:3A:8E:C1:E8:61:AA X509v3 Authority Key Identifier: keyid:15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/9PbzP8qeLurzCOR3dnQ6jsHoYao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.8.250.0/24 Signature Algorithm: sha256WithRSAEncryption 65:f7:ab:c1:92:8f:53:9f:b6:6b:e5:7e:3b:4d:12:f8:2c:ad: 39:f3:79:3d:94:9b:e7:9a:27:3c:21:48:9e:e0:38:bf:97:5b: f1:f5:96:99:90:4b:ef:6e:0d:2b:cd:50:b2:bc:6c:fa:4e:7a: a2:ed:bb:43:b0:1e:9f:38:bb:84:51:b7:ae:ec:48:c5:29:90: de:25:70:34:cf:01:c9:04:be:76:8a:97:67:d7:74:84:5d:18: 24:6b:fe:be:c1:7c:81:e5:35:42:84:cd:3f:ce:21:78:a3:b5: 67:47:dd:ff:d9:9e:0f:66:e2:eb:7b:2e:8f:46:f5:cb:96:9e: f7:e8:98:aa:be:8f:a1:3d:f7:d1:a0:95:a7:91:9d:4c:e7:14: f2:11:42:cd:c7:4f:f2:6c:18:92:08:99:26:be:f1:8e:49:ba: b9:ff:1f:f9:cb:25:ed:3b:71:87:26:15:f4:9b:8b:2b:bf:9d: ac:a1:0c:1b:c1:fc:2f:ed:b5:74:9f:15:d9:d7:0b:19:ae:12: 2b:56:a4:6c:c3:f8:73:47:f5:f5:a7:5d:b2:e9:2c:fd:91:56: 07:13:01:32:49:ff:31:45:af:1f:f5:50:c3:a7:1e:fe:f0:75: f3:fb:be:7a:c0:66:98:1f:3a:50:0e:01:d3:61:99:c7:af:4d: be:e8:66:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g+oVhL/IV6rGOAJkX1xKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Mjg2ZjAyMjVjMTQxZDk1ODU3ZmU3NDY0Njk0OWU3NWRk OTZmMjgwHhcNMjYwMTAyMTYyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGY2ZjMzZmNhOWUyZWVhZjMwOGU0Nzc3Njc0M2E4ZWMxZTg2MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNagEYt9EYHFUSdUgzobRe2txJNI GNEJ6o02Lhr9bwrShgrkKPf9CR80oVLTL+elJoF1s/VmGkUD8cSZXdwiR0F5qdbY xcx3OQlcMB/pX+LD2FBqV0qWzZLpEyLHUs4xRjgc7tBxx1h/BvmVg6ke16dRVADi uGK+EM1Pi2ggNGXnPnFXA8r1fRz1f2A9TSymJedu6RLu0An0wo4bva2uHZRW1wRs oBtdJ5tMVjmrM7vSkGNVVGVqSXij57embkcvN+OI6Tx8avhGyR0uJyq/4Mkeh2cX UHjzgzi7l9Gd9OhxzxvtIHbqX9EIJ+UcinTOPWgaL3kZLOslvq+O+/WZYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPT28z/Kni7q8wjkd3Z0Oo7B6GGqMB8GA1UdIwQY MBaAFBUobwIlwUHZWFf+dGRpSedd2W8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlNodkFpWEJRZGxZVl81MFpHbEo1MTNaYnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82MzQ0MGMtM2Q0My00NThmLTg3OWUt MDIxZjUwOTMyMTU2LzEvOVBielA4cWVMdXJ6Q09SM2RuUTZqc0hvWWFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni82MzQ0MGMtM2Q0My00NThmLTg3OWUtMDIxZjUwOTMyMTU2 LzEvRlNodkFpWEJRZGxZVl81MFpHbEo1MTNaYnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQj6MA0G CSqGSIb3DQEBCwUAA4IBAQBl96vBko9Tn7Zr5X47TRL4LK0583k9lJvnmic8IUie 4Di/l1vx9ZaZkEvvbg0rzVCyvGz6Tnqi7btDsB6fOLuEUbeu7EjFKZDeJXA0zwHJ BL52ipdn13SEXRgka/6+wXyB5TVChM0/ziF4o7VnR93/2Z4PZuLrey6PRvXLlp73 6Jiqvo+hPffRoJWnkZ1M5xTyEULNx0/ybBiSCJkmvvGOSbq5/x/5yyXtO3GHJhX0 m4srv52soQwbwfwv7bV0nxXZ1wsZrhIrVqRsw/hzR/X1p12y6Sz9kVYHEwEySf8x Ra8f9VDDpx7+8HXz+756wGaYHzpQDgHTYZnHr02+6Gat -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:44 2026 by rpki-client