This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Fs9_MJE4LJzrlvgZVYyNqmGs9jU.roa File: Fs9_MJE4LJzrlvgZVYyNqmGs9jU.roa (raw, json) Hash identifier: LpEEx1esX1fSr/8xMz2loEwImRqyKB94C3E1//Ttgkk= Subject key identifier: 16:CF:7F:30:91:38:2C:9C:EB:96:F8:19:55:8C:8D:AA:61:AC:F6:35 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F20A8184BAA4A1334DC77D51A189 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Fs9_MJE4LJzrlvgZVYyNqmGs9jU.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211632 IP address blocks: 5.181.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f2:0a:81:84:ba:a4:a1:33:4d:c7:7d:51:a1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16cf7f3091382c9ceb96f819558c8daa61acf635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:00:46:c3:3e:a6:61:58:91:c6:38:aa:02:28: d6:e9:c0:47:6f:97:04:87:03:c9:80:53:6d:16:25: ff:ac:da:e9:31:47:f1:e9:93:10:30:a4:81:26:5c: 21:db:5c:d3:a9:23:89:c0:ca:60:39:c7:7a:7a:58: c7:54:44:9c:67:c8:86:f2:90:53:57:76:a9:82:62: 18:73:29:7c:5c:b3:78:c2:d6:0f:01:ca:18:05:f1: 72:f5:59:02:0f:48:d1:e8:b3:06:1d:12:e3:04:1a: 45:4d:6c:9c:1c:df:7e:2b:92:ac:2e:4a:f1:5b:14: db:fe:8a:b3:3f:aa:78:c2:f1:02:ce:e4:42:f8:95: 58:25:24:b7:7c:02:34:9f:4b:fe:6e:20:1c:48:8d: ca:bf:04:f6:63:b1:82:1e:b3:4a:72:f5:70:ef:68: 57:6d:53:41:84:a4:04:26:3d:c0:45:f6:da:21:03: f4:1f:48:2a:ed:1a:b8:60:68:28:00:fe:3a:26:56: e8:fa:fc:a3:5f:fa:57:1d:89:24:e1:fd:9e:a6:08: 5e:0b:34:ec:23:40:c5:f8:36:a5:be:bb:48:e5:2e: 03:78:e8:fc:87:90:72:67:66:52:56:f7:8c:09:df: cf:19:66:c1:18:ec:63:00:ca:40:fb:68:20:25:5a: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CF:7F:30:91:38:2C:9C:EB:96:F8:19:55:8C:8D:AA:61:AC:F6:35 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Fs9_MJE4LJzrlvgZVYyNqmGs9jU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.86.0/24 Signature Algorithm: sha256WithRSAEncryption 32:ec:e8:61:37:a6:0e:58:82:39:c6:f5:6b:ba:0f:9a:8c:51: e5:fe:cf:b6:63:71:a1:bb:cf:b0:4a:3c:6d:f4:e5:be:21:19: 20:d2:17:71:0a:ba:9e:08:96:c0:38:65:a9:73:c2:2b:21:40: a9:2e:a2:2f:fd:39:bc:1a:1f:55:b7:fa:48:67:fd:7b:fc:71: 80:0e:48:a2:a6:20:95:17:51:49:d6:bf:3e:58:ab:80:c4:4e: 05:c7:3b:84:24:b1:e4:53:2f:92:b4:fb:f4:ad:a9:a3:19:4e: e3:b7:be:9b:72:81:a0:12:7d:36:f3:63:42:47:93:67:ec:b9: 3b:90:ac:1c:d7:a0:ce:2f:41:2d:cb:36:20:ff:0b:f9:67:db: 1f:31:ea:25:8e:2a:44:8b:7a:cf:2c:1a:e7:04:de:91:be:9a: ff:ab:a7:38:b1:6e:8b:48:bb:61:c6:44:e5:19:b4:2e:38:4f: 88:60:96:1d:e8:ae:70:45:fc:c4:f9:c9:4c:86:98:47:c5:0d: 33:2b:8b:4e:ad:2a:07:21:e0:e9:d6:ee:29:d1:30:a3:d8:65: 00:46:5c:9f:80:3d:bf:98:68:e4:9c:8f:a7:3e:50:58:79:76: 8c:c0:75:1d:9c:b8:c8:62:b2:13:ad:27:30:5c:4e:09:e5:43: f8:bd:a7:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FfIKgYS6pKEzTcd9UaGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmNmN2YzMDkxMzgyYzljZWI5NmY4MTk1NThjOGRhYTYxYWNmNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQBGwz6mYViRxjiqAijW6cBHb5cE hwPJgFNtFiX/rNrpMUfx6ZMQMKSBJlwh21zTqSOJwMpgOcd6eljHVEScZ8iG8pBT V3apgmIYcyl8XLN4wtYPAcoYBfFy9VkCD0jR6LMGHRLjBBpFTWycHN9+K5KsLkrx WxTb/oqzP6p4wvECzuRC+JVYJSS3fAI0n0v+biAcSI3KvwT2Y7GCHrNKcvVw72hX bVNBhKQEJj3ARfbaIQP0H0gq7Rq4YGgoAP46Jlbo+vyjX/pXHYkk4f2epgheCzTs I0DF+DalvrtI5S4DeOj8h5ByZ2ZSVveMCd/PGWbBGOxjAMpA+2ggJVpBTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBbPfzCROCyc65b4GVWMjaphrPY1MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvRnM5X01KRTRMSnpybHZnWlZZeU5xbUdzOWpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbVWMA0G CSqGSIb3DQEBCwUAA4IBAQAy7OhhN6YOWII5xvVrug+ajFHl/s+2Y3Ghu8+wSjxt 9OW+IRkg0hdxCrqeCJbAOGWpc8IrIUCpLqIv/Tm8Gh9Vt/pIZ/17/HGADkiipiCV F1FJ1r8+WKuAxE4FxzuEJLHkUy+StPv0ramjGU7jt76bcoGgEn0282NCR5Nn7Lk7 kKwc16DOL0EtyzYg/wv5Z9sfMeoljipEi3rPLBrnBN6Rvpr/q6c4sW6LSLthxkTl GbQuOE+IYJYd6K5wRfzE+clMhphHxQ0zK4tOrSoHIeDp1u4p0TCj2GUARlyfgD2/ mGjknI+nPlBYeXaMwHUdnLjIYrITrScwXE4J5UP4vadr -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:37 2026 by rpki-client