This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/X_n9XBQyhZKg4ysD4nMjpVtqV2Q.roa File: X_n9XBQyhZKg4ysD4nMjpVtqV2Q.roa (raw, json) Hash identifier: z/TVlA8GyoRrGQ84MJq+72M0qbMe4LpP5mYjr8rQUpI= Subject key identifier: 5F:F9:FD:5C:14:32:85:92:A0:E3:2B:03:E2:73:23:A5:5B:6A:57:64 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019BE971886958BDEF73DBAE341D6C6BC42A Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/X_n9XBQyhZKg4ysD4nMjpVtqV2Q.roa Signing time: Fri 23 Jan 2026 06:01:30 +0000 ROA not before: Fri 23 Jan 2026 06:01:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 194.41.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e9:71:88:69:58:bd:ef:73:db:ae:34:1d:6c:6b:c4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 23 06:01:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ff9fd5c14328592a0e32b03e27323a55b6a5764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:7a:da:06:49:44:ef:e8:68:ce:a2:72:16:9d: 1c:62:56:55:14:7f:3a:7e:17:2f:72:d0:2d:7d:bb: 2b:c4:e5:c1:27:40:9e:b5:8a:e8:67:a8:63:b7:f7: 2a:3d:12:97:12:7e:fb:2b:6f:23:0c:b9:8a:94:51: 76:99:da:fd:90:7d:c9:ab:41:0d:5a:c6:21:68:c9: 66:e4:fe:d9:dc:90:f6:4b:86:ed:99:9a:3f:5c:45: 8a:af:90:2e:ad:5f:7a:1f:e8:49:ef:97:3d:e6:fd: 8c:8a:b5:d4:b3:96:31:18:86:c6:f3:e1:6f:c8:6a: d3:b2:b5:5c:a3:c0:d5:c0:99:53:e1:9d:c4:7a:f9: b2:b6:e5:99:ba:37:7c:af:4c:f5:34:3c:51:0d:24: fd:49:73:f4:74:29:d3:35:c3:42:ee:ee:9b:dc:1b: 0e:81:54:80:2b:70:fd:38:d2:b3:85:7c:f4:47:66: 13:02:0f:e7:97:d5:78:6b:39:5a:0c:fe:32:8f:24: 08:80:e5:e3:84:6a:5a:45:04:dc:10:1a:d4:2a:00: 5d:b1:0b:c9:bf:52:3b:06:a4:3a:d7:b4:70:a5:8c: eb:cd:53:26:7b:a5:b6:ef:14:8c:4a:59:45:1e:60: 1b:0f:da:45:2d:08:f3:55:01:ff:de:ea:85:c1:58: 28:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F9:FD:5C:14:32:85:92:A0:E3:2B:03:E2:73:23:A5:5B:6A:57:64 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/X_n9XBQyhZKg4ysD4nMjpVtqV2Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.41.114.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:b1:bc:5f:2c:d2:df:d4:3b:0f:55:5e:80:e5:08:49:62:2a: 5e:e4:b9:26:55:b1:1d:fa:69:4b:14:7e:70:e3:e2:a1:69:39: a1:45:03:3f:0c:cc:b3:b1:67:43:b5:11:a9:89:f2:c8:fc:46: ff:fd:d6:a8:bc:6c:87:e1:7c:d9:ca:b4:5e:1b:4e:9e:be:0d: b2:f5:90:0a:23:d1:bd:10:2f:e5:54:7c:38:e3:5d:9a:bb:c6: 40:e2:7e:fc:4a:72:51:bb:7d:cf:f7:e8:d8:ab:e3:3e:1b:5d: 8f:68:58:26:4c:d3:e1:c4:5e:04:ad:42:02:76:c4:d6:a6:cc: 26:1e:9e:bc:da:7b:24:c8:0b:93:bd:32:c6:8f:9e:5a:44:13: d7:34:26:13:76:ef:b3:af:57:37:56:b6:48:c6:c8:98:b8:39: 75:7e:f6:a2:6f:a7:86:36:96:1b:71:00:fa:31:19:87:02:df: b3:4c:03:d7:1e:e8:0e:cd:08:b0:1a:89:76:b7:50:cf:b2:b6: 10:56:eb:27:27:bd:92:8c:d0:d4:4f:54:dc:78:4a:25:7e:d6: b2:2d:51:f6:bc:28:69:45:e8:8c:40:95:9b:b5:34:15:07:f3: 85:e6:4a:93:47:13:9d:9c:18:c0:58:c9:c6:37:a6:6b:eb:e1: 87:46:b3:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvpcYhpWL3vc9uuNB1sa8QqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTIzMDYwMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmY5ZmQ1YzE0MzI4NTkyYTBlMzJiMDNlMjczMjNhNTViNmE1NzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA93raBklE7+hozqJyFp0cYlZVFH86 fhcvctAtfbsrxOXBJ0CetYroZ6hjt/cqPRKXEn77K28jDLmKlFF2mdr9kH3Jq0EN WsYhaMlm5P7Z3JD2S4btmZo/XEWKr5AurV96H+hJ75c95v2MirXUs5YxGIbG8+Fv yGrTsrVco8DVwJlT4Z3EevmytuWZujd8r0z1NDxRDST9SXP0dCnTNcNC7u6b3BsO gVSAK3D9ONKzhXz0R2YTAg/nl9V4azlaDP4yjyQIgOXjhGpaRQTcEBrUKgBdsQvJ v1I7BqQ617RwpYzrzVMme6W27xSMSllFHmAbD9pFLQjzVQH/3uqFwVgorQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/5/VwUMoWSoOMrA+JzI6VbaldkMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvWF9uOVhCUXloWktnNHlzRDRuTWpwVnRxVjJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwilyMA0G CSqGSIb3DQEBCwUAA4IBAQAOsbxfLNLf1DsPVV6A5QhJYipe5LkmVbEd+mlLFH5w 4+KhaTmhRQM/DMyzsWdDtRGpifLI/Eb//daovGyH4XzZyrReG06evg2y9ZAKI9G9 EC/lVHw4412au8ZA4n78SnJRu33P9+jYq+M+G12PaFgmTNPhxF4ErUICdsTWpswm Hp682nskyAuTvTLGj55aRBPXNCYTdu+zr1c3VrZIxsiYuDl1fvaib6eGNpYbcQD6 MRmHAt+zTAPXHugOzQiwGol2t1DPsrYQVusnJ72SjNDUT1TceEolftayLVH2vChp ReiMQJWbtTQVB/OF5kqTRxOdnBjAWMnGN6Zr6+GHRrPl -----END CERTIFICATE-----Generated at Sun Jan 25 15:15:15 2026 by rpki-client