This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nOb5Yci7TULVez0k_jiQSFyZZz0.roa File: nOb5Yci7TULVez0k_jiQSFyZZz0.roa (raw, json) Hash identifier: fRvJF8v2suY3tC4lQueplkPT5R6wJfblZ2h0wEwQX3E= Subject key identifier: 9C:E6:F9:61:C8:BB:4D:42:D5:7B:3D:24:FE:38:90:48:5C:99:67:3D Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C76BBD5A3801EB14C1C85CD2E8D87F Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nOb5Yci7TULVez0k_jiQSFyZZz0.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47395 IP address blocks: 94.25.128.0/18 maxlen: 18 109.188.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6b:bd:5a:38:01:eb:14:c1:c8:5c:d2:e8:d8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ce6f961c8bb4d42d57b3d24fe3890485c99673d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b6:82:4e:4a:7b:3f:fd:92:e5:aa:9a:5e:af: 09:3d:7a:d9:0b:42:fd:68:31:92:9b:f4:c6:d0:01: 8c:78:91:a0:ee:a9:aa:50:ea:7c:db:00:dc:cb:05: 0a:e2:da:ef:a0:92:fa:68:0a:d3:92:06:1f:6e:dd: a7:dc:d3:af:c0:c7:6e:16:1a:23:99:10:55:30:71: a8:d3:0c:7f:1b:06:9b:72:23:e9:42:1e:5c:99:c5: 76:4f:7d:a0:54:9e:27:08:c6:05:dd:d0:39:d2:0b: 07:17:64:71:49:fd:89:1b:67:16:42:c4:4e:eb:8e: 5e:03:df:83:0a:18:13:af:ea:1c:84:12:ed:d2:d8: 95:f6:c9:67:7c:0a:79:99:59:a4:14:95:71:82:54: 2e:1e:23:be:d6:6c:86:02:64:c1:12:03:6e:75:1f: e9:1e:22:a3:b4:a3:0e:d7:fe:9a:11:74:c4:8f:b7: c5:f0:53:99:e2:36:50:24:f5:f7:05:35:bf:bd:1b: 6e:3e:fe:d2:55:32:77:88:be:80:f3:ee:71:41:26: 51:98:c1:35:ab:f6:3c:91:b2:06:59:b1:86:e7:e9: c2:96:df:db:27:35:39:87:4b:d0:59:21:0b:9a:91: 25:aa:b2:7b:c4:37:73:05:47:f1:74:ee:46:63:98: 4a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E6:F9:61:C8:BB:4D:42:D5:7B:3D:24:FE:38:90:48:5C:99:67:3D X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/nOb5Yci7TULVez0k_jiQSFyZZz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.25.128.0/18 109.188.0.0/17 Signature Algorithm: sha256WithRSAEncryption 7d:37:45:23:92:21:a5:13:95:02:c3:b3:d0:1e:07:e1:97:e0: 3e:77:e8:43:60:b1:99:7e:70:32:49:99:49:3b:cd:22:36:16: d8:27:50:c5:df:cc:7e:f1:ac:62:b0:37:2b:ba:b1:22:07:00: 7d:2d:e0:d1:ad:6c:63:e4:38:db:de:82:87:48:71:25:f0:db: 15:dd:5d:3e:6b:cf:60:77:14:82:d0:31:3f:ae:fd:f5:4f:e5: 9a:89:b2:c2:c9:79:27:c4:80:97:24:63:8f:5e:17:76:8f:0a: 4f:3a:c7:bb:30:5a:06:88:48:6b:0b:b9:bd:b1:9d:07:6c:c2: 82:cb:27:75:5b:38:6d:7c:59:df:76:5f:92:a8:db:3e:ca:4b: 1d:62:0e:bf:e2:37:0b:15:36:ff:63:c5:49:50:4b:71:2b:34: e7:e4:09:6b:6a:5a:a4:51:55:07:e8:1f:17:63:02:73:dd:d8: c0:39:c2:c9:e4:0e:91:b9:af:33:c8:95:ca:27:9c:8e:35:14: b3:05:19:be:5e:95:b4:bf:27:1d:91:14:78:20:77:35:d0:59: 9c:40:eb:78:5d:f9:47:73:34:59:dc:98:fd:31:d0:63:d6:e4: 70:c8:30:dc:97:85:f0:e3:0c:d9:d1:4a:80:a4:36:1a:3f:1c: f9:d1:79:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2u9WjgB6xTByFzS6Nh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2U2Zjk2MWM4YmI0ZDQyZDU3YjNkMjRmZTM4OTA0ODVjOTk2NzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLaCTkp7P/2S5aqaXq8JPXrZC0L9 aDGSm/TG0AGMeJGg7qmqUOp82wDcywUK4trvoJL6aArTkgYfbt2n3NOvwMduFhoj mRBVMHGo0wx/GwabciPpQh5cmcV2T32gVJ4nCMYF3dA50gsHF2RxSf2JG2cWQsRO 645eA9+DChgTr+ochBLt0tiV9slnfAp5mVmkFJVxglQuHiO+1myGAmTBEgNudR/p HiKjtKMO1/6aEXTEj7fF8FOZ4jZQJPX3BTW/vRtuPv7SVTJ3iL6A8+5xQSZRmME1 q/Y8kbIGWbGG5+nClt/bJzU5h0vQWSELmpElqrJ7xDdzBUfxdO5GY5hKZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJzm+WHIu01C1Xs9JP44kEhcmWc9MB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvbk9iNVljaTdUVUxWZXowa19qaVFTRnlaWnowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGXhmAAwQH bbwAMA0GCSqGSIb3DQEBCwUAA4IBAQB9N0UjkiGlE5UCw7PQHgfhl+A+d+hDYLGZ fnAySZlJO80iNhbYJ1DF38x+8axisDcrurEiBwB9LeDRrWxj5Djb3oKHSHEl8NsV 3V0+a89gdxSC0DE/rv31T+WaibLCyXknxICXJGOPXhd2jwpPOse7MFoGiEhrC7m9 sZ0HbMKCyyd1WzhtfFnfdl+SqNs+yksdYg6/4jcLFTb/Y8VJUEtxKzTn5Alralqk UVUH6B8XYwJz3djAOcLJ5A6Rua8zyJXKJ5yONRSzBRm+XpW0vycdkRR4IHc10Fmc QOt4XflHczRZ3Jj9MdBj1uRwyDDcl4Xw4wzZ0UqApDYaPxz50Xnp -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:23 2026 by rpki-client