This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9C2dMGirIgHpaKzbiQ6mrZelmX0.roa File: 9C2dMGirIgHpaKzbiQ6mrZelmX0.roa (raw, json) Hash identifier: 9qheYG1zXWfaHDl+RsDkJT51+L4L1WjB/B1z7Fk1MN8= Subject key identifier: F4:2D:9D:30:68:AB:22:01:E9:68:AC:DB:89:0E:A6:AD:97:A5:99:7D Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC860BC70B952B33446E46F844927A1 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9C2dMGirIgHpaKzbiQ6mrZelmX0.roa Signing time: Thu 01 Jan 2026 18:18:30 +0000 ROA not before: Thu 01 Jan 2026 18:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 14.102.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:60:bc:70:b9:52:b3:34:46:e4:6f:84:49:27:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f42d9d3068ab2201e968acdb890ea6ad97a5997d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:21:f1:01:a3:99:0f:41:f1:a3:fd:22:a4:a4: fd:42:f8:e1:86:60:3c:96:1f:c1:c6:dc:a7:7c:22: ba:24:d8:f6:44:21:2e:34:d0:69:69:1e:b5:b8:3c: d0:d2:dd:3e:7b:7a:be:24:bc:cd:90:15:f9:08:05: 85:bf:ef:9a:8a:73:d9:be:91:87:f7:e8:14:9f:ff: 7d:36:5d:4e:52:a6:c4:13:bd:33:e9:b1:14:61:56: f8:d4:01:99:6b:94:f5:90:1d:6d:6a:cb:98:cd:c8: 3d:a3:7c:ca:9b:93:02:44:3c:2c:dd:d6:3d:8c:1a: f4:77:43:77:41:73:9f:f6:fe:21:86:77:c5:49:cd: 2c:96:d8:8d:6a:87:41:3f:13:30:c1:e7:78:94:18: ba:b2:3f:f4:f0:0d:d2:4d:ad:0b:db:75:21:e9:59: da:91:0c:8f:ed:f3:8d:00:2e:d4:3c:a4:35:06:d1: d4:3c:82:55:de:52:33:f1:6a:8e:ac:87:92:ad:3b: 49:ea:e7:c7:c9:3f:3c:4d:15:33:6d:53:4f:01:27: 04:c0:1e:0b:d7:9a:36:d1:e1:0e:02:9e:00:79:79: 74:b7:b3:22:26:4e:d4:d6:dd:49:b5:6c:46:73:33: 4f:93:74:06:b6:5b:02:de:57:81:2f:56:ee:d1:02: dc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:9D:30:68:AB:22:01:E9:68:AC:DB:89:0E:A6:AD:97:A5:99:7D X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9C2dMGirIgHpaKzbiQ6mrZelmX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.228.0/23 Signature Algorithm: sha256WithRSAEncryption bf:bf:81:28:bf:2f:55:b1:69:ab:af:31:35:08:51:c8:d3:07: 7d:b1:53:31:68:8a:70:07:97:fd:50:34:ef:8f:ae:37:ea:3b: c2:aa:26:14:47:92:97:82:29:96:25:c2:72:8d:e9:b4:9c:f5: 26:ed:b1:3e:6b:c8:05:d1:a9:30:06:f6:dd:79:d1:14:40:73: cb:05:47:e2:c7:80:f1:0a:95:21:15:c4:29:c8:22:d9:61:9d: b4:fc:18:88:5f:1d:0b:99:ea:6d:b1:54:3a:0f:b3:6b:9e:f9: 16:dc:71:97:ee:3d:8b:8b:c9:f0:d4:e9:2f:af:2a:4e:e1:c8: a4:30:ce:ed:a8:66:65:9c:5c:4b:58:68:6e:a3:22:2a:b2:ff: 2d:5c:98:b4:6b:2c:1b:2d:0a:e1:f0:78:f2:83:e8:61:ca:7d: 6b:50:44:6c:cf:8e:08:7c:05:d7:e0:eb:0d:6b:df:aa:df:37: 8f:28:b7:76:29:bd:4c:f9:00:de:07:8e:44:03:0d:24:1b:62: 6d:d9:72:8d:50:df:7e:25:e7:32:0f:ca:29:ac:ee:b9:3d:7d: b3:76:f3:4f:9c:55:0e:3c:19:4e:2b:8a:7b:0c:53:9c:23:5c: 7c:9d:08:a8:df:53:96:c8:5d:0d:d1:71:e8:a2:22:e0:b0:43: eb:87:5f:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGC8cLlSszRG5G+ESSehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDJkOWQzMDY4YWIyMjAxZTk2OGFjZGI4OTBlYTZhZDk3YTU5OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CHxAaOZD0Hxo/0ipKT9QvjhhmA8 lh/BxtynfCK6JNj2RCEuNNBpaR61uDzQ0t0+e3q+JLzNkBX5CAWFv++ainPZvpGH 9+gUn/99Nl1OUqbEE70z6bEUYVb41AGZa5T1kB1tasuYzcg9o3zKm5MCRDws3dY9 jBr0d0N3QXOf9v4hhnfFSc0sltiNaodBPxMwwed4lBi6sj/08A3STa0L23Uh6Vna kQyP7fONAC7UPKQ1BtHUPIJV3lIz8WqOrIeSrTtJ6ufHyT88TRUzbVNPAScEwB4L 15o20eEOAp4AeXl0t7MiJk7U1t1JtWxGczNPk3QGtlsC3leBL1bu0QLcIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPQtnTBoqyIB6Wis24kOpq2XpZl9MB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvOUMyZE1HaXJJZ0hwYUt6YmlRNm1yWmVsbVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBDmbkMA0G CSqGSIb3DQEBCwUAA4IBAQC/v4Eovy9VsWmrrzE1CFHI0wd9sVMxaIpwB5f9UDTv j6436jvCqiYUR5KXgimWJcJyjem0nPUm7bE+a8gF0akwBvbdedEUQHPLBUfix4Dx CpUhFcQpyCLZYZ20/BiIXx0LmeptsVQ6D7NrnvkW3HGX7j2Li8nw1OkvrypO4cik MM7tqGZlnFxLWGhuoyIqsv8tXJi0aywbLQrh8Hjyg+hhyn1rUERsz44IfAXX4OsN a9+q3zePKLd2Kb1M+QDeB45EAw0kG2Jt2XKNUN9+JecyD8oprO65PX2zdvNPnFUO PBlOK4p7DFOcI1x8nQio31OWyF0N0XHooiLgsEPrh1+A -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:20 2026 by rpki-client