This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa File: 9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa (raw, json) Hash identifier: mD/l5zdsFJGNZ8p29GMjIaEXus0bg3O0b3+7D4zGWpI= Subject key identifier: F4:FA:76:9F:B4:39:6D:2E:2C:2A:AB:5D:A3:14:78:0F:B4:6D:C6:8A Certificate issuer: /CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6 Certificate serial: 019B7D5B8F39EE15E7A6A1D5CE61FAC8E15D Authority key identifier: CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa Signing time: Fri 02 Jan 2026 06:18:31 +0000 ROA not before: Fri 02 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42808 IP address blocks: 194.26.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.mft rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:8f:39:ee:15:e7:a6:a1:d5:ce:61:fa:c8:e1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce8a8d40e437adf4acd7cdb38e0402477a2e51a6 Validity Not Before: Jan 2 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4fa769fb4396d2e2c2aab5da314780fb46dc68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:58:32:5c:26:0c:bb:e5:b7:9b:d8:f0:df:25: c1:54:15:8a:84:d2:69:2a:a6:5c:cc:cf:59:99:c0: aa:c4:a5:79:e2:56:20:53:52:f3:7e:76:ab:7e:ad: 12:4e:00:75:6a:9c:18:8f:c4:a7:66:04:3f:80:f7: 45:ac:6f:79:1f:5d:13:89:f6:7e:7c:3a:91:d3:07: 3d:34:49:b3:d7:7a:63:38:fe:4a:ec:f7:1f:9e:df: 23:4c:30:50:1b:c2:1f:75:e2:05:97:d3:2c:82:a5: 41:1d:ba:7b:d2:29:a1:57:89:57:32:e2:59:d0:3e: 09:40:93:f7:aa:6b:81:2e:d0:ae:89:c6:ae:a6:60: 6a:82:a7:c2:60:83:c3:b1:14:83:38:da:6a:a6:16: 41:e1:3c:6a:f1:23:ab:e3:99:b1:ae:40:08:0b:30: 8f:41:00:02:01:3d:40:c1:7f:cd:6e:c8:3b:05:94: 5c:10:58:01:4e:13:7a:8b:d1:f6:70:4e:4e:31:b7: 34:17:7b:13:c9:5a:5f:ea:45:50:17:c7:ec:0a:10: ca:4c:9c:bf:77:90:b7:b6:c5:37:2a:f0:14:ff:c8: a7:45:e8:75:f5:7c:3c:d5:19:7c:b0:0a:1b:75:fa: 03:bf:28:f9:f4:03:78:d4:5b:f7:c1:f6:74:0c:07: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FA:76:9F:B4:39:6D:2E:2C:2A:AB:5D:A3:14:78:0F:B4:6D:C6:8A X509v3 Authority Key Identifier: keyid:CE:8A:8D:40:E4:37:AD:F4:AC:D7:CD:B3:8E:04:02:47:7A:2E:51:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoqNQOQ3rfSs182zjgQCR3ouUaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/9Pp2n7Q5bS4sKqtdoxR4D7Rtxoo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/822b22-8ca3-469d-9083-345b2ab0db18/1/zoqNQOQ3rfSs182zjgQCR3ouUaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.26.118.0/24 Signature Algorithm: sha256WithRSAEncryption 51:f0:bc:03:5c:74:93:6c:21:27:23:ad:12:12:fa:44:b4:39: 37:59:11:88:a7:23:61:a6:c8:fc:0c:ba:9b:60:59:05:f3:c6: 71:67:b3:fe:68:0a:5d:b9:65:dc:a8:a3:fd:93:d4:0d:b6:ad: f1:ca:f8:5a:54:ec:1a:55:dc:b6:6a:15:0d:10:64:f3:5f:f3: 00:f1:54:99:e1:d3:1b:a4:3d:1f:60:9e:dc:63:eb:55:00:8d: f6:65:65:d5:7c:76:e9:57:96:89:62:6a:78:72:8d:2a:25:07: ee:e4:cd:3d:32:15:8f:51:0c:c4:a6:bf:0e:d1:43:e2:60:26: 49:1d:b5:94:75:13:e6:2e:91:68:ee:11:7d:86:1e:21:23:16: 2e:0c:03:4c:19:ca:3e:93:91:27:b0:d1:c1:ac:48:20:f5:f5: 5b:86:11:6b:d3:a0:c7:0f:4c:f3:02:b0:83:32:65:df:36:72: 33:d9:69:fa:cd:24:95:e3:e3:66:9c:6e:15:1d:4d:12:f6:b2: 19:f1:f5:a1:e4:77:37:b5:ef:d5:ca:a9:2f:73:30:e1:04:aa: 81:30:11:36:3b:ee:c0:90:55:b2:9e:ae:3b:9e:e3:c5:9a:27: be:ac:b6:7e:f2:49:a4:40:9d:5e:45:66:86:90:5a:68:ac:43: 8d:4b:5c:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W4857hXnpqHVzmH6yOFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOGE4ZDQwZTQzN2FkZjRhY2Q3Y2RiMzhlMDQwMjQ3N2Ey ZTUxYTYwHhcNMjYwMTAyMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGZhNzY5ZmI0Mzk2ZDJlMmMyYWFiNWRhMzE0NzgwZmI0NmRjNjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VgyXCYMu+W3m9jw3yXBVBWKhNJp KqZczM9ZmcCqxKV54lYgU1Lzfnarfq0STgB1apwYj8SnZgQ/gPdFrG95H10TifZ+ fDqR0wc9NEmz13pjOP5K7Pcfnt8jTDBQG8IfdeIFl9MsgqVBHbp70imhV4lXMuJZ 0D4JQJP3qmuBLtCuicaupmBqgqfCYIPDsRSDONpqphZB4Txq8SOr45mxrkAICzCP QQACAT1AwX/Nbsg7BZRcEFgBThN6i9H2cE5OMbc0F3sTyVpf6kVQF8fsChDKTJy/ d5C3tsU3KvAU/8inReh19Xw81Rl8sAobdfoDvyj59AN41Fv3wfZ0DAdQ9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPT6dp+0OW0uLCqrXaMUeA+0bcaKMB8GA1UdIwQY MBaAFM6KjUDkN630rNfNs44EAkd6LlGmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMt MzQ1YjJhYjBkYjE4LzEvOVBwMm43UTViUzRzS3F0ZG94UjREN1J0eG9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS84MjJiMjItOGNhMy00NjlkLTkwODMtMzQ1YjJhYjBkYjE4 LzEvem9xTlFPUTNyZlNzMTgyempnUUNSM291VWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhp2MA0G CSqGSIb3DQEBCwUAA4IBAQBR8LwDXHSTbCEnI60SEvpEtDk3WRGIpyNhpsj8DLqb YFkF88ZxZ7P+aApduWXcqKP9k9QNtq3xyvhaVOwaVdy2ahUNEGTzX/MA8VSZ4dMb pD0fYJ7cY+tVAI32ZWXVfHbpV5aJYmp4co0qJQfu5M09MhWPUQzEpr8O0UPiYCZJ HbWUdRPmLpFo7hF9hh4hIxYuDANMGco+k5EnsNHBrEgg9fVbhhFr06DHD0zzArCD MmXfNnIz2Wn6zSSV4+NmnG4VHU0S9rIZ8fWh5Hc3te/VyqkvczDhBKqBMBE2O+7A kFWynq47nuPFmie+rLZ+8kmkQJ1eRWaGkFporEONS1wU -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:42 2026 by rpki-client