This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/9Tg6eK2b_2sLSNQhw2vCbvdE0mQ.roa File: 9Tg6eK2b_2sLSNQhw2vCbvdE0mQ.roa (raw, json) Hash identifier: WVuRHrOmlMS6ytXr2Z+ySWU/cHgaZovcwRctB5udkTE= Subject key identifier: F5:38:3A:78:AD:9B:FF:6B:0B:48:D4:21:C3:6B:C2:6E:F7:44:D2:64 Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438 Certificate serial: 019B7B36F5D4C88C8D769670759F7CBDBB37 Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/9Tg6eK2b_2sLSNQhw2vCbvdE0mQ.roa Signing time: Thu 01 Jan 2026 20:19:17 +0000 ROA not before: Thu 01 Jan 2026 20:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54145 IP address blocks: 193.151.172.0/22 maxlen: 22 206.190.220.0/22 maxlen: 24 2a0d:e8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:f5:d4:c8:8c:8d:76:96:70:75:9f:7c:bd:bb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438 Validity Not Before: Jan 1 20:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5383a78ad9bff6b0b48d421c36bc26ef744d264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:10:8f:89:47:20:51:bb:00:71:4a:b4:08:70: ce:82:12:9e:0f:88:41:7f:7f:95:91:1f:62:ae:3e: b8:6b:e8:ab:46:92:42:8e:27:52:03:1e:4d:47:b7: ef:02:ad:7e:17:1d:87:65:0d:4e:4c:52:d6:df:67: 2c:ad:fc:bd:96:ac:c7:bd:47:d9:0b:7c:46:f1:6f: e9:26:39:d6:93:41:1d:84:fa:74:b8:46:4a:dc:10: 95:3f:31:95:ca:16:d6:e1:68:c5:7b:a4:3a:d8:8f: ba:98:3f:16:af:7b:ca:60:5b:30:4f:c3:ea:66:8a: af:a4:c8:4c:38:62:c7:fd:d0:6b:26:5e:73:00:ce: 9b:5f:b3:39:90:66:9d:76:63:2b:e8:58:7a:dc:60: 6b:1f:27:08:25:57:9b:aa:c6:a3:2f:eb:23:8a:eb: 1a:9b:83:ec:15:af:98:af:4c:2c:f6:5b:9e:08:fb: f5:00:ff:1f:bf:f0:85:99:3e:42:6a:f2:41:57:82: e3:02:cd:6c:a9:fe:81:92:83:60:3c:c4:68:fa:67: e6:d1:0f:34:b1:e5:3d:d8:a5:64:04:22:a0:22:a8: c1:b8:6b:d8:bf:17:82:99:7f:9e:d7:27:45:e3:30: 9f:8f:54:00:2d:5d:00:b5:d9:f9:12:80:c5:7d:f6: 1d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:38:3A:78:AD:9B:FF:6B:0B:48:D4:21:C3:6B:C2:6E:F7:44:D2:64 X509v3 Authority Key Identifier: keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/9Tg6eK2b_2sLSNQhw2vCbvdE0mQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.151.172.0/22 206.190.220.0/22 IPv6: 2a0d:e8c0::/29 Signature Algorithm: sha256WithRSAEncryption 1c:26:90:c3:87:d5:3c:c8:b6:ce:a3:bc:f8:2f:30:ff:78:28: e2:65:5c:07:55:b3:5b:ad:20:fb:d3:3e:2e:75:48:23:6d:dc: 0c:66:15:67:30:97:a6:8f:e2:e7:8a:9e:63:bc:51:21:3a:a6: 44:bb:8d:ff:98:9c:4e:d3:e7:a1:6a:a8:06:48:1d:0f:e6:d0: ce:90:2f:55:fe:14:84:12:dc:e8:54:21:f8:1d:33:0f:4b:1d: 02:55:03:3d:61:2c:9d:3a:6d:d4:a7:e5:55:7f:38:c9:b9:f7: a7:d5:ec:dc:b6:21:7e:28:b5:7b:cc:49:2e:71:7e:11:a6:d6: ee:1c:2a:fd:09:fa:9e:8d:9d:f9:39:17:f4:a9:9f:28:43:0b: da:f7:21:a8:f3:84:df:81:36:55:33:9a:80:ff:2f:cf:4f:a4: 10:9d:a6:62:fe:05:7f:a7:59:37:59:75:f9:e1:86:8f:9f:cc: e6:25:48:c2:1e:8b:e4:58:48:52:0f:68:b4:a6:0a:a0:25:f1: a5:94:92:d5:7f:07:cb:d0:27:b7:0c:14:b5:8e:d5:e8:b4:7b: 41:27:cb:ce:ba:c9:ff:6e:a0:73:f8:0d:6a:52:b8:d7:33:9d: 19:a8:69:5e:65:16:ff:99:2f:93:c6:fc:1b:53:d8:d4:e2:a3: 40:90:c5:60 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NvXUyIyNdpZwdZ98vbs3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZmJkZjJmNWY4NTVlNWUxY2E0OGU3N2MzYmRkMzNiZDQ3 YjQ0MzgwHhcNMjYwMTAxMjAxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTM4M2E3OGFkOWJmZjZiMGI0OGQ0MjFjMzZiYzI2ZWY3NDRkMjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RCPiUcgUbsAcUq0CHDOghKeD4hB f3+VkR9irj64a+irRpJCjidSAx5NR7fvAq1+Fx2HZQ1OTFLW32csrfy9lqzHvUfZ C3xG8W/pJjnWk0EdhPp0uEZK3BCVPzGVyhbW4WjFe6Q62I+6mD8Wr3vKYFswT8Pq ZoqvpMhMOGLH/dBrJl5zAM6bX7M5kGaddmMr6Fh63GBrHycIJVebqsajL+sjiusa m4PsFa+Yr0ws9lueCPv1AP8fv/CFmT5CavJBV4LjAs1sqf6BkoNgPMRo+mfm0Q80 seU92KVkBCKgIqjBuGvYvxeCmX+e1ydF4zCfj1QALV0Atdn5EoDFffYdgQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPU4Onitm/9rC0jUIcNrwm73RNJkMB8GA1UdIwQY MBaAFDf73y9fhV5eHKSOd8O90zvUe0Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDct ZjQ0MTY2YmIyZGIwLzEvOVRnNmVLMmJfMnNMU05RaHcydkNidmRFMG1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDctZjQ0MTY2YmIyZGIw LzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCwZesAwQC zr7cMA0EAgACMAcDBQMqDejAMA0GCSqGSIb3DQEBCwUAA4IBAQAcJpDDh9U8yLbO o7z4LzD/eCjiZVwHVbNbrSD70z4udUgjbdwMZhVnMJemj+Lnip5jvFEhOqZEu43/ mJxO0+ehaqgGSB0P5tDOkC9V/hSEEtzoVCH4HTMPSx0CVQM9YSydOm3Up+VVfzjJ ufen1ezctiF+KLV7zEkucX4RptbuHCr9CfqejZ35ORf0qZ8oQwva9yGo84TfgTZV M5qA/y/PT6QQnaZi/gV/p1k3WXX54YaPn8zmJUjCHovkWEhSD2i0pgqgJfGllJLV fwfL0Ce3DBS1jtXotHtBJ8vOusn/bqBz+A1qUrjXM50ZqGleZRb/mS+TxvwbU9jU 4qNAkMVg -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:10 2026 by rpki-client