This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/9pGoDb8m8-uHunZG0g4IpC_J3W8.roa File: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (raw, json) Hash identifier: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE= Subject key identifier: F6:91:A8:0D:BF:26:F3:EB:87:BA:76:46:D2:0E:08:A4:2F:C9:DD:6F Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78 Certificate serial: 019B7B353DF66B4320A98056A42EDD9BE2B9 Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/9pGoDb8m8-uHunZG0g4IpC_J3W8.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42130 IP address blocks: 93.88.20.0/24 maxlen: 24 93.88.21.0/24 maxlen: 24 93.88.22.0/24 maxlen: 24 93.88.23.0/24 maxlen: 24 103.127.47.0/24 maxlen: 24 185.198.49.0/24 maxlen: 24 185.207.172.0/24 maxlen: 24 185.207.174.0/24 maxlen: 24 195.245.72.0/24 maxlen: 24 195.245.88.0/24 maxlen: 24 2a13:b2c0::/32 maxlen: 32 2a13:b2c1:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3d:f6:6b:43:20:a9:80:56:a4:2e:dd:9b:e2:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78 Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f691a80dbf26f3eb87ba7646d20e08a42fc9dd6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3e:df:8d:e0:29:26:00:26:0e:91:ff:dc:94: 56:10:e8:56:ea:ee:9f:7c:51:70:b2:ff:35:76:62: 14:d4:38:9e:3b:fc:06:34:22:2c:96:01:91:79:7d: 94:1a:b1:6c:d3:1e:40:8f:e9:b3:83:98:9c:bf:8f: 2c:84:bc:c5:5b:b6:67:63:a1:61:86:6b:8c:e8:1e: f2:97:1f:27:c0:e9:9d:d0:87:86:d6:4f:21:08:00: aa:01:67:74:6a:8e:91:2d:56:31:e1:f2:3e:0f:df: 70:3f:36:c8:65:6e:8f:c5:c1:ef:22:d5:34:6f:6f: 10:9a:a3:fd:51:5f:12:32:d9:bf:f6:32:96:6e:96: 73:eb:5c:4e:94:23:01:1d:8e:95:09:c6:27:ad:d4: d5:95:5f:ae:f5:56:7b:bc:d2:00:de:b6:a7:f1:04: 5d:07:30:07:d5:e7:4e:bf:d6:f9:cb:31:af:5c:79: a8:6d:0e:5f:f9:ae:a5:bc:b0:b6:5b:a8:45:bc:74: 0b:00:e6:97:85:9f:1e:67:ce:ca:91:2a:53:cd:13: 2c:fb:36:09:58:79:8c:77:e3:4d:01:f6:de:87:4b: 50:5d:4f:5a:01:f4:95:38:b1:cd:3d:a5:f0:4c:21: 8e:52:78:a5:06:c5:80:33:d2:8e:fe:3f:4d:53:18: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:91:A8:0D:BF:26:F3:EB:87:BA:76:46:D2:0E:08:A4:2F:C9:DD:6F X509v3 Authority Key Identifier: keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/9pGoDb8m8-uHunZG0g4IpC_J3W8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.20.0/22 103.127.47.0/24 185.198.49.0/24 185.207.172.0/24 185.207.174.0/24 195.245.72.0/24 195.245.88.0/24 IPv6: 2a13:b2c0::/32 2a13:b2c1:1::/48 Signature Algorithm: sha256WithRSAEncryption 0a:ed:9c:5a:8f:49:2e:f2:dc:af:ee:ce:e8:51:64:47:04:43: 64:16:01:1f:1a:9c:89:8a:f9:70:d1:ac:84:88:3c:83:e4:d0: 4a:e0:a0:ae:e0:47:17:11:c6:7f:c9:63:8a:de:2e:86:e7:bb: dc:52:f0:60:09:2c:ab:6a:5c:53:83:b4:c4:91:2f:bc:8d:ad: 6f:62:7c:4f:fa:dc:74:80:78:bf:66:46:8e:fa:ed:3c:5a:28: ef:e3:64:10:c2:d8:b5:e1:cd:3a:6c:28:bb:cc:19:bb:47:6c: 35:27:72:2d:3d:c6:5d:f6:28:f2:c3:93:12:07:c0:00:fe:a6: 5b:57:8e:26:3c:d5:c2:ac:16:13:fc:15:c4:ab:65:97:a7:83: 4e:50:be:7f:f6:47:83:06:36:12:60:84:74:62:e9:8c:d6:5b: d1:4d:ea:f6:a4:ce:62:c4:e0:9d:de:06:9f:24:53:74:fa:89: b6:cc:91:c6:f0:e0:f0:1b:96:b2:c2:dd:2d:9a:9d:19:f8:1d: 64:62:31:70:08:c3:0c:5a:64:36:26:24:88:a1:fe:e3:2c:10: 99:33:60:b8:3d:d9:f8:c0:99:07:fa:9d:ac:cf:53:ca:c7:06: 0b:57:fc:b7:82:85:cf:52:06:85:c1:a9:41:c0:1f:14:dd:f4: 42:e2:4f:55 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt7NT32a0MgqYBWpC7dm+K5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOTM2MWNkMTgxZDg2ZWY1NGViZTJmYzkxYTgwZWM1MzRj ZWFjNzgwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjkxYTgwZGJmMjZmM2ViODdiYTc2NDZkMjBlMDhhNDJmYzlkZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7j7fjeApJgAmDpH/3JRWEOhW6u6f fFFwsv81dmIU1DieO/wGNCIslgGReX2UGrFs0x5Aj+mzg5icv48shLzFW7ZnY6Fh hmuM6B7ylx8nwOmd0IeG1k8hCACqAWd0ao6RLVYx4fI+D99wPzbIZW6PxcHvItU0 b28QmqP9UV8SMtm/9jKWbpZz61xOlCMBHY6VCcYnrdTVlV+u9VZ7vNIA3ran8QRd BzAH1edOv9b5yzGvXHmobQ5f+a6lvLC2W6hFvHQLAOaXhZ8eZ87KkSpTzRMs+zYJ WHmMd+NNAfbeh0tQXU9aAfSVOLHNPaXwTCGOUnilBsWAM9KO/j9NUxhzfQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFPaRqA2/JvPrh7p2RtIOCKQvyd1vMB8GA1UdIwQY MBaAFEKTYc0YHYbvVOvi/JGoDsU0zqx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjkt OWJiYjQyZmE4Y2VkLzEvOXBHb0RiOG04LXVIdW5aRzBnNElwQ19KM1c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjktOWJiYjQyZmE4Y2Vk LzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAwBAIAATAqAwQCXVgUAwQA Z38vAwQAucYxAwQAuc+sAwQAuc+uAwQAw/VIAwQAw/VYMBYEAgACMBADBQAqE7LA AwcAKhOywQABMA0GCSqGSIb3DQEBCwUAA4IBAQAK7Zxaj0ku8tyv7s7oUWRHBENk FgEfGpyJivlw0ayEiDyD5NBK4KCu4EcXEcZ/yWOK3i6G57vcUvBgCSyralxTg7TE kS+8ja1vYnxP+tx0gHi/ZkaO+u08Wijv42QQwti14c06bCi7zBm7R2w1J3ItPcZd 9ijyw5MSB8AA/qZbV44mPNXCrBYT/BXEq2WXp4NOUL5/9keDBjYSYIR0YumM1lvR Ter2pM5ixOCd3gafJFN0+om2zJHG8ODwG5aywt0tmp0Z+B1kYjFwCMMMWmQ2JiSI of7jLBCZM2C4Pdn4wJkH+p2sz1PKxwYLV/y3goXPUgaFwalBwB8U3fRC4k9V -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:59 2026 by rpki-client