This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/F9dyWb4kMnrKgNjaaV2af3tnF7Y.roa File: F9dyWb4kMnrKgNjaaV2af3tnF7Y.roa (raw, json) Hash identifier: n0E0JoegNTDFrRD6xDuHJFvI1HNuGNwn2VnWlNNc7R8= Subject key identifier: 17:D7:72:59:BE:24:32:7A:CA:80:D8:DA:69:5D:9A:7F:7B:67:17:B6 Certificate issuer: /CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Certificate serial: 019BC7A7754308BD427FD1EDD58F1768E88D Authority key identifier: EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/F9dyWb4kMnrKgNjaaV2af3tnF7Y.roa Signing time: Fri 16 Jan 2026 16:33:18 +0000 ROA not before: Fri 16 Jan 2026 16:33:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202178 IP address blocks: 193.42.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.mft rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:a7:75:43:08:bd:42:7f:d1:ed:d5:8f:17:68:e8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea2d102b6112b0d9a8b8eebac4b97c819f97c606 Validity Not Before: Jan 16 16:33:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17d77259be24327aca80d8da695d9a7f7b6717b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6c:90:b2:14:7f:2a:84:89:ce:c5:2b:56:9c: 71:f8:c0:97:a5:60:b5:49:e8:09:14:12:31:3e:04: 34:e0:6a:74:69:3f:b1:ed:09:34:a5:e7:41:4f:28: b5:ae:19:f2:76:55:6d:57:b2:98:1f:b8:87:d0:63: c5:99:51:50:b3:79:dd:28:16:9c:3b:cc:74:cb:e2: 2a:70:d7:2a:98:2f:01:0d:a8:d8:7e:54:01:54:68: ed:a3:cb:31:3f:fd:6b:7e:dc:99:9c:de:ce:eb:1a: 19:b6:fe:91:bd:00:9b:86:0d:e2:97:03:4b:e5:67: 74:42:e2:6d:21:2b:41:9b:65:d5:55:73:ff:25:75: f1:84:f2:98:2f:aa:1c:99:bb:58:e4:4f:2b:7e:bb: 83:e1:12:fe:3d:b0:e1:e9:35:29:0d:59:17:c9:97: 19:d5:11:a8:f9:6a:f0:13:25:d9:06:21:5b:52:a0: 78:25:dc:9d:01:33:26:0b:66:87:60:aa:6f:92:54: 57:e3:85:f2:b6:19:b8:35:8d:c3:83:b8:25:9b:c4: 94:36:3e:83:c1:4b:36:5d:e7:e0:b3:68:2c:0a:e1: 05:4d:3f:4d:6d:53:b9:a2:31:a6:2a:1d:6b:1a:7d: 49:76:f8:08:a9:4c:53:6a:4d:0e:1e:65:ff:8f:85: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D7:72:59:BE:24:32:7A:CA:80:D8:DA:69:5D:9A:7F:7B:67:17:B6 X509v3 Authority Key Identifier: keyid:EA:2D:10:2B:61:12:B0:D9:A8:B8:EE:BA:C4:B9:7C:81:9F:97:C6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6i0QK2ESsNmouO66xLl8gZ-XxgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/F9dyWb4kMnrKgNjaaV2af3tnF7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4cdefa-5ee2-4719-a7e1-b829cc401031/1/6i0QK2ESsNmouO66xLl8gZ-XxgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.41.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:aa:92:e2:f6:9d:2e:bf:71:7d:3d:cb:28:0c:e0:2b:78:11: f5:22:58:55:6e:45:9c:4f:02:38:b5:86:77:14:fe:cd:69:21: 36:c4:1c:21:0f:4d:85:79:b7:14:f9:1c:b7:3f:f8:be:8b:f2: a3:2d:2d:53:6c:56:b1:dd:9f:be:f0:ff:2d:99:76:42:ac:c5: 17:47:10:e3:3c:27:a9:6c:d8:40:21:2c:5b:d5:4c:66:7a:bb: a9:d7:8c:ee:dd:f0:64:25:d1:ed:67:0b:13:c5:9d:6f:bf:1e: 90:f0:23:29:96:46:a2:a0:c2:3e:b2:f8:e7:d6:80:81:05:4d: f4:90:5c:a7:03:27:21:42:53:24:6e:2e:69:cb:4f:d2:10:91: 4c:00:63:4a:39:0b:16:3a:c4:35:fc:b4:88:98:eb:08:b2:69: be:4f:65:bd:4b:da:d8:09:1e:f7:fb:13:58:65:6d:1f:b4:f3: 0e:01:b7:d8:f8:5f:84:8d:c3:0e:32:5f:08:91:cd:82:d9:2b: d3:da:f5:d6:e3:f4:9e:da:fa:02:e1:91:cf:82:da:23:0b:6c: c7:8f:6b:d3:0d:64:10:c4:5a:fd:41:4a:03:90:91:07:63:c9: fb:44:12:33:02:68:04:08:dc:7c:e4:c0:6b:99:93:63:b1:43: 23:84:93:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvHp3VDCL1Cf9Ht1Y8XaOiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMmQxMDJiNjExMmIwZDlhOGI4ZWViYWM0Yjk3YzgxOWY5 N2M2MDYwHhcNMjYwMTE2MTYzMzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2Q3NzI1OWJlMjQzMjdhY2E4MGQ4ZGE2OTVkOWE3ZjdiNjcxN2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GyQshR/KoSJzsUrVpxx+MCXpWC1 SegJFBIxPgQ04Gp0aT+x7Qk0pedBTyi1rhnydlVtV7KYH7iH0GPFmVFQs3ndKBac O8x0y+IqcNcqmC8BDajYflQBVGjto8sxP/1rftyZnN7O6xoZtv6RvQCbhg3ilwNL 5Wd0QuJtIStBm2XVVXP/JXXxhPKYL6ocmbtY5E8rfruD4RL+PbDh6TUpDVkXyZcZ 1RGo+WrwEyXZBiFbUqB4JdydATMmC2aHYKpvklRX44Xythm4NY3Dg7glm8SUNj6D wUs2Xefgs2gsCuEFTT9NbVO5ojGmKh1rGn1JdvgIqUxTak0OHmX/j4UwSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBfXclm+JDJ6yoDY2mldmn97Zxe2MB8GA1UdIwQY MBaAFOotECthErDZqLjuusS5fIGfl8YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEt YjgyOWNjNDAxMDMxLzEvRjlkeVdiNGtNbnJLZ05qYWFWMmFmM3RuRjdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80Y2RlZmEtNWVlMi00NzE5LWE3ZTEtYjgyOWNjNDAxMDMx LzEvNmkwUUsyRVNzTm1vdU82NnhMbDhnWi1YeGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSopMA0G CSqGSIb3DQEBCwUAA4IBAQB+qpLi9p0uv3F9PcsoDOAreBH1IlhVbkWcTwI4tYZ3 FP7NaSE2xBwhD02FebcU+Ry3P/i+i/KjLS1TbFax3Z++8P8tmXZCrMUXRxDjPCep bNhAISxb1Uxmerup14zu3fBkJdHtZwsTxZ1vvx6Q8CMplkaioMI+svjn1oCBBU30 kFynAychQlMkbi5py0/SEJFMAGNKOQsWOsQ1/LSImOsIsmm+T2W9S9rYCR73+xNY ZW0ftPMOAbfY+F+EjcMOMl8Ikc2C2SvT2vXW4/Se2voC4ZHPgtojC2zHj2vTDWQQ xFr9QUoDkJEHY8n7RBIzAmgECNx85MBrmZNjsUMjhJPD -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:28 2026 by rpki-client