This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/1cBxWcRD-ajLhLNgA3S5Au__sOc.roa File: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (raw, json) Hash identifier: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE= Subject key identifier: D5:C0:71:59:C4:43:F9:A8:CB:84:B3:60:03:74:B9:02:EF:FF:B0:E7 Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b Certificate serial: 019B7EA4DDEE440D298020EEF73527412E3F Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/1cBxWcRD-ajLhLNgA3S5Au__sOc.roa Signing time: Fri 02 Jan 2026 12:18:12 +0000 ROA not before: Fri 02 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51043 IP address blocks: 193.161.8.0/24 maxlen: 24 193.161.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:dd:ee:44:0d:29:80:20:ee:f7:35:27:41:2e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b Validity Not Before: Jan 2 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5c07159c443f9a8cb84b3600374b902efffb0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:ac:e2:c5:2c:30:17:ee:0b:0a:0b:fc:25: cf:71:b7:6b:7b:28:05:e6:99:ef:09:7f:49:c8:19: f9:21:3b:54:ce:dc:74:69:ee:ca:0f:71:da:39:5d: 95:3c:b3:ba:df:06:ad:8b:86:4e:20:06:f5:c9:db: 05:d6:d0:a9:87:f6:2d:79:63:a1:91:fd:f0:37:6c: 02:ba:5a:2d:85:9b:8e:3b:a0:f1:93:14:b7:8e:88: 67:07:93:cb:b5:05:a1:16:54:49:50:5e:24:fe:b3: c6:40:18:86:c0:22:e0:ed:e1:9b:bf:95:ef:c1:76: 22:de:28:ef:ec:6e:ad:11:30:f6:06:53:3b:74:62: 6b:50:e6:29:ef:80:55:12:65:1d:0e:92:16:01:8a: d7:90:4d:bd:33:0c:f2:87:45:a8:60:31:5e:cd:32: 02:46:94:dd:a9:8e:20:38:3c:7c:cc:0f:81:ce:74: 5e:1d:64:bd:ad:11:cd:64:e9:57:84:2a:07:b5:1c: 63:43:8e:ac:88:a4:cc:ba:ce:a9:c1:2b:2e:1c:f3: 91:2d:e7:1e:22:bd:24:ec:dd:d1:ba:3d:a1:b6:e0: c9:21:47:ef:10:ae:3b:d9:6e:2a:e0:be:01:d0:5e: 51:49:9d:4e:18:db:e2:cd:d5:d5:88:84:24:c6:df: c7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C0:71:59:C4:43:F9:A8:CB:84:B3:60:03:74:B9:02:EF:FF:B0:E7 X509v3 Authority Key Identifier: keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/1cBxWcRD-ajLhLNgA3S5Au__sOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.8.0/24 193.161.11.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a9:31:db:2f:7c:ef:08:35:79:5d:b8:bb:04:81:fc:9f:41: da:2c:bc:57:95:25:49:d1:af:50:6a:dd:b1:bf:89:bd:f3:32: e0:5a:8f:14:60:3c:11:19:9b:83:b7:ac:4e:a7:6f:5a:11:d6: ed:fc:a4:63:b3:61:d0:69:26:b8:94:45:39:9a:7e:42:02:7f: e4:34:fd:6f:e4:84:b9:be:8c:a0:a4:32:d8:17:8f:8c:09:69: c5:b5:05:68:49:d9:c4:29:c4:99:8e:67:fd:5f:44:5b:f1:66: 91:81:0b:5d:d7:b8:88:c1:d3:3d:9d:a0:ad:70:49:b3:ed:24: 55:cb:9c:68:67:f4:d7:9b:e5:9c:36:5d:d1:9d:3d:ae:be:fb: e0:bc:79:c3:07:73:0f:fa:7c:95:ff:fd:81:4c:b7:41:44:05: 3e:e4:ee:67:20:48:b4:0c:2e:12:2c:37:64:79:2d:9f:8f:2f: 9f:0e:8d:d6:e9:f3:81:69:7b:68:a1:db:b2:09:d2:70:6f:79: 22:dd:b7:63:03:97:94:df:76:cd:22:d4:a8:68:4d:8c:c7:7a: 1f:7d:d8:01:1c:3a:f7:69:e9:97:b0:8c:8e:f7:e9:99:18:5b: d2:1c:15:89:63:06:c7:ae:4b:6a:d3:27:28:29:77:24:45:b6: 21:51:24:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pN3uRA0pgCDu9zUnQS4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YjhmYjkyMjgwYWIwNWI0NDMyZTQzYjk1NDUwZTczYjI3 NzNkNWIwHhcNMjYwMTAyMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWMwNzE1OWM0NDNmOWE4Y2I4NGIzNjAwMzc0YjkwMmVmZmZiMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cis4sUsMBfuCwoL/CXPcbdreygF 5pnvCX9JyBn5ITtUztx0ae7KD3HaOV2VPLO63wati4ZOIAb1ydsF1tCph/YteWOh kf3wN2wCulothZuOO6DxkxS3johnB5PLtQWhFlRJUF4k/rPGQBiGwCLg7eGbv5Xv wXYi3ijv7G6tETD2BlM7dGJrUOYp74BVEmUdDpIWAYrXkE29Mwzyh0WoYDFezTIC RpTdqY4gODx8zA+BznReHWS9rRHNZOlXhCoHtRxjQ46siKTMus6pwSsuHPORLece Ir0k7N3Ruj2htuDJIUfvEK472W4q4L4B0F5RSZ1OGNvizdXViIQkxt/HQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNXAcVnEQ/moy4SzYAN0uQLv/7DnMB8GA1UdIwQY MBaAFAm4+5IoCrBbRDLkO5VFDnOydz1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTkt ZGE3Mzk4NTZjZmI4LzEvMWNCeFdjUkQtYWpMaExOZ0EzUzVBdV9fc09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83MjZkMTUtNWMxOS00ZTg1LWJjNTktZGE3Mzk4NTZjZmI4 LzEvQ2JqN2tpZ0tzRnRFTXVRN2xVVU9jN0ozUFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwaEIAwQA waELMA0GCSqGSIb3DQEBCwUAA4IBAQBBqTHbL3zvCDV5Xbi7BIH8n0HaLLxXlSVJ 0a9Qat2xv4m98zLgWo8UYDwRGZuDt6xOp29aEdbt/KRjs2HQaSa4lEU5mn5CAn/k NP1v5IS5voygpDLYF4+MCWnFtQVoSdnEKcSZjmf9X0Rb8WaRgQtd17iIwdM9naCt cEmz7SRVy5xoZ/TXm+WcNl3RnT2uvvvgvHnDB3MP+nyV//2BTLdBRAU+5O5nIEi0 DC4SLDdkeS2fjy+fDo3W6fOBaXtooduyCdJwb3ki3bdjA5eU33bNItSoaE2Mx3of fdgBHDr3aemXsIyO9+mZGFvSHBWJYwbHrktq0ycoKXckRbYhUSRp -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:28 2026 by rpki-client