This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa File: 9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa (raw, json) Hash identifier: fz+aHYS4V1XMTw/yqh5CSzgcqzKaI+dTHoaVrbzBaVs= Subject key identifier: F7:FD:5B:2B:D5:B5:6A:3C:F1:BF:EB:7A:D9:0C:69:E6:57:76:30:05 Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Certificate serial: 019B7A5B22420C935A7C11FDC94D01E3D05A Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa Signing time: Thu 01 Jan 2026 16:19:11 +0000 ROA not before: Thu 01 Jan 2026 16:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203889 IP address blocks: 194.99.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:22:42:0c:93:5a:7c:11:fd:c9:4d:01:e3:d0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8 Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7fd5b2bd5b56a3cf1bfeb7ad90c69e657763005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:60:da:5f:c6:19:95:79:b7:18:32:bd:60: 1a:03:bb:ff:6b:b0:97:95:29:d6:e5:05:86:7a:c4: c7:3f:27:57:92:bb:57:c4:d1:58:16:cd:b1:d3:39: 3a:ee:e2:80:84:32:7d:09:fc:bf:66:0a:4b:59:e7: b0:0e:8b:95:15:e9:6f:43:7f:15:b7:58:95:70:36: 68:33:02:35:7e:3e:55:47:0b:7a:30:ea:79:cd:71: fa:2a:88:60:c8:86:0b:b9:84:93:c1:b9:26:40:bc: ca:02:02:eb:7e:05:c6:39:af:85:8f:09:4c:64:43: 3f:a1:66:2d:c8:cc:1f:d6:01:fe:f6:7c:79:12:f7: 09:33:7b:c1:92:98:26:ac:b4:de:4a:5e:e5:87:a9: 76:5f:c4:c5:43:c5:18:85:b0:2a:56:14:fd:2f:0d: 97:d9:c7:46:25:15:db:2f:75:26:a2:f2:51:47:e0: c7:af:ea:d8:0f:66:fd:f8:3d:52:2d:96:10:83:56: 6b:b8:c2:a7:66:af:8c:69:6a:b2:b2:86:35:0c:4f: 2d:83:51:5c:d5:42:f0:86:c2:b6:9b:b5:64:61:61: 69:8f:71:bb:34:a0:a3:0d:a5:9c:ff:2b:07:b7:b6: bf:74:92:f3:c9:8c:a0:cc:77:b7:f6:94:35:09:c5: 6c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FD:5B:2B:D5:B5:6A:3C:F1:BF:EB:7A:D9:0C:69:E6:57:76:30:05 X509v3 Authority Key Identifier: keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/9_1bK9W1ajzxv-t62Qxp5ld2MAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.99.113.0/24 Signature Algorithm: sha256WithRSAEncryption 49:ca:e6:ff:a3:26:4b:5b:4d:29:bb:03:b8:20:a6:16:65:77: 6f:61:66:6e:28:fe:21:bd:b1:b6:66:ff:ce:75:6c:06:4a:9a: f8:22:33:5f:99:d0:e7:b0:99:88:b7:44:45:2c:df:af:d4:3a: a8:e7:d3:51:2b:68:3a:9d:e2:a8:a5:1e:ac:0a:ec:40:7f:e7: b7:3a:36:23:09:9f:6b:64:34:3b:20:d8:4a:b7:cd:a6:83:68: 6e:8f:35:97:39:0c:d4:5f:b7:25:3b:09:78:62:9a:9e:4b:b2: f6:1f:5c:f6:09:9f:2a:7a:6f:a6:fb:93:d0:25:42:ff:c5:b3: 71:29:c4:4d:d3:e9:af:79:6c:d2:f9:1f:e1:fd:47:ef:b0:ec: 11:ef:b0:71:ad:81:eb:9a:29:da:64:62:59:54:cd:00:c7:22: d5:9e:8b:0c:b1:66:48:6d:fe:42:6b:9d:34:03:56:9e:b1:07: e8:43:79:77:3f:fb:52:62:4a:f4:e9:96:23:da:99:54:14:1b: 2f:e3:af:cc:de:78:2b:b7:b3:c5:99:e0:5b:36:70:e8:a3:16: b2:af:5b:14:8a:dc:80:b4:f6:d0:fb:61:5d:db:f2:dc:6a:49: f3:73:31:38:31:7a:b1:13:d1:5e:0b:fa:65:1b:56:9a:69:fc: dd:37:b3:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyJCDJNafBH9yU0B49BaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWRjMThhNGIxZmJmZTJjMmJhYmQ4YmJiNDdmZTFmZDFj ZjIyZjgwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2ZkNWIyYmQ1YjU2YTNjZjFiZmViN2FkOTBjNjllNjU3NzYzMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxpg2l/GGZV5txgyvWAaA7v/a7CX lSnW5QWGesTHPydXkrtXxNFYFs2x0zk67uKAhDJ9Cfy/ZgpLWeewDouVFelvQ38V t1iVcDZoMwI1fj5VRwt6MOp5zXH6KohgyIYLuYSTwbkmQLzKAgLrfgXGOa+FjwlM ZEM/oWYtyMwf1gH+9nx5EvcJM3vBkpgmrLTeSl7lh6l2X8TFQ8UYhbAqVhT9Lw2X 2cdGJRXbL3UmovJRR+DHr+rYD2b9+D1SLZYQg1ZruMKnZq+MaWqysoY1DE8tg1Fc 1ULwhsK2m7VkYWFpj3G7NKCjDaWc/ysHt7a/dJLzyYygzHe39pQ1CcVspQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPf9WyvVtWo88b/retkMaeZXdjAFMB8GA1UdIwQY MBaAFK4dwYpLH7/iwrq9i7tH/h/RzyL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMt OGU3MTQ5ZjA0YTRlLzEvOV8xYks5VzFhanp4di10NjJReHA1bGQyTUFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wMzc2ZDEtMTJjYS00MTM1LTk0ODMtOGU3MTQ5ZjA0YTRl LzEvcmgzQmlrc2Z2LUxDdXIyTHUwZi1IOUhQSXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmNxMA0G CSqGSIb3DQEBCwUAA4IBAQBJyub/oyZLW00puwO4IKYWZXdvYWZuKP4hvbG2Zv/O dWwGSpr4IjNfmdDnsJmIt0RFLN+v1Dqo59NRK2g6neKopR6sCuxAf+e3OjYjCZ9r ZDQ7INhKt82mg2hujzWXOQzUX7clOwl4YpqeS7L2H1z2CZ8qem+m+5PQJUL/xbNx KcRN0+mveWzS+R/h/UfvsOwR77BxrYHrminaZGJZVM0AxyLVnosMsWZIbf5Ca500 A1aesQfoQ3l3P/tSYkr06ZYj2plUFBsv46/M3ngrt7PFmeBbNnDooxayr1sUityA tPbQ+2Fd2/LcaknzczE4MXqxE9FeC/plG1aaafzdN7P1 -----END CERTIFICATE-----Generated at Mon Jan 26 05:05:22 2026 by rpki-client