This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa File: 1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa (raw, json) Hash identifier: qZuVCcX+CGvce+2pqSqOsVjRW5V34Wi3gbtr1OHn8rI= Subject key identifier: FB:D2:36:4E:B3:66:5E:90:2E:92:3E:7B:73:C7:FD:57:67:56:87:86 Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Certificate serial: 019B7B366BDD8862EA422B38728AECD048C5 Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35319 IP address blocks: 91.204.121.0/24 maxlen: 24 91.204.122.0/24 maxlen: 24 193.19.240.0/24 maxlen: 24 193.19.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6b:dd:88:62:ea:42:2b:38:72:8a:ec:d0:48:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbd2364eb3665e902e923e7b73c7fd5767568786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:17:0c:d1:7b:25:cd:fd:53:0e:33:d2:47:28: 28:87:38:ee:f1:46:8d:49:65:d1:d2:c2:f1:0c:47: fb:8d:e4:35:1f:3b:53:f8:d5:4f:4d:86:e7:f0:78: 7a:e9:58:28:01:4c:57:21:82:da:d1:3a:47:b8:94: 7f:6b:d7:c8:55:75:9f:7a:61:80:2a:47:0f:4d:8d: 2f:9e:84:40:0e:2a:26:1d:ba:f3:09:4c:1e:02:cd: 8c:40:5e:7a:74:48:ef:05:1c:ff:ed:4f:8a:da:af: 85:ea:5c:a1:4b:2a:97:01:53:e3:b3:9d:36:ff:33: 66:37:09:80:5d:7e:3f:4d:54:94:1d:40:45:da:71: 27:5d:60:55:73:0f:d6:cd:fa:ed:b8:45:52:e6:04: fa:06:cb:38:77:bd:f0:5c:e4:0b:e2:ee:86:5a:3e: b8:69:98:f5:41:33:c8:7d:90:48:61:65:04:51:42: b2:63:56:6b:27:d0:fa:71:e0:9c:fe:41:12:77:3c: ec:a3:e3:36:05:d9:7b:6c:cf:5d:a1:7b:fa:8e:5e: bd:05:0d:49:f9:b1:c4:b6:04:29:dc:6a:06:92:51: 9e:c3:14:c3:79:45:f4:24:71:fb:2c:05:ee:e7:d2: 98:e4:71:28:63:68:be:97:44:69:50:ce:9c:7e:f1: af:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D2:36:4E:B3:66:5E:90:2E:92:3E:7B:73:C7:FD:57:67:56:87:86 X509v3 Authority Key Identifier: keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/1-9I2TrNmXpAukj57c8f9V2dWh4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.121.0-91.204.122.255 193.19.240.0/24 193.19.242.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:b8:06:8b:94:71:0a:58:a6:fe:83:4f:32:3d:fc:60:62:ad: bf:8c:01:51:73:49:8f:64:0a:49:80:47:3a:84:6e:0c:6f:a4: bd:d4:0c:12:96:6d:13:4f:e6:8a:56:6c:13:f4:fc:87:1b:6c: 4f:8f:d7:02:99:78:7a:d1:bd:6b:8d:6f:7e:06:e0:b3:af:99: db:a8:f2:dd:17:a9:93:17:e5:b5:db:47:ce:02:d2:b5:42:46: ac:99:d8:d3:79:c3:d9:44:b2:9c:8e:eb:2c:91:08:b3:af:39: 6e:19:06:ca:ac:d8:bf:61:af:c8:14:f5:c3:38:53:aa:86:7c: fd:c3:d7:06:04:e1:93:f0:72:eb:e3:13:b2:b4:57:d8:3f:34: c0:ba:3d:a1:67:af:03:cc:52:02:8c:8d:e6:ca:5a:1d:f8:8f: ed:9e:3e:cb:0d:e0:e2:9e:85:45:23:ed:06:32:04:ee:6d:14: e6:dd:bc:53:64:cf:36:c1:3e:d0:16:0b:1d:b0:f0:f1:0e:a4: a5:36:f9:5f:ea:c6:f6:35:bf:f8:1d:f6:74:d9:94:3e:d3:9b: 2d:c4:55:d5:83:7f:19:3a:fc:0c:8c:35:ab:6d:91:0a:70:84: ec:51:4f:32:32:18:1a:e3:be:a8:93:fb:cc:55:e3:e6:1d:81: 28:42:26:60 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NmvdiGLqQis4cors0EjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkZDUwNDg2MGE3YzkyNGU3MjFjYmZhZWE1ZjQ5YTcyYzgy OTZjMzUwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmQyMzY0ZWIzNjY1ZTkwMmU5MjNlN2I3M2M3ZmQ1NzY3NTY4Nzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BcM0Xslzf1TDjPSRygohzju8UaN SWXR0sLxDEf7jeQ1HztT+NVPTYbn8Hh66VgoAUxXIYLa0TpHuJR/a9fIVXWfemGA KkcPTY0vnoRADiomHbrzCUweAs2MQF56dEjvBRz/7U+K2q+F6lyhSyqXAVPjs502 /zNmNwmAXX4/TVSUHUBF2nEnXWBVcw/WzfrtuEVS5gT6Bss4d73wXOQL4u6GWj64 aZj1QTPIfZBIYWUEUUKyY1ZrJ9D6ceCc/kESdzzso+M2Bdl7bM9doXv6jl69BQ1J +bHEtgQp3GoGklGewxTDeUX0JHH7LAXu59KY5HEoY2i+l0RpUM6cfvGvLwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPvSNk6zZl6QLpI+e3PH/VdnVoeGMB8GA1UdIwQY MBaAFJ3VBIYKfJJOchy/rqX0mnLIKWw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMt NDMyZjVjMWY0MWY3LzEvMS05STJUck5tWHBBdWtqNTdjOGY5VjJkV2g0WS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjIvNDk2MjMyLWQxOGItNDU1NC05YTQzLTQzMmY1YzFmNDFm Ny8xL25kVUVoZ3A4a2s1eUhMLXVwZlNhY3NncGJEVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGjAMAwQAW8x5 AwQAW8x6AwQAwRPwAwQAwRPyMA0GCSqGSIb3DQEBCwUAA4IBAQCeuAaLlHEKWKb+ g08yPfxgYq2/jAFRc0mPZApJgEc6hG4Mb6S91AwSlm0TT+aKVmwT9PyHG2xPj9cC mXh60b1rjW9+BuCzr5nbqPLdF6mTF+W120fOAtK1QkasmdjTecPZRLKcjusskQiz rzluGQbKrNi/Ya/IFPXDOFOqhnz9w9cGBOGT8HLr4xOytFfYPzTAuj2hZ68DzFIC jI3mylod+I/tnj7LDeDinoVFI+0GMgTubRTm3bxTZM82wT7QFgsdsPDxDqSlNvlf 6sb2Nb/4HfZ02ZQ+05stxFXVg38ZOvwMjDWrbZEKcITsUU8yMhga476ok/vMVePm HYEoQiZg -----END CERTIFICATE-----Generated at Mon Jan 26 09:41:09 2026 by rpki-client