This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/m9Kdsxil7NkQWMJunpKO2XkDqno.roa File: m9Kdsxil7NkQWMJunpKO2XkDqno.roa (raw, json) Hash identifier: zjAzBSPErOPYrB/Iu+ltMoiodbIhn3rD5/Hsty9Kj80= Subject key identifier: 9B:D2:9D:B3:18:A5:EC:D9:10:58:C2:6E:9E:92:8E:D9:79:03:AA:7A Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B79107D7EFA13CDF42A2828A449278236 Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/m9Kdsxil7NkQWMJunpKO2XkDqno.roa Signing time: Thu 01 Jan 2026 10:18:02 +0000 ROA not before: Thu 01 Jan 2026 10:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27 IP address blocks: 82.112.101.200/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7d:7e:fa:13:cd:f4:2a:28:28:a4:49:27:82:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bd29db318a5ecd91058c26e9e928ed97903aa7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:3c:62:64:88:f1:9d:b8:d1:c4:69:cf:39: 94:39:f9:ae:be:af:fe:89:7d:e7:51:0e:95:37:2d: 36:08:ac:c4:96:21:6b:c2:da:c0:98:52:6a:e8:b7: 2f:c4:1d:f6:66:f5:4d:e8:60:60:20:f4:d6:0b:80: 2b:4e:8d:69:b9:39:41:ae:58:16:a5:8c:2a:5c:9d: 01:32:7f:39:ac:72:16:80:23:a5:af:50:ea:27:14: fc:0d:74:5d:c5:d7:61:9b:87:cb:b8:5e:84:40:dc: 4a:26:08:12:2e:1f:a7:6d:58:19:57:21:bb:a2:b8: fc:e5:4a:de:d1:b5:9d:a5:a4:0f:f5:59:6d:13:b5: 05:6a:e9:12:f5:2e:3e:6e:ca:0a:dc:a4:ce:4b:d2: b0:8f:b1:64:24:45:30:48:75:4f:fa:1b:c2:64:d6: 38:47:71:c7:62:59:56:98:b9:7a:9b:c0:a2:b6:7d: 42:73:81:a4:7f:57:50:bb:8b:6c:a2:9c:46:bb:bf: 44:6a:fc:75:0e:47:7c:99:86:28:70:1c:4b:40:50: 11:3f:9b:53:1d:71:0a:b1:e9:65:51:27:5f:c3:5d: a4:f1:ab:3f:93:df:4e:e3:cc:28:1c:25:0c:09:20: 08:a3:84:54:0b:9f:03:99:d3:f3:df:51:ef:d7:6a: b5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D2:9D:B3:18:A5:EC:D9:10:58:C2:6E:9E:92:8E:D9:79:03:AA:7A X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/m9Kdsxil7NkQWMJunpKO2XkDqno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.112.101.200/29 Signature Algorithm: sha256WithRSAEncryption 1a:c0:2a:a0:64:27:6a:a3:86:6f:c9:d2:1f:09:fe:3d:e7:03: e2:b4:ca:2c:82:d2:1b:2d:40:72:b0:82:91:0c:0b:cc:e9:30: 85:56:f2:22:25:8e:20:e4:2c:21:cf:88:fa:69:e7:d9:93:41: 4f:d6:ac:f2:b8:04:f0:a5:96:12:c7:4c:75:96:4f:0c:95:eb: e1:c4:13:28:11:12:00:26:af:f9:31:e8:04:05:af:36:ad:dc: a6:62:1c:48:9a:7e:7e:93:10:61:22:10:7c:c4:47:25:b6:68: a0:f6:63:94:86:ce:1e:d3:0c:29:fa:ba:17:ed:f0:8b:42:f4: 33:b8:bf:1e:29:d9:79:0f:7e:94:b3:63:4f:35:36:9e:3f:c7: f2:81:05:2f:38:9c:39:ed:37:b9:95:8b:27:27:93:5a:38:d0: c8:e6:c6:ea:de:67:ea:17:34:a6:d7:ad:1c:fc:1c:48:85:65: 0d:dc:91:6b:fc:95:8c:49:67:7f:7e:95:6f:2b:b7:9f:4f:a8: 69:bf:55:3f:4c:df:0b:d0:ba:11:7f:b2:e1:c2:27:0c:ce:d2: 18:fb:f7:f0:46:51:ee:e6:de:d1:7e:a1:f6:eb:4d:e6:ea:93: c3:b1:f9:52:4f:4c:8d:04:e3:8d:d5:06:83:32:14:21:29:e1: 25:32:c1:7d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EH1++hPN9CooKKRJJ4I2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmQyOWRiMzE4YTVlY2Q5MTA1OGMyNmU5ZTkyOGVkOTc5MDNhYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRg8YmSI8Z240cRpzzmUOfmuvq/+ iX3nUQ6VNy02CKzEliFrwtrAmFJq6LcvxB32ZvVN6GBgIPTWC4ArTo1puTlBrlgW pYwqXJ0BMn85rHIWgCOlr1DqJxT8DXRdxddhm4fLuF6EQNxKJggSLh+nbVgZVyG7 orj85Ure0bWdpaQP9VltE7UFaukS9S4+bsoK3KTOS9Kwj7FkJEUwSHVP+hvCZNY4 R3HHYllWmLl6m8Citn1Cc4Gkf1dQu4tsopxGu79Eavx1Dkd8mYYocBxLQFARP5tT HXEKsellUSdfw12k8as/k99O48woHCUMCSAIo4RUC58DmdPz31Hv12q11wIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFJvSnbMYpezZEFjCbp6Sjtl5A6p6MB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvbTlLZHN4aWw3TmtRV01KdW5wS08yWGtEcW5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDUnBlyDAN BgkqhkiG9w0BAQsFAAOCAQEAGsAqoGQnaqOGb8nSHwn+PecD4rTKLILSGy1AcrCC kQwLzOkwhVbyIiWOIOQsIc+I+mnn2ZNBT9as8rgE8KWWEsdMdZZPDJXr4cQTKBES ACav+THoBAWvNq3cpmIcSJp+fpMQYSIQfMRHJbZooPZjlIbOHtMMKfq6F+3wi0L0 M7i/HinZeQ9+lLNjTzU2nj/H8oEFLzicOe03uZWLJyeTWjjQyObG6t5n6hc0ptet HPwcSIVlDdyRa/yVjElnf36Vbyu3n0+oab9VP0zfC9C6EX+y4cInDM7SGPv38EZR 7ube0X6h9utN5uqTw7H5Uk9MjQTjjdUGgzIUISnhJTLBfQ== -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:28 2026 by rpki-client