This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/RC8W-k4eKHGPmasSbosZROUwLd0.roa File: RC8W-k4eKHGPmasSbosZROUwLd0.roa (raw, json) Hash identifier: 5z5Yb5fi2XNF4cg27QOu2H4cPUEEs+tF3GD1VOWpis0= Subject key identifier: 44:2F:16:FA:4E:1E:28:71:8F:99:AB:12:6E:8B:19:44:E5:30:2D:DD Certificate issuer: /CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Certificate serial: 019B77C6E344329577AB6B55CD7AD59FAA97 Authority key identifier: AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/RC8W-k4eKHGPmasSbosZROUwLd0.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197726 IP address blocks: 193.9.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e3:44:32:95:77:ab:6b:55:cd:7a:d5:9f:aa:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acaf5ae46f05eff34433b5f371060dd4ccbde438 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=442f16fa4e1e28718f99ab126e8b1944e5302ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1b:ad:90:6e:b2:e0:f1:ac:9b:5d:d3:89:7b: e6:c1:0d:7c:09:e6:29:d8:db:9c:62:9b:a0:66:d0: 82:16:72:d2:82:f9:4d:14:37:cb:0b:36:63:be:5e: 60:5e:53:24:c2:58:b3:85:9f:82:e0:09:ae:58:0b: 55:e9:10:60:30:e1:d7:31:d2:18:12:d1:f6:d5:a5: 62:8e:04:d7:47:67:c8:a4:0f:d5:09:b0:35:e0:d7: 81:71:75:96:99:fd:d6:1a:55:34:6b:6c:3a:78:bc: e8:de:04:be:90:c3:76:93:6a:66:51:3f:ec:d5:86: b7:f6:9a:51:a1:b6:83:24:7b:59:50:ea:26:16:29: df:8b:6d:75:d7:ee:a5:0e:bd:7f:a8:f4:2e:b1:e9: 2a:5a:f3:58:48:06:2c:c6:3b:12:d5:2e:88:14:12: aa:48:c2:cd:ca:3b:07:f8:7a:ec:a2:95:5a:b1:e2: 4f:9d:8a:5e:60:f2:fc:58:f0:62:7d:1b:dd:3c:8c: fc:4c:ad:f7:15:6b:0a:de:3b:86:e4:94:5d:23:5a: 2b:79:c4:f4:3b:b2:4a:3c:12:ce:ca:7d:d3:b4:7e: e9:bb:c0:82:54:6b:2b:b7:aa:9f:1e:2c:62:1f:12: 6f:7f:80:68:98:04:72:67:11:90:c7:06:c8:b6:9f: 4f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2F:16:FA:4E:1E:28:71:8F:99:AB:12:6E:8B:19:44:E5:30:2D:DD X509v3 Authority Key Identifier: keyid:AC:AF:5A:E4:6F:05:EF:F3:44:33:B5:F3:71:06:0D:D4:CC:BD:E4:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK9a5G8F7_NEM7XzcQYN1My95Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/RC8W-k4eKHGPmasSbosZROUwLd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d6aa10-7185-437e-9a68-13c2ea92aa9e/1/rK9a5G8F7_NEM7XzcQYN1My95Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.9.28.0/24 Signature Algorithm: sha256WithRSAEncryption 25:5a:98:bf:39:24:fe:d2:d8:2b:b1:f6:76:be:21:7f:ca:80: 3e:cf:c6:8d:5a:ce:29:c8:1a:da:71:5e:11:d0:48:34:62:5f: 9d:b9:93:5a:3b:17:83:7e:ea:fb:64:78:e1:71:ea:a2:38:1c: 7e:61:20:3f:de:0c:a6:d3:3d:b9:2b:7a:28:7e:c6:14:9b:0a: aa:be:cf:6d:f6:aa:e5:2d:4b:3f:38:50:37:b4:84:01:d7:a2: 6e:7d:e4:c2:51:e1:49:71:b8:fc:5f:b0:c0:69:a3:08:d4:58: aa:a6:ac:2d:25:7e:f4:c7:8e:06:e4:7c:9c:a0:b6:b8:db:ae: da:dc:4c:f7:7f:57:3d:cc:8b:ee:56:b7:5a:64:77:90:74:b3: 64:e3:91:ad:2e:ce:f6:24:ed:f9:70:6f:30:f2:19:bb:3f:a0: ef:0e:94:c9:96:31:03:ff:b1:32:e2:57:3c:04:ed:c2:92:3d: 06:f0:28:c2:4a:c4:a4:1a:1a:0f:be:95:cc:1d:d4:17:c6:a3: e4:67:75:36:c5:4e:a8:ba:62:bb:56:8c:10:16:f4:f1:de:14: f2:71:b7:b0:f6:5e:70:52:cb:a5:fa:46:5c:52:0f:1f:80:83: 56:02:ed:d8:98:ff:85:c0:e4:67:92:ab:73:74:ea:e9:94:e4: b1:cb:14:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuNEMpV3q2tVzXrVn6qXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYWY1YWU0NmYwNWVmZjM0NDMzYjVmMzcxMDYwZGQ0Y2Ni ZGU0MzgwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDJmMTZmYTRlMWUyODcxOGY5OWFiMTI2ZThiMTk0NGU1MzAyZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RutkG6y4PGsm13TiXvmwQ18CeYp 2NucYpugZtCCFnLSgvlNFDfLCzZjvl5gXlMkwlizhZ+C4AmuWAtV6RBgMOHXMdIY EtH21aVijgTXR2fIpA/VCbA14NeBcXWWmf3WGlU0a2w6eLzo3gS+kMN2k2pmUT/s 1Ya39ppRobaDJHtZUOomFinfi2111+6lDr1/qPQusekqWvNYSAYsxjsS1S6IFBKq SMLNyjsH+HrsopVaseJPnYpeYPL8WPBifRvdPIz8TK33FWsK3juG5JRdI1orecT0 O7JKPBLOyn3TtH7pu8CCVGsrt6qfHixiHxJvf4BomARyZxGQxwbItp9PMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQvFvpOHihxj5mrEm6LGUTlMC3dMB8GA1UdIwQY MBaAFKyvWuRvBe/zRDO183EGDdTMveQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgt MTNjMmVhOTJhYTllLzEvUkM4Vy1rNGVLSEdQbWFzU2Jvc1pST1V3TGQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kNmFhMTAtNzE4NS00MzdlLTlhNjgtMTNjMmVhOTJhYTll LzEvcks5YTVHOEY3X05FTTdYemNRWU4xTXk5NURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQkcMA0G CSqGSIb3DQEBCwUAA4IBAQAlWpi/OST+0tgrsfZ2viF/yoA+z8aNWs4pyBracV4R 0Eg0Yl+duZNaOxeDfur7ZHjhceqiOBx+YSA/3gym0z25K3oofsYUmwqqvs9t9qrl LUs/OFA3tIQB16JufeTCUeFJcbj8X7DAaaMI1FiqpqwtJX70x44G5HycoLa4267a 3Ez3f1c9zIvuVrdaZHeQdLNk45GtLs72JO35cG8w8hm7P6DvDpTJljED/7Ey4lc8 BO3Ckj0G8CjCSsSkGhoPvpXMHdQXxqPkZ3U2xU6oumK7VowQFvTx3hTycbew9l5w Usul+kZcUg8fgINWAu3YmP+FwORnkqtzdOrplOSxyxST -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:29 2026 by rpki-client