This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa File: V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa (raw, json) Hash identifier: 2/BgI0CeVbMyKlBMczQ9BiDbSbqULeWjVwVtFX1ruVc= Subject key identifier: 57:D0:9C:FA:E4:7E:CC:86:09:BE:35:EF:7B:86:72:25:49:D0:8E:C5 Certificate issuer: /CN=2cb035707202d4013a4479be5112d7fa227b7275 Certificate serial: 019B775962BEA4D3A06E7275C5F891E46F7E Authority key identifier: 2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200020 IP address blocks: 194.62.129.0/24 maxlen: 24 194.62.131.0/24 maxlen: 24 2001:67c:608::/48 maxlen: 48 2a0d:8c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.mft rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:62:be:a4:d3:a0:6e:72:75:c5:f8:91:e4:6f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb035707202d4013a4479be5112d7fa227b7275 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57d09cfae47ecc8609be35ef7b86722549d08ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:a0:f3:8f:38:29:8f:6a:e5:ea:bd:92:79: ff:41:e4:8f:19:21:fa:76:99:dd:69:23:9b:71:1e: c7:15:8a:e3:25:aa:e3:b9:9b:5b:20:27:ac:24:f9: 3f:93:ad:46:85:bc:f4:f6:75:31:a9:bc:db:bf:b1: ae:b3:6b:93:6e:e1:17:e0:57:24:b2:79:c5:74:c6: 98:03:a3:b8:9f:46:11:e6:f7:16:6b:f7:e3:16:dd: 1d:cc:39:5b:36:8f:b3:90:41:ba:af:71:22:dd:3c: 3c:04:59:43:4d:fd:ff:4a:9c:b0:e9:1b:98:ff:06: 3e:ae:79:30:43:b1:71:13:de:30:9b:85:32:55:cc: 05:16:10:a5:a0:52:e3:23:c6:d4:c4:29:ce:ce:47: fe:43:79:68:59:67:ca:8b:fd:98:8a:b5:f1:85:77: bd:53:3d:7c:9e:36:9e:7a:d8:04:c5:9c:60:17:2c: ca:ce:20:49:07:54:68:87:e3:1a:62:a8:fb:ca:ce: be:65:ff:9a:f0:1d:57:2d:83:6f:46:f2:53:43:7c: d5:c6:0b:dc:de:fe:ae:60:ba:ae:38:00:a5:cd:4b: a8:bf:84:d1:00:ce:ec:22:e9:52:42:2a:4f:29:fd: eb:3a:11:37:cd:5d:19:04:3e:7e:f1:df:6a:0b:8a: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D0:9C:FA:E4:7E:CC:86:09:BE:35:EF:7B:86:72:25:49:D0:8E:C5 X509v3 Authority Key Identifier: keyid:2C:B0:35:70:72:02:D4:01:3A:44:79:BE:51:12:D7:FA:22:7B:72:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LLA1cHIC1AE6RHm-URLX-iJ7cnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/V9Cc-uR-zIYJvjXve4ZyJUnQjsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8c1323-afcc-4b44-9881-06308a44856d/1/LLA1cHIC1AE6RHm-URLX-iJ7cnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.129.0/24 194.62.131.0/24 IPv6: 2001:67c:608::/48 2a0d:8c40::/29 Signature Algorithm: sha256WithRSAEncryption 64:da:81:ed:73:bd:ad:85:3d:30:45:26:ad:d3:f1:0b:57:fb: 48:82:a3:1b:9d:6a:9a:5e:d7:9b:d6:45:a0:ce:a0:d9:4f:8c: 55:b3:ca:d7:66:5f:9d:45:57:01:11:86:de:a7:8c:22:df:71: 3b:72:83:46:e0:62:9f:39:84:de:ad:5f:18:c1:72:7e:bf:6a: b1:fe:7f:6e:9d:af:9b:2d:b1:14:d8:86:e9:2d:93:27:d3:04: 1d:8b:07:b0:51:e1:58:fe:1c:3b:84:5a:71:7c:51:b0:fe:30: d2:74:50:70:9d:30:4d:b7:ca:5b:e4:fd:13:1d:e7:b9:90:0e: fe:69:50:04:f9:bc:fb:b6:f3:cd:4e:c5:6b:6a:0b:7a:81:3c: a2:eb:c2:0a:5d:bb:be:7a:18:80:40:89:c3:7e:a0:bf:3e:39: bb:54:78:17:64:d1:42:d8:ee:08:53:c7:c2:38:11:22:6c:10: 26:4e:3d:c1:c9:ba:17:01:55:43:ed:99:56:d7:13:5a:9b:f8: d3:18:93:39:19:06:df:04:52:79:a4:a4:9d:08:ed:f9:19:13: 56:5c:f1:f4:8b:7b:40:d1:f0:31:f2:25:9e:74:8f:fc:d4:ad: 78:94:6f:d8:3a:45:5c:15:c1:12:26:65:40:11:7e:d8:1e:f4: 2d:58:c9:c6 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3WWK+pNOgbnJ1xfiR5G9+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjYjAzNTcwNzIwMmQ0MDEzYTQ0NzliZTUxMTJkN2ZhMjI3 YjcyNzUwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2QwOWNmYWU0N2VjYzg2MDliZTM1ZWY3Yjg2NzIyNTQ5ZDA4ZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4+g8484KY9q5eq9knn/QeSPGSH6 dpndaSObcR7HFYrjJarjuZtbICesJPk/k61Ghbz09nUxqbzbv7Gus2uTbuEX4Fck snnFdMaYA6O4n0YR5vcWa/fjFt0dzDlbNo+zkEG6r3Ei3Tw8BFlDTf3/Spyw6RuY /wY+rnkwQ7FxE94wm4UyVcwFFhCloFLjI8bUxCnOzkf+Q3loWWfKi/2YirXxhXe9 Uz18njaeetgExZxgFyzKziBJB1Roh+MaYqj7ys6+Zf+a8B1XLYNvRvJTQ3zVxgvc 3v6uYLquOAClzUuov4TRAM7sIulSQipPKf3rOhE3zV0ZBD5+8d9qC4pPlwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFFfQnPrkfsyGCb4173uGciVJ0I7FMB8GA1UdIwQY MBaAFCywNXByAtQBOkR5vlES1/oie3J1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YzEzMjMtYWZjYy00YjQ0LTk4ODEt MDYzMDhhNDQ4NTZkLzEvVjlDYy11Ui16SVlKdmpYdmU0WnlKVW5RanNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84YzEzMjMtYWZjYy00YjQ0LTk4ODEtMDYzMDhhNDQ4NTZk LzEvTExBMWNISUMxQUU2UkhtLVVSTFgtaUo3Y25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAwj6BAwQA wj6DMBYEAgACMBADBwAgAQZ8BggDBQMqDYxAMA0GCSqGSIb3DQEBCwUAA4IBAQBk 2oHtc72thT0wRSat0/ELV/tIgqMbnWqaXteb1kWgzqDZT4xVs8rXZl+dRVcBEYbe p4wi33E7coNG4GKfOYTerV8YwXJ+v2qx/n9una+bLbEU2IbpLZMn0wQdiwewUeFY /hw7hFpxfFGw/jDSdFBwnTBNt8pb5P0THee5kA7+aVAE+bz7tvPNTsVragt6gTyi 68IKXbu+ehiAQInDfqC/Pjm7VHgXZNFC2O4IU8fCOBEibBAmTj3ByboXAVVD7ZlW 1xNam/jTGJM5GQbfBFJ5pKSdCO35GRNWXPH0i3tA0fAx8iWedI/81K14lG/YOkVc FcESJmVAEX7YHvQtWMnG -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:56 2026 by rpki-client