This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa File: AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa (raw, json) Hash identifier: M5yAFXUAqTlGP6Djc4hTf8xHqNDR8r1HdPQdOiU2KQ8= Subject key identifier: 00:9F:7E:FC:93:EF:30:B0:FB:31:33:BB:BF:F0:32:65:18:32:D3:FD Certificate issuer: /CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Certificate serial: 019B7D5C659624C186FD3B6A7B92078A16CC Authority key identifier: 87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa Signing time: Fri 02 Jan 2026 06:19:25 +0000 ROA not before: Fri 02 Jan 2026 06:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49824 IP address blocks: 91.225.200.0/24 maxlen: 24 91.225.201.0/24 maxlen: 24 91.225.202.0/24 maxlen: 24 91.245.72.0/21 maxlen: 21 193.93.216.0/22 maxlen: 22 2001:678:604::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.mft rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:65:96:24:c1:86:fd:3b:6a:7b:92:07:8a:16:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=873726b17b01bf0b54426d1810f23dc4f58f6a7b Validity Not Before: Jan 2 06:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=009f7efc93ef30b0fb3133bbbff032651832d3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f8:d5:e4:0f:2a:bd:df:a0:85:d8:b6:8d:db: 14:77:cb:f7:e8:e1:69:8f:51:04:ca:4a:8b:b0:aa: 69:d8:9f:78:c4:92:f9:76:56:25:ad:08:9c:d2:bb: 10:41:55:fe:58:1a:9f:36:ae:37:e5:4d:ff:1e:52: 1a:48:30:00:2d:b4:73:23:26:2e:d1:d4:08:6d:0d: dc:3e:da:ff:a4:51:5e:a6:14:0d:c2:b7:ec:40:ba: 3c:2e:d6:9f:d5:f1:af:df:66:54:8b:29:f9:c0:01: d8:e7:86:ce:06:28:ea:86:10:ba:a2:f4:9c:b0:98: 8e:b5:f8:32:5e:99:79:1b:6b:27:e1:ac:2c:f1:b4: 12:8a:de:22:5b:5a:09:ff:ae:87:4c:fa:b0:3b:0d: db:dd:3c:f1:fc:18:22:fb:6c:35:94:9f:06:95:67: d4:53:ea:e1:a7:2f:83:be:9f:d1:1c:17:83:0e:a8: 80:18:57:ba:b5:dc:02:26:87:87:74:6c:7b:b1:81: 1b:a8:c9:19:92:67:30:5f:78:78:f6:fc:e3:9e:ef: 25:a3:43:da:8a:1f:bc:04:2c:01:ae:64:4c:32:b4: 0d:32:e0:7f:94:e5:60:8b:16:92:48:fd:12:6a:62: cd:61:48:69:15:e8:23:d3:13:e4:95:3d:b9:fa:a0: 73:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9F:7E:FC:93:EF:30:B0:FB:31:33:BB:BF:F0:32:65:18:32:D3:FD X509v3 Authority Key Identifier: keyid:87:37:26:B1:7B:01:BF:0B:54:42:6D:18:10:F2:3D:C4:F5:8F:6A:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hzcmsXsBvwtUQm0YEPI9xPWPans.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/AJ9-_JPvMLD7MTO7v_AyZRgy0_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/23835a-b2cb-4a6e-89fd-2ae35175713c/1/hzcmsXsBvwtUQm0YEPI9xPWPans.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.200.0-91.225.202.255 91.245.72.0/21 193.93.216.0/22 IPv6: 2001:678:604::/48 Signature Algorithm: sha256WithRSAEncryption 69:6f:c7:7a:e0:6d:9f:3f:c4:91:d0:12:b7:a0:fc:d5:69:cf: 2d:16:12:63:f9:9d:22:21:b0:0a:6c:7b:26:e5:48:bb:b8:7e: ff:ed:24:a4:44:3f:50:ee:79:b4:f5:2c:7d:a8:1f:dc:71:44: be:b9:52:6c:8c:b2:48:4d:c7:8d:47:4d:9b:c5:25:ba:04:7e: a7:8f:54:d9:55:d9:96:66:be:b1:15:8f:7b:91:9c:ed:08:51: d2:78:3c:b1:6b:b6:17:da:22:87:5a:67:45:78:69:70:6a:a6: 77:87:56:bb:81:70:d9:aa:11:8a:29:5f:64:5a:ad:29:2a:2b: 40:5a:da:aa:7b:05:9b:ec:c4:db:97:1e:11:e5:2d:da:61:3a: 3a:97:fd:36:0a:5c:29:61:ab:02:d9:9e:32:ff:7e:45:bc:71: 8b:80:63:d5:ed:92:62:ce:bf:a2:ba:1b:cf:1f:3e:43:ba:96: b1:61:ec:ca:6e:38:25:3a:5c:55:c9:e7:5a:e8:7f:a2:80:b0: d7:c5:1f:68:fe:ed:14:be:0c:a3:dc:a1:4c:77:12:03:33:2a: f1:7e:f2:27:29:9f:34:ef:87:bb:60:d7:4b:cd:52:7f:39:32: 9d:49:3e:a8:68:34:fc:9d:9c:f8:9f:55:4a:95:d8:1c:24:09: a6:f3:4b:de -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt9XGWWJMGG/Ttqe5IHihbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MzcyNmIxN2IwMWJmMGI1NDQyNmQxODEwZjIzZGM0ZjU4 ZjZhN2IwHhcNMjYwMTAyMDYxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDlmN2VmYzkzZWYzMGIwZmIzMTMzYmJiZmYwMzI2NTE4MzJkM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PjV5A8qvd+ghdi2jdsUd8v36OFp j1EEykqLsKpp2J94xJL5dlYlrQic0rsQQVX+WBqfNq435U3/HlIaSDAALbRzIyYu 0dQIbQ3cPtr/pFFephQNwrfsQLo8Ltaf1fGv32ZUiyn5wAHY54bOBijqhhC6ovSc sJiOtfgyXpl5G2sn4aws8bQSit4iW1oJ/66HTPqwOw3b3Tzx/Bgi+2w1lJ8GlWfU U+rhpy+Dvp/RHBeDDqiAGFe6tdwCJoeHdGx7sYEbqMkZkmcwX3h49vzjnu8lo0Pa ih+8BCwBrmRMMrQNMuB/lOVgixaSSP0SamLNYUhpFegj0xPklT25+qBzMQIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFACffvyT7zCw+zEzu7/wMmUYMtP9MB8GA1UdIwQY MBaAFIc3JrF7Ab8LVEJtGBDyPcT1j2p7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQt MmFlMzUxNzU3MTNjLzEvQUo5LV9KUHZNTEQ3TVRPN3ZfQXlaUmd5MF8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yMzgzNWEtYjJjYi00YTZlLTg5ZmQtMmFlMzUxNzU3MTNj LzEvaHpjbXNYc0J2d3RVUW0wWUVQSTl4UFdQYW5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaMAwDBANb4cgD BABb4coDBANb9UgDBALBXdgwDwQCAAIwCQMHACABBngGBDANBgkqhkiG9w0BAQsF AAOCAQEAaW/HeuBtnz/EkdASt6D81WnPLRYSY/mdIiGwCmx7JuVIu7h+/+0kpEQ/ UO55tPUsfagf3HFEvrlSbIyySE3HjUdNm8UlugR+p49U2VXZlma+sRWPe5Gc7QhR 0ng8sWu2F9oih1pnRXhpcGqmd4dWu4Fw2aoRiilfZFqtKSorQFraqnsFm+zE25ce EeUt2mE6Opf9NgpcKWGrAtmeMv9+Rbxxi4Bj1e2SYs6/orobzx8+Q7qWsWHsym44 JTpcVcnnWuh/ooCw18UfaP7tFL4Mo9yhTHcSAzMq8X7yJymfNO+Hu2DXS81Sfzky nUk+qGg0/J2c+J9VSpXYHCQJpvNL3g== -----END CERTIFICATE-----Generated at Mon Jan 26 09:40:32 2026 by rpki-client