This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa File: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (raw, json) Hash identifier: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4= Subject key identifier: F6:F4:4D:65:80:1C:BB:72:7B:AB:E5:7A:7E:36:8B:E9:8E:D6:C0:D4 Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99 Certificate serial: 019B7DCA874E0AC7B2CF2A70EE29E1CDB8AD Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa Signing time: Fri 02 Jan 2026 08:19:43 +0000 ROA not before: Fri 02 Jan 2026 08:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60475 IP address blocks: 193.168.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:87:4e:0a:c7:b2:cf:2a:70:ee:29:e1:cd:b8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99 Validity Not Before: Jan 2 08:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6f44d65801cbb727babe57a7e368be98ed6c0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:09:03:39:5b:df:a0:5b:4f:a0:72:41:4e: 3e:7a:20:fa:90:8e:36:b0:35:cd:2f:5b:97:d2:2d: f7:45:00:85:7f:e3:05:1d:8d:a1:37:87:4b:d4:8a: e2:74:e5:7c:8d:aa:8f:27:83:1f:04:14:4a:0e:78: fc:b5:6b:e8:cf:09:9b:33:49:ef:dc:38:95:3c:0c: a3:16:bf:23:28:bb:5e:ef:47:9a:5f:74:15:1e:c8: 8c:ed:db:6c:a3:f4:0a:03:e3:60:f4:d6:6c:c8:ad: 60:dd:bd:1b:bd:f9:0a:77:3c:10:07:db:12:78:55: 13:23:ba:e2:58:f8:c3:58:b9:0d:d4:5b:f7:e9:8c: ed:e7:b2:4e:03:74:d3:61:90:05:00:02:d4:82:62: a9:93:a8:c6:4f:60:9a:c7:60:a8:52:b7:8e:2c:1e: 06:85:c9:d6:17:c4:c1:67:81:b7:7f:b2:0a:d5:da: 23:67:d3:3a:19:ec:c9:b8:91:6f:88:b6:36:93:30: b2:fc:4d:8c:87:af:ba:04:5d:9d:e8:c4:55:3c:a1: 50:b3:ab:77:3d:e9:53:fa:6e:50:cb:ef:4f:5d:47: a6:91:7f:92:48:e5:93:c9:c0:43:1f:20:25:c5:18: 1c:36:85:60:8a:39:9a:86:95:b1:92:2c:8b:6c:e6: eb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F4:4D:65:80:1C:BB:72:7B:AB:E5:7A:7E:36:8B:E9:8E:D6:C0:D4 X509v3 Authority Key Identifier: keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.168.52.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:e5:10:a6:6e:c1:f6:b5:04:8d:93:b0:51:c0:75:48:68:51: cd:d6:06:88:39:35:80:29:23:0b:61:57:9e:a6:a2:9a:6d:b5: 45:25:13:11:4c:cf:a7:b4:8b:cf:35:7d:20:ab:88:11:47:f3: 10:eb:ae:36:d3:a8:51:7a:be:6e:09:c4:a3:9f:5d:8f:1a:5e: 80:b5:5f:e6:a4:66:59:bd:ec:fe:b9:73:db:53:b2:78:13:48: 57:85:cd:44:a6:ff:65:28:55:c2:e1:91:32:15:f4:06:aa:09: 0b:73:6d:2d:5a:88:4e:12:32:7c:90:d8:80:f2:cc:a7:e5:8e: ab:0b:04:40:d3:26:82:5b:42:24:40:a1:41:24:9f:2d:63:30: 9f:50:ac:c2:ad:9b:ab:4c:4e:5c:7d:ef:36:7f:2a:96:e4:d4: 6c:06:2e:f0:54:a8:56:9a:65:33:3a:5b:32:cd:99:68:90:b5: 01:d2:81:75:0f:20:c8:2e:93:8c:9f:03:4c:88:4c:63:09:0d: 77:1d:43:8c:96:7d:2f:42:f1:cc:bf:b8:28:f1:4a:61:d4:d7: 85:3b:31:eb:99:97:96:28:2e:85:e6:10:7b:45:80:68:e7:a1: 1f:4c:66:78:6c:88:06:b2:de:86:c9:99:b5:09:a0:b0:9d:78: 7a:4c:61:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yodOCseyzypw7inhzbitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MmY2ZWU2ZWUzNDZjMzE5MTJiNzYzMGRhYjE0Y2U1M2M0 ZTBjOTkwHhcNMjYwMTAyMDgxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmY0NGQ2NTgwMWNiYjcyN2JhYmU1N2E3ZTM2OGJlOThlZDZjMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32cJAzlb36BbT6ByQU4+eiD6kI42 sDXNL1uX0i33RQCFf+MFHY2hN4dL1IridOV8jaqPJ4MfBBRKDnj8tWvozwmbM0nv 3DiVPAyjFr8jKLte70eaX3QVHsiM7dtso/QKA+Ng9NZsyK1g3b0bvfkKdzwQB9sS eFUTI7riWPjDWLkN1Fv36Yzt57JOA3TTYZAFAALUgmKpk6jGT2Cax2CoUreOLB4G hcnWF8TBZ4G3f7IK1dojZ9M6GezJuJFviLY2kzCy/E2Mh6+6BF2d6MRVPKFQs6t3 PelT+m5Qy+9PXUemkX+SSOWTycBDHyAlxRgcNoVgijmahpWxkiyLbObrFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPb0TWWAHLtye6vlen42i+mO1sDUMB8GA1UdIwQY MBaAFDkvbubuNGwxkSt2MNqxTOU8TgyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYt OGE3MmExYjZhZjg1LzEvOXZSTlpZQWN1M0o3cS1WNmZqYUw2WTdXd05RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYtOGE3MmExYjZhZjg1 LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwag0MA0G CSqGSIb3DQEBCwUAA4IBAQAv5RCmbsH2tQSNk7BRwHVIaFHN1gaIOTWAKSMLYVee pqKabbVFJRMRTM+ntIvPNX0gq4gRR/MQ664206hRer5uCcSjn12PGl6AtV/mpGZZ vez+uXPbU7J4E0hXhc1Epv9lKFXC4ZEyFfQGqgkLc20tWohOEjJ8kNiA8syn5Y6r CwRA0yaCW0IkQKFBJJ8tYzCfUKzCrZurTE5cfe82fyqW5NRsBi7wVKhWmmUzOlsy zZlokLUB0oF1DyDILpOMnwNMiExjCQ13HUOMln0vQvHMv7go8Uph1NeFOzHrmZeW KC6F5hB7RYBo56EfTGZ4bIgGst6GyZm1CaCwnXh6TGG/ -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:14 2026 by rpki-client