This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/9ECy6xMC0QhH_pOivg-rQM4g-LY.roa File: 9ECy6xMC0QhH_pOivg-rQM4g-LY.roa (raw, json) Hash identifier: zvlC8cgCNjvHx+kjOIl69ehjpjFO8D76qsG5Uxnt+E0= Subject key identifier: F4:40:B2:EB:13:02:D1:08:47:FE:93:A2:BE:0F:AB:40:CE:20:F8:B6 Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8 Certificate serial: 019B76EB58A2C934FBEE3CEAC28BBDE85333 Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/9ECy6xMC0QhH_pOivg-rQM4g-LY.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62214 IP address blocks: 195.90.98.0/24 maxlen: 24 195.90.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:58:a2:c9:34:fb:ee:3c:ea:c2:8b:bd:e8:53:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f440b2eb1302d10847fe93a2be0fab40ce20f8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c0:e1:38:8d:da:3a:1c:c5:72:94:8d:79:ce: b3:83:6d:3b:38:e0:2a:7d:51:68:dd:f9:c3:df:ba: a3:e3:f5:ac:ea:ce:29:94:7f:96:6e:83:6b:08:57: c0:87:ab:37:6c:37:3f:89:ea:74:ab:e5:22:c4:71: 41:ec:d0:13:44:41:7f:11:59:14:e0:05:03:e1:63: d1:60:2c:09:05:bc:47:1f:91:37:a9:6d:fe:5b:8c: 56:45:cc:7d:2d:21:47:db:25:e5:4b:b8:c4:0e:c9: a8:c1:e6:d5:c1:d8:67:21:8c:3a:62:69:a5:c0:80: 42:96:18:9f:25:5f:1b:b8:1f:1c:8d:88:ac:25:6f: f3:a2:e1:a9:a1:97:f8:78:83:46:30:87:61:b7:69: 5d:1d:18:1d:85:c9:59:ad:36:3b:26:44:ff:26:e0: 99:0d:a9:3e:13:49:b5:3f:67:22:24:61:f0:ef:d3: 51:d1:03:4e:f8:4e:02:f0:9d:c2:08:a4:7b:2d:c2: 50:a9:a9:50:31:ac:4d:43:cb:9c:cb:61:91:96:bc: 2c:7e:a6:d6:bc:b2:09:04:38:4b:af:ea:dd:6e:74: 25:94:e6:a0:8f:27:3b:fe:77:27:ee:fe:45:2a:94: 9f:44:cc:d8:67:e0:ba:f0:50:9b:2d:6c:fc:69:06: 92:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:40:B2:EB:13:02:D1:08:47:FE:93:A2:BE:0F:AB:40:CE:20:F8:B6 X509v3 Authority Key Identifier: keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/9ECy6xMC0QhH_pOivg-rQM4g-LY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.90.98.0/24 195.90.115.0/24 Signature Algorithm: sha256WithRSAEncryption 29:29:35:bb:0b:f8:0d:28:49:82:fc:f0:41:b8:56:73:9b:7f: 25:f1:14:e1:8f:55:ac:be:b0:5f:72:35:e8:df:be:05:cd:d2: 38:aa:5e:bc:04:e2:5f:a1:30:84:7e:c3:37:ce:92:97:38:67: 4e:99:a9:39:b1:5e:fa:ed:40:4c:60:2b:4f:e8:66:36:17:b1: 64:28:17:64:3a:66:f9:3c:f6:23:fb:be:1c:c8:86:92:b5:b8: 18:97:ea:9e:aa:c0:6d:8a:3c:56:e2:7e:21:ac:67:51:54:26: 0d:77:55:8c:9d:0e:2b:23:b5:54:6e:02:bf:87:e0:44:f4:4f: e7:c5:6e:0c:cb:ee:21:58:a0:43:ea:49:6d:0b:47:3e:40:36: 5d:cc:60:24:3b:70:fd:6d:21:46:90:d5:04:53:81:d9:a5:5d: 97:77:72:47:57:b9:e3:4e:4c:7c:3f:06:f7:bc:ba:f7:05:ee: a2:04:82:50:df:50:fe:07:83:fa:01:18:35:84:6d:08:da:91: bc:7e:67:b3:88:75:b4:a9:e0:d7:7d:d0:4f:78:89:64:44:8d: 70:b1:94:17:e5:ae:d6:da:e8:a2:a6:79:1a:35:e9:99:b6:ed: 1f:13:0c:39:24:79:1a:0a:94:07:5e:67:3e:23:24:08:a5:de: 8c:7b:08:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt261iiyTT77jzqwou96FMzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZThmNDFmNmIwMmI5M2Y4NWQxYTdiNDhiNDhjZmEzMjJm MDg4ZjgwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDQwYjJlYjEzMDJkMTA4NDdmZTkzYTJiZTBmYWI0MGNlMjBmOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8DhOI3aOhzFcpSNec6zg207OOAq fVFo3fnD37qj4/Ws6s4plH+WboNrCFfAh6s3bDc/iep0q+UixHFB7NATREF/EVkU 4AUD4WPRYCwJBbxHH5E3qW3+W4xWRcx9LSFH2yXlS7jEDsmowebVwdhnIYw6Ymml wIBClhifJV8buB8cjYisJW/zouGpoZf4eINGMIdht2ldHRgdhclZrTY7JkT/JuCZ Dak+E0m1P2ciJGHw79NR0QNO+E4C8J3CCKR7LcJQqalQMaxNQ8ucy2GRlrwsfqbW vLIJBDhLr+rdbnQllOagjyc7/ncn7v5FKpSfRMzYZ+C68FCbLWz8aQaS4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPRAsusTAtEIR/6Tor4Pq0DOIPi2MB8GA1UdIwQY MBaAFOHo9B9rArk/hdGntItIz6Mi8Ij4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUt NTM3YTJiMGI0ZGRhLzEvOUVDeTZ4TUMwUWhIX3BPaXZnLXJRTTRnLUxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUtNTM3YTJiMGI0ZGRh LzEvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw1piAwQA w1pzMA0GCSqGSIb3DQEBCwUAA4IBAQApKTW7C/gNKEmC/PBBuFZzm38l8RThj1Ws vrBfcjXo374FzdI4ql68BOJfoTCEfsM3zpKXOGdOmak5sV767UBMYCtP6GY2F7Fk KBdkOmb5PPYj+74cyIaStbgYl+qeqsBtijxW4n4hrGdRVCYNd1WMnQ4rI7VUbgK/ h+BE9E/nxW4My+4hWKBD6kltC0c+QDZdzGAkO3D9bSFGkNUEU4HZpV2Xd3JHV7nj Tkx8Pwb3vLr3Be6iBIJQ31D+B4P6ARg1hG0I2pG8fmeziHW0qeDXfdBPeIlkRI1w sZQX5a7W2uiipnkaNemZtu0fEww5JHkaCpQHXmc+IyQIpd6Mewhi -----END CERTIFICATE-----Generated at Sun Jan 25 22:32:07 2026 by rpki-client