This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/x9pDA55suOaHe2WUqjOleSj0g7g.roa File: x9pDA55suOaHe2WUqjOleSj0g7g.roa (raw, json) Hash identifier: bgqabssPBjJKwPTFU4cVx8DILsuXbxQh3ehqIdNlubE= Subject key identifier: C7:DA:43:03:9E:6C:B8:E6:87:7B:65:94:AA:33:A5:79:28:F4:83:B8 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C1237690AB51CB4C738754079792E99 Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/x9pDA55suOaHe2WUqjOleSj0g7g.roa Signing time: Fri 02 Jan 2026 00:18:47 +0000 ROA not before: Fri 02 Jan 2026 00:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205782 IP address blocks: 194.27.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:37:69:0a:b5:1c:b4:c7:38:75:40:79:79:2e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7da43039e6cb8e6877b6594aa33a57928f483b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ac:e4:a2:6e:e2:64:fb:03:d4:ad:bf:c4:8e: 7b:0c:8f:9f:44:fc:c8:dc:d7:c1:e7:62:d8:ba:4d: 20:fb:87:54:2d:da:84:7c:71:6e:a8:08:47:cb:74: 75:fa:da:e3:84:9f:99:ed:1d:da:74:63:91:6c:f8: d8:37:e2:52:b5:0e:fa:ab:63:df:9e:b5:87:c9:93: 4c:46:0c:b0:84:2c:76:a5:30:0d:fa:6c:52:ee:55: 3e:79:e7:5f:e4:18:50:51:c0:87:60:f6:e7:6b:fb: 1e:8a:56:83:4c:49:cd:e6:e8:10:fa:4a:0e:84:5d: 0a:e6:41:a0:3a:e7:24:00:62:ba:4c:82:ea:df:8f: 17:ac:b9:a5:ec:da:f7:ab:c9:b0:46:70:27:79:7e: 48:97:d7:e3:86:d6:27:b4:00:e8:2c:2e:c6:01:33: aa:a2:01:a6:2c:e4:d4:dd:7f:d1:67:7b:7e:6d:7c: 3c:e9:df:ac:b3:14:3c:30:f5:81:82:d1:4e:7d:64: 63:70:18:89:35:03:8a:ba:2c:e1:24:ac:be:dd:05: ec:e3:f2:5a:3a:98:8e:27:44:da:cd:5e:3e:e3:7a: 31:94:e3:3d:ce:58:db:08:ee:39:b3:e9:52:2a:82: f6:23:4f:02:58:5c:3a:4b:63:b1:dd:8e:8f:fc:30: 99:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:DA:43:03:9E:6C:B8:E6:87:7B:65:94:AA:33:A5:79:28:F4:83:B8 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/x9pDA55suOaHe2WUqjOleSj0g7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.27.222.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:07:ad:86:bf:b0:6c:bd:83:25:21:eb:65:b3:67:9a:62:ec: 37:d8:5b:ae:83:d5:b8:6b:55:a8:77:a0:78:3c:f6:95:73:a7: 0e:3b:87:ea:04:95:12:05:e0:9a:02:3c:8c:a4:75:32:5f:70: 3e:e7:34:c9:5e:b3:af:c0:ff:69:cd:f1:05:15:2e:9d:d8:99: 17:b8:af:07:9d:54:a2:22:88:d0:e4:ff:32:fb:c3:e7:da:f1: 21:90:1b:a5:b8:03:54:0b:4c:cf:df:74:40:e9:a1:85:62:e2: ba:c6:1d:cc:01:31:6e:0d:40:96:3e:2d:fa:a3:f6:51:5b:ec: b5:25:d7:32:b6:24:4f:7f:80:f9:c0:07:3c:76:f6:d4:86:0b: ec:8c:b6:e4:98:7f:42:aa:4e:29:e8:fc:7a:32:d6:a5:6c:db: eb:c5:fa:8e:2d:6d:62:94:e4:bf:b5:ab:e5:fa:1d:91:f5:49: 4b:0b:6b:71:5b:8e:9d:b9:53:ac:58:28:82:cd:dd:5b:10:61: d6:c9:24:fe:44:7e:19:95:4a:d0:24:bd:a9:d3:dc:06:6a:63: 95:ba:08:49:47:88:17:b0:50:39:a4:de:19:3e:e0:94:d8:5e: c1:7a:aa:39:b6:41:d5:53:39:da:ec:d6:3b:c3:e1:2d:ec:f3: 6f:3d:10:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EjdpCrUctMc4dUB5eS6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2RhNDMwMzllNmNiOGU2ODc3YjY1OTRhYTMzYTU3OTI4ZjQ4M2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvazkom7iZPsD1K2/xI57DI+fRPzI 3NfB52LYuk0g+4dULdqEfHFuqAhHy3R1+trjhJ+Z7R3adGORbPjYN+JStQ76q2Pf nrWHyZNMRgywhCx2pTAN+mxS7lU+eedf5BhQUcCHYPbna/seilaDTEnN5ugQ+koO hF0K5kGgOuckAGK6TILq348XrLml7Nr3q8mwRnAneX5Il9fjhtYntADoLC7GATOq ogGmLOTU3X/RZ3t+bXw86d+ssxQ8MPWBgtFOfWRjcBiJNQOKuizhJKy+3QXs4/Ja OpiOJ0TazV4+43oxlOM9zljbCO45s+lSKoL2I08CWFw6S2Ox3Y6P/DCZxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfaQwOebLjmh3tllKozpXko9IO4MB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEveDlwREE1NXN1T2FIZTJXVXFqT2xlU2owZzdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhveMA0G CSqGSIb3DQEBCwUAA4IBAQB/B62Gv7BsvYMlIetls2eaYuw32Fuug9W4a1Wod6B4 PPaVc6cOO4fqBJUSBeCaAjyMpHUyX3A+5zTJXrOvwP9pzfEFFS6d2JkXuK8HnVSi IojQ5P8y+8Pn2vEhkBuluANUC0zP33RA6aGFYuK6xh3MATFuDUCWPi36o/ZRW+y1 JdcytiRPf4D5wAc8dvbUhgvsjLbkmH9Cqk4p6Px6MtalbNvrxfqOLW1ilOS/tavl +h2R9UlLC2txW46duVOsWCiCzd1bEGHWyST+RH4ZlUrQJL2p09wGamOVughJR4gX sFA5pN4ZPuCU2F7Beqo5tkHVUzna7NY7w+Et7PNvPRC4 -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:59 2026 by rpki-client