This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/9Vay-gG27tArSBIPskNgj__6_i8.roa File: 9Vay-gG27tArSBIPskNgj__6_i8.roa (raw, json) Hash identifier: rBOHrToazWIPpulQrCpid+KkYdy0zMBc/eSGuvjUDxc= Subject key identifier: F5:56:B2:FA:01:B6:EE:D0:2B:48:12:0F:B2:43:60:8F:FF:FA:FE:2F Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Certificate serial: 019B7E384B399594F063C91527E7598D9531 Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/9Vay-gG27tArSBIPskNgj__6_i8.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29447 IP address blocks: 78.208.0.0/13 maxlen: 13 78.208.0.0/17 maxlen: 17 78.208.128.0/17 maxlen: 17 78.209.0.0/17 maxlen: 17 78.209.128.0/17 maxlen: 17 78.210.0.0/17 maxlen: 17 78.210.128.0/17 maxlen: 17 78.211.0.0/17 maxlen: 17 78.211.128.0/17 maxlen: 17 81.56.0.0/15 maxlen: 17 2a01:e09::/32 maxlen: 32 2a01:e10::/30 maxlen: 30 2a01:e11::/32 maxlen: 32 2a01:e11::/36 maxlen: 36 2a01:e11:1000::/36 maxlen: 36 2a01:e11:2000::/36 maxlen: 36 2a01:e11:3000::/36 maxlen: 36 2a01:e11:4000::/36 maxlen: 36 2a01:e11:5000::/36 maxlen: 36 2a01:e11:6000::/36 maxlen: 36 2a01:e11:7000::/36 maxlen: 36 2a01:e11:8000::/36 maxlen: 36 2a01:e11:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4b:39:95:94:f0:63:c9:15:27:e7:59:8d:95:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f556b2fa01b6eed02b48120fb243608ffffafe2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:84:4d:93:b9:fd:58:ba:45:17:66:8d:5b: 52:a2:e8:43:57:76:22:8c:fe:37:66:ca:8b:06:48: 76:e6:f4:f5:02:8f:78:51:04:37:0d:e0:64:fb:5a: 46:51:b6:af:83:72:07:cb:65:54:92:f0:04:78:0b: 0e:20:63:5c:51:42:5b:75:fd:e2:b7:34:3f:7d:c6: 06:fd:94:82:e6:f1:09:1e:29:fe:e1:bf:02:26:56: 06:cc:12:65:8f:39:2a:5a:d1:1a:98:a4:03:14:89: 12:13:77:e3:1c:68:0f:33:96:f4:f2:30:11:b6:33: 17:93:ba:31:50:db:cc:d3:15:f0:2f:34:31:49:66: 8b:ea:90:d0:35:78:cc:6f:87:4b:29:38:81:56:5c: 40:30:e0:7c:8c:39:bb:ad:e1:52:39:ce:f1:88:29: 63:e6:a4:57:dc:1d:28:42:e1:bc:3c:bd:e8:09:c4: 80:94:1c:3a:cc:47:e1:b2:95:b8:89:13:0d:a3:24: d6:03:8d:41:d0:8e:12:4d:60:35:cf:ec:ca:53:da: e3:cd:94:05:fa:3d:f3:0c:b6:b1:71:3e:67:14:21: 37:a3:cf:53:58:42:cf:37:47:59:7e:e9:42:36:24: 8e:c8:ed:d2:20:11:0b:fc:c3:80:1b:eb:ef:91:cb: ad:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:56:B2:FA:01:B6:EE:D0:2B:48:12:0F:B2:43:60:8F:FF:FA:FE:2F X509v3 Authority Key Identifier: keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/9Vay-gG27tArSBIPskNgj__6_i8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.208.0.0/13 81.56.0.0/15 IPv6: 2a01:e09::/32 2a01:e10::/30 Signature Algorithm: sha256WithRSAEncryption 5b:89:42:81:d9:76:5b:44:92:51:92:6e:91:46:54:3b:2e:65: da:b9:34:70:90:df:88:5e:3c:03:e6:27:4d:26:ad:e9:4f:d6: 35:33:8f:95:eb:e7:33:d6:58:f1:91:f0:26:ce:15:d9:ab:3e: 24:c2:88:df:ce:c2:69:cd:ec:f3:fa:bd:e4:7b:0a:92:18:47: 3e:29:79:06:3f:21:69:fa:b6:8e:16:b8:75:ca:86:92:70:b3: 43:dc:77:60:67:e9:13:61:8b:2f:18:e7:94:af:0e:38:60:a5: 34:67:09:c9:50:0a:50:59:e2:b7:22:22:52:94:b6:a1:aa:36: ff:3c:79:7b:69:8a:8b:cd:21:c8:de:0d:70:59:b4:02:0b:9d: d3:a2:bd:e4:d9:9f:1c:09:5c:01:46:a0:ae:24:8c:4b:36:74: 99:70:66:9d:07:0c:53:21:02:22:98:52:f3:b1:21:37:b4:4b: 06:83:20:63:42:e0:b8:c7:67:aa:ab:ca:26:eb:a7:b5:0b:06: 09:63:de:7a:62:93:58:8b:82:05:5c:cf:fe:73:de:87:f4:b0: fb:e0:d5:36:04:db:e2:eb:4e:16:27:dc:3e:f5:a9:84:f2:64: f5:8d:bc:91:d3:3c:44:6b:07:dc:b9:35:db:f7:8f:58:f5:f4: 74:00:2f:ad -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+OEs5lZTwY8kVJ+dZjZUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz NGRjM2YwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTU2YjJmYTAxYjZlZWQwMmI0ODEyMGZiMjQzNjA4ZmZmZmFmZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngqETZO5/Vi6RRdmjVtSouhDV3Yi jP43ZsqLBkh25vT1Ao94UQQ3DeBk+1pGUbavg3IHy2VUkvAEeAsOIGNcUUJbdf3i tzQ/fcYG/ZSC5vEJHin+4b8CJlYGzBJljzkqWtEamKQDFIkSE3fjHGgPM5b08jAR tjMXk7oxUNvM0xXwLzQxSWaL6pDQNXjMb4dLKTiBVlxAMOB8jDm7reFSOc7xiClj 5qRX3B0oQuG8PL3oCcSAlBw6zEfhspW4iRMNoyTWA41B0I4STWA1z+zKU9rjzZQF +j3zDLaxcT5nFCE3o89TWELPN0dZfulCNiSOyO3SIBEL/MOAG+vvkcutyQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFPVWsvoBtu7QK0gSD7JDYI//+v4vMB8GA1UdIwQY MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt NmIyZDQ2OTI0YzZmLzEvOVZheS1nRzI3dEFyU0JJUHNrTmdqX182X2k4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAQBAIAATAKAwMDTtADAwFR ODAUBAIAAjAOAwUAKgEOCQMFAioBDhAwDQYJKoZIhvcNAQELBQADggEBAFuJQoHZ dltEklGSbpFGVDsuZdq5NHCQ34hePAPmJ00mrelP1jUzj5Xr5zPWWPGR8CbOFdmr PiTCiN/OwmnN7PP6veR7CpIYRz4peQY/IWn6to4WuHXKhpJws0Pcd2Bn6RNhiy8Y 55SvDjhgpTRnCclQClBZ4rciIlKUtqGqNv88eXtpiovNIcjeDXBZtAILndOiveTZ nxwJXAFGoK4kjEs2dJlwZp0HDFMhAiKYUvOxITe0SwaDIGNC4LjHZ6qryibrp7UL Bglj3npik1iLggVcz/5z3of0sPvg1TYE2+LrThYn3D71qYTyZPWNvJHTPERrB9y5 Ndv3j1j19HQAL60= -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:17 2026 by rpki-client