This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/0m9g0NXw0txcAncd36_l7K-VKNU.roa File: 0m9g0NXw0txcAncd36_l7K-VKNU.roa (raw, json) Hash identifier: XM6ottRdI/IHF8Vp+wdTyFQt/tuJXemQFucG9x2X1io= Subject key identifier: D2:6F:60:D0:D5:F0:D2:DC:5C:02:77:1D:DF:AF:E5:EC:AF:95:28:D5 Certificate issuer: /CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa Certificate serial: 019B7F843BA0E105F13809877DE74802CB95 Authority key identifier: 43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/0m9g0NXw0txcAncd36_l7K-VKNU.roa Signing time: Fri 02 Jan 2026 16:22:11 +0000 ROA not before: Fri 02 Jan 2026 16:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203900 IP address blocks: 193.104.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.mft rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:3b:a0:e1:05:f1:38:09:87:7d:e7:48:02:cb:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=437d280cb4eae8156a77dfe7a3ffc5fd4b4dbfaa Validity Not Before: Jan 2 16:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d26f60d0d5f0d2dc5c02771ddfafe5ecaf9528d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ce:f2:e8:ac:45:91:98:92:60:5a:ec:ba:85: 16:c2:f2:cc:64:b9:2f:2d:ab:c6:fa:da:b3:9f:fe: 31:4a:31:dc:13:9b:95:4f:22:7d:d4:86:1e:8c:c8: 61:0b:53:9a:6f:21:32:42:c6:fd:9a:da:e1:5c:cd: 28:37:93:45:6b:5e:32:d6:a5:2a:34:d4:36:25:2b: df:fb:c3:8b:57:17:44:1c:c0:9b:7b:62:50:78:2a: a2:9e:5b:63:35:3f:76:46:30:6d:bd:d7:10:e7:0e: 4d:0c:e2:85:b7:f9:8e:01:74:55:d5:28:36:9c:93: ff:76:59:55:4b:e3:d4:1b:67:8b:db:88:8c:c8:a4: 6b:38:98:f7:e2:46:f8:f6:7a:ca:60:db:f6:1b:af: 54:32:9a:a9:7e:eb:ac:dc:9e:1a:59:59:23:46:fc: 1f:a8:51:39:a8:cd:ba:a1:89:c0:80:bc:13:a5:1a: 4a:bd:d2:67:95:82:88:1f:3c:a1:ae:67:85:07:8b: bf:72:7d:a2:4a:59:68:61:a3:39:78:d7:40:44:07: 55:22:69:fa:c7:3a:88:d0:8b:a2:c1:9b:35:1c:fb: b6:8d:ee:4c:bd:60:0f:06:10:d4:86:39:08:5a:04: 1b:18:ba:95:44:4f:91:8d:bf:46:d1:ba:6f:9a:fd: 9f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6F:60:D0:D5:F0:D2:DC:5C:02:77:1D:DF:AF:E5:EC:AF:95:28:D5 X509v3 Authority Key Identifier: keyid:43:7D:28:0C:B4:EA:E8:15:6A:77:DF:E7:A3:FF:C5:FD:4B:4D:BF:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q30oDLTq6BVqd9_no__F_UtNv6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/0m9g0NXw0txcAncd36_l7K-VKNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b9353-b70d-408b-a8b7-ec50daad82f7/1/Q30oDLTq6BVqd9_no__F_UtNv6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.29.0/24 Signature Algorithm: sha256WithRSAEncryption 30:cb:6c:cd:b3:11:92:0e:c5:ec:9d:4c:17:33:d1:96:75:b7: 3e:24:4f:6f:df:74:4b:69:33:28:c7:1c:09:0b:4d:e7:66:63: f7:6d:4f:cb:fa:54:a9:7b:9c:ad:73:f0:f2:45:5a:d3:92:cc: 9f:b0:40:2b:4c:90:4b:2d:59:c1:15:97:d9:64:15:84:3a:87: 06:fe:3a:a8:1f:e3:47:ab:c2:14:11:e5:d9:cc:15:95:bf:28: b2:42:f6:ec:4e:1b:9a:c2:57:87:43:22:97:40:f3:e0:52:4b: bf:fc:92:ec:b2:60:e8:9e:4e:58:00:8d:3c:bf:bc:c7:64:0a: d0:d1:e5:ee:f3:cd:e9:55:32:e7:e1:7a:1a:73:44:e8:4c:e0: 73:75:07:6e:93:bd:60:f8:fd:e3:d5:00:9b:bd:2b:2a:13:f0: 64:6e:08:c9:ea:dc:43:ee:d3:0c:d1:08:6a:9f:f8:26:ac:75: 9e:33:ef:56:ca:7d:ba:9d:84:ef:ed:e4:39:aa:af:98:f8:ec: cc:4d:64:f1:fc:c9:1c:5a:f9:23:2a:0b:ad:fd:28:1f:d3:98: c6:a0:5b:2a:50:45:6a:b4:b5:c2:6e:f5:2e:03:7b:09:bd:b6: 89:13:8c:f4:77:69:f4:74:f9:e0:f6:61:25:3b:31:d2:dd:5b: fa:c5:63:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hDug4QXxOAmHfedIAsuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzN2QyODBjYjRlYWU4MTU2YTc3ZGZlN2EzZmZjNWZkNGI0 ZGJmYWEwHhcNMjYwMTAyMTYyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjZmNjBkMGQ1ZjBkMmRjNWMwMjc3MWRkZmFmZTVlY2FmOTUyOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv87y6KxFkZiSYFrsuoUWwvLMZLkv LavG+tqzn/4xSjHcE5uVTyJ91IYejMhhC1OabyEyQsb9mtrhXM0oN5NFa14y1qUq NNQ2JSvf+8OLVxdEHMCbe2JQeCqinltjNT92RjBtvdcQ5w5NDOKFt/mOAXRV1Sg2 nJP/dllVS+PUG2eL24iMyKRrOJj34kb49nrKYNv2G69UMpqpfuus3J4aWVkjRvwf qFE5qM26oYnAgLwTpRpKvdJnlYKIHzyhrmeFB4u/cn2iSlloYaM5eNdARAdVImn6 xzqI0IuiwZs1HPu2je5MvWAPBhDUhjkIWgQbGLqVRE+Rjb9G0bpvmv2f0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNJvYNDV8NLcXAJ3Hd+v5eyvlSjVMB8GA1UdIwQY MBaAFEN9KAy06ugVanff56P/xf1LTb+qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4Yjct ZWM1MGRhYWQ4MmY3LzEvMG05ZzBOWHcwdHhjQW5jZDM2X2w3Sy1WS05VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80YjkzNTMtYjcwZC00MDhiLWE4YjctZWM1MGRhYWQ4MmY3 LzEvUTMwb0RMVHE2QlZxZDlfbm9fX0ZfVXROdjZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWgdMA0G CSqGSIb3DQEBCwUAA4IBAQAwy2zNsxGSDsXsnUwXM9GWdbc+JE9v33RLaTMoxxwJ C03nZmP3bU/L+lSpe5ytc/DyRVrTksyfsEArTJBLLVnBFZfZZBWEOocG/jqoH+NH q8IUEeXZzBWVvyiyQvbsThuawleHQyKXQPPgUku//JLssmDonk5YAI08v7zHZArQ 0eXu883pVTLn4Xoac0ToTOBzdQduk71g+P3j1QCbvSsqE/BkbgjJ6txD7tMM0Qhq n/gmrHWeM+9Wyn26nYTv7eQ5qq+Y+OzMTWTx/MkcWvkjKgut/Sgf05jGoFsqUEVq tLXCbvUuA3sJvbaJE4z0d2n0dPng9mElOzHS3Vv6xWOM -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:10 2026 by rpki-client