This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/F9miMrY1ZJTKM5Hsr08Nsl2WVlQ.roa File: F9miMrY1ZJTKM5Hsr08Nsl2WVlQ.roa (raw, json) Hash identifier: q+6garZ/8AXrfE/f+LCJdQf0ISs5jtEKLzvklthpstk= Subject key identifier: 17:D9:A2:32:B6:35:64:94:CA:33:91:EC:AF:4F:0D:B2:5D:96:56:54 Certificate issuer: /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd Certificate serial: 019B7D5CF5DD0ADD78836F28D3ED62843EB8 Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/F9miMrY1ZJTKM5Hsr08Nsl2WVlQ.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211612 IP address blocks: 94.76.40.0/24 maxlen: 24 94.76.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f5:dd:0a:dd:78:83:6f:28:d3:ed:62:84:3e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17d9a232b6356494ca3391ecaf4f0db25d965654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:31:51:43:b2:b0:4b:c6:c3:44:09:56:fd: d6:f3:1a:2c:e5:e9:b4:d3:c5:1b:2e:33:fa:69:69: 66:f3:c4:0e:e3:69:4e:30:69:d6:40:8f:48:62:ad: 57:29:23:c0:59:40:8a:7a:e0:4c:24:c6:eb:dc:e1: 00:a7:f0:34:41:56:55:b6:02:a6:3d:ab:2a:ce:01: 8f:c2:c1:10:ef:4f:f7:31:dc:7b:db:d4:05:6c:3e: 7f:81:64:43:d3:ee:50:97:67:9a:79:a4:62:fb:26: fa:64:b4:07:4f:25:24:2b:8e:52:27:52:f6:63:eb: 46:32:d2:8f:cb:ad:3f:4d:ef:84:e3:fc:14:d6:00: 0b:2f:e5:a2:5f:b7:be:8c:2e:a6:0a:3a:61:b4:d7: d5:c0:cd:35:b3:07:e7:d1:60:ca:1d:ac:1c:46:ca: 57:ec:15:fe:03:37:d2:97:7b:a2:d6:30:24:7a:01: fe:9b:9d:74:20:88:57:47:a8:ac:a2:fa:a0:b9:45: a5:59:09:78:90:72:55:4e:10:34:39:7d:ca:af:41: 35:8c:44:87:df:e9:7f:29:9c:3b:55:de:78:31:11: a5:c2:d0:88:ee:2b:6a:3a:e9:cb:66:47:de:26:e7: 13:06:13:f9:55:b2:1b:d6:1c:b1:2a:52:8a:fa:df: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D9:A2:32:B6:35:64:94:CA:33:91:EC:AF:4F:0D:B2:5D:96:56:54 X509v3 Authority Key Identifier: keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/F9miMrY1ZJTKM5Hsr08Nsl2WVlQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.76.40.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:00:86:b5:73:b2:bd:fe:a9:25:bb:bd:75:d5:9e:5b:1b:d1: 6f:0f:e0:95:53:c4:16:bf:2f:0a:b2:49:d5:89:7a:27:d7:72: 8f:b1:44:00:17:81:ad:67:31:16:4a:57:de:68:25:02:a3:90: e9:a2:a7:03:e5:70:f4:4c:95:8b:a0:b8:3e:22:31:cb:df:bc: 58:65:e1:bb:98:83:7d:e9:02:3e:62:1a:9f:76:5b:f9:53:ab: a6:39:2a:95:c0:e5:ce:0f:9f:49:26:21:00:e4:5a:2f:8f:df: 4a:eb:69:27:a5:af:a0:4a:fa:ab:dc:8d:9f:bb:6b:df:fa:6e: ea:2a:e7:25:6f:07:e3:58:cc:62:56:4b:51:55:e5:7a:af:b7: f0:4d:b2:7b:fa:01:46:e3:7b:75:4c:44:9e:a7:b2:40:da:97: 46:54:c4:41:41:00:a9:21:0f:a3:74:bc:6b:fb:c4:b2:f1:23: fa:36:11:6c:6b:62:01:99:6b:90:e0:74:12:06:b6:58:ae:e2: 34:3d:a0:95:0c:28:54:2c:56:42:c2:f0:44:83:53:19:ee:4e: 96:84:2e:da:78:ad:94:93:16:1e:e9:38:f3:89:3e:3f:b1:27: c5:fd:45:76:63:dc:87:8e:ba:f4:4f:23:12:40:fe:63:82:73: d5:b9:4f:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPXdCt14g28o0+1ihD64MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDU3ZjZjZjI4Yzk4MmMxZDNmZjZjNTI1N2YzOTllOWI5 NTViZGQwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2Q5YTIzMmI2MzU2NDk0Y2EzMzkxZWNhZjRmMGRiMjVkOTY1NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQcxUUOysEvGw0QJVv3W8xos5em0 08UbLjP6aWlm88QO42lOMGnWQI9IYq1XKSPAWUCKeuBMJMbr3OEAp/A0QVZVtgKm PasqzgGPwsEQ70/3Mdx729QFbD5/gWRD0+5Ql2eaeaRi+yb6ZLQHTyUkK45SJ1L2 Y+tGMtKPy60/Te+E4/wU1gALL+WiX7e+jC6mCjphtNfVwM01swfn0WDKHawcRspX 7BX+AzfSl3ui1jAkegH+m510IIhXR6isovqguUWlWQl4kHJVThA0OX3Kr0E1jESH 3+l/KZw7Vd54MRGlwtCI7itqOunLZkfeJucTBhP5VbIb1hyxKlKK+t+IdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBfZojK2NWSUyjOR7K9PDbJdllZUMB8GA1UdIwQY MBaAFFbVf2zyjJgsHT/2xSV/OZ6blVvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnRWX2JQS01tQ3dkUF9iRkpYODVucHVWVzkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hNzJhOTItNTY4Yi00MzI3LTljMWQt NjY4MWY5MTZlNTU0LzEvRjltaU1yWTFaSlRLTTVIc3IwOE5zbDJXVmxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9hNzJhOTItNTY4Yi00MzI3LTljMWQtNjY4MWY5MTZlNTU0 LzEvVnRWX2JQS01tQ3dkUF9iRkpYODVucHVWVzkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXkwoMA0G CSqGSIb3DQEBCwUAA4IBAQAqAIa1c7K9/qklu7111Z5bG9FvD+CVU8QWvy8KsknV iXon13KPsUQAF4GtZzEWSlfeaCUCo5DpoqcD5XD0TJWLoLg+IjHL37xYZeG7mIN9 6QI+Yhqfdlv5U6umOSqVwOXOD59JJiEA5Fovj99K62knpa+gSvqr3I2fu2vf+m7q KuclbwfjWMxiVktRVeV6r7fwTbJ7+gFG43t1TESep7JA2pdGVMRBQQCpIQ+jdLxr +8Sy8SP6NhFsa2IBmWuQ4HQSBrZYruI0PaCVDChULFZCwvBEg1MZ7k6WhC7aeK2U kxYe6TjziT4/sSfF/UV2Y9yHjrr0TyMSQP5jgnPVuU+8 -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:25 2026 by rpki-client