This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/9-60Vxc-2LQ_XkxstJ8I6v1xPNs.roa File: 9-60Vxc-2LQ_XkxstJ8I6v1xPNs.roa (raw, json) Hash identifier: WclfYio0mTJ2QQD9rGT9niYV0PM8Tw05+SJZh2ziUhE= Subject key identifier: F7:EE:B4:57:17:3E:D8:B4:3F:5E:4C:6C:B4:9F:08:EA:FD:71:3C:DB Certificate issuer: /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Certificate serial: 019B78352331C3E99D86908505CFC1C74DB8 Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/9-60Vxc-2LQ_XkxstJ8I6v1xPNs.roa Signing time: Thu 01 Jan 2026 06:18:26 +0000 ROA not before: Thu 01 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8916 IP address blocks: 188.246.192.0/19 maxlen: 19 188.246.192.0/20 maxlen: 20 193.108.199.0/24 maxlen: 24 213.5.88.0/21 maxlen: 21 2001:67c:1b8::/48 maxlen: 48 2a03:9800::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:23:31:c3:e9:9d:86:90:85:05:cf:c1:c7:4d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb Validity Not Before: Jan 1 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7eeb457173ed8b43f5e4c6cb49f08eafd713cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:60:a6:42:2f:e3:2f:06:23:17:16:5c:b0: ad:50:13:5d:16:0e:31:8f:18:ce:20:5d:ea:78:12: 39:96:bf:86:eb:f1:9f:28:49:c3:0c:10:ab:c6:56: 49:2d:b5:1b:db:f0:6d:72:71:e2:df:d5:7a:5d:64: 6e:db:2c:e6:2b:93:b4:98:98:a9:d2:5f:3c:f8:00: 78:f9:f6:8b:fe:07:58:6b:25:5c:fe:e4:08:2a:42: 24:b7:d9:1c:5e:36:1d:65:d5:f5:b8:9c:fe:04:6d: 8f:57:d1:aa:f8:57:f5:38:86:93:d5:63:ea:11:f8: a6:a7:eb:db:05:b0:56:96:03:3e:a9:19:90:ab:e2: cb:3c:8f:0e:07:c4:bb:f9:77:6a:65:ad:8a:97:a6: 2d:e7:e1:a6:86:45:a4:b8:a0:64:05:b5:c8:99:e8: 86:36:22:47:21:83:48:0f:5c:34:39:b0:28:9a:a9: 36:eb:09:69:54:e4:81:d7:1c:aa:03:52:04:ee:fc: d4:d0:be:45:86:5d:ff:bf:3a:14:31:cf:75:26:5c: ba:7a:58:f5:77:d5:dc:9b:d2:94:8e:93:0c:7d:21: bc:b8:b3:01:08:e1:59:b2:c3:a3:dd:c4:98:f4:f1: 3c:82:74:c6:41:8d:c2:b7:31:be:c3:f1:bf:02:e6: ee:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EE:B4:57:17:3E:D8:B4:3F:5E:4C:6C:B4:9F:08:EA:FD:71:3C:DB X509v3 Authority Key Identifier: keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/9-60Vxc-2LQ_XkxstJ8I6v1xPNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.246.192.0/19 193.108.199.0/24 213.5.88.0/21 IPv6: 2001:67c:1b8::/48 2a03:9800::/29 Signature Algorithm: sha256WithRSAEncryption 4f:8b:f4:5c:83:f6:b2:95:6f:d7:b1:28:fc:e0:a6:25:53:66: 32:04:76:7b:92:9f:8e:cf:3a:11:8a:90:dc:18:64:43:9e:2e: fa:53:19:ca:cd:1b:e6:b3:e1:7f:99:39:c2:bc:88:41:b9:7b: ce:96:26:5f:8f:fa:27:08:89:04:df:fc:9e:84:70:76:3c:67: cd:53:d3:ec:fc:a0:af:72:9c:6b:75:98:f5:ff:95:2d:4d:22: 0c:ee:4c:48:bc:5b:8a:09:c1:f3:1e:84:78:f9:b0:3f:4c:9c: 40:45:ba:d1:27:e4:09:63:cc:60:c3:d6:9f:e3:8a:64:ee:50: d0:6a:bc:4b:dc:f2:25:64:35:be:95:c6:4a:d0:ae:49:63:e7: 15:ef:7d:ee:c4:b2:74:1e:5e:c7:fd:c7:95:64:9d:0f:1a:2e: 81:ac:17:77:0c:8f:48:72:6a:44:31:87:6b:32:0b:87:8b:6d: fb:ab:69:c3:41:9a:6c:39:44:05:d0:28:69:17:be:e9:e8:1a: 46:0a:24:1c:2d:65:c4:63:2e:a8:7a:0d:56:24:a6:b3:cf:75: e1:f6:05:00:cd:44:f5:2e:d7:0e:45:6b:27:94:e1:d4:06:9f: 59:d9:2f:d7:65:51:ea:59:85:f5:3f:cd:dc:db:4b:1f:4b:9e: 77:bd:96:34 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt4NSMxw+mdhpCFBc/Bx024MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMjdhNjMxYmI2NzM4ZWI2OGJiNmVhNmM0MjRlZjRhN2Qx NGMzY2IwHhcNMjYwMTAxMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2VlYjQ1NzE3M2VkOGI0M2Y1ZTRjNmNiNDlmMDhlYWZkNzEzY2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppxgpkIv4y8GIxcWXLCtUBNdFg4x jxjOIF3qeBI5lr+G6/GfKEnDDBCrxlZJLbUb2/BtcnHi39V6XWRu2yzmK5O0mJip 0l88+AB4+faL/gdYayVc/uQIKkIkt9kcXjYdZdX1uJz+BG2PV9Gq+Ff1OIaT1WPq Efimp+vbBbBWlgM+qRmQq+LLPI8OB8S7+XdqZa2Kl6Yt5+GmhkWkuKBkBbXImeiG NiJHIYNID1w0ObAomqk26wlpVOSB1xyqA1IE7vzU0L5Fhl3/vzoUMc91Jly6elj1 d9Xcm9KUjpMMfSG8uLMBCOFZssOj3cSY9PE8gnTGQY3CtzG+w/G/AubuNwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFPfutFcXPti0P15MbLSfCOr9cTzbMB8GA1UdIwQY MBaAFDAnpjG7ZzjraLtupsQk70p9FMPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYt MWRkNmQyODFjODhhLzEvOS02MFZ4Yy0yTFFfWGt4c3RKOEk2djF4UE5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84ZDc4ZWItMjgzMi00MDgzLWFlMWYtMWRkNmQyODFjODhh LzEvTUNlbU1idG5PT3RvdTI2bXhDVHZTbjBVdzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQFvPbAAwQA wWzHAwQD1QVYMBYEAgACMBADBwAgAQZ8AbgDBQMqA5gAMA0GCSqGSIb3DQEBCwUA A4IBAQBPi/Rcg/aylW/XsSj84KYlU2YyBHZ7kp+OzzoRipDcGGRDni76UxnKzRvm s+F/mTnCvIhBuXvOliZfj/onCIkE3/yehHB2PGfNU9Ps/KCvcpxrdZj1/5UtTSIM 7kxIvFuKCcHzHoR4+bA/TJxARbrRJ+QJY8xgw9af44pk7lDQarxL3PIlZDW+lcZK 0K5JY+cV733uxLJ0Hl7H/ceVZJ0PGi6BrBd3DI9IcmpEMYdrMguHi237q2nDQZps OUQF0ChpF77p6BpGCiQcLWXEYy6oeg1WJKazz3Xh9gUAzUT1LtcORWsnlOHUBp9Z 2S/XZVHqWYX1P83c20sfS553vZY0 -----END CERTIFICATE-----Generated at Sun Jan 18 11:26:07 2026 by rpki-client