This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9jH9bksFiO8D8bPw92b3k0oF8TI.roa File: 9jH9bksFiO8D8bPw92b3k0oF8TI.roa (raw, json) Hash identifier: EswlplEMkle6ujWoG2q8B0nuzn8wVVQXtsdX2u0pejk= Subject key identifier: F6:31:FD:6E:4B:05:88:EF:03:F1:B3:F0:F7:66:F7:93:4A:05:F1:32 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019AC9AA480AC7681A36F3B3C8B566F1A246 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9jH9bksFiO8D8bPw92b3k0oF8TI.roa Signing time: Fri 28 Nov 2025 08:52:51 +0000 ROA not before: Fri 28 Nov 2025 08:52:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214668 IP address blocks: 45.8.92.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.37.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Nov 2025 03:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:aa:48:0a:c7:68:1a:36:f3:b3:c8:b5:66:f1:a2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 28 08:52:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f631fd6e4b0588ef03f1b3f0f766f7934a05f132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:96:91:f3:63:e9:76:3e:c7:d9:df:3c:2e: e7:e4:0c:17:1a:57:83:93:78:c4:9a:f1:80:71:c1: 1c:9e:99:fc:86:b9:a9:10:c1:2e:63:e0:fc:d3:1c: ed:d6:8a:44:0c:92:3c:7c:17:16:25:60:dd:11:14: 88:51:eb:4e:7d:4c:ba:12:22:db:e2:49:6e:31:99: 7c:92:36:fe:73:b5:6b:16:b6:63:b9:8d:3d:1f:fa: 31:fe:f2:6d:28:5d:31:a6:6b:64:72:c1:76:9e:4e: 3d:fa:e7:36:21:1b:fa:8c:57:17:71:e5:7b:e4:98: 23:a4:74:17:b5:ad:86:05:26:85:97:f9:12:37:c4: 89:64:1e:63:ec:7a:0a:6a:b5:ee:8b:f5:07:3f:2c: 83:1b:1d:21:e7:e1:0b:6f:9d:c4:76:78:96:5f:4d: a0:fb:e6:80:a9:05:de:eb:25:a9:96:06:21:a1:95: ca:dc:fd:b7:bd:22:86:7e:63:7b:77:71:84:fd:9d: be:68:8f:0c:21:7d:4b:53:fc:d9:d4:64:dc:ee:5c: 57:4c:d1:c8:0b:03:72:0c:8b:0a:01:ca:1a:d7:33: a3:68:38:94:c3:c2:41:be:99:fe:c7:29:56:e2:cd: 3f:5a:3a:76:2f:d3:b6:4f:0a:03:31:f8:56:49:92: df:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:31:FD:6E:4B:05:88:EF:03:F1:B3:F0:F7:66:F7:93:4A:05:F1:32 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9jH9bksFiO8D8bPw92b3k0oF8TI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.92.0/24 81.161.238.0/24 185.222.160.0/24 193.37.41.0/24 Signature Algorithm: sha256WithRSAEncryption 08:a4:07:6e:de:40:79:b6:f1:bf:9f:81:d5:95:f5:20:40:83: 36:37:6c:8f:58:36:9b:1a:51:da:26:58:81:74:68:4a:e3:33: d8:b4:3d:1a:36:0f:13:98:0b:6b:4c:24:8b:3a:11:bf:73:70: 9d:8a:87:3e:e8:af:87:d2:ba:63:86:c7:49:e6:e1:91:44:58: 01:b4:1e:d0:31:31:c4:d3:4a:7a:4b:a3:0a:89:2d:96:99:4d: e7:6d:b9:df:59:17:ef:e8:4b:40:22:95:2d:40:19:75:56:e3: 15:0d:9c:ab:af:5d:c8:74:c3:d2:4b:19:99:4a:eb:7e:98:3a: b2:8c:67:5c:5a:7c:bc:32:ee:bf:88:e8:91:19:c7:d1:f1:9a: 54:d8:fb:2d:a7:61:90:da:f2:5f:07:ba:11:24:2c:75:5f:f5: af:fc:fc:c1:11:5d:8a:8a:1d:30:4a:44:3e:6c:d0:55:23:8d: 95:1d:1c:e5:67:2d:9a:99:2e:88:2a:d4:8f:b7:fb:66:8f:86: 52:5d:99:3d:1a:5c:bc:bb:36:b4:13:60:05:b1:59:87:83:54: af:0f:41:a2:09:43:50:08:92:e8:53:14:2e:36:13:6a:0b:e5: 39:34:62:0b:73:40:cf:5a:85:cc:e3:a7:38:dd:3f:7b:72:23: e7:ee:7c:7b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrJqkgKx2gaNvOzyLVm8aJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTI4MDg1MjUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjMxZmQ2ZTRiMDU4OGVmMDNmMWIzZjBmNzY2Zjc5MzRhMDVmMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpqWkfNj6XY+x9nfPC7n5AwXGleD k3jEmvGAccEcnpn8hrmpEMEuY+D80xzt1opEDJI8fBcWJWDdERSIUetOfUy6EiLb 4kluMZl8kjb+c7VrFrZjuY09H/ox/vJtKF0xpmtkcsF2nk49+uc2IRv6jFcXceV7 5JgjpHQXta2GBSaFl/kSN8SJZB5j7HoKarXui/UHPyyDGx0h5+ELb53EdniWX02g ++aAqQXe6yWplgYhoZXK3P23vSKGfmN7d3GE/Z2+aI8MIX1LU/zZ1GTc7lxXTNHI CwNyDIsKAcoa1zOjaDiUw8JBvpn+xylW4s0/Wjp2L9O2TwoDMfhWSZLf9wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPYx/W5LBYjvA/Gz8Pdm95NKBfEyMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvOWpIOWJrc0ZpTzhEOGJQdzkyYjNrMG9GOFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQhcAwQA UaHuAwQAud6gAwQAwSUpMA0GCSqGSIb3DQEBCwUAA4IBAQAIpAdu3kB5tvG/n4HV lfUgQIM2N2yPWDabGlHaJliBdGhK4zPYtD0aNg8TmAtrTCSLOhG/c3Cdioc+6K+H 0rpjhsdJ5uGRRFgBtB7QMTHE00p6S6MKiS2WmU3nbbnfWRfv6EtAIpUtQBl1VuMV DZyrr13IdMPSSxmZSut+mDqyjGdcWny8Mu6/iOiRGcfR8ZpU2Pstp2GQ2vJfB7oR JCx1X/Wv/PzBEV2Kih0wSkQ+bNBVI42VHRzlZy2amS6IKtSPt/tmj4ZSXZk9Gly8 uza0E2AFsVmHg1SvD0GiCUNQCJLoUxQuNhNqC+U5NGILc0DPWoXM46c43T97ciPn 7nx7 -----END CERTIFICATE-----Generated at Sat Nov 29 12:38:55 2025 by rpki-client