This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/0P9xPfTELLOLsIkje98I5DI3JMM.roa File: 0P9xPfTELLOLsIkje98I5DI3JMM.roa (raw, json) Hash identifier: /5GbceYSZZKUMKDpKsep1xA2kefROVR28hBE+53Ms/s= Subject key identifier: D0:FF:71:3D:F4:C4:2C:B3:8B:B0:89:23:7B:DF:08:E4:32:37:24:C3 Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f Certificate serial: 019B7CEDC4FCC0C9FF21BEC54AECE047C198 Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/0P9xPfTELLOLsIkje98I5DI3JMM.roa Signing time: Fri 02 Jan 2026 04:18:35 +0000 ROA not before: Fri 02 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201575 IP address blocks: 193.228.1.0/24 maxlen: 24 2a12:e342::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c4:fc:c0:c9:ff:21:be:c5:4a:ec:e0:47:c1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0ff713df4c42cb38bb089237bdf08e4323724c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:36:14:52:1f:8e:eb:0b:3c:a1:0b:38:71: 05:87:6e:e9:9d:04:84:8d:3c:b0:f2:6d:22:11:31: 67:6e:f4:82:8b:52:74:08:21:ec:e4:4f:9c:5a:34: e8:fb:6f:30:76:fc:67:99:31:90:1d:a5:96:58:f9: 1f:fb:0f:98:ff:5b:ea:1d:95:ce:d3:fc:a2:68:99: ab:e1:44:d9:6e:0c:8e:5e:1f:44:9e:c4:ee:3c:70: 4a:e1:96:9c:eb:20:21:57:d5:a4:fb:0b:a0:d0:3d: 05:72:b5:6c:a2:c8:2b:a8:c5:71:39:17:7e:2e:9f: 64:06:5d:39:8b:d2:2f:97:e5:6f:68:48:f8:ff:6b: e3:53:8f:03:f5:65:08:1c:ae:fd:a3:84:b1:cd:7c: ad:83:5b:48:ef:1a:ed:3a:70:07:ec:5e:a7:0d:fe: 9f:cf:92:43:b2:3b:4c:75:67:4f:bd:d8:88:7d:ed: 86:e7:33:0a:00:e7:6c:75:25:d6:9c:97:aa:2d:b9: 97:ef:16:25:00:05:21:83:7a:56:a7:04:49:ee:00: 81:9b:fe:e4:d7:c7:79:ef:b4:d1:7d:89:af:e4:5b: f5:d0:a9:51:5e:a6:b8:d2:ec:99:9b:f3:07:bb:00: 1b:cb:77:03:ea:c1:74:fc:27:52:65:0e:f1:0c:1b: 1b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FF:71:3D:F4:C4:2C:B3:8B:B0:89:23:7B:DF:08:E4:32:37:24:C3 X509v3 Authority Key Identifier: keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/0P9xPfTELLOLsIkje98I5DI3JMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.1.0/24 IPv6: 2a12:e342::/32 Signature Algorithm: sha256WithRSAEncryption 3d:19:3a:2e:7b:b2:f3:54:f2:f9:0e:00:a4:78:8c:91:b4:89: 20:fa:09:36:0f:99:78:e4:3b:3e:f6:34:0b:78:9a:b4:e0:da: 7f:9e:74:05:80:07:d1:5f:ef:81:25:67:89:8f:f6:4f:fc:d1: b4:42:af:0f:85:c9:ac:68:dc:f5:6e:5c:96:c8:78:72:21:00: 8f:2d:32:c2:02:e0:a5:cf:e0:ed:ab:38:af:a2:78:38:2a:e0: b5:f4:24:9d:38:29:03:63:33:1d:62:9a:bf:d6:39:1a:10:09: 06:a5:9e:be:fb:3d:14:5e:50:37:2b:6d:b5:2d:a0:2b:ad:c6: 9c:1a:a5:52:65:54:e9:48:7e:da:e1:e4:4b:d3:78:5d:8c:23: 80:81:68:2a:ba:75:44:1f:26:07:83:b6:d1:5c:49:5b:64:72: 18:f8:d3:2b:46:8c:4f:ff:95:ac:35:91:c5:bb:3b:a6:e1:9b: 30:5f:dc:20:81:52:fe:18:ed:39:b9:c3:99:1a:38:3c:aa:83: d1:dc:28:e1:1a:4d:b8:ee:5a:14:4a:f6:92:53:b9:a6:de:0c: 65:d6:a7:4f:bc:b3:07:47:8f:c5:92:4c:7f:e7:a4:f5:8a:aa: 69:0e:1b:81:5b:0f:b3:42:6c:b5:f6:60:f5:c1:90:7b:75:b8: b3:70:69:56 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87cT8wMn/Ib7FSuzgR8GYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzYzM1Y2E4M2ZjZGY3MWIyNDRlZDgwM2FjNDY4ZTE0NTNk ODI2OGYwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGZmNzEzZGY0YzQyY2IzOGJiMDg5MjM3YmRmMDhlNDMyMzcyNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tk2FFIfjusLPKELOHEFh27pnQSE jTyw8m0iETFnbvSCi1J0CCHs5E+cWjTo+28wdvxnmTGQHaWWWPkf+w+Y/1vqHZXO 0/yiaJmr4UTZbgyOXh9EnsTuPHBK4Zac6yAhV9Wk+wug0D0FcrVsosgrqMVxORd+ Lp9kBl05i9Ivl+VvaEj4/2vjU48D9WUIHK79o4SxzXytg1tI7xrtOnAH7F6nDf6f z5JDsjtMdWdPvdiIfe2G5zMKAOdsdSXWnJeqLbmX7xYlAAUhg3pWpwRJ7gCBm/7k 18d577TRfYmv5Fv10KlRXqa40uyZm/MHuwAby3cD6sF0/CdSZQ7xDBsb7wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFND/cT30xCyzi7CJI3vfCOQyNyTDMB8GA1UdIwQY MBaAFFPDXKg/zfcbJE7YA6xGjhRT2CaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQt NDExYTI3MTIxNjRkLzEvMFA5eFBmVEVMTE9Mc0lramU5OEk1REkzSk1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQtNDExYTI3MTIxNjRk LzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAweQBMA0E AgACMAcDBQAqEuNCMA0GCSqGSIb3DQEBCwUAA4IBAQA9GToue7LzVPL5DgCkeIyR tIkg+gk2D5l45Ds+9jQLeJq04Np/nnQFgAfRX++BJWeJj/ZP/NG0Qq8PhcmsaNz1 blyWyHhyIQCPLTLCAuClz+Dtqzivong4KuC19CSdOCkDYzMdYpq/1jkaEAkGpZ6+ +z0UXlA3K221LaArrcacGqVSZVTpSH7a4eRL03hdjCOAgWgqunVEHyYHg7bRXElb ZHIY+NMrRoxP/5WsNZHFuzum4ZswX9wggVL+GO05ucOZGjg8qoPR3CjhGk247loU SvaSU7mm3gxl1qdPvLMHR4/Fkkx/56T1iqppDhuBWw+zQmy19mD1wZB7dbizcGlW -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:33 2026 by rpki-client