This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/m9NhpqaT1oB2GLt0jjDfs6pgSSg.roa File: m9NhpqaT1oB2GLt0jjDfs6pgSSg.roa (raw, json) Hash identifier: 5b1tI/znVjW73nWc4ORWaXr9KnAQ1h7/N9EmwsKVAIM= Subject key identifier: 9B:D3:61:A6:A6:93:D6:80:76:18:BB:74:8E:30:DF:B3:AA:60:49:28 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E76E922D6A5490815B79F53221038 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/m9NhpqaT1oB2GLt0jjDfs6pgSSg.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215355 IP address blocks: 89.251.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:76:e9:22:d6:a5:49:08:15:b7:9f:53:22:10:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bd361a6a693d6807618bb748e30dfb3aa604928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:99:0f:2d:a6:2d:c8:0f:a3:b6:95:5d:c5:c2: b5:29:84:a4:dd:af:38:e9:20:f0:40:70:09:d4:f3: e1:49:0f:46:10:00:f9:75:a6:0a:72:75:74:af:5b: 87:6f:50:7d:07:0b:ac:31:88:78:b7:75:57:0a:4f: 8f:97:33:6a:96:ad:9a:1a:f9:60:0c:bf:16:1a:3e: 5f:71:bb:65:5b:b8:05:96:45:24:f5:30:73:ae:8e: 24:9b:5d:41:da:46:a8:66:53:43:1b:61:89:cc:b6: 50:c9:ae:e0:19:ad:08:20:94:58:68:bf:81:1a:39: bd:c7:9c:d0:5f:4d:92:2b:c1:bc:92:24:66:e5:dd: 40:1e:94:26:83:ed:ac:a3:e3:3e:e0:b0:11:35:4a: b7:d0:82:42:34:2c:a7:c9:f5:43:12:4e:86:3c:e8: 29:32:b1:a4:8c:d6:14:42:98:24:77:d6:b9:34:26: 55:29:da:f9:41:2b:21:82:e9:e4:11:73:94:99:f7: 91:c5:c5:51:0d:d0:92:34:c9:79:54:1b:58:93:e4: 34:a3:fb:b3:d4:8c:d9:b1:9c:9d:89:83:e2:36:86: 15:20:5e:83:e6:ce:1a:f2:33:78:b1:a4:19:a8:0a: 8d:4b:4a:31:81:2f:d9:97:c9:7e:c0:fb:6b:16:60: be:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D3:61:A6:A6:93:D6:80:76:18:BB:74:8E:30:DF:B3:AA:60:49:28 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/m9NhpqaT1oB2GLt0jjDfs6pgSSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.26.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:64:fa:ad:8d:90:5f:7c:7d:d5:79:5e:f3:dc:d7:a4:49:f1: 32:0a:78:a4:0f:82:24:07:84:53:e9:95:f2:6f:5f:be:c3:22: 27:fa:b4:4c:2f:e7:aa:64:a9:87:4d:95:15:46:ad:41:10:21: ac:5f:43:a8:99:3e:ee:9a:60:ce:27:0b:51:20:45:d1:e6:ea: ae:3b:af:4b:7c:ad:e6:f0:af:af:7e:d9:52:ba:6a:38:9d:db: 71:03:c6:5f:59:85:47:b6:67:73:38:c9:58:be:f3:bd:fd:40: ca:7b:f2:fb:e3:05:f3:e6:51:74:f2:b1:dc:50:20:e0:10:45: 8e:68:b6:1f:88:0d:12:88:5d:c1:5e:43:88:d0:a6:83:49:f0: 8d:c8:12:14:60:75:74:05:a2:7d:f4:6a:29:95:3a:87:3b:d9: 37:0a:a4:ab:db:c1:46:3c:ad:14:73:ff:06:a3:05:56:5d:ac: ae:ad:dd:d2:af:06:46:56:b0:bd:b2:a1:49:42:a7:49:8b:f1: 56:c2:78:ac:4a:12:85:13:eb:92:b0:75:81:26:74:46:d2:07: 74:e2:fa:34:4e:06:16:0a:3e:3d:44:51:e7:ca:a5:31:ce:1b: ea:25:00:13:a0:26:be:af:b1:92:02:50:88:ef:f7:86:ae:fb: 2f:27:24:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnbpItalSQgVt59TIhA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmQzNjFhNmE2OTNkNjgwNzYxOGJiNzQ4ZTMwZGZiM2FhNjA0OTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpkPLaYtyA+jtpVdxcK1KYSk3a84 6SDwQHAJ1PPhSQ9GEAD5daYKcnV0r1uHb1B9BwusMYh4t3VXCk+PlzNqlq2aGvlg DL8WGj5fcbtlW7gFlkUk9TBzro4km11B2kaoZlNDG2GJzLZQya7gGa0IIJRYaL+B Gjm9x5zQX02SK8G8kiRm5d1AHpQmg+2so+M+4LARNUq30IJCNCynyfVDEk6GPOgp MrGkjNYUQpgkd9a5NCZVKdr5QSshgunkEXOUmfeRxcVRDdCSNMl5VBtYk+Q0o/uz 1IzZsZydiYPiNoYVIF6D5s4a8jN4saQZqAqNS0oxgS/Zl8l+wPtrFmC+IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJvTYaamk9aAdhi7dI4w37OqYEkoMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvbTlOaHBxYVQxb0IyR0x0MGpqRGZzNnBnU1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfsaMA0G CSqGSIb3DQEBCwUAA4IBAQBqZPqtjZBffH3VeV7z3NekSfEyCnikD4IkB4RT6ZXy b1++wyIn+rRML+eqZKmHTZUVRq1BECGsX0OomT7ummDOJwtRIEXR5uquO69LfK3m 8K+vftlSumo4ndtxA8ZfWYVHtmdzOMlYvvO9/UDKe/L74wXz5lF08rHcUCDgEEWO aLYfiA0SiF3BXkOI0KaDSfCNyBIUYHV0BaJ99GoplTqHO9k3CqSr28FGPK0Uc/8G owVWXayurd3SrwZGVrC9sqFJQqdJi/FWwnisShKFE+uSsHWBJnRG0gd04vo0TgYW Cj49RFHnyqUxzhvqJQAToCa+r7GSAlCI7/eGrvsvJyQz -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:17 2026 by rpki-client