This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa File: 9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa (raw, json) Hash identifier: /DXZZnlzFxIqpfLKa2jzn4JOmraJhYpvlatvoWLWvdY= Subject key identifier: F6:37:E6:67:C6:D0:69:51:8F:14:35:91:14:7B:D0:1E:69:D2:F1:FA Certificate issuer: /CN=31d7d9d29cecf8e59122233d716e6b050e718478 Certificate serial: 019B76EB02300443619C9504C68B69599DE5 Authority key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa Signing time: Thu 01 Jan 2026 00:17:51 +0000 ROA not before: Thu 01 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204607 IP address blocks: 83.143.120.0/23 maxlen: 23 83.143.120.0/24 maxlen: 24 83.143.127.0/24 maxlen: 24 193.162.108.0/23 maxlen: 23 193.162.108.0/24 maxlen: 24 193.162.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:02:30:04:43:61:9c:95:04:c6:8b:69:59:9d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31d7d9d29cecf8e59122233d716e6b050e718478 Validity Not Before: Jan 1 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f637e667c6d069518f143591147bd01e69d2f1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e5:81:b5:3c:69:2f:22:60:c9:f9:5e:2c:9a: 8d:e0:d1:82:49:eb:f0:37:73:a9:f8:ee:c3:65:5a: d5:0d:d3:3d:35:e0:86:6c:49:c5:a0:16:26:ca:f2: 58:1d:19:df:72:96:e4:71:47:6b:41:8b:cb:b9:fb: fd:5f:29:12:98:47:b8:ec:91:c1:54:0a:60:68:8c: b8:43:c1:c6:79:ad:40:07:3c:d7:3b:f2:6c:45:61: 87:d4:56:2e:94:af:2e:aa:78:bd:5f:29:96:68:e5: a0:44:e4:d9:6c:43:76:db:cd:5d:82:a2:4a:c2:73: b8:8a:0e:f5:f1:33:80:be:89:d3:f8:43:7b:c8:81: f4:9e:83:d2:2f:d0:c1:07:56:dc:e1:ac:b9:7a:10: 1b:93:bb:4e:60:18:9e:25:ee:80:ef:07:a6:a5:d2: 9a:15:98:4b:ea:37:63:21:7c:4d:34:f8:92:d6:a8: e0:1c:cf:41:b1:56:0c:81:89:c6:dd:5b:73:fe:87: 50:33:de:d8:0d:53:22:be:03:b0:a8:ef:f4:cb:c9: f1:24:9a:28:75:74:73:89:aa:a5:4f:08:3f:f5:f4: 22:30:c0:37:18:d1:cc:13:af:d4:9f:aa:a0:2b:f1: 34:7e:a5:2b:ed:d3:5c:65:db:e3:25:30:a8:07:ea: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:37:E6:67:C6:D0:69:51:8F:14:35:91:14:7B:D0:1E:69:D2:F1:FA X509v3 Authority Key Identifier: keyid:31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/9jfmZ8bQaVGPFDWRFHvQHmnS8fo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.120.0/23 83.143.127.0/24 193.162.108.0/23 Signature Algorithm: sha256WithRSAEncryption 80:79:87:c4:4b:2e:2c:f2:dd:c2:93:af:1d:01:f3:11:98:e4: 70:3d:6b:e1:c2:6f:00:d1:eb:b7:68:f6:07:a4:68:14:eb:b9: 9d:6f:ab:15:4d:32:c3:84:88:f0:0f:f3:75:e3:5b:69:53:ad: fa:f9:a1:e6:a0:9d:8b:cf:77:dc:69:44:8d:67:eb:d4:44:ef: 94:2f:56:9b:ca:b2:0d:b2:a7:c0:61:ce:f3:84:59:c1:b8:5a: 3d:62:df:a5:b7:96:1e:db:13:54:7b:3d:2f:6a:41:8f:33:9d: 45:60:34:34:a2:3e:1d:88:75:82:d1:8d:52:32:98:0b:7d:0e: 73:82:44:94:e3:a9:b4:22:6d:6e:00:38:67:f9:06:16:49:cb: bc:06:02:b9:1e:27:f4:e7:97:26:49:fa:82:f2:22:1b:04:c6: 28:93:43:97:43:65:33:8e:c8:70:09:0b:d8:da:d5:d6:1a:2e: c4:e4:24:f8:9e:78:dd:d7:12:47:c3:77:ba:81:83:f0:15:95: 7c:04:d6:b2:18:86:02:e9:39:b7:42:32:77:57:eb:50:7a:9a: bf:c2:0e:30:01:4a:90:69:ca:1b:3b:98:89:e2:eb:53:53:9e: bb:0c:c5:8e:7e:94:47:33:39:b5:b3:06:63:f1:75:c5:b7:67: ff:04:78:ab -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26wIwBENhnJUExotpWZ3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZDdkOWQyOWNlY2Y4ZTU5MTIyMjMzZDcxNmU2YjA1MGU3 MTg0NzgwHhcNMjYwMTAxMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjM3ZTY2N2M2ZDA2OTUxOGYxNDM1OTExNDdiZDAxZTY5ZDJmMWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+WBtTxpLyJgyfleLJqN4NGCSevw N3Op+O7DZVrVDdM9NeCGbEnFoBYmyvJYHRnfcpbkcUdrQYvLufv9XykSmEe47JHB VApgaIy4Q8HGea1ABzzXO/JsRWGH1FYulK8uqni9XymWaOWgROTZbEN2281dgqJK wnO4ig718TOAvonT+EN7yIH0noPSL9DBB1bc4ay5ehAbk7tOYBieJe6A7wempdKa FZhL6jdjIXxNNPiS1qjgHM9BsVYMgYnG3Vtz/odQM97YDVMivgOwqO/0y8nxJJoo dXRziaqlTwg/9fQiMMA3GNHME6/Un6qgK/E0fqUr7dNcZdvjJTCoB+rnbQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPY35mfG0GlRjxQ1kRR70B5p0vH6MB8GA1UdIwQY MBaAFDHX2dKc7PjlkSIjPXFuawUOcYR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYt NDBmNGM2OGU5YTMxLzEvOWpmbVo4YlFhVkdQRkRXUkZIdlFIbW5TOGZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hZjgzMmItYTY0MS00ZTQ2LWE4MzYtNDBmNGM2OGU5YTMx LzEvTWRmWjBwenMtT1dSSWlNOWNXNXJCUTV4aEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBU494AwQA U49/AwQBwaJsMA0GCSqGSIb3DQEBCwUAA4IBAQCAeYfESy4s8t3Ck68dAfMRmORw PWvhwm8A0eu3aPYHpGgU67mdb6sVTTLDhIjwD/N141tpU636+aHmoJ2Lz3fcaUSN Z+vURO+UL1abyrINsqfAYc7zhFnBuFo9Yt+lt5Ye2xNUez0vakGPM51FYDQ0oj4d iHWC0Y1SMpgLfQ5zgkSU46m0Im1uADhn+QYWScu8BgK5Hif055cmSfqC8iIbBMYo k0OXQ2UzjshwCQvY2tXWGi7E5CT4nnjd1xJHw3e6gYPwFZV8BNayGIYC6Tm3QjJ3 V+tQepq/wg4wAUqQacobO5iJ4utTU567DMWOfpRHMzm1swZj8XXFt2f/BHir -----END CERTIFICATE-----Generated at Sun Jan 11 08:32:26 2026 by rpki-client