This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/9K4KSgE7a4TINjU8T65DCXK4OQE.roa File: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (raw, json) Hash identifier: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk= Subject key identifier: F4:AE:0A:4A:01:3B:6B:84:C8:36:35:3C:4F:AE:43:09:72:B8:39:01 Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Certificate serial: 019B7DC97CB4CDDC9E79E5AC7AA58A1C9C09 Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/9K4KSgE7a4TINjU8T65DCXK4OQE.roa Signing time: Fri 02 Jan 2026 08:18:35 +0000 ROA not before: Fri 02 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 786 IP address blocks: 129.12.0.0/16 maxlen: 16 192.138.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:7c:b4:cd:dc:9e:79:e5:ac:7a:a5:8a:1c:9c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Validity Not Before: Jan 2 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4ae0a4a013b6b84c836353c4fae430972b83901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:7e:fe:52:2e:bd:32:54:31:99:25:8f:f0: d3:f9:49:2e:dd:35:cb:ed:eb:9e:a0:bf:35:15:b2: 7f:97:24:ab:f2:95:50:e0:d7:c1:5d:90:f5:3d:91: fb:e8:33:dd:c1:37:77:eb:f0:61:68:67:fd:e7:8a: 04:68:7d:0a:58:3f:fe:2a:0b:18:0b:73:8d:fe:51: 2f:92:7e:6e:36:a4:0c:17:87:79:a8:37:d3:a6:b7: f2:08:8e:cb:2a:1c:54:36:a1:4c:ef:4c:51:00:05: 01:60:13:02:44:f7:f4:c6:a6:3f:2f:e7:f4:f5:bb: b9:97:41:77:3f:f2:35:e4:1c:af:58:76:c9:0b:96: 72:0b:75:b3:fa:1a:01:ce:99:22:7e:2a:e2:2a:0e: 7c:bd:ee:c4:32:2c:fd:0e:c7:cd:9b:ca:0d:e0:51: 76:c7:4e:70:29:aa:ef:ad:da:83:0b:1a:ff:d7:cc: 61:00:db:40:62:78:e2:0c:44:c3:3c:e9:11:14:96: 98:c3:fc:9c:6d:88:f5:fb:4b:f3:fa:39:15:2e:1c: b1:af:c8:6b:52:30:91:0d:f7:51:35:fd:e0:a6:84: 77:c4:28:f0:ab:46:2f:cf:bb:a7:34:36:a4:a3:cf: df:13:cf:e8:97:20:f7:4f:6b:04:53:82:39:f4:21: 99:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AE:0A:4A:01:3B:6B:84:C8:36:35:3C:4F:AE:43:09:72:B8:39:01 X509v3 Authority Key Identifier: keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/9K4KSgE7a4TINjU8T65DCXK4OQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.12.0.0/16 192.138.248.0/24 Signature Algorithm: sha256WithRSAEncryption 68:ec:11:05:d5:f6:31:69:61:03:f7:b9:2d:56:55:9c:cc:7b: 7a:f6:94:21:a7:cb:f0:85:e5:2f:6a:9c:f1:1e:74:0c:20:43: c3:c9:2a:8c:02:30:05:81:b1:13:92:98:93:ac:86:a7:52:55: d9:27:ae:04:f9:75:02:65:08:3c:d1:e1:d3:d0:0b:19:80:2e: 36:01:ff:01:f0:a8:46:8b:cd:63:dd:65:c0:e6:54:59:c4:91: d1:1e:7c:7f:90:2c:ff:c4:2f:e9:c7:11:f7:e5:c2:30:5f:e7: cc:04:64:ba:70:43:f7:8b:f7:18:4d:10:2f:95:2f:a8:63:b3: 69:69:46:95:36:dd:ad:3f:0c:f0:f7:dd:fe:03:21:bd:b7:cb: 67:d8:1d:fd:27:c2:54:3c:bc:c8:1b:c5:29:34:1c:4a:33:76: 7a:10:40:15:96:fa:8a:3a:7c:72:1f:27:73:ef:98:0c:bf:a3: dc:0d:a3:e4:bf:e1:7b:de:24:2a:c1:56:d6:b3:e1:07:32:08: 9e:9e:98:e7:af:c6:42:a1:fe:72:04:c5:c4:70:66:80:ec:e3: aa:2f:72:ce:74:17:c6:e1:16:14:53:fe:f8:3c:70:6d:9f:62: 84:f8:44:c9:59:9c:d7:e0:43:3e:0a:10:e8:37:b0:fd:e2:07: 79:55:44:31 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt9yXy0zdyeeeWseqWKHJwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTlmYTg0ODVmZjBmNGI4NWM3ZDRlZjQ3OGY5ODYwOTNk OWVjY2IwHhcNMjYwMTAyMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGFlMGE0YTAxM2I2Yjg0YzgzNjM1M2M0ZmFlNDMwOTcyYjgzOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBd+/lIuvTJUMZklj/DT+Uku3TXL 7eueoL81FbJ/lySr8pVQ4NfBXZD1PZH76DPdwTd36/BhaGf954oEaH0KWD/+KgsY C3ON/lEvkn5uNqQMF4d5qDfTprfyCI7LKhxUNqFM70xRAAUBYBMCRPf0xqY/L+f0 9bu5l0F3P/I15ByvWHbJC5ZyC3Wz+hoBzpkifiriKg58ve7EMiz9DsfNm8oN4FF2 x05wKarvrdqDCxr/18xhANtAYnjiDETDPOkRFJaYw/ycbYj1+0vz+jkVLhyxr8hr UjCRDfdRNf3gpoR3xCjwq0Yvz7unNDako8/fE8/olyD3T2sEU4I59CGZ8QIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFPSuCkoBO2uEyDY1PE+uQwlyuDkBMB8GA1UdIwQY MBaAFAap+oSF/w9LhcfU70ePmGCT2ezLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQt MmE0NjQwOTEzNTZiLzEvOUs0S1NnRTdhNFRJTmpVOFQ2NURDWEs0T1FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQtMmE0NjQwOTEzNTZi LzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAgQwDBADA ivgwDQYJKoZIhvcNAQELBQADggEBAGjsEQXV9jFpYQP3uS1WVZzMe3r2lCGny/CF 5S9qnPEedAwgQ8PJKowCMAWBsROSmJOshqdSVdknrgT5dQJlCDzR4dPQCxmALjYB /wHwqEaLzWPdZcDmVFnEkdEefH+QLP/EL+nHEfflwjBf58wEZLpwQ/eL9xhNEC+V L6hjs2lpRpU23a0/DPD33f4DIb23y2fYHf0nwlQ8vMgbxSk0HEozdnoQQBWW+oo6 fHIfJ3PvmAy/o9wNo+S/4XveJCrBVtaz4QcyCJ6emOevxkKh/nIExcRwZoDs46ov cs50F8bhFhRT/vg8cG2fYoT4RMlZnNfgQz4KEOg3sP3iB3lVRDE= -----END CERTIFICATE-----Generated at Mon Jan 26 08:58:21 2026 by rpki-client