This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9tnnNloSf25zQ-Oks3pYV-S4mCY.roa File: 9tnnNloSf25zQ-Oks3pYV-S4mCY.roa (raw, json) Hash identifier: NaAagkCE7YxdY3T+elej9o956mJsgwNlCFvVmvUripg= Subject key identifier: F6:D9:E7:36:5A:12:7F:6E:73:43:E3:A4:B3:7A:58:57:E4:B8:98:26 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A316A7195BE78B59674D7C62FA3C06 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9tnnNloSf25zQ-Oks3pYV-S4mCY.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135392 IP address blocks: 178.215.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:16:a7:19:5b:e7:8b:59:67:4d:7c:62:fa:3c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6d9e7365a127f6e7343e3a4b37a5857e4b89826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ec:a1:88:db:5f:60:b4:46:fc:eb:11:a5:7b: 7b:5e:60:49:45:a7:43:f5:4a:62:2c:b9:6d:f2:d7: d1:8e:60:de:b8:14:88:72:35:0c:43:86:e6:98:d7: 76:42:c2:1b:e5:85:9d:4f:6b:09:35:72:67:e9:2b: e0:db:87:4f:61:80:4e:e3:55:93:73:0d:dd:c8:ab: f2:13:ba:11:f2:57:3e:b1:e6:74:60:fc:87:2e:9a: 69:00:1d:fb:c0:10:85:6f:ed:c6:32:44:a9:e3:76: 42:60:e2:67:7d:5a:4c:17:0c:e3:49:fa:8e:6a:2e: 22:a0:eb:b7:7b:c2:70:d6:f6:70:10:e7:a4:b0:8f: c5:97:fe:24:fd:0c:f8:07:1d:38:7a:a8:df:88:f1: bb:39:80:d2:20:f2:6d:ae:6d:47:91:42:b5:38:fe: b4:c0:5f:35:78:bc:2b:ea:0b:56:30:e3:c0:f0:d4: 5c:0b:13:f4:58:11:9e:6a:8b:b1:32:bd:55:f9:f4: 5d:10:a2:11:c3:0f:fd:6a:a1:3e:d6:47:92:4a:e1: a9:86:10:2d:87:07:6c:2c:ea:74:22:d6:b3:4f:47: 2f:ea:da:d6:c4:52:af:8f:d8:69:9a:5f:00:c0:16: 28:a0:93:12:08:44:15:da:e7:95:40:83:d6:a4:d3: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D9:E7:36:5A:12:7F:6E:73:43:E3:A4:B3:7A:58:57:E4:B8:98:26 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9tnnNloSf25zQ-Oks3pYV-S4mCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.215.227.0/24 Signature Algorithm: sha256WithRSAEncryption 63:3b:34:1c:db:a6:0d:90:69:09:1b:1c:77:74:3e:12:78:98: 30:74:e4:0b:8d:71:3b:76:c8:07:c1:cb:05:bc:3c:6e:62:35: d8:b9:0a:a6:10:0c:83:4d:23:54:e4:e9:c7:0c:c0:3f:6b:82: bc:3f:4d:0f:49:6d:9a:d2:32:db:58:d2:5f:30:f6:75:16:6b: 21:8f:3e:e5:a9:49:a3:12:4c:cd:82:33:f5:25:fb:0d:c2:6b: ab:ae:30:79:70:f9:5b:02:05:d0:1a:ee:d1:e7:b5:d3:29:42: ba:17:23:43:6e:17:69:07:08:09:2f:28:98:bc:8c:4e:1a:55: 8b:32:45:89:49:40:b7:fd:bf:8b:0d:91:05:43:e2:d9:cf:6c: f9:b0:f3:1e:f3:4f:b5:4e:52:90:fd:62:b0:82:b0:0c:ab:12: e2:00:cf:3a:e2:44:66:c3:92:4c:34:6b:9f:ca:5d:ca:08:22: 97:ec:41:55:a4:db:f1:a4:fa:f6:b2:9b:c5:db:cd:88:fb:0c: 28:80:5e:2c:25:15:3f:66:78:1c:11:a2:15:d8:fe:0a:10:44: f7:d3:91:87:9f:1b:0e:4b:bd:d4:be:5c:d9:77:b7:3f:ec:9f: 11:39:db:8f:e7:6b:ee:4b:eb:53:94:ef:94:da:96:2b:f2:af: 85:b0:3f:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxanGVvni1lnTXxi+jwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmQ5ZTczNjVhMTI3ZjZlNzM0M2UzYTRiMzdhNTg1N2U0Yjg5ODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuyhiNtfYLRG/OsRpXt7XmBJRadD 9UpiLLlt8tfRjmDeuBSIcjUMQ4bmmNd2QsIb5YWdT2sJNXJn6Svg24dPYYBO41WT cw3dyKvyE7oR8lc+seZ0YPyHLpppAB37wBCFb+3GMkSp43ZCYOJnfVpMFwzjSfqO ai4ioOu3e8Jw1vZwEOeksI/Fl/4k/Qz4Bx04eqjfiPG7OYDSIPJtrm1HkUK1OP60 wF81eLwr6gtWMOPA8NRcCxP0WBGeaouxMr1V+fRdEKIRww/9aqE+1keSSuGphhAt hwdsLOp0ItazT0cv6trWxFKvj9hpml8AwBYooJMSCEQV2ueVQIPWpNNJGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPbZ5zZaEn9uc0PjpLN6WFfkuJgmMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvOXRubk5sb1NmMjV6US1Pa3MzcFlWLVM0bUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstfjMA0G CSqGSIb3DQEBCwUAA4IBAQBjOzQc26YNkGkJGxx3dD4SeJgwdOQLjXE7dsgHwcsF vDxuYjXYuQqmEAyDTSNU5OnHDMA/a4K8P00PSW2a0jLbWNJfMPZ1Fmshjz7lqUmj EkzNgjP1JfsNwmurrjB5cPlbAgXQGu7R57XTKUK6FyNDbhdpBwgJLyiYvIxOGlWL MkWJSUC3/b+LDZEFQ+LZz2z5sPMe80+1TlKQ/WKwgrAMqxLiAM864kRmw5JMNGuf yl3KCCKX7EFVpNvxpPr2spvF282I+wwogF4sJRU/ZngcEaIV2P4KEET305GHnxsO S73UvlzZd7c/7J8ROduP52vuS+tTlO+U2pYr8q+FsD+4 -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:25 2026 by rpki-client