This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/9rDYh6RoCnRP7wyIaMUt11JFs3w.roa File: 9rDYh6RoCnRP7wyIaMUt11JFs3w.roa (raw, json) Hash identifier: ceIif/yZZ/uAesVBkNPfdSQjyTnuFeMLRlIbdZ852RQ= Subject key identifier: F6:B0:D8:87:A4:68:0A:74:4F:EF:0C:88:68:C5:2D:D7:52:45:B3:7C Certificate issuer: /CN=1c39d57936dd2d1521443e68dadd9d0949cde33f Certificate serial: 019BE595AD4DDF96A3608F9A62CB2D90F999 Authority key identifier: 1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/9rDYh6RoCnRP7wyIaMUt11JFs3w.roa Signing time: Thu 22 Jan 2026 12:02:30 +0000 ROA not before: Thu 22 Jan 2026 12:02:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48284 IP address blocks: 5.199.176.0/21 maxlen: 21 88.133.240.0/21 maxlen: 30 94.125.72.0/21 maxlen: 21 109.70.192.0/21 maxlen: 21 109.235.224.0/21 maxlen: 21 130.255.104.0/21 maxlen: 21 185.35.208.0/22 maxlen: 22 212.237.168.0/21 maxlen: 21 213.193.216.0/21 maxlen: 21 2a02:778::/29 maxlen: 29 2a02:778::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.mft rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:95:ad:4d:df:96:a3:60:8f:9a:62:cb:2d:90:f9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c39d57936dd2d1521443e68dadd9d0949cde33f Validity Not Before: Jan 22 12:02:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6b0d887a4680a744fef0c8868c52dd75245b37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:66:4d:ec:3d:f3:ea:0a:ea:cb:eb:ad:76: d4:02:25:2a:38:a0:32:09:44:a0:47:6d:bf:41:7f: c6:d4:c6:20:fa:7f:58:a4:43:43:d4:ba:26:d8:4e: 90:5e:a3:8e:f7:fa:60:00:50:ce:e0:e6:58:a3:20: 56:f3:e6:3f:2a:ad:22:44:ae:80:03:83:31:86:7a: f5:52:3f:fb:6c:ea:1b:71:1f:f4:4c:b3:e9:42:67: 2f:3b:d7:f5:31:b0:78:c7:a0:34:76:e2:0f:c5:fe: 9a:ca:f7:54:26:a8:02:78:00:fd:36:91:0c:e5:94: 93:bb:59:6b:e4:15:8d:61:a9:35:fa:f9:6c:da:1f: fb:ae:0c:89:5b:94:0f:c6:0a:24:b9:e7:75:23:27: 3e:6f:7a:97:0e:8d:21:cb:8e:12:07:81:cc:fb:55: d8:32:3d:09:1f:cc:0d:fc:29:94:2d:61:45:7b:eb: 1b:f3:d1:f7:3e:4b:4b:d0:c6:72:38:5b:e8:8a:04: 85:e6:27:8c:da:1b:5f:f6:10:40:d5:32:62:e0:27: e0:ba:02:d4:4f:91:18:25:8f:ca:b1:9e:66:49:3f: 5a:e6:f4:32:94:bc:26:40:63:8c:4e:58:43:90:36: b3:91:fa:e8:22:b4:56:74:f9:1a:0d:83:dd:3d:0f: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B0:D8:87:A4:68:0A:74:4F:EF:0C:88:68:C5:2D:D7:52:45:B3:7C X509v3 Authority Key Identifier: keyid:1C:39:D5:79:36:DD:2D:15:21:44:3E:68:DA:DD:9D:09:49:CD:E3:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDnVeTbdLRUhRD5o2t2dCUnN4z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/9rDYh6RoCnRP7wyIaMUt11JFs3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3856f-029c-446a-ae7d-d7c5da7c1676/1/HDnVeTbdLRUhRD5o2t2dCUnN4z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.176.0/21 88.133.240.0/21 94.125.72.0/21 109.70.192.0/21 109.235.224.0/21 130.255.104.0/21 185.35.208.0/22 212.237.168.0/21 213.193.216.0/21 IPv6: 2a02:778::/29 Signature Algorithm: sha256WithRSAEncryption 64:1e:9a:fc:ef:25:28:cc:99:a2:12:46:b8:ba:aa:ab:03:96: ec:5f:ef:47:8c:66:2b:5e:c9:7e:21:93:bd:f2:e2:14:27:2e: 8e:fe:01:ff:46:b6:a3:2e:03:b1:30:6e:e1:5e:c9:b0:5d:10: bc:f8:80:1a:ac:f7:85:c5:df:ed:ed:e1:3a:69:2b:bc:05:0e: 7b:28:26:4a:6e:8c:af:ce:88:dd:2b:c5:55:08:42:0f:8d:d2: ab:e6:81:89:8b:67:bc:a0:97:1c:4d:9e:32:36:dd:59:08:54: d6:48:1e:91:4f:31:2f:f8:69:4d:97:01:8e:6f:36:2f:1a:63: 9d:fa:c8:ae:06:e5:bb:27:e8:91:2b:55:4f:5a:7c:77:a9:11: 5c:cf:c5:73:05:55:16:f7:ed:ca:f0:55:41:78:53:a8:d7:73: 96:5b:c3:06:9f:fd:8d:9e:1e:f5:d4:fa:7b:13:24:74:48:2b: 27:d1:2b:aa:1b:71:1a:70:3d:cf:7a:34:a1:b6:50:6c:f3:65: 60:15:da:4b:ab:c6:1e:ca:83:ce:6a:ed:37:f8:ef:63:26:4d: f8:ee:e7:b1:8f:0a:38:d2:df:5c:89:08:82:12:22:c9:88:72: a3:7b:8c:e0:cb:95:ca:2b:c6:36:7c:6e:35:25:42:31:ab:c4: a3:ab:a0:13 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZvlla1N35ajYI+aYsstkPmZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzlkNTc5MzZkZDJkMTUyMTQ0M2U2OGRhZGQ5ZDA5NDlj ZGUzM2YwHhcNMjYwMTIyMTIwMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmIwZDg4N2E0NjgwYTc0NGZlZjBjODg2OGM1MmRkNzUyNDViMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq5mTew98+oK6svrrXbUAiUqOKAy CUSgR22/QX/G1MYg+n9YpEND1Lom2E6QXqOO9/pgAFDO4OZYoyBW8+Y/Kq0iRK6A A4Mxhnr1Uj/7bOobcR/0TLPpQmcvO9f1MbB4x6A0duIPxf6ayvdUJqgCeAD9NpEM 5ZSTu1lr5BWNYak1+vls2h/7rgyJW5QPxgokued1Iyc+b3qXDo0hy44SB4HM+1XY Mj0JH8wN/CmULWFFe+sb89H3PktL0MZyOFvoigSF5ieM2htf9hBA1TJi4CfgugLU T5EYJY/KsZ5mST9a5vQylLwmQGOMTlhDkDazkfroIrRWdPkaDYPdPQ/hpwIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFPaw2IekaAp0T+8MiGjFLddSRbN8MB8GA1UdIwQY MBaAFBw51Xk23S0VIUQ+aNrdnQlJzeM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kMzg1NmYtMDI5Yy00NDZhLWFlN2Qt ZDdjNWRhN2MxNjc2LzEvOXJEWWg2Um9DblJQN3d5SWFNVXQxMUpGczN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kMzg1NmYtMDI5Yy00NDZhLWFlN2QtZDdjNWRhN2MxNjc2 LzEvSERuVmVUYmRMUlVoUkQ1bzJ0MmRDVW5ONHo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQDBcewAwQD WIXwAwQDXn1IAwQDbUbAAwQDbevgAwQDgv9oAwQCuSPQAwQD1O2oAwQD1cHYMA0E AgACMAcDBQMqAgd4MA0GCSqGSIb3DQEBCwUAA4IBAQBkHpr87yUozJmiEka4uqqr A5bsX+9HjGYrXsl+IZO98uIUJy6O/gH/RrajLgOxMG7hXsmwXRC8+IAarPeFxd/t 7eE6aSu8BQ57KCZKboyvzojdK8VVCEIPjdKr5oGJi2e8oJccTZ4yNt1ZCFTWSB6R TzEv+GlNlwGObzYvGmOd+siuBuW7J+iRK1VPWnx3qRFcz8VzBVUW9+3K8FVBeFOo 13OWW8MGn/2Nnh711Pp7EyR0SCsn0SuqG3EacD3PejShtlBs82VgFdpLq8YeyoPO au03+O9jJk347uexjwo40t9ciQiCEiLJiHKje4zgy5XKK8Y2fG41JUIxq8Sjq6AT -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:53 2026 by rpki-client