This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/r0j9LnC2drZ7SRmuYUzl0KJ9kPg.roa File: r0j9LnC2drZ7SRmuYUzl0KJ9kPg.roa (raw, json) Hash identifier: eGNhXEA1sTMWtwnMafu4fwbLPaNFEymaaCYV1rnMbeA= Subject key identifier: AF:48:FD:2E:70:B6:76:B6:7B:49:19:AE:61:4C:E5:D0:A2:7D:90:F8 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15EB85804D11123CFBEC2646858745 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/r0j9LnC2drZ7SRmuYUzl0KJ9kPg.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203083 IP address blocks: 45.9.31.0/24 maxlen: 24 193.28.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:eb:85:80:4d:11:12:3c:fb:ec:26:46:85:87:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af48fd2e70b676b67b4919ae614ce5d0a27d90f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:13:53:65:62:2c:d3:70:3f:38:a2:2c:b0:88: af:66:f2:7f:cb:ef:fd:98:df:8f:d9:38:5e:ae:e9: 05:96:c4:7e:3d:99:8b:0e:a6:ff:4d:7f:24:14:4a: 98:5f:4b:a9:97:48:bb:5c:d7:f9:88:c7:6a:dd:f8: 0a:13:f0:dc:b9:84:a0:bf:15:91:75:2b:46:b9:62: c5:f3:f7:ce:3b:27:02:31:b3:7e:b6:28:32:a9:e4: 89:db:5c:07:d4:3a:33:53:05:ac:6b:28:a7:fc:18: 27:c7:2b:5e:34:86:3f:55:18:52:c4:88:f4:2c:95: ec:4b:f8:06:11:45:c6:62:76:94:3e:bb:74:78:a9: de:1c:9a:f8:f5:00:92:59:0a:e8:21:56:17:df:68: 6e:98:ee:c5:46:52:2a:bd:ee:b4:20:a1:21:1e:56: 77:fc:9e:ba:dc:76:bf:3f:cb:16:93:a3:aa:45:61: db:54:19:00:a3:7c:c8:58:cf:84:ff:1f:83:8d:58: 1a:68:ac:42:6c:51:0e:a6:da:c1:dd:0c:a0:d4:0d: 2c:b3:59:d0:98:07:dc:ef:5c:04:63:bb:cc:00:87: 8a:b1:ab:7e:f6:ae:d4:2f:0d:da:9f:3d:6e:63:a4: ba:b9:39:4b:37:6b:99:f0:27:06:23:1b:59:0e:d4: ec:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:48:FD:2E:70:B6:76:B6:7B:49:19:AE:61:4C:E5:D0:A2:7D:90:F8 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/r0j9LnC2drZ7SRmuYUzl0KJ9kPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.31.0/24 193.28.177.0/24 Signature Algorithm: sha256WithRSAEncryption bc:a4:d6:71:2b:9c:07:20:20:ae:64:e9:7d:70:05:f9:4f:da: e5:c9:69:e4:3d:56:c2:86:3a:b2:2a:0f:4e:0f:ea:a2:51:f7: b4:00:50:ea:be:dc:1d:64:fe:17:cf:84:9a:3c:83:2c:58:34: 01:17:c2:58:e0:eb:f2:2e:fb:0d:53:9b:27:85:30:a2:de:02: e4:d9:53:ea:2f:98:e5:c4:85:ce:7f:c4:8a:a0:b1:c9:87:c5: cc:aa:fb:34:37:ef:90:f9:4f:f6:d4:d9:4e:7c:85:3a:a0:d7: 0b:75:98:19:da:c3:eb:e5:e9:cc:3d:97:22:e5:4e:fa:75:5d: e0:ea:ea:b9:bb:37:6b:ca:26:45:03:f2:30:26:b3:e8:72:f3: 98:b2:1f:8c:6d:0d:d6:37:f7:af:9d:29:c7:e7:8c:7b:87:01: 9e:64:ab:81:44:96:fd:bf:59:a6:af:dd:7e:e1:3b:16:ae:51: ce:e0:1c:4b:2a:4a:7a:64:0d:48:65:5f:6f:a1:4e:6a:77:87: b4:43:d7:17:18:a0:76:d0:b7:72:ff:fc:01:a5:fc:39:86:e4: 94:85:57:23:47:2b:11:7f:28:79:40:ea:3e:bb:51:2b:4f:b9: 52:c8:aa:ca:13:8d:8c:8a:ca:f1:1b:8e:5a:d5:0f:9e:ea:43: f4:ee:d9:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FeuFgE0REjz77CZGhYdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjQ4ZmQyZTcwYjY3NmI2N2I0OTE5YWU2MTRjZTVkMGEyN2Q5MGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hNTZWIs03A/OKIssIivZvJ/y+/9 mN+P2TherukFlsR+PZmLDqb/TX8kFEqYX0upl0i7XNf5iMdq3fgKE/DcuYSgvxWR dStGuWLF8/fOOycCMbN+tigyqeSJ21wH1DozUwWsayin/BgnxyteNIY/VRhSxIj0 LJXsS/gGEUXGYnaUPrt0eKneHJr49QCSWQroIVYX32humO7FRlIqve60IKEhHlZ3 /J663Ha/P8sWk6OqRWHbVBkAo3zIWM+E/x+DjVgaaKxCbFEOptrB3Qyg1A0ss1nQ mAfc71wEY7vMAIeKsat+9q7ULw3anz1uY6S6uTlLN2uZ8CcGIxtZDtTsMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK9I/S5wtna2e0kZrmFM5dCifZD4MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvcjBqOUxuQzJkclo3U1JtdVlVemwwS0o5a1BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQkfAwQA wRyxMA0GCSqGSIb3DQEBCwUAA4IBAQC8pNZxK5wHICCuZOl9cAX5T9rlyWnkPVbC hjqyKg9OD+qiUfe0AFDqvtwdZP4Xz4SaPIMsWDQBF8JY4OvyLvsNU5snhTCi3gLk 2VPqL5jlxIXOf8SKoLHJh8XMqvs0N++Q+U/21NlOfIU6oNcLdZgZ2sPr5enMPZci 5U76dV3g6uq5uzdryiZFA/IwJrPocvOYsh+MbQ3WN/evnSnH54x7hwGeZKuBRJb9 v1mmr91+4TsWrlHO4BxLKkp6ZA1IZV9voU5qd4e0Q9cXGKB20Ldy//wBpfw5huSU hVcjRysRfyh5QOo+u1ErT7lSyKrKE42MisrxG45a1Q+e6kP07tk/ -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:37 2026 by rpki-client