This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/9CSlDg9AoP6XQftipK09LoZccXE.roa File: 9CSlDg9AoP6XQftipK09LoZccXE.roa (raw, json) Hash identifier: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk= Subject key identifier: F4:24:A5:0E:0F:40:A0:FE:97:41:FB:62:A4:AD:3D:2E:86:5C:71:71 Certificate issuer: /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde Certificate serial: 019B79EC545DA149A50619408A41E28F630E Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/9CSlDg9AoP6XQftipK09LoZccXE.roa Signing time: Thu 01 Jan 2026 14:18:09 +0000 ROA not before: Thu 01 Jan 2026 14:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 185.7.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:54:5d:a1:49:a5:06:19:40:8a:41:e2:8f:63:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde Validity Not Before: Jan 1 14:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f424a50e0f40a0fe9741fb62a4ad3d2e865c7171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:a5:2c:fc:72:b5:df:03:e4:85:3d:ff:5a: 2a:25:2b:ef:a8:f1:1c:40:b1:85:1f:57:75:f7:26: 0a:fd:91:b5:a2:4d:7b:bd:03:69:2b:5d:21:30:71: e5:b7:ed:e1:f9:1c:48:1e:8e:fa:03:61:17:2e:17: dc:b3:d3:8b:b1:f6:df:92:78:75:8f:ee:09:2c:60: 7f:ef:80:05:bd:34:27:09:0b:b1:97:4b:71:bc:54: 38:70:15:07:8b:0e:40:e2:d3:35:cd:f9:62:64:61: 92:f5:6e:bf:90:4d:50:5a:92:a7:61:4f:75:49:1e: 3c:0e:ce:89:78:80:91:c9:ba:bb:46:82:82:8a:ac: 68:59:15:a4:4a:ee:e6:c0:b5:cf:8e:4a:44:f1:91: e4:ef:8e:61:a9:07:b2:65:a2:54:35:4b:d2:7d:7e: ef:b8:67:23:db:86:ba:e0:11:26:a3:75:98:c8:92: 82:41:58:9b:dd:5a:5c:10:ad:3e:0b:e3:dd:e1:34: f3:a6:46:cd:7d:42:cb:e1:90:d3:c8:22:85:97:13: 17:1c:36:c0:a5:11:07:cb:90:63:7a:8a:f0:29:29: 0a:e0:ce:9f:cc:31:58:04:84:d0:7d:d5:79:dc:3a: b7:91:73:46:18:3f:63:f1:fe:77:ea:1c:47:32:11: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:24:A5:0E:0F:40:A0:FE:97:41:FB:62:A4:AD:3D:2E:86:5C:71:71 X509v3 Authority Key Identifier: keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/9CSlDg9AoP6XQftipK09LoZccXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.190.0/23 Signature Algorithm: sha256WithRSAEncryption bb:51:4d:f3:e4:a6:c7:1d:5e:11:39:c6:d6:bf:a7:bd:a3:62: 97:5b:17:2e:33:09:87:60:d1:61:5b:76:d4:46:e8:e7:51:59: 83:09:e2:f4:52:de:80:ee:e0:11:92:6f:22:98:8a:3f:6d:ab: c5:93:d4:d9:ee:16:fc:ce:a4:0f:4f:2a:e2:1d:85:77:62:c7: bf:e1:21:0e:00:f9:20:0b:0c:28:1e:bb:41:38:18:d9:08:3a: d4:f3:89:01:a9:a4:eb:11:e1:9e:bb:85:78:5b:22:a9:f8:17: a0:60:63:c1:53:09:66:ee:0b:f8:39:ef:f7:34:81:f0:ec:f9: 90:eb:45:47:fc:0f:fd:20:eb:d1:54:51:ad:33:33:47:fe:9a: 86:ca:f5:36:10:05:19:1d:de:11:75:4e:25:31:4c:69:07:e4: e8:a0:37:5a:84:85:13:c7:dd:88:ee:88:b5:5e:99:c3:30:55: ca:0e:89:e8:81:06:40:ba:5c:98:b4:63:3e:fc:66:70:5a:cc: 1b:23:8c:c9:13:0b:2e:6a:24:53:77:97:03:23:34:dd:90:09: e0:bd:83:62:8e:bc:6f:e4:01:2f:0c:73:07:e6:7e:ae:68:67: d3:3b:db:78:c6:51:16:6c:86:2c:0e:a0:32:19:dd:7f:3f:4b: a1:8b:8b:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57FRdoUmlBhlAikHij2MOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZjkxOGM1YTkzMzBkYmJlNmVlZTE3Y2I5YTFkNjJmYmM4 NTViZGUwHhcNMjYwMTAxMTQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDI0YTUwZTBmNDBhMGZlOTc0MWZiNjJhNGFkM2QyZTg2NWM3MTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP6lLPxytd8D5IU9/1oqJSvvqPEc QLGFH1d19yYK/ZG1ok17vQNpK10hMHHlt+3h+RxIHo76A2EXLhfcs9OLsfbfknh1 j+4JLGB/74AFvTQnCQuxl0txvFQ4cBUHiw5A4tM1zfliZGGS9W6/kE1QWpKnYU91 SR48Ds6JeICRybq7RoKCiqxoWRWkSu7mwLXPjkpE8ZHk745hqQeyZaJUNUvSfX7v uGcj24a64BEmo3WYyJKCQVib3VpcEK0+C+Pd4TTzpkbNfULL4ZDTyCKFlxMXHDbA pREHy5BjeorwKSkK4M6fzDFYBITQfdV53Dq3kXNGGD9j8f536hxHMhE+dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPQkpQ4PQKD+l0H7YqStPS6GXHFxMB8GA1UdIwQY MBaAFP75GMWpMw275u7hfLmh1i+8hVveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGIt YmEyODg5YWZhYWRkLzEvOUNTbERnOUFvUDZYUWZ0aXBLMDlMb1pjY1hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lZDY1NWQtNTEwMi00OTMyLWIxZGItYmEyODg5YWZhYWRk LzEvX3ZrWXhha3pEYnZtN3VGOHVhSFdMN3lGVzk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuQe+MA0G CSqGSIb3DQEBCwUAA4IBAQC7UU3z5KbHHV4ROcbWv6e9o2KXWxcuMwmHYNFhW3bU RujnUVmDCeL0Ut6A7uARkm8imIo/bavFk9TZ7hb8zqQPTyriHYV3Yse/4SEOAPkg CwwoHrtBOBjZCDrU84kBqaTrEeGeu4V4WyKp+BegYGPBUwlm7gv4Oe/3NIHw7PmQ 60VH/A/9IOvRVFGtMzNH/pqGyvU2EAUZHd4RdU4lMUxpB+TooDdahIUTx92I7oi1 XpnDMFXKDonogQZAulyYtGM+/GZwWswbI4zJEwsuaiRTd5cDIzTdkAngvYNijrxv 5AEvDHMH5n6uaGfTO9t4xlEWbIYsDqAyGd1/P0uhi4s4 -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:11 2026 by rpki-client