This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/9y3JK83GAsm13D0YffuSXVmKNYo.roa File: 9y3JK83GAsm13D0YffuSXVmKNYo.roa (raw, json) Hash identifier: mRnoN4uYmedrpU7jo9ReZ2AadwnL5SQlW0OFJSUdrsE= Subject key identifier: F7:2D:C9:2B:CD:C6:02:C9:B5:DC:3D:18:7D:FB:92:5D:59:8A:35:8A Certificate issuer: /CN=b0809dc07bc0775198f2f31554152f356a83f770 Certificate serial: 019B7BA3BD1959BC8CFB12E3AEA1A8EAD417 Authority key identifier: B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/9y3JK83GAsm13D0YffuSXVmKNYo.roa Signing time: Thu 01 Jan 2026 22:18:06 +0000 ROA not before: Thu 01 Jan 2026 22:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 194.104.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.mft rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:bd:19:59:bc:8c:fb:12:e3:ae:a1:a8:ea:d4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0809dc07bc0775198f2f31554152f356a83f770 Validity Not Before: Jan 1 22:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f72dc92bcdc602c9b5dc3d187dfb925d598a358a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:f3:3b:87:22:e1:a6:10:ae:99:b5:a5:53: 48:73:2e:9a:b8:40:19:8f:74:05:a7:eb:cf:6d:96: 7a:6c:c3:3f:94:01:ac:db:45:40:5f:db:57:a6:49: 2b:fe:de:cc:64:c3:03:bd:41:7c:5d:de:b3:01:93: d0:fa:70:5b:06:d0:10:e1:ed:43:52:28:cd:32:d5: 7a:b0:01:54:f1:c2:07:ff:25:ce:e6:e4:84:69:fa: 45:cb:d5:1f:d7:83:24:b7:72:a2:ff:19:71:82:79: 1b:cb:9d:ce:1d:30:33:69:10:08:a0:b7:8c:cc:54: bb:70:b9:78:48:bd:4b:18:37:c8:cf:86:83:fc:cc: 2f:ef:9d:c4:a4:4f:20:9c:9b:a0:3f:b6:27:22:6f: 2b:82:bb:3b:20:87:86:82:6b:df:bb:e6:33:0a:19: aa:4d:97:53:b0:df:4e:d1:fe:74:51:85:74:3f:ed: 3a:ac:16:42:aa:d2:01:02:65:48:a2:a1:12:3e:47: 44:e8:9b:d4:33:c2:d9:00:32:3c:49:c2:b9:14:1d: 65:23:a7:19:33:75:b7:48:60:e1:ca:25:84:18:20: 3d:43:0a:82:64:5f:f7:f3:6c:42:19:b1:a5:95:22: b5:56:3a:a4:05:42:31:6d:0d:d9:6f:be:e4:50:68: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2D:C9:2B:CD:C6:02:C9:B5:DC:3D:18:7D:FB:92:5D:59:8A:35:8A X509v3 Authority Key Identifier: keyid:B0:80:9D:C0:7B:C0:77:51:98:F2:F3:15:54:15:2F:35:6A:83:F7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sICdwHvAd1GY8vMVVBUvNWqD93A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/9y3JK83GAsm13D0YffuSXVmKNYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/db724a-cbca-4ed1-9b79-9a1ab11abded/1/sICdwHvAd1GY8vMVVBUvNWqD93A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.124.0/23 Signature Algorithm: sha256WithRSAEncryption 59:ff:55:dd:0d:e1:a4:5e:b4:c0:1e:c5:6d:3d:21:a5:c6:1d: 36:94:1a:d6:36:b5:b3:cf:91:9b:d8:0b:d5:17:5a:37:e5:77: b1:7b:37:62:2f:f3:9b:8e:4f:b6:22:b0:8d:0f:c7:77:00:7e: 04:2a:20:ed:be:18:28:0c:02:5e:1b:a4:aa:b9:70:dc:bc:f7: 86:7f:da:f8:24:6e:6c:04:4a:0b:2e:c9:4f:ae:4a:85:ba:06: 82:6b:fd:2c:be:6a:49:00:b9:a2:60:6d:e6:dd:89:19:ba:3c: 94:a9:f0:62:7b:b5:d9:e9:51:e7:ba:12:ed:b3:bf:8f:57:b9: c4:61:7b:92:eb:1f:fe:ec:df:42:87:3f:69:be:94:e8:cc:80: cb:7c:55:dc:e2:60:41:43:e6:e5:24:ce:95:61:75:a9:5c:93: 0b:32:8b:e5:6c:c0:4f:de:22:76:f6:70:75:ef:3e:0a:cf:9c: 3d:58:bc:35:9c:d4:cb:6d:97:57:4e:eb:cf:25:e1:e1:2c:50: 77:f1:5f:46:ec:dc:70:53:50:5c:a4:26:e2:df:ff:d0:e7:5e: 6e:74:9d:69:c5:e3:4a:4b:d3:0a:5c:55:69:cf:29:41:47:23: d9:45:26:bb:d4:df:7a:7a:63:4e:04:1b:8c:a3:3d:69:b9:d6: 7c:50:a9:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o70ZWbyM+xLjrqGo6tQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwODA5ZGMwN2JjMDc3NTE5OGYyZjMxNTU0MTUyZjM1NmE4 M2Y3NzAwHhcNMjYwMTAxMjIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzJkYzkyYmNkYzYwMmM5YjVkYzNkMTg3ZGZiOTI1ZDU5OGEzNThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOXzO4ci4aYQrpm1pVNIcy6auEAZ j3QFp+vPbZZ6bMM/lAGs20VAX9tXpkkr/t7MZMMDvUF8Xd6zAZPQ+nBbBtAQ4e1D UijNMtV6sAFU8cIH/yXO5uSEafpFy9Uf14Mkt3Ki/xlxgnkby53OHTAzaRAIoLeM zFS7cLl4SL1LGDfIz4aD/Mwv753EpE8gnJugP7YnIm8rgrs7IIeGgmvfu+YzChmq TZdTsN9O0f50UYV0P+06rBZCqtIBAmVIoqESPkdE6JvUM8LZADI8ScK5FB1lI6cZ M3W3SGDhyiWEGCA9QwqCZF/382xCGbGllSK1VjqkBUIxbQ3Zb77kUGj4FQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPctySvNxgLJtdw9GH37kl1ZijWKMB8GA1UdIwQY MBaAFLCAncB7wHdRmPLzFVQVLzVqg/dwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kYjcyNGEtY2JjYS00ZWQxLTliNzkt OWExYWIxMWFiZGVkLzEvOXkzSks4M0dBc20xM0QwWWZmdVNYVm1LTllvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9kYjcyNGEtY2JjYS00ZWQxLTliNzktOWExYWIxMWFiZGVk LzEvc0lDZHdIdkFkMUdZOHZNVlZCVXZOV3FEOTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmh8MA0G CSqGSIb3DQEBCwUAA4IBAQBZ/1XdDeGkXrTAHsVtPSGlxh02lBrWNrWzz5Gb2AvV F1o35XexezdiL/Objk+2IrCND8d3AH4EKiDtvhgoDAJeG6SquXDcvPeGf9r4JG5s BEoLLslPrkqFugaCa/0svmpJALmiYG3m3YkZujyUqfBie7XZ6VHnuhLts7+PV7nE YXuS6x/+7N9Chz9pvpTozIDLfFXc4mBBQ+blJM6VYXWpXJMLMovlbMBP3iJ29nB1 7z4Kz5w9WLw1nNTLbZdXTuvPJeHhLFB38V9G7NxwU1BcpCbi3//Q515udJ1pxeNK S9MKXFVpzylBRyPZRSa71N96emNOBBuMoz1pudZ8UKnD -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:25 2026 by rpki-client