This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/R9CKdSuhKcix03lDYUZNj_9bSZw.roa File: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (raw, json) Hash identifier: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI= Subject key identifier: 47:D0:8A:75:2B:A1:29:C8:B1:D3:79:43:61:46:4D:8F:FF:5B:49:9C Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06 Certificate serial: 019B7D5D3536187E426A3549599246993CB2 Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/R9CKdSuhKcix03lDYUZNj_9bSZw.roa Signing time: Fri 02 Jan 2026 06:20:18 +0000 ROA not before: Fri 02 Jan 2026 06:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215218 IP address blocks: 194.164.39.0/24 maxlen: 24 217.113.55.0/24 maxlen: 24 2a13:e700:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:35:36:18:7e:42:6a:35:49:59:92:46:99:3c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06 Validity Not Before: Jan 2 06:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47d08a752ba129c8b1d3794361464d8fff5b499c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:02:d7:3e:3d:da:ac:8d:19:5a:2f:4f:b5: 74:59:bb:12:e1:2a:ad:ab:2d:8e:6f:d4:26:ab:8d: b4:bc:75:3d:6a:c2:59:75:d5:1e:b4:dc:dc:03:45: 27:6c:f8:ea:f2:bb:ed:44:80:38:ea:a0:0d:2d:68: c8:6b:89:ef:54:12:94:ee:95:e9:c4:8f:bc:ac:29: ea:b5:10:ed:91:43:58:a0:82:9f:95:b8:c2:44:5a: 54:1f:73:ce:a6:d8:a7:6b:98:2a:0c:d3:62:ed:fb: 3a:94:d4:62:db:2d:d4:70:89:7b:5c:37:ec:30:ad: f8:01:3c:41:12:30:a3:f6:7d:51:98:18:b4:72:92: 85:b2:40:fe:87:9e:c1:7d:99:77:30:04:ba:f0:6e: a6:73:09:b1:de:4d:98:48:e3:d2:4a:5f:cb:87:61: 40:d7:c6:ee:f5:7d:ac:34:2d:5a:84:6b:a9:42:87: 4e:a0:a2:10:bf:44:78:05:23:b2:5a:84:2b:8c:42: 56:7d:06:48:19:22:17:de:86:20:ed:f2:93:94:6c: 9d:d2:1a:0c:80:a2:b5:7d:90:35:f6:73:5b:5e:f7: bb:65:b9:83:67:8d:ca:9c:7e:9a:a1:f5:4a:74:43: db:96:a3:01:23:54:4b:4c:29:eb:06:68:25:78:56: 69:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D0:8A:75:2B:A1:29:C8:B1:D3:79:43:61:46:4D:8F:FF:5B:49:9C X509v3 Authority Key Identifier: keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/R9CKdSuhKcix03lDYUZNj_9bSZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.164.39.0/24 217.113.55.0/24 IPv6: 2a13:e700:1::/48 Signature Algorithm: sha256WithRSAEncryption 52:32:bb:0c:c0:eb:b9:fe:ec:dc:51:06:be:e9:bc:70:af:55: ed:2a:37:c9:8c:d1:50:9d:0b:73:34:70:ae:88:4b:27:f7:a0: a0:a0:05:a7:b4:b5:56:f9:a7:12:b1:74:39:07:96:2e:8e:df: 32:df:6e:74:1a:c2:df:a4:7d:b5:81:a1:2d:d2:c6:0a:3f:ec: 17:aa:78:11:66:86:ab:fe:74:1f:5a:aa:47:0f:8e:ae:d1:9b: 16:5a:d7:38:6d:8b:e4:78:ef:cf:61:2a:60:ce:0a:8e:df:dc: 1c:47:11:39:c7:4e:7d:37:0b:8d:f0:a7:9a:1e:c0:ed:4a:4a: 4e:be:c6:e2:39:f4:ec:f3:2a:e8:fd:ee:63:d8:d8:23:3b:e0: 83:de:d4:26:4d:cc:47:cd:70:64:c6:b8:77:46:b7:e6:06:5c: 95:e3:6f:c4:04:c0:4d:fc:64:7d:cd:2f:1b:d3:68:f5:e0:4f: e0:27:b7:bd:2c:dd:bd:74:da:76:03:2c:af:cf:3f:9b:74:8f: dc:27:b7:3c:39:60:19:55:2a:a6:f6:20:1c:6c:6f:72:2b:10: ff:a7:13:52:dc:9a:a6:1c:2c:e2:96:86:70:ff:27:47:09:00: 4b:d0:d8:d3:5d:56:8d:ed:68:cf:54:fc:a7:a0:e2:77:56:87: 5c:61:82:07 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt9XTU2GH5CajVJWZJGmTyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh NTZjMDYwHhcNMjYwMTAyMDYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2QwOGE3NTJiYTEyOWM4YjFkMzc5NDM2MTQ2NGQ4ZmZmNWI0OTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLgC1z492qyNGVovT7V0WbsS4Sqt qy2Ob9Qmq420vHU9asJZddUetNzcA0UnbPjq8rvtRIA46qANLWjIa4nvVBKU7pXp xI+8rCnqtRDtkUNYoIKflbjCRFpUH3POptina5gqDNNi7fs6lNRi2y3UcIl7XDfs MK34ATxBEjCj9n1RmBi0cpKFskD+h57BfZl3MAS68G6mcwmx3k2YSOPSSl/Lh2FA 18bu9X2sNC1ahGupQodOoKIQv0R4BSOyWoQrjEJWfQZIGSIX3oYg7fKTlGyd0hoM gKK1fZA19nNbXve7ZbmDZ43KnH6aofVKdEPblqMBI1RLTCnrBmgleFZpewIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEfQinUroSnIsdN5Q2FGTY//W0mcMB8GA1UdIwQY MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt NmEzNjcwNWJiYTZmLzEvUjlDS2RTdWhLY2l4MDNsRFlVWk5qXzliU1p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwqQnAwQA 2XE3MA8EAgACMAkDBwAqE+cAAAEwDQYJKoZIhvcNAQELBQADggEBAFIyuwzA67n+ 7NxRBr7pvHCvVe0qN8mM0VCdC3M0cK6ISyf3oKCgBae0tVb5pxKxdDkHli6O3zLf bnQawt+kfbWBoS3Sxgo/7BeqeBFmhqv+dB9aqkcPjq7RmxZa1zhti+R4789hKmDO Co7f3BxHETnHTn03C43wp5oewO1KSk6+xuI59OzzKuj97mPY2CM74IPe1CZNzEfN cGTGuHdGt+YGXJXjb8QEwE38ZH3NLxvTaPXgT+Ant70s3b102nYDLK/PP5t0j9wn tzw5YBlVKqb2IBxsb3IrEP+nE1LcmqYcLOKWhnD/J0cJAEvQ2NNdVo3taM9U/Keg 4ndWh1xhggc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:24 2026 by rpki-client