This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/9_XCzJVQ0vHT8hA7DULO66uGe5o.roa File: 9_XCzJVQ0vHT8hA7DULO66uGe5o.roa (raw, json) Hash identifier: cJQG6xW1gdrrjMHUKHp2S/TQBEdZhKtS4GkWHUfZeGc= Subject key identifier: F7:F5:C2:CC:95:50:D2:F1:D3:F2:10:3B:0D:42:CE:EB:AB:86:7B:9A Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3 Certificate serial: 019BE203FB1ADA1445B8044F8F13B5A15491 Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/9_XCzJVQ0vHT8hA7DULO66uGe5o.roa Signing time: Wed 21 Jan 2026 19:24:30 +0000 ROA not before: Wed 21 Jan 2026 19:24:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44375 IP address blocks: 93.126.0.0/18 maxlen: 18 193.178.200.0/22 maxlen: 22 193.178.200.0/24 maxlen: 24 2a13:f140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e2:03:fb:1a:da:14:45:b8:04:4f:8f:13:b5:a1:54:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3 Validity Not Before: Jan 21 19:24:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7f5c2cc9550d2f1d3f2103b0d42ceebab867b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:9f:7d:08:62:61:8f:5d:d3:b5:56:fc:84: 6b:92:e8:cb:e3:e9:8c:c5:56:c6:98:19:38:c1:8d: 0f:7d:a6:2e:18:c4:88:16:31:05:37:a4:3a:95:ef: 48:d2:29:d6:12:32:ae:38:00:40:1d:78:11:e1:5e: 2d:9d:81:a4:54:97:2c:e1:b4:d7:bc:21:9e:73:2f: 87:7c:74:20:cc:6b:aa:1b:48:88:09:26:94:96:f5: ca:55:fa:24:7c:16:d7:d6:cb:12:d5:2f:ff:a8:6d: 63:b6:66:e2:f6:18:94:24:a0:c2:44:ac:d5:c1:37: 64:29:2b:29:f8:6d:b7:d7:a4:d8:7d:d6:73:bb:5f: 08:b5:c0:05:45:43:a3:1b:fd:ac:84:1f:fe:bc:4d: 8a:c1:68:bb:70:53:fd:cb:ab:61:4d:13:09:dc:30: 7c:5e:0b:58:6e:b8:1b:3a:bf:c1:bc:c8:29:b5:94: bb:0f:c0:f9:c2:ee:7f:f3:51:71:44:4d:40:93:f1: 2e:0c:ec:d3:6a:35:a8:0d:11:9c:e9:fb:b1:3e:0d: 8f:e1:9d:92:87:52:40:0c:22:a7:e4:75:da:0a:59: c2:2d:59:8e:3a:8f:d3:0b:e2:9e:28:25:88:3e:39: 72:b7:e2:4d:69:9b:c0:b0:ee:0a:13:98:77:d4:4f: c4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F5:C2:CC:95:50:D2:F1:D3:F2:10:3B:0D:42:CE:EB:AB:86:7B:9A X509v3 Authority Key Identifier: keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/9_XCzJVQ0vHT8hA7DULO66uGe5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.126.0.0/18 193.178.200.0/22 IPv6: 2a13:f140::/29 Signature Algorithm: sha256WithRSAEncryption 8b:d4:ec:a6:07:62:3d:5d:e1:72:02:6b:08:32:0a:5f:86:17: 8f:f2:66:be:5a:e7:a5:04:85:a8:29:7c:88:82:e0:63:57:81: 9d:fe:5b:f7:cf:6c:e6:91:d7:1e:48:d7:3a:df:1b:07:d1:3f: bc:3c:6f:18:3e:58:33:10:34:bd:24:33:51:76:02:9a:c5:40: 72:cc:60:6e:3f:e8:c1:0e:51:3b:a3:f7:e4:64:be:c7:07:10: fc:df:90:da:71:a6:ba:da:2c:83:7b:3f:2f:e6:a2:44:f3:75: e1:1e:49:24:2f:7b:cc:69:2b:7f:58:54:51:99:df:90:2a:4b: 3b:e5:2a:d8:82:57:f8:12:f1:9c:f8:af:c9:45:5a:a9:5e:64: ad:52:b5:5e:a2:56:b8:fe:7c:98:3d:9b:28:86:43:2f:21:14: f2:06:34:83:ef:d5:73:5f:0e:10:fd:b5:28:2e:20:dd:0e:ab: 22:77:09:a1:b1:a9:22:c4:c1:a3:6f:ca:11:97:58:88:ed:53: 77:6b:4b:30:b0:d1:7d:d3:89:4f:8b:58:3f:62:0e:91:58:ad: bc:5a:9c:96:3d:85:d2:9a:1b:59:99:67:39:c1:92:e0:c2:1d: d4:22:7b:70:7e:a8:98:e0:67:20:29:01:50:c6:b6:ce:09:b9: 25:c4:6d:71 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZviA/sa2hRFuARPjxO1oVSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm NDA0ZDMwHhcNMjYwMTIxMTkyNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2Y1YzJjYzk1NTBkMmYxZDNmMjEwM2IwZDQyY2VlYmFiODY3YjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28affQhiYY9d07VW/IRrkujL4+mM xVbGmBk4wY0PfaYuGMSIFjEFN6Q6le9I0inWEjKuOABAHXgR4V4tnYGkVJcs4bTX vCGecy+HfHQgzGuqG0iICSaUlvXKVfokfBbX1ssS1S//qG1jtmbi9hiUJKDCRKzV wTdkKSsp+G2316TYfdZzu18ItcAFRUOjG/2shB/+vE2KwWi7cFP9y6thTRMJ3DB8 XgtYbrgbOr/BvMgptZS7D8D5wu5/81FxRE1Ak/EuDOzTajWoDRGc6fuxPg2P4Z2S h1JADCKn5HXaClnCLVmOOo/TC+KeKCWIPjlyt+JNaZvAsO4KE5h31E/E9QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPf1wsyVUNLx0/IQOw1CzuurhnuaMB8GA1UdIwQY MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt NmMzOTUwMTk0MzcwLzEvOV9YQ3pKVlEwdkhUOGhBN0RVTE82NnVHZTVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGXX4AAwQC wbLIMA0EAgACMAcDBQMqE/FAMA0GCSqGSIb3DQEBCwUAA4IBAQCL1OymB2I9XeFy AmsIMgpfhheP8ma+WuelBIWoKXyIguBjV4Gd/lv3z2zmkdceSNc63xsH0T+8PG8Y PlgzEDS9JDNRdgKaxUByzGBuP+jBDlE7o/fkZL7HBxD835Dacaa62iyDez8v5qJE 83XhHkkkL3vMaSt/WFRRmd+QKks75SrYglf4EvGc+K/JRVqpXmStUrVeola4/nyY PZsohkMvIRTyBjSD79VzXw4Q/bUoLiDdDqsidwmhsakixMGjb8oRl1iI7VN3a0sw sNF904lPi1g/Yg6RWK28WpyWPYXSmhtZmWc5wZLgwh3UIntwfqiY4GcgKQFQxrbO CbklxG1x -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:20 2026 by rpki-client