This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9zJL572qBrRNH9MPzpGHubqxQoA.roa File: 9zJL572qBrRNH9MPzpGHubqxQoA.roa (raw, json) Hash identifier: gDXFUvBdJbreLJQaa7bGTs8TeozVjOMOnn2IRXaVZMc= Subject key identifier: F7:32:4B:E7:BD:AA:06:B4:4D:1F:D3:0F:CE:91:87:B9:BA:B1:42:80 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E1D08949CCA365B3FC179B53EF9E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9zJL572qBrRNH9MPzpGHubqxQoA.roa Signing time: Fri 02 Jan 2026 00:19:30 +0000 ROA not before: Fri 02 Jan 2026 00:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147186 IP address blocks: 85.93.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 05:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e1:d0:89:49:cc:a3:65:b3:fc:17:9b:53:ef:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7324be7bdaa06b44d1fd30fce9187b9bab14280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:68:3e:1b:b6:59:6b:03:8c:5f:92:e3:4d: 73:24:5a:9e:76:d0:ae:05:0c:90:4a:46:51:38:b2: 1a:d6:cc:b0:82:f0:06:de:9a:58:94:51:2f:df:ff: 7c:0d:43:43:07:e5:17:b8:e5:57:38:d1:0b:79:e1: 4a:a9:1d:82:9e:7e:fa:11:6d:5d:f9:3c:32:e5:ec: 89:a0:a0:72:c9:60:72:d2:a5:1e:94:4b:9f:aa:8a: 26:20:95:96:5c:9e:a7:f1:5f:80:c7:05:00:1a:f7: 1b:a5:32:cc:57:e7:dc:d6:c6:3f:01:6f:0f:0e:3c: 43:c7:3e:50:0b:86:eb:0e:bc:c3:13:6b:14:b1:a1: de:aa:d5:bd:e5:d5:2b:df:f1:be:d4:42:6c:77:e8: d9:d4:b6:d5:de:98:89:cc:b4:94:41:5e:1a:4a:55: c8:05:08:48:0f:0f:bd:c3:15:c0:9f:9e:65:7b:3b: b4:7e:70:9e:f6:30:63:2d:7a:94:51:fa:b1:07:d5: 50:32:fc:53:3b:59:25:c7:f9:43:38:03:ee:0e:27: 7a:e8:2a:28:13:b5:0a:dc:62:db:75:e5:db:14:2f: 54:cf:6b:76:db:77:6d:03:d4:f2:20:f3:a4:5f:cf: 77:11:a5:f9:ae:69:e8:f6:a3:9b:02:28:21:03:ae: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:32:4B:E7:BD:AA:06:B4:4D:1F:D3:0F:CE:91:87:B9:BA:B1:42:80 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9zJL572qBrRNH9MPzpGHubqxQoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.93.21.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:53:32:0c:16:81:be:3c:b7:60:3c:07:ca:b4:0a:51:1e:7e: 39:5e:38:11:4f:87:d7:4a:4b:00:6e:d9:7a:99:9b:0d:d3:87: 6c:55:5f:11:55:a3:0b:33:72:c5:d0:65:f3:f0:01:c7:38:62: 1f:4f:5c:ec:46:01:32:fa:19:2e:bd:21:f6:9e:01:91:12:6e: 47:11:f0:52:af:8c:29:5a:54:ee:11:86:02:76:ea:86:2a:ee: 7f:5f:99:52:e7:99:c3:1e:18:1d:1c:0e:34:d1:dc:b4:3a:f7: 70:09:dd:57:ac:c8:3d:7f:6e:4e:b8:6d:be:5c:a1:2e:09:79: 55:3c:34:5a:9e:d3:d2:cd:7a:96:9c:9f:18:63:f0:2d:ee:eb: bf:d0:be:b9:9a:d6:85:4a:51:df:c2:9a:db:89:3e:74:bb:b9: cf:df:30:8b:0d:f2:1c:3e:7b:44:c0:95:e8:ef:2a:52:8a:9c: 03:ab:87:2c:84:03:37:be:26:e2:c3:c4:7a:8b:fc:bd:16:77: 98:5c:b8:d2:e6:f8:93:a3:33:cd:b8:9b:26:f9:3c:99:48:ec: 76:ef:f8:e4:89:e1:86:b5:bd:0c:e5:4f:66:09:a5:b7:46:c7: b4:ee:34:3c:8a:6f:06:4b:da:49:b0:22:f3:e2:65:41:61:8b: cc:fd:29:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuHQiUnMo2Wz/BebU++eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzMyNGJlN2JkYWEwNmI0NGQxZmQzMGZjZTkxODdiOWJhYjE0MjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphVoPhu2WWsDjF+S401zJFqedtCu BQyQSkZROLIa1sywgvAG3ppYlFEv3/98DUNDB+UXuOVXONELeeFKqR2Cnn76EW1d +Twy5eyJoKByyWBy0qUelEufqoomIJWWXJ6n8V+AxwUAGvcbpTLMV+fc1sY/AW8P DjxDxz5QC4brDrzDE2sUsaHeqtW95dUr3/G+1EJsd+jZ1LbV3piJzLSUQV4aSlXI BQhIDw+9wxXAn55lezu0fnCe9jBjLXqUUfqxB9VQMvxTO1klx/lDOAPuDid66Coo E7UK3GLbdeXbFC9Uz2t223dtA9TyIPOkX893EaX5rmno9qObAighA645GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPcyS+e9qga0TR/TD86Rh7m6sUKAMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvOXpKTDU3MnFCclJOSDlNUHpwR0h1YnF4UW9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVV0VMA0G CSqGSIb3DQEBCwUAA4IBAQCPUzIMFoG+PLdgPAfKtApRHn45XjgRT4fXSksAbtl6 mZsN04dsVV8RVaMLM3LF0GXz8AHHOGIfT1zsRgEy+hkuvSH2ngGREm5HEfBSr4wp WlTuEYYCduqGKu5/X5lS55nDHhgdHA400dy0OvdwCd1XrMg9f25OuG2+XKEuCXlV PDRantPSzXqWnJ8YY/At7uu/0L65mtaFSlHfwprbiT50u7nP3zCLDfIcPntEwJXo 7ypSipwDq4cshAM3vibiw8R6i/y9FneYXLjS5viTozPNuJsm+TyZSOx27/jkieGG tb0M5U9mCaW3Rse07jQ8im8GS9pJsCLz4mVBYYvM/Smb -----END CERTIFICATE-----Generated at Thu Jan 15 14:47:02 2026 by rpki-client