This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa File: 9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa (raw, json) Hash identifier: h9CqZh0rb7DZM2DSkg1oUJ5C5eMZCB3Ebd3JWwXuuXI= Subject key identifier: F7:F6:4F:5C:38:B5:E5:F9:B5:CF:3C:7D:1A:C0:AE:D2:BF:1C:2F:00 Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c Certificate serial: 019B7C7FC8FC2411AE2A80CDB4C38B3B8728 Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa Signing time: Fri 02 Jan 2026 02:18:27 +0000 ROA not before: Fri 02 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20912 IP address blocks: 193.36.108.0/22 maxlen: 22 193.36.108.0/24 maxlen: 24 193.36.109.0/24 maxlen: 24 193.36.110.0/24 maxlen: 24 193.36.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c8:fc:24:11:ae:2a:80:cd:b4:c3:8b:3b:87:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7f64f5c38b5e5f9b5cf3c7d1ac0aed2bf1c2f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:a0:59:12:f9:66:16:da:cc:36:05:e7:8a: a2:75:b8:ce:f5:bd:f4:68:43:87:77:37:0e:cd:14: cc:0f:8d:8a:1d:46:d2:d0:a0:6c:5a:e0:aa:11:a3: 24:3d:fc:06:9a:56:50:0d:9a:54:8b:c2:ce:c2:81: 93:02:18:24:47:cc:e0:f4:26:4a:13:d2:b5:8c:ee: c7:8c:b5:3b:7b:fe:34:fd:86:9f:18:ed:86:b4:93: c4:54:77:30:e4:08:c6:24:f7:27:64:24:71:0b:8c: 67:d8:82:0b:ff:cc:cc:8b:b7:c8:6c:ff:97:c9:86: da:cb:bd:bd:c3:61:cd:66:13:2b:e9:f6:5a:72:ed: 4f:34:5c:1e:69:c6:06:a9:33:b2:1b:52:fa:fa:f4: 8b:b6:3f:15:0a:c5:7a:96:e2:e7:5f:23:e1:65:0b: 6d:5c:b2:e1:5d:c9:eb:6d:d1:13:47:ad:c2:ce:8d: 08:dc:22:5d:b3:d7:1d:d8:58:8f:bf:b9:d9:95:db: 01:45:c7:fa:8a:0e:14:b9:47:3d:f1:1f:d7:c5:35: e0:3d:cb:45:e7:c9:7a:59:f7:24:e3:7c:a5:a1:a6: 05:93:11:a9:9a:62:60:5b:24:cd:67:c7:8d:df:ac: b0:fd:a8:e5:da:72:f0:e3:50:76:d1:23:d8:6d:e2: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F6:4F:5C:38:B5:E5:F9:B5:CF:3C:7D:1A:C0:AE:D2:BF:1C:2F:00 X509v3 Authority Key Identifier: keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/9_ZPXDi15fm1zzx9GsCu0r8cLwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.108.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:df:ce:27:cb:a8:ed:6c:bb:fb:ec:37:26:bc:d7:5f:96:c1: e9:eb:48:0c:69:ba:90:ac:84:41:75:67:af:7e:bd:67:d1:81: e3:fe:74:80:c4:d4:4e:7f:8a:17:84:e3:d2:3e:e4:70:a0:64: cf:53:3d:6a:0d:0f:3c:71:64:63:2e:64:e4:55:d6:89:4b:e7: d0:86:ab:14:5f:7d:8b:b3:f4:91:d6:96:22:25:55:a6:41:60: 47:7a:ee:d0:9f:46:cb:6b:1d:7f:36:85:44:67:f2:4f:4c:93: 9d:2a:c1:e3:0f:29:11:3c:27:6b:0b:5b:24:d4:f2:d6:eb:be: ff:b7:42:60:6f:62:81:e5:42:bd:7c:64:37:c9:57:47:5b:b2: 42:17:f0:ef:7d:db:e0:52:2e:b6:66:82:b7:56:63:16:1b:0e: c4:01:41:7d:7c:30:11:1c:2b:ed:e9:94:a6:b3:45:58:77:6a: 1b:75:64:11:6b:a0:d1:3b:e0:92:85:86:b6:18:74:3a:c5:9c: 95:ff:cc:43:1c:f6:f0:9a:37:f0:e3:81:75:90:38:46:83:0a: da:0b:8f:43:8c:26:58:55:06:23:65:d5:b6:8a:85:1c:0f:85: aa:ce:46:b6:0c:12:10:55:14:f8:b9:dc:29:ba:db:b7:93:c5: 8c:8a:93:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f8j8JBGuKoDNtMOLO4coMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NjRiOWVlY2EyNThhZTc4YzRkNTEzMjFhOGJkZmVmOWEy YjZhM2MwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2Y2NGY1YzM4YjVlNWY5YjVjZjNjN2QxYWMwYWVkMmJmMWMyZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QmgWRL5ZhbazDYF54qidbjO9b30 aEOHdzcOzRTMD42KHUbS0KBsWuCqEaMkPfwGmlZQDZpUi8LOwoGTAhgkR8zg9CZK E9K1jO7HjLU7e/40/YafGO2GtJPEVHcw5AjGJPcnZCRxC4xn2IIL/8zMi7fIbP+X yYbay729w2HNZhMr6fZacu1PNFweacYGqTOyG1L6+vSLtj8VCsV6luLnXyPhZQtt XLLhXcnrbdETR63Czo0I3CJds9cd2FiPv7nZldsBRcf6ig4UuUc98R/XxTXgPctF 58l6Wfck43yloaYFkxGpmmJgWyTNZ8eN36yw/ajl2nLw41B20SPYbeLQXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPf2T1w4teX5tc88fRrArtK/HC8AMB8GA1UdIwQY MBaAFGdkue7KJYrnjE1RMhqL3++aK2o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTIt NDI1NmE0NmFmZWVjLzEvOV9aUFhEaTE1Zm0xenp4OUdzQ3UwcjhjTHdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9lMzMzNWYtNDExNC00NDgyLThlMTItNDI1NmE0NmFmZWVj LzEvWjJTNTdzb2xpdWVNVFZFeUdvdmY3NW9yYWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSRsMA0G CSqGSIb3DQEBCwUAA4IBAQCd384ny6jtbLv77DcmvNdflsHp60gMabqQrIRBdWev fr1n0YHj/nSAxNROf4oXhOPSPuRwoGTPUz1qDQ88cWRjLmTkVdaJS+fQhqsUX32L s/SR1pYiJVWmQWBHeu7Qn0bLax1/NoVEZ/JPTJOdKsHjDykRPCdrC1sk1PLW677/ t0Jgb2KB5UK9fGQ3yVdHW7JCF/DvfdvgUi62ZoK3VmMWGw7EAUF9fDARHCvt6ZSm s0VYd2obdWQRa6DRO+CShYa2GHQ6xZyV/8xDHPbwmjfw44F1kDhGgwraC49DjCZY VQYjZdW2ioUcD4Wqzka2DBIQVRT4udwputu3k8WMipOl -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:30 2026 by rpki-client