This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/9s_JyGI1Kf_GuOE5Z1sC6UkS2T0.roa File: 9s_JyGI1Kf_GuOE5Z1sC6UkS2T0.roa (raw, json) Hash identifier: jdF/VLnuhEvQghTGVss4qBX3vWUgRXAuemcyYtGZ4io= Subject key identifier: F6:CF:C9:C8:62:35:29:FF:C6:B8:E1:39:67:5B:02:E9:49:12:D9:3D Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7 Certificate serial: 019C1D70675552BD90CCC61F4BF0DDD9A3DE Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/9s_JyGI1Kf_GuOE5Z1sC6UkS2T0.roa Signing time: Mon 02 Feb 2026 08:20:31 +0000 ROA not before: Mon 02 Feb 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41959 IP address blocks: 84.234.122.0/24 maxlen: 24 91.206.96.0/23 maxlen: 23 185.79.32.0/22 maxlen: 22 193.242.146.0/23 maxlen: 23 194.126.229.0/24 maxlen: 24 194.140.250.0/24 maxlen: 24 195.80.229.0/24 maxlen: 24 195.93.142.0/23 maxlen: 23 195.226.207.0/24 maxlen: 24 195.245.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:70:67:55:52:bd:90:cc:c6:1f:4b:f0:dd:d9:a3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7 Validity Not Before: Feb 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6cfc9c8623529ffc6b8e139675b02e94912d93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:3e:94:9a:18:29:a8:6a:1b:38:31:6e:93: 14:2e:d6:b0:9e:7c:3b:db:91:af:2c:96:cb:15:93: 37:e9:3c:52:51:22:59:9c:79:57:2b:37:0a:8a:33: 02:6f:c3:4b:b6:2a:b6:83:41:a7:9d:f7:31:42:c0: 34:a0:8f:92:cd:28:20:ea:6e:f5:57:3e:73:8d:3b: 60:d6:1e:05:7a:a7:31:d6:73:44:26:ed:e8:95:51: 70:b9:91:ca:9c:5d:48:99:a4:e0:8a:0b:92:5c:ca: 8f:bd:28:d6:02:0e:f0:46:6a:a1:38:24:06:8b:8b: 0e:03:73:d5:00:e0:4e:62:60:be:35:89:2e:08:ea: 29:db:ca:e2:96:d1:3e:36:38:32:d2:21:ae:dc:68: 69:5a:98:f0:37:34:4e:59:7a:58:1e:e9:f9:e4:47: 9c:8a:65:ae:7a:41:fd:ae:31:73:f1:f7:19:ea:94: 85:df:49:31:d9:b5:1f:a5:e9:5a:ba:cf:0a:b2:0e: f1:68:02:0a:ab:46:00:af:ea:c2:82:fa:50:d7:29: c1:ee:09:de:82:1a:d8:6d:25:a4:ef:32:f8:74:0b: ce:5f:c2:55:ad:42:35:12:fc:9e:ed:94:25:d8:55: 67:60:0a:68:44:46:b8:e3:3a:8a:00:59:5c:80:f2: 52:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:C9:C8:62:35:29:FF:C6:B8:E1:39:67:5B:02:E9:49:12:D9:3D X509v3 Authority Key Identifier: keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/9s_JyGI1Kf_GuOE5Z1sC6UkS2T0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.234.122.0/24 91.206.96.0/23 185.79.32.0/22 193.242.146.0/23 194.126.229.0/24 194.140.250.0/24 195.80.229.0/24 195.93.142.0/23 195.226.207.0/24 195.245.204.0/24 Signature Algorithm: sha256WithRSAEncryption 05:3f:0b:df:bc:cd:50:b7:c8:b9:61:f7:c2:36:62:55:9a:6b: 3b:1b:6e:4a:e1:4d:9c:39:e0:ab:47:4e:03:c0:bc:ca:2a:12: cb:5c:27:82:eb:f8:72:00:64:2c:5a:0f:46:d9:b6:82:20:b4: 12:65:79:84:f8:d8:7d:25:ce:5d:2c:1b:7f:f6:32:4a:01:13: a2:ba:67:cd:84:a0:29:24:6f:0d:36:df:c7:84:1e:b0:07:63: ab:67:b4:f8:cc:9e:6a:94:af:44:c4:e0:63:d6:df:94:3d:00: 1f:02:a9:60:30:84:75:f8:c6:a8:d7:b0:83:db:6a:58:de:af: eb:f1:ed:b2:31:3e:98:76:a9:71:14:9b:2a:5c:16:28:4c:d7: ad:39:9f:5b:78:e1:e3:68:1d:27:67:7f:4d:8b:d0:b1:f7:33: e2:25:ea:d6:fd:66:30:3d:25:ae:a7:04:6e:29:a0:d7:cd:58: a6:e1:0a:db:ea:75:23:8a:19:5f:c3:c9:30:c9:5c:20:aa:37: 1c:08:d3:b7:c9:30:7c:a0:23:6f:29:7f:75:31:27:ea:47:a8: 75:0b:01:67:93:f4:1a:6b:27:49:f6:cd:5f:8d:ce:2d:36:54: 01:83:76:10:ac:e8:56:37:c6:20:1b:eb:39:20:a8:0b:66:5b: 42:2c:39:c0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZwdcGdVUr2QzMYfS/Dd2aPeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOWI3ZTE2MTVhMDAxYTViY2I5NmUxNTRhNzFhZjlhMGI0 NWI1ZDcwHhcNMjYwMjAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmNmYzljODYyMzUyOWZmYzZiOGUxMzk2NzViMDJlOTQ5MTJkOTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlU+lJoYKahqGzgxbpMULtawnnw7 25GvLJbLFZM36TxSUSJZnHlXKzcKijMCb8NLtiq2g0GnnfcxQsA0oI+SzSgg6m71 Vz5zjTtg1h4Feqcx1nNEJu3olVFwuZHKnF1ImaTgiguSXMqPvSjWAg7wRmqhOCQG i4sOA3PVAOBOYmC+NYkuCOop28riltE+Njgy0iGu3GhpWpjwNzROWXpYHun55Eec imWuekH9rjFz8fcZ6pSF30kx2bUfpelaus8Ksg7xaAIKq0YAr+rCgvpQ1ynB7gne ghrYbSWk7zL4dAvOX8JVrUI1Evye7ZQl2FVnYApoREa44zqKAFlcgPJSSQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFPbPychiNSn/xrjhOWdbAulJEtk9MB8GA1UdIwQY MBaAFIObfhYVoAGlvLluFUpxr5oLRbXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzV0LUZoV2dBYVc4dVc0VlNuR3ZtZ3RGdGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80MmYyNzUtNjhiNy00NDhkLWI5NTYt MzViYjJlNmQwNjA2LzEvOXNfSnlHSTFLZl9HdU9FNVoxc0M2VWtTMlQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi80MmYyNzUtNjhiNy00NDhkLWI5NTYtMzViYjJlNmQwNjA2 LzEvZzV0LUZoV2dBYVc4dVc0VlNuR3ZtZ3RGdGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAVOp6AwQB W85gAwQCuU8gAwQBwfKSAwQAwn7lAwQAwoz6AwQAw1DlAwQBw12OAwQAw+LPAwQA w/XMMA0GCSqGSIb3DQEBCwUAA4IBAQAFPwvfvM1Qt8i5YffCNmJVmms7G25K4U2c OeCrR04DwLzKKhLLXCeC6/hyAGQsWg9G2baCILQSZXmE+Nh9Jc5dLBt/9jJKAROi umfNhKApJG8NNt/HhB6wB2OrZ7T4zJ5qlK9ExOBj1t+UPQAfAqlgMIR1+Mao17CD 22pY3q/r8e2yMT6YdqlxFJsqXBYoTNetOZ9beOHjaB0nZ39Ni9Cx9zPiJerW/WYw PSWupwRuKaDXzVim4Qrb6nUjihlfw8kwyVwgqjccCNO3yTB8oCNvKX91MSfqR6h1 CwFnk/QaaydJ9s1fjc4tNlQBg3YQrOhWN8YgG+s5IKgLZltCLDnA -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:29 2026 by rpki-client