This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9b1v41moLoP0E_rGwky_Q16NQF0.roa File: 9b1v41moLoP0E_rGwky_Q16NQF0.roa (raw, json) Hash identifier: VW6jiIYufHK91t8LfAO+mn8RlAP4Vfz6cQq4nnoBnB8= Subject key identifier: F5:BD:6F:E3:59:A8:2E:83:F4:13:FA:C6:C2:4C:BF:43:5E:8D:40:5D Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC7C808AF0BE5AF12D40DA7925DACA Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9b1v41moLoP0E_rGwky_Q16NQF0.roa Signing time: Thu 01 Jan 2026 14:18:20 +0000 ROA not before: Thu 01 Jan 2026 14:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215232 IP address blocks: 193.23.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:7c:80:8a:f0:be:5a:f1:2d:40:da:79:25:da:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5bd6fe359a82e83f413fac6c24cbf435e8d405d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:80:17:b6:39:a4:cd:4f:15:7c:ed:d0:8d:cc: f9:9b:9c:31:4b:12:01:32:12:6d:63:1b:8d:45:c5: d2:42:d4:f6:da:6a:66:56:cd:7b:8d:ae:95:9a:65: db:f4:11:e5:9f:ff:5d:24:12:f6:10:16:7c:ca:a3: d2:97:9b:9d:53:83:58:09:80:65:fe:f2:39:e2:2f: dd:74:a3:78:bc:1c:1b:67:73:20:c5:ea:34:41:68: 9b:65:ca:50:6a:fe:13:3d:d4:39:74:48:1c:ed:78: ff:d3:c8:a7:b9:60:10:17:7f:67:56:83:a1:a1:a6: 59:bb:5c:d1:b6:32:32:30:db:28:fc:b9:b4:8e:e0: 96:ab:3a:4b:b0:4c:a4:54:6b:69:26:e0:d2:b4:da: 79:5b:86:55:77:00:fc:d7:02:f9:4e:d0:f0:bd:f8: cd:11:81:d3:12:0c:5c:0b:f1:36:7e:6e:ff:92:6c: 17:03:38:bb:ef:a9:52:97:ab:6a:e5:a4:6e:ab:28: 77:90:5c:3d:a9:70:47:b3:65:92:94:3b:73:bf:93: 12:ee:d4:0a:97:6c:9b:e2:56:fd:24:f3:6f:a7:8c: c7:22:28:da:45:06:8c:a3:bc:bd:36:9a:cf:63:34: fa:33:45:39:4b:a1:00:6f:8c:0c:4c:36:25:ff:fc: f6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BD:6F:E3:59:A8:2E:83:F4:13:FA:C6:C2:4C:BF:43:5E:8D:40:5D X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9b1v41moLoP0E_rGwky_Q16NQF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.221.0/24 Signature Algorithm: sha256WithRSAEncryption ad:77:d1:ab:8d:d5:1a:53:77:9e:a3:d1:43:cb:6e:80:8c:e0: 51:55:54:3e:1b:87:2d:de:fc:0b:58:43:b3:23:90:b8:c0:9a: 2a:81:7e:ae:04:18:dd:e1:ce:60:16:35:c1:5d:c5:a0:5a:8d: c8:52:5b:1d:ce:17:1e:0f:38:6a:ab:fd:18:4e:75:9d:e2:9b: 37:4f:29:27:49:18:44:53:bb:bf:f5:fd:e9:cd:66:2e:93:1c: df:dc:76:ba:ea:65:63:b2:d1:1d:e4:1f:e3:1e:5d:7d:fd:cd: d4:8d:f4:b4:73:1a:2e:8d:42:4f:84:46:98:fe:4d:da:bd:48: 1d:55:a3:ec:5b:31:c4:63:d5:c8:2b:8c:a1:7f:c6:ee:46:29: cc:b2:e9:b0:3f:69:92:a6:a7:c2:f3:37:c6:94:6e:32:fe:03: bc:aa:b1:28:63:5e:38:84:b9:fd:56:d0:b4:c2:24:4c:3f:f5: bc:4b:cb:23:2d:37:4f:b4:b3:08:50:20:41:d7:56:44:a6:81: 7a:c0:1f:e8:9b:3b:82:78:d0:a1:23:c7:48:29:08:42:3f:82: d9:58:fc:db:1d:ea:91:56:a5:d4:b1:80:e8:24:39:6f:9d:eb: fc:62:ca:fd:75:95:33:89:08:c1:24:e9:31:95:86:cc:65:c1: 12:ac:92:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57HyAivC+WvEtQNp5JdrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWJkNmZlMzU5YTgyZTgzZjQxM2ZhYzZjMjRjYmY0MzVlOGQ0MDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoAXtjmkzU8VfO3Qjcz5m5wxSxIB MhJtYxuNRcXSQtT22mpmVs17ja6VmmXb9BHln/9dJBL2EBZ8yqPSl5udU4NYCYBl /vI54i/ddKN4vBwbZ3Mgxeo0QWibZcpQav4TPdQ5dEgc7Xj/08inuWAQF39nVoOh oaZZu1zRtjIyMNso/Lm0juCWqzpLsEykVGtpJuDStNp5W4ZVdwD81wL5TtDwvfjN EYHTEgxcC/E2fm7/kmwXAzi776lSl6tq5aRuqyh3kFw9qXBHs2WSlDtzv5MS7tQK l2yb4lb9JPNvp4zHIijaRQaMo7y9NprPYzT6M0U5S6EAb4wMTDYl//z2HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPW9b+NZqC6D9BP6xsJMv0NejUBdMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvOWIxdjQxbW9Mb1AwRV9yR3dreV9RMTZOUUYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRfdMA0G CSqGSIb3DQEBCwUAA4IBAQCtd9GrjdUaU3eeo9FDy26AjOBRVVQ+G4ct3vwLWEOz I5C4wJoqgX6uBBjd4c5gFjXBXcWgWo3IUlsdzhceDzhqq/0YTnWd4ps3TyknSRhE U7u/9f3pzWYukxzf3Ha66mVjstEd5B/jHl19/c3UjfS0cxoujUJPhEaY/k3avUgd VaPsWzHEY9XIK4yhf8buRinMsumwP2mSpqfC8zfGlG4y/gO8qrEoY144hLn9VtC0 wiRMP/W8S8sjLTdPtLMIUCBB11ZEpoF6wB/omzuCeNChI8dIKQhCP4LZWPzbHeqR VqXUsYDoJDlvnev8Ysr9dZUziQjBJOkxlYbMZcESrJJM -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:41 2026 by rpki-client