This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/9_K_1M1kPXxzBO-W0eFqLhyuHMo.roa File: 9_K_1M1kPXxzBO-W0eFqLhyuHMo.roa (raw, json) Hash identifier: z6ZVltiPzSr8ihIcHUbetLuHuEedi9WbTlBtVwqWbhE= Subject key identifier: F7:F2:BF:D4:CD:64:3D:7C:73:04:EF:96:D1:E1:6A:2E:1C:AE:1C:CA Certificate issuer: /CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028 Certificate serial: 019B59CA9E983A6BDE02425E08E8D46F10F5 Authority key identifier: E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/9_K_1M1kPXxzBO-W0eFqLhyuHMo.roa Signing time: Fri 26 Dec 2025 08:33:29 +0000 ROA not before: Fri 26 Dec 2025 08:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44291 IP address blocks: 79.142.192.0/20 maxlen: 20 79.142.192.0/23 maxlen: 23 79.142.194.0/23 maxlen: 23 79.142.196.0/23 maxlen: 23 79.142.196.0/24 maxlen: 24 79.142.198.0/24 maxlen: 24 79.142.200.0/21 maxlen: 21 79.142.200.0/22 maxlen: 22 79.142.203.0/24 maxlen: 24 79.142.206.0/23 maxlen: 23 185.70.16.0/22 maxlen: 22 185.70.17.0/24 maxlen: 24 185.70.18.0/24 maxlen: 24 217.73.80.0/20 maxlen: 20 2a03:8500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.mft rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ca:9e:98:3a:6b:de:02:42:5e:08:e8:d4:6f:10:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4223c1f1cda19b9935b48c7fdcf2055c2962028 Validity Not Before: Dec 26 08:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f7f2bfd4cd643d7c7304ef96d1e16a2e1cae1cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:96:6a:37:a9:ee:53:9a:13:ce:2f:fd:9f: 04:d1:c0:93:67:8f:fb:cd:37:d8:7c:d8:56:ab:18: aa:d0:f9:48:0d:60:5b:d9:df:61:0d:97:6b:75:c8: 69:29:cb:ee:32:46:4c:6a:f2:23:74:92:dc:23:a7: 6e:d8:cd:4d:ca:da:aa:ef:da:78:26:9c:15:c0:da: 6e:98:9c:a1:2c:f1:92:08:98:72:7a:06:4d:9f:c0: f6:75:fd:d1:28:20:77:bf:f0:6c:85:aa:fe:8d:66: 6c:cc:9c:36:d5:c9:30:e9:6e:93:6c:96:e9:16:29: a2:3e:fb:57:32:10:15:a5:68:fb:39:1b:a9:9e:10: 56:a5:c3:4e:ce:95:20:30:8e:b8:69:22:9d:e2:79: 2e:e6:02:b7:82:18:68:03:d8:5d:c5:19:4f:a7:99: e5:f9:a6:63:2d:82:1e:81:5e:ea:4c:bc:1f:66:a3: b2:c0:89:56:f2:b0:2c:03:e6:2b:a0:db:8b:0b:4a: 83:c2:c8:60:20:67:ad:17:26:40:c9:b4:d0:71:92: 4e:24:da:0a:43:0d:74:2c:b7:dd:0a:3d:66:1d:d2: 76:0d:50:90:cd:28:e0:1a:3c:c6:fa:f0:c3:d8:2a: 8b:03:1a:c0:5e:0a:f7:3c:67:0b:64:04:47:14:bc: f0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F2:BF:D4:CD:64:3D:7C:73:04:EF:96:D1:E1:6A:2E:1C:AE:1C:CA X509v3 Authority Key Identifier: keyid:E4:22:3C:1F:1C:DA:19:B9:93:5B:48:C7:FD:CF:20:55:C2:96:20:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CI8HxzaGbmTW0jH_c8gVcKWICg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/9_K_1M1kPXxzBO-W0eFqLhyuHMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6bf90c-97d5-44c6-acda-c370ad298ca3/1/5CI8HxzaGbmTW0jH_c8gVcKWICg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.142.192.0/20 185.70.16.0/22 217.73.80.0/20 IPv6: 2a03:8500::/32 Signature Algorithm: sha256WithRSAEncryption 10:29:6e:d5:6b:c2:3b:38:49:cd:f9:64:29:f1:c2:1c:b1:fe: 2e:08:5f:b6:02:12:22:52:52:7e:12:a5:4a:b7:66:c6:b3:8e: ec:71:80:33:a1:f3:63:d3:85:ec:53:47:07:11:6d:8e:77:42: 1f:ac:cc:8f:62:11:b1:06:98:78:56:fc:29:6e:b3:bb:aa:d1: cf:50:be:b8:64:82:50:86:b6:bd:db:ae:e1:84:33:53:75:b3: 1a:39:26:3e:56:82:38:af:5e:39:ad:bf:f4:ab:3a:74:30:24: 6d:15:3b:7f:10:03:1c:91:5a:ad:4c:16:87:1c:2e:4c:eb:f9: 4b:8f:96:7f:b6:b4:60:86:91:95:ed:37:2e:bb:8c:e4:af:04: ac:d2:82:81:cc:74:ba:c1:b6:74:90:53:0e:77:51:04:5b:c1: c3:a5:80:9f:01:90:62:8b:b8:87:b6:c8:b7:99:e0:d7:df:59: 26:02:de:62:63:97:af:90:94:89:0d:d6:a2:eb:69:90:8b:ff: 9f:68:31:31:b7:b5:34:53:1b:76:30:d8:a0:a3:ec:0b:aa:eb: 98:0b:ec:18:5f:2c:a2:72:9d:b6:8d:65:4d:fd:f9:22:48:3c: cb:96:9c:b9:fa:87:43:0f:22:d2:22:1b:ba:41:d9:13:fc:4b: d8:9f:24:01 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZtZyp6YOmveAkJeCOjUbxD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MjIzYzFmMWNkYTE5Yjk5MzViNDhjN2ZkY2YyMDU1YzI5 NjIwMjgwHhcNMjUxMjI2MDgzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2YyYmZkNGNkNjQzZDdjNzMwNGVmOTZkMWUxNmEyZTFjYWUxY2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oSWajep7lOaE84v/Z8E0cCTZ4/7 zTfYfNhWqxiq0PlIDWBb2d9hDZdrdchpKcvuMkZMavIjdJLcI6du2M1Nytqq79p4 JpwVwNpumJyhLPGSCJhyegZNn8D2df3RKCB3v/Bshar+jWZszJw21ckw6W6TbJbp FimiPvtXMhAVpWj7ORupnhBWpcNOzpUgMI64aSKd4nku5gK3ghhoA9hdxRlPp5nl +aZjLYIegV7qTLwfZqOywIlW8rAsA+YroNuLC0qDwshgIGetFyZAybTQcZJOJNoK Qw10LLfdCj1mHdJ2DVCQzSjgGjzG+vDD2CqLAxrAXgr3PGcLZARHFLzwiQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPfyv9TNZD18cwTvltHhai4crhzKMB8GA1UdIwQY MBaAFOQiPB8c2hm5k1tIx/3PIFXCliAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUNJOEh4emFHYm1UVzBqSF9jOGdWY0tXSUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82YmY5MGMtOTdkNS00NGM2LWFjZGEt YzM3MGFkMjk4Y2EzLzEvOV9LXzFNMWtQWHh6Qk8tVzBlRnFMaHl1SE1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS82YmY5MGMtOTdkNS00NGM2LWFjZGEtYzM3MGFkMjk4Y2Ez LzEvNUNJOEh4emFHYm1UVzBqSF9jOGdWY0tXSUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQET47AAwQC uUYQAwQE2UlQMA0EAgACMAcDBQAqA4UAMA0GCSqGSIb3DQEBCwUAA4IBAQAQKW7V a8I7OEnN+WQp8cIcsf4uCF+2AhIiUlJ+EqVKt2bGs47scYAzofNj04XsU0cHEW2O d0IfrMyPYhGxBph4VvwpbrO7qtHPUL64ZIJQhra9267hhDNTdbMaOSY+VoI4r145 rb/0qzp0MCRtFTt/EAMckVqtTBaHHC5M6/lLj5Z/trRghpGV7Tcuu4zkrwSs0oKB zHS6wbZ0kFMOd1EEW8HDpYCfAZBii7iHtsi3meDX31kmAt5iY5evkJSJDdai62mQ i/+faDExt7U0Uxt2MNigo+wLquuYC+wYXyyicp22jWVN/fkiSDzLlpy5+odDDyLS Ihu6QdkT/EvYnyQB -----END CERTIFICATE-----Generated at Fri Dec 26 17:18:22 2025 by rpki-client