This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/j6yoIF9AWUp9UFDKXH65rXLEiss.roa File: j6yoIF9AWUp9UFDKXH65rXLEiss.roa (raw, json) Hash identifier: YAXw+V8+kO2QpRAGh9PLZOBVimIgU4loSZgv6+jbYAg= Subject key identifier: 8F:AC:A8:20:5F:40:59:4A:7D:50:50:CA:5C:7E:B9:AD:72:C4:8A:CB Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Certificate serial: 019B783543979894C609CD98C66DCC41A11A Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/j6yoIF9AWUp9UFDKXH65rXLEiss.roa Signing time: Thu 01 Jan 2026 06:18:35 +0000 ROA not before: Thu 01 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60709 IP address blocks: 194.102.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:43:97:98:94:c6:09:cd:98:c6:6d:cc:41:a1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Validity Not Before: Jan 1 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8faca8205f40594a7d5050ca5c7eb9ad72c48acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:22:2a:54:d2:c7:de:30:4a:dc:8a:e8:97: a9:88:86:84:e4:d0:89:9a:cf:4c:ef:db:e9:03:ab: b6:bc:ed:d9:0d:08:ce:bf:82:ae:d5:ca:b7:08:31: 0b:4d:75:1e:20:1c:58:fe:be:cb:fc:0d:a9:c2:b2: fc:cd:c8:f9:25:2e:2d:e2:d7:11:1d:5e:88:94:82: 2a:fd:9a:71:1b:e5:77:5a:34:3f:1f:94:eb:7c:75: 13:56:b4:66:35:0c:41:bb:a5:2d:b6:47:df:ea:6f: 6e:b1:91:ff:bd:94:fc:69:f8:90:a8:92:fe:f0:21: 58:a8:e5:87:73:60:1c:ce:ad:78:6a:97:be:16:d4: 1a:e7:ef:04:07:7d:1d:69:f8:83:84:1e:29:35:2f: 9c:4e:d4:a0:08:b2:55:8f:78:7d:9f:a9:fe:80:fb: be:79:1e:19:6a:e5:d9:8e:cf:2c:02:eb:16:93:d7: 02:b3:f5:0a:be:90:5b:12:31:96:a8:22:eb:ea:94: 07:25:be:e6:f6:c0:91:b0:ca:9d:66:31:10:71:af: 52:84:cf:f2:66:2e:ef:6c:60:8f:67:0d:04:21:c8: 32:16:b4:a7:77:8d:cc:3d:2f:96:17:8a:49:9b:5f: 59:8b:ad:f2:a3:b8:5a:ce:2a:e2:a7:15:56:af:b4: d0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AC:A8:20:5F:40:59:4A:7D:50:50:CA:5C:7E:B9:AD:72:C4:8A:CB X509v3 Authority Key Identifier: keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/j6yoIF9AWUp9UFDKXH65rXLEiss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.126.0/24 Signature Algorithm: sha256WithRSAEncryption 17:27:e4:fc:27:23:c0:80:e3:80:34:11:1a:cf:16:35:83:31: 62:21:1c:65:7f:19:20:28:fc:71:d6:f1:4a:b2:c7:09:e7:b6: 16:cb:67:eb:f4:8a:70:66:ed:02:51:65:02:d8:d9:e3:92:bf: 17:62:ea:23:97:60:ea:bd:9c:5d:64:5a:0f:15:69:cc:bf:d8: b5:4e:ee:71:9b:09:11:d9:73:10:e8:22:7e:d5:1e:ba:d7:93: 36:75:c1:44:b3:a1:06:61:49:02:a7:d8:73:5c:e5:ab:a4:f7: 86:b3:fa:b2:97:31:a1:76:f0:b4:e7:46:35:93:4c:c4:8e:06: 62:71:c3:60:8c:1e:16:7e:82:9d:e3:26:84:cf:40:97:07:85: d7:1b:24:e4:17:56:b1:b2:17:61:d2:53:df:3a:06:48:7e:79: 68:d4:26:2d:3c:45:5f:33:16:ba:f1:8e:71:8b:41:98:49:e9: 48:79:cc:c5:74:ef:2d:a1:94:bb:98:ee:0e:0c:45:a8:b0:cd: dd:78:15:f4:04:10:21:bb:6f:33:2e:34:f9:4a:16:37:dc:4e: 12:10:d9:ba:ed:2f:8d:dc:b9:58:5a:50:a5:42:58:93:4e:31: d7:01:eb:dd:a8:10:6f:46:4b:48:2a:fd:1e:cf:9d:2e:5b:ff: 08:f7:df:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NUOXmJTGCc2Yxm3MQaEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3 MDcwMmUwHhcNMjYwMTAxMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmFjYTgyMDVmNDA1OTRhN2Q1MDUwY2E1YzdlYjlhZDcyYzQ4YWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAragiKlTSx94wStyK6JepiIaE5NCJ ms9M79vpA6u2vO3ZDQjOv4Ku1cq3CDELTXUeIBxY/r7L/A2pwrL8zcj5JS4t4tcR HV6IlIIq/ZpxG+V3WjQ/H5TrfHUTVrRmNQxBu6Uttkff6m9usZH/vZT8afiQqJL+ 8CFYqOWHc2Aczq14ape+FtQa5+8EB30dafiDhB4pNS+cTtSgCLJVj3h9n6n+gPu+ eR4ZauXZjs8sAusWk9cCs/UKvpBbEjGWqCLr6pQHJb7m9sCRsMqdZjEQca9ShM/y Zi7vbGCPZw0EIcgyFrSnd43MPS+WF4pJm19Zi63yo7haziripxVWr7TQgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI+sqCBfQFlKfVBQylx+ua1yxIrLMB8GA1UdIwQY MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt MTNmODk4YmM3ZDBlLzEvajZ5b0lGOUFXVXA5VUZES1hINjVyWExFaXNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmZ+MA0G CSqGSIb3DQEBCwUAA4IBAQAXJ+T8JyPAgOOANBEazxY1gzFiIRxlfxkgKPxx1vFK sscJ57YWy2fr9IpwZu0CUWUC2Nnjkr8XYuojl2DqvZxdZFoPFWnMv9i1Tu5xmwkR 2XMQ6CJ+1R6615M2dcFEs6EGYUkCp9hzXOWrpPeGs/qylzGhdvC050Y1k0zEjgZi ccNgjB4WfoKd4yaEz0CXB4XXGyTkF1axshdh0lPfOgZIfnlo1CYtPEVfMxa68Y5x i0GYSelIeczFdO8toZS7mO4ODEWosM3deBX0BBAhu28zLjT5ShY33E4SENm67S+N 3LlYWlClQliTTjHXAevdqBBvRktIKv0ez50uW/8I998X -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:43 2026 by rpki-client