This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/9BqiZznRTC9JSPLmSXD7Iy4lCmY.roa File: 9BqiZznRTC9JSPLmSXD7Iy4lCmY.roa (raw, json) Hash identifier: GZIDFs4jfGkO+SNPF/qf6wnC22M8x1B+nVZUJlDdzRQ= Subject key identifier: F4:1A:A2:67:39:D1:4C:2F:49:48:F2:E6:49:70:FB:23:2E:25:0A:66 Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428 Certificate serial: 019B7F83D7BFC103D2EBC1EA8F47FCF474C8 Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/9BqiZznRTC9JSPLmSXD7Iy4lCmY.roa Signing time: Fri 02 Jan 2026 16:21:45 +0000 ROA not before: Fri 02 Jan 2026 16:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213490 IP address blocks: 193.141.183.0/24 maxlen: 24 193.141.188.0/24 maxlen: 24 2001:67c:d18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d7:bf:c1:03:d2:eb:c1:ea:8f:47:fc:f4:74:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428 Validity Not Before: Jan 2 16:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f41aa26739d14c2f4948f2e64970fb232e250a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:28:d9:4b:8f:b8:54:65:e1:22:70:75:14: 6e:ea:57:44:12:79:81:b9:89:94:d1:e5:59:6e:eb: 4c:23:5b:61:fa:80:0d:b8:0e:32:88:3b:64:f3:32: 19:a8:a6:80:a9:2b:4e:05:6d:66:ba:7d:c2:90:40: e3:6a:bc:31:d3:62:1c:c5:99:c2:d8:e0:df:a6:0d: 3f:f2:e1:8c:2b:f2:a7:fa:d6:cb:7c:3a:9d:ed:68: 19:12:7a:82:3d:da:7c:0a:f4:7f:cd:ee:cd:83:25: 5c:fb:3b:49:02:8b:47:64:e8:ce:b4:85:e7:4f:47: 74:4b:08:67:05:f5:42:41:d5:69:fb:8b:fa:0a:60: aa:a3:90:c7:94:fa:14:59:86:c7:44:3f:e9:06:d6: 04:34:be:33:c3:98:0c:a1:45:bb:35:cb:27:e0:cc: 46:6c:97:74:5b:ed:63:5f:cc:81:57:67:41:b3:cf: 4a:7a:35:b9:20:5d:3b:bc:7d:82:e4:1b:16:a8:ff: b3:d2:4b:57:e4:b3:29:ab:dc:45:cd:20:ca:6d:8f: 4a:eb:34:9f:e0:a2:97:e0:96:a5:37:73:0f:16:d7: cc:71:be:98:cd:fa:4c:cf:61:b3:ce:76:6a:bf:9e: 52:ea:49:ab:1b:1d:96:1e:73:30:45:bf:73:aa:37: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1A:A2:67:39:D1:4C:2F:49:48:F2:E6:49:70:FB:23:2E:25:0A:66 X509v3 Authority Key Identifier: keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/9BqiZznRTC9JSPLmSXD7Iy4lCmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.141.183.0/24 193.141.188.0/24 IPv6: 2001:67c:d18::/48 Signature Algorithm: sha256WithRSAEncryption 72:3e:9e:7a:99:df:c9:c1:23:a2:b4:49:ff:e9:bf:f2:f4:c3: c3:31:e8:8a:d4:94:5f:36:80:d4:4a:35:58:ff:ef:7a:0d:5a: 46:e7:36:14:f1:5f:c1:d4:2f:be:09:71:88:b0:60:3d:89:9e: 20:bf:9e:af:01:11:64:e6:f3:d8:fe:ad:85:6b:4a:1f:7f:55: 46:4a:63:49:9b:1b:cc:29:eb:db:d6:30:dc:d5:b2:d4:94:37: ef:3a:7c:df:c4:f2:f6:90:0f:b6:8f:a7:ae:cc:57:42:6a:4a: c5:ee:8e:f7:c9:b8:25:55:1c:dc:df:e4:dd:8e:2a:dc:1b:bc: d8:26:39:6e:d8:a1:98:1f:4b:f4:d4:31:dc:ad:d5:f4:dc:39: 33:01:9d:10:ef:1e:69:91:b2:1b:54:b0:be:e7:81:fc:38:2e: ec:7b:56:38:d9:46:4f:e1:8e:44:81:cc:f6:d5:12:67:37:ba: 23:9f:f5:9a:97:cb:5b:09:13:36:5d:a6:1c:73:6d:25:7d:0f: 8e:fe:6d:f9:1f:ce:8f:60:7f:4c:09:62:75:31:39:52:b9:89: 1f:c7:80:7a:d7:ca:c2:d5:24:24:f3:5f:2b:ed:44:bb:24:5a: b0:cd:39:da:23:95:f2:2f:5a:92:9a:1b:e4:4d:4c:46:1d:7f: a1:02:dd:18 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/g9e/wQPS68Hqj0f89HTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWY3MmYwZmFjZjUyNzA1NzI3YzAzOWJkYzFmYmI3Y2M5 N2Q0MjgwHhcNMjYwMTAyMTYyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDFhYTI2NzM5ZDE0YzJmNDk0OGYyZTY0OTcwZmIyMzJlMjUwYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dco2UuPuFRl4SJwdRRu6ldEEnmB uYmU0eVZbutMI1th+oANuA4yiDtk8zIZqKaAqStOBW1mun3CkEDjarwx02IcxZnC 2ODfpg0/8uGMK/Kn+tbLfDqd7WgZEnqCPdp8CvR/ze7NgyVc+ztJAotHZOjOtIXn T0d0SwhnBfVCQdVp+4v6CmCqo5DHlPoUWYbHRD/pBtYENL4zw5gMoUW7Ncsn4MxG bJd0W+1jX8yBV2dBs89KejW5IF07vH2C5BsWqP+z0ktX5LMpq9xFzSDKbY9K6zSf 4KKX4JalN3MPFtfMcb6YzfpMz2GzznZqv55S6kmrGx2WHnMwRb9zqjeVKwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFPQaomc50UwvSUjy5klw+yMuJQpmMB8GA1UdIwQY MBaAFN1fcvD6z1JwVyfAOb3B+7fMl9QoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTIt Mjg4MDYxMjcwNWVlLzEvOUJxaVp6blJUQzlKU1BMbVNYRDdJeTRsQ21ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTItMjg4MDYxMjcwNWVl LzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwY23AwQA wY28MA8EAgACMAkDBwAgAQZ8DRgwDQYJKoZIhvcNAQELBQADggEBAHI+nnqZ38nB I6K0Sf/pv/L0w8Mx6IrUlF82gNRKNVj/73oNWkbnNhTxX8HUL74JcYiwYD2JniC/ nq8BEWTm89j+rYVrSh9/VUZKY0mbG8wp69vWMNzVstSUN+86fN/E8vaQD7aPp67M V0JqSsXujvfJuCVVHNzf5N2OKtwbvNgmOW7YoZgfS/TUMdyt1fTcOTMBnRDvHmmR shtUsL7ngfw4Lux7VjjZRk/hjkSBzPbVEmc3uiOf9ZqXy1sJEzZdphxzbSV9D47+ bfkfzo9gf0wJYnUxOVK5iR/HgHrXysLVJCTzXyvtRLskWrDNOdojlfIvWpKaG+RN TEYdf6EC3Rg= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:35 2026 by rpki-client