This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/p9dEgpnuIv4GzvpyUtYj7YwfNkw.roa File: p9dEgpnuIv4GzvpyUtYj7YwfNkw.roa (raw, json) Hash identifier: ntFwgx0BPmHacsG/x9Fir1C9rUhhUsKeoLiyXbUgSLQ= Subject key identifier: A7:D7:44:82:99:EE:22:FE:06:CE:FA:72:52:D6:23:ED:8C:1F:36:4C Certificate issuer: /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06 Certificate serial: 019B77C6C4569F91C2FD6782102D3CB083C1 Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/p9dEgpnuIv4GzvpyUtYj7YwfNkw.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199634 IP address blocks: 176.57.72.0/21 maxlen: 21 185.8.124.0/22 maxlen: 22 2a02:d840::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c4:56:9f:91:c2:fd:67:82:10:2d:3c:b0:83:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06 Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7d7448299ee22fe06cefa7252d623ed8c1f364c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1f:66:93:28:78:b2:e5:4a:8e:3c:cc:71:86: 23:80:db:67:db:19:8f:85:5b:d6:33:58:61:2e:fd: bc:b0:c7:ad:9f:8d:3c:c4:75:45:87:53:16:73:57: 70:8d:cb:7a:42:e3:46:7e:90:1c:ea:40:67:f4:34: 8a:a3:29:82:04:ab:9e:69:6d:e5:ce:60:ad:73:31: 03:0a:70:74:09:51:4a:98:ef:18:c9:ad:c7:36:54: 48:17:09:8e:e5:4c:e6:3f:16:59:2a:f4:33:fe:9d: ad:30:1c:c0:8b:fa:33:fc:99:0b:10:63:4e:3e:58: 14:3d:d5:2a:9e:f2:79:7e:d7:10:16:33:a7:ce:3d: a5:1e:89:80:fe:6e:c1:3f:c2:0a:ec:02:01:38:6d: f3:fd:01:54:44:6b:0f:41:99:e7:81:6e:fe:16:90: 0b:69:90:2f:bb:23:4f:e3:be:86:c6:f5:c2:ad:97: 98:b6:50:46:68:15:1c:21:26:d7:15:60:7e:ba:89: f1:30:2e:c0:fd:97:26:85:cc:a6:49:c2:a4:b1:85: 6b:3d:58:26:2a:d7:89:0f:9d:11:f8:a8:a7:01:f8: 60:6a:e9:ee:90:fa:8e:f9:66:94:27:5e:75:0b:c8: ea:fa:9a:3f:71:c7:ab:6e:92:c8:6f:b1:32:c6:bd: c6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D7:44:82:99:EE:22:FE:06:CE:FA:72:52:D6:23:ED:8C:1F:36:4C X509v3 Authority Key Identifier: keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/p9dEgpnuIv4GzvpyUtYj7YwfNkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.57.72.0/21 185.8.124.0/22 IPv6: 2a02:d840::/29 Signature Algorithm: sha256WithRSAEncryption 06:d1:e2:7c:ca:e9:b3:66:7f:28:4a:aa:b3:e3:62:ae:13:43: 2b:6e:24:0d:9e:ac:0a:14:e5:ce:9d:96:46:27:0d:85:0a:ba: 80:eb:c9:45:a0:58:19:44:71:e1:3c:10:f4:67:19:98:8a:e3: 39:ad:8b:5f:b8:1b:8e:9e:f4:34:2e:c2:16:e6:65:5f:77:bb: b9:3e:ec:b0:f4:62:5b:99:b2:15:68:85:17:83:67:ec:ca:33: 21:64:86:e3:cc:61:fe:3b:db:b6:4c:75:a3:47:bf:de:02:57: 6d:d6:ad:1a:64:d5:94:18:d7:18:a1:77:34:50:4e:67:d8:82: fb:b9:75:1c:ad:02:c4:b1:37:78:98:d6:d6:8d:8a:45:3e:b9: 89:97:b6:0a:d7:17:19:7f:19:85:63:dd:50:49:e2:a4:a1:df: 7f:2d:ac:16:07:31:6f:6a:96:b1:d6:08:a8:c8:f7:a1:b3:d9: 7a:fc:a2:36:fc:5e:17:6e:e9:fa:ce:45:bc:0a:96:f0:38:a7: 29:30:a0:57:c3:ad:9a:6e:ab:a5:d8:3e:82:f7:33:8d:80:59: b6:24:2a:f4:40:f5:70:de:3a:83:e5:a5:3b:12:be:e1:c5:95: 37:c4:09:aa:f9:8c:b6:d9:21:37:46:32:e9:95:e3:3c:bd:8b: e7:fc:3e:f4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xsRWn5HC/WeCEC08sIPBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYzczODFiODJmOTc1YWJmMTlkN2Q1MDFhOGQ5MGJjZGM0 MzlmMDYwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2Q3NDQ4Mjk5ZWUyMmZlMDZjZWZhNzI1MmQ2MjNlZDhjMWYzNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR9mkyh4suVKjjzMcYYjgNtn2xmP hVvWM1hhLv28sMetn408xHVFh1MWc1dwjct6QuNGfpAc6kBn9DSKoymCBKueaW3l zmCtczEDCnB0CVFKmO8Yya3HNlRIFwmO5UzmPxZZKvQz/p2tMBzAi/oz/JkLEGNO PlgUPdUqnvJ5ftcQFjOnzj2lHomA/m7BP8IK7AIBOG3z/QFURGsPQZnngW7+FpAL aZAvuyNP476GxvXCrZeYtlBGaBUcISbXFWB+uonxMC7A/ZcmhcymScKksYVrPVgm KteJD50R+KinAfhgaunukPqO+WaUJ151C8jq+po/ccerbpLIb7Eyxr3GTQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKfXRIKZ7iL+Bs76clLWI+2MHzZMMB8GA1UdIwQY MBaAFJvHOBuC+XWr8Z19UBqNkLzcQ58GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbThjNEc0TDVkYXZ4blgxUUdvMlF2TnhEbndZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YmYyMzItMWEyOC00YWE0LThlYmQt YmY3ZmE5NGQyYTRlLzEvcDlkRWdwbnVJdjRHenZweVV0WWo3WXdmTmt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82YmYyMzItMWEyOC00YWE0LThlYmQtYmY3ZmE5NGQyYTRl LzEvbThjNEc0TDVkYXZ4blgxUUdvMlF2TnhEbndZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsDlIAwQC uQh8MA0EAgACMAcDBQMqAthAMA0GCSqGSIb3DQEBCwUAA4IBAQAG0eJ8yumzZn8o Sqqz42KuE0MrbiQNnqwKFOXOnZZGJw2FCrqA68lFoFgZRHHhPBD0ZxmYiuM5rYtf uBuOnvQ0LsIW5mVfd7u5Puyw9GJbmbIVaIUXg2fsyjMhZIbjzGH+O9u2THWjR7/e Aldt1q0aZNWUGNcYoXc0UE5n2IL7uXUcrQLEsTd4mNbWjYpFPrmJl7YK1xcZfxmF Y91QSeKkod9/LawWBzFvapax1gioyPehs9l6/KI2/F4Xbun6zkW8CpbwOKcpMKBX w62abqul2D6C9zONgFm2JCr0QPVw3jqD5aU7Er7hxZU3xAmq+Yy22SE3RjLpleM8 vYvn/D70 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:41 2026 by rpki-client