This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/_9WbrV_lxRO9A6dqxPijQXNV-ko.roa File: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (raw, json) Hash identifier: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64= Subject key identifier: FF:D5:9B:AD:5F:E5:C5:13:BD:03:A7:6A:C4:F8:A3:41:73:55:FA:4A Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Certificate serial: 019B7E3767319E013412B93A17D39B6E03B8 Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/_9WbrV_lxRO9A6dqxPijQXNV-ko.roa Signing time: Fri 02 Jan 2026 10:18:38 +0000 ROA not before: Fri 02 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3330 IP address blocks: 195.242.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:67:31:9e:01:34:12:b9:3a:17:d3:9b:6e:03:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Validity Not Before: Jan 2 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffd59bad5fe5c513bd03a76ac4f8a3417355fa4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:80:92:3d:99:80:42:4b:7a:eb:14:a0:19: eb:73:7f:17:45:20:36:39:e6:1a:e1:a3:d1:22:55: 28:86:51:59:9c:1e:90:2f:74:36:75:a5:d1:e7:d4: 75:d7:ef:95:e0:c6:f5:8e:60:1b:34:3f:67:e2:8c: 09:35:8c:41:69:4f:73:29:a4:70:46:a5:22:3c:a9: d3:f1:c8:eb:2d:1a:87:30:19:21:6f:85:75:e3:21: 64:2a:8a:33:9e:4f:95:85:90:7f:b7:6f:63:97:87: 34:e3:93:09:98:9b:a8:78:48:b6:7f:4b:95:da:20: 65:d0:a3:73:b5:39:1f:34:4e:24:82:b2:36:80:78: 74:48:57:78:d5:a8:98:cf:c9:2b:b4:93:cd:cc:ff: c4:58:30:35:84:d5:c6:c9:0a:9c:88:a8:d8:39:a3: 43:3c:79:0b:0a:8c:8a:3a:5b:1b:04:67:c0:3f:9d: 2d:d7:c3:9c:5e:9c:fb:e0:7c:65:8f:2d:71:9b:c9: c6:62:0f:54:55:cd:da:0f:f5:2c:00:02:81:3c:3b: 5e:7b:1a:8b:b7:05:ee:c0:20:78:3e:38:23:ac:de: 97:94:de:eb:9c:e1:ba:89:38:6d:24:37:73:70:81: fc:b8:3f:2b:63:0d:29:f8:a3:7b:90:32:1a:c8:1e: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D5:9B:AD:5F:E5:C5:13:BD:03:A7:6A:C4:F8:A3:41:73:55:FA:4A X509v3 Authority Key Identifier: keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/_9WbrV_lxRO9A6dqxPijQXNV-ko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.242.175.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:56:02:0c:cb:c3:ec:92:b0:9b:6d:af:44:5b:11:b0:ce:b4: a3:97:46:87:cf:c5:81:14:8e:9c:c9:8d:11:ac:e3:8c:4e:7c: 1a:3c:18:a1:1b:12:ad:00:11:ca:14:a1:4e:6c:54:e0:f8:4d: 75:31:aa:5b:d7:5b:ee:c8:21:49:e7:2b:de:d0:7c:66:79:b4: 9a:a3:5b:42:99:64:aa:6f:75:d2:67:dc:3e:c8:2a:cf:ed:df: ce:d5:ad:e3:d1:24:97:0b:86:cb:ac:dd:dc:b8:82:1d:05:35: 03:a3:49:8e:77:61:83:e8:26:31:90:c8:6f:66:d4:44:9d:08: f6:5d:e9:e7:0e:a5:3b:c0:12:18:c3:1c:98:12:c1:22:8a:9e: b4:81:8e:68:19:0c:39:88:14:6e:97:eb:75:b9:f0:0e:85:41: ca:d5:76:c3:b0:51:15:5c:d8:79:56:0a:50:a0:71:fa:04:e4: 76:11:6f:49:c4:e6:df:6c:2e:91:28:c7:2f:56:67:9e:c3:3c: 54:73:18:34:65:27:8a:54:7a:73:e9:8c:36:f3:87:f2:96:c9: 50:2e:25:5e:8d:27:2e:b6:96:48:47:db:f2:98:48:b4:d9:bd: 7d:06:49:00:40:e7:d3:3e:c3:88:68:31:88:b9:0a:04:f8:87: a0:28:f0:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2cxngE0Erk6F9ObbgO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTNjMGMyYTcwYTllMGJhMGI4NjBkMjI5MDRkYmIwZTky YjkyMGIwHhcNMjYwMTAyMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmQ1OWJhZDVmZTVjNTEzYmQwM2E3NmFjNGY4YTM0MTczNTVmYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AqAkj2ZgEJLeusUoBnrc38XRSA2 OeYa4aPRIlUohlFZnB6QL3Q2daXR59R11++V4Mb1jmAbND9n4owJNYxBaU9zKaRw RqUiPKnT8cjrLRqHMBkhb4V14yFkKooznk+VhZB/t29jl4c045MJmJuoeEi2f0uV 2iBl0KNztTkfNE4kgrI2gHh0SFd41aiYz8krtJPNzP/EWDA1hNXGyQqciKjYOaND PHkLCoyKOlsbBGfAP50t18OcXpz74Hxljy1xm8nGYg9UVc3aD/UsAAKBPDteexqL twXuwCB4PjgjrN6XlN7rnOG6iThtJDdzcIH8uD8rYw0p+KN7kDIayB6tyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/Vm61f5cUTvQOnasT4o0FzVfpKMB8GA1UdIwQY MBaAFM9TwMKnCp4LoLhg0ikE27DpK5ILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjIt M2U0NGZjYWMzYmM1LzEvXzlXYnJWX2x4Uk85QTZkcXhQaWpRWE5WLWtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjItM2U0NGZjYWMzYmM1 LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/KvMA0G CSqGSIb3DQEBCwUAA4IBAQAcVgIMy8PskrCbba9EWxGwzrSjl0aHz8WBFI6cyY0R rOOMTnwaPBihGxKtABHKFKFObFTg+E11Mapb11vuyCFJ5yve0HxmebSao1tCmWSq b3XSZ9w+yCrP7d/O1a3j0SSXC4bLrN3cuIIdBTUDo0mOd2GD6CYxkMhvZtREnQj2 XennDqU7wBIYwxyYEsEiip60gY5oGQw5iBRul+t1ufAOhUHK1XbDsFEVXNh5VgpQ oHH6BOR2EW9JxObfbC6RKMcvVmeewzxUcxg0ZSeKVHpz6Yw284fylslQLiVejScu tpZIR9vymEi02b19BkkAQOfTPsOIaDGIuQoE+IegKPB6 -----END CERTIFICATE-----Generated at Tue Jan 27 03:53:24 2026 by rpki-client