This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/9O4dKfnZgTgqWB_iiNETLsmvwXY.roa File: 9O4dKfnZgTgqWB_iiNETLsmvwXY.roa (raw, json) Hash identifier: B3+44Wl16VVGNQlYDiIt0cK5DguWkC82Gzjl2M8qljQ= Subject key identifier: F4:EE:1D:29:F9:D9:81:38:2A:58:1F:E2:88:D1:13:2E:C9:AF:C1:76 Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135 Certificate serial: 019B7E374A6BADAA1EA45A1E96132876A846 Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/9O4dKfnZgTgqWB_iiNETLsmvwXY.roa Signing time: Fri 02 Jan 2026 10:18:31 +0000 ROA not before: Fri 02 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3292 IP address blocks: 2.110.0.0/20 maxlen: 20 2.110.16.0/22 maxlen: 22 2.110.32.0/20 maxlen: 20 91.199.190.0/24 maxlen: 24 185.158.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4a:6b:ad:aa:1e:a4:5a:1e:96:13:28:76:a8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135 Validity Not Before: Jan 2 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4ee1d29f9d981382a581fe288d1132ec9afc176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:a4:95:2d:fa:06:06:11:af:a3:f2:b6:2f: 5e:e3:f7:ab:10:8a:c8:ce:bd:8e:94:f8:34:c4:36: 14:f9:1b:5a:ef:a1:ee:86:cf:02:1c:01:0e:4b:a1: e8:3e:7c:92:d2:29:ea:39:c9:ca:3f:0a:b4:4e:86: c4:20:74:20:60:46:f4:8c:5e:fd:48:ec:01:42:31: 68:5e:3f:da:1d:06:b3:f7:05:f1:9b:c5:05:4d:9c: 53:2f:22:db:a8:e7:90:07:c8:f6:5c:ca:78:03:c8: 0b:a7:bd:bf:43:28:b6:12:45:52:64:0b:67:8e:70: 47:a4:77:c0:29:54:8e:97:7b:0e:dc:99:99:4a:da: 40:83:91:49:d1:f0:d6:f8:d3:75:38:46:6f:62:0a: ca:a3:73:bb:e8:80:2e:e0:69:36:33:44:69:b6:64: 95:78:e3:15:c7:88:70:bc:78:d3:0d:b9:da:2f:97: ea:6a:f4:83:3b:88:09:2d:d2:a0:12:9c:f7:43:1d: c9:f6:af:b3:0c:4e:44:75:45:bf:f7:5f:06:be:07: 08:36:52:0a:98:6d:2a:85:54:7c:00:a5:97:55:cf: d2:1e:8d:be:26:56:c0:3c:77:b7:b5:54:d2:92:38: 5b:d2:01:5a:01:38:04:71:87:1c:b9:61:c3:aa:ed: a0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EE:1D:29:F9:D9:81:38:2A:58:1F:E2:88:D1:13:2E:C9:AF:C1:76 X509v3 Authority Key Identifier: keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/9O4dKfnZgTgqWB_iiNETLsmvwXY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.110.0.0-2.110.19.255 2.110.32.0/20 91.199.190.0/24 185.158.163.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:bf:4a:e7:45:28:12:d6:6e:26:d2:bd:76:6f:07:7e:ec:59: 54:16:1a:4d:a0:d4:89:42:7b:ba:a3:f6:d7:03:8e:69:72:44: 0d:54:2f:20:bb:17:d9:92:7d:1e:d5:cd:92:cb:13:3c:6a:b8: fc:f5:df:ec:ce:7f:c4:22:a3:56:f7:5d:86:f4:42:03:2a:4d: 4a:63:7d:40:13:20:7a:76:88:b9:73:b4:97:78:e3:67:3c:ca: 09:2f:e9:71:60:a9:77:7c:ca:70:80:28:f8:58:27:13:7f:54: 1d:56:7e:51:e9:9b:1a:69:3c:e3:56:a1:d9:db:db:99:ea:af: 6c:cf:17:90:a6:37:fc:9f:4f:19:04:36:f6:29:5e:d8:3c:9d: 2b:ba:13:92:d1:7f:01:da:2c:08:80:8e:e1:77:51:4e:20:6a: 48:6f:8b:b4:7f:f1:46:dd:bf:27:ae:da:5d:47:3d:fa:88:cc: a8:b5:e8:a0:29:a7:a7:d7:21:64:5c:a7:26:4b:c2:f7:fb:b2: 42:09:b1:cb:92:50:b2:a5:cf:0b:03:d9:c2:12:9f:17:bf:b2: 66:01:e5:45:fb:fa:4a:3c:c9:40:6c:3c:a1:b3:0e:c9:bf:bd: 85:31:c9:5a:4c:7e:5c:39:c4:d2:34:27:c8:6f:2a:9e:24:3c: a9:a0:47:86 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+N0prraoepFoelhModqhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm ZGExMzUwHhcNMjYwMTAyMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGVlMWQyOWY5ZDk4MTM4MmE1ODFmZTI4OGQxMTMyZWM5YWZjMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpiklS36BgYRr6Pyti9e4/erEIrI zr2OlPg0xDYU+Rta76Huhs8CHAEOS6HoPnyS0inqOcnKPwq0TobEIHQgYEb0jF79 SOwBQjFoXj/aHQaz9wXxm8UFTZxTLyLbqOeQB8j2XMp4A8gLp72/Qyi2EkVSZAtn jnBHpHfAKVSOl3sO3JmZStpAg5FJ0fDW+NN1OEZvYgrKo3O76IAu4Gk2M0RptmSV eOMVx4hwvHjTDbnaL5fqavSDO4gJLdKgEpz3Qx3J9q+zDE5EdUW/918GvgcINlIK mG0qhVR8AKWXVc/SHo2+JlbAPHe3tVTSkjhb0gFaATgEcYccuWHDqu2gPQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPTuHSn52YE4Klgf4ojREy7Jr8F2MB8GA1UdIwQY MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1 LTUyMWZhNDFkZmM5Ni8xLzlPNGRLZm5aZ1RncVdCX2lpTkVUTHNtdndYWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1LTUyMWZhNDFkZmM5 Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwOAYIKwYBBQUHAQcBAf8EKTAnMCUEAgABMB8wCwMDAQJu AwQCAm4QAwQEAm4gAwQAW8e+AwQAuZ6jMA0GCSqGSIb3DQEBCwUAA4IBAQBLv0rn RSgS1m4m0r12bwd+7FlUFhpNoNSJQnu6o/bXA45pckQNVC8guxfZkn0e1c2SyxM8 arj89d/szn/EIqNW912G9EIDKk1KY31AEyB6doi5c7SXeONnPMoJL+lxYKl3fMpw gCj4WCcTf1QdVn5R6ZsaaTzjVqHZ29uZ6q9szxeQpjf8n08ZBDb2KV7YPJ0ruhOS 0X8B2iwIgI7hd1FOIGpIb4u0f/FG3b8nrtpdRz36iMyoteigKaen1yFkXKcmS8L3 +7JCCbHLklCypc8LA9nCEp8Xv7JmAeVF+/pKPMlAbDyhsw7Jv72FMclaTH5cOcTS NCfIbyqeJDypoEeG -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:52 2026 by rpki-client