This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/U9dVil-DLUXDoMlzZYRZH7n9BYc.roa File: U9dVil-DLUXDoMlzZYRZH7n9BYc.roa (raw, json) Hash identifier: 7WJQeBBvXC+SEalxl/wPubwjCYsWQ+iY3C0k1kE/78M= Subject key identifier: 53:D7:55:8A:5F:83:2D:45:C3:A0:C9:73:65:84:59:1F:B9:FD:05:87 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 019B7A5AB54CD6EE6E9FC7A43764C805B7B6 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/U9dVil-DLUXDoMlzZYRZH7n9BYc.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47645 IP address blocks: 94.137.64.0/21 maxlen: 21 94.137.72.0/24 maxlen: 24 94.137.73.0/24 maxlen: 24 94.137.80.0/22 maxlen: 22 94.137.84.0/22 maxlen: 22 94.137.88.0/24 maxlen: 24 2a05:c440::/48 maxlen: 48 2a05:c441::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b5:4c:d6:ee:6e:9f:c7:a4:37:64:c8:05:b7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53d7558a5f832d45c3a0c9736584591fb9fd0587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:55:bc:b2:a2:e0:e2:4d:01:39:3a:ea:8a: 69:fb:af:08:c0:db:ae:d6:52:2b:73:96:51:e4:cd: dc:48:fb:04:25:95:ad:a2:94:f1:92:50:1f:4e:19: 9b:f0:ce:a7:c8:7a:0e:ef:69:5d:5e:2e:ed:43:d8: 2c:d3:39:d0:3d:d2:b8:5b:10:cd:00:0d:21:f8:fd: 21:18:f5:8e:30:70:36:0f:a8:c9:6c:4a:e6:de:95: b8:53:da:6a:e0:7c:01:5f:19:35:86:95:44:76:1c: 79:87:a9:12:cf:e2:96:4c:f6:d9:11:6a:1e:eb:2f: fc:c3:59:01:08:67:26:4b:1f:9e:5a:dd:fc:ed:01: 6c:ce:ec:33:4e:40:18:d7:45:35:72:15:bd:62:a2: cb:52:67:a6:ec:28:b5:77:7b:7d:a7:a0:8a:e9:8e: 2f:86:ad:18:02:8c:b3:1a:da:fb:6b:19:13:c2:53: 5e:e7:50:de:cf:21:8f:57:2e:26:ad:d1:c1:c7:bf: 49:ad:49:f0:ce:e8:40:a7:81:0b:ff:0e:1e:bc:ad: 1f:5a:f2:63:cb:e2:ad:28:7b:61:aa:36:7f:7c:a1: 3c:8d:ae:b8:db:bf:29:3d:9b:87:eb:3d:23:9d:0e: e1:1c:15:fe:ba:1e:d7:79:e6:80:24:bf:61:63:3c: f9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D7:55:8A:5F:83:2D:45:C3:A0:C9:73:65:84:59:1F:B9:FD:05:87 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/U9dVil-DLUXDoMlzZYRZH7n9BYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.137.64.0-94.137.73.255 94.137.80.0-94.137.88.255 IPv6: 2a05:c440::/48 2a05:c441::/32 Signature Algorithm: sha256WithRSAEncryption 89:bc:21:c4:65:03:ce:6b:60:e3:ff:15:46:90:06:e7:bb:76: 9f:3d:db:55:54:14:a5:7e:ed:05:1c:d1:71:c8:04:41:8b:55: 25:62:37:df:80:95:41:40:77:47:e2:ad:52:ed:c8:1e:bf:38: 8d:bb:de:aa:60:0c:83:1a:e0:b1:fc:81:12:5a:49:f1:3f:65: e4:ca:af:e0:47:b8:e5:03:f7:d8:57:16:3c:70:72:51:25:01: f6:96:c7:89:91:b7:7a:6d:07:aa:6b:23:cf:d8:28:6e:b5:01: b4:a4:07:59:98:ae:5f:3f:6c:d9:0c:b6:13:7a:4f:35:58:10: 87:d8:bb:2b:3e:a7:81:d8:ad:e8:df:8e:d8:96:92:db:09:04: 74:06:31:fc:cc:72:54:36:73:da:92:e8:73:b1:1b:c6:50:5c: a0:27:05:5c:e0:7a:54:90:3c:0f:67:40:9d:59:a4:a6:63:f2: e1:d7:32:74:21:e1:4c:17:88:ce:ef:e7:36:7f:03:ea:20:1c: 3e:3c:28:06:c5:87:57:6b:d3:e6:fe:90:59:41:06:1e:15:4f: 28:3c:2c:f4:5f:7e:0d:b5:af:3e:48:dd:8a:d4:76:ef:40:61: 4b:ad:c7:a7:6a:26:c8:63:a7:79:48:9e:8a:b7:cd:04:76:42: 98:55:9f:9a -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt6WrVM1u5un8ekN2TIBbe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2Q3NTU4YTVmODMyZDQ1YzNhMGM5NzM2NTg0NTkxZmI5ZmQwNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3VVvLKi4OJNATk66opp+68IwNuu 1lIrc5ZR5M3cSPsEJZWtopTxklAfThmb8M6nyHoO72ldXi7tQ9gs0znQPdK4WxDN AA0h+P0hGPWOMHA2D6jJbErm3pW4U9pq4HwBXxk1hpVEdhx5h6kSz+KWTPbZEWoe 6y/8w1kBCGcmSx+eWt387QFszuwzTkAY10U1chW9YqLLUmem7Ci1d3t9p6CK6Y4v hq0YAoyzGtr7axkTwlNe51DezyGPVy4mrdHBx79JrUnwzuhAp4EL/w4evK0fWvJj y+KtKHthqjZ/fKE8ja64278pPZuH6z0jnQ7hHBX+uh7XeeaAJL9hYzz5SQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFFPXVYpfgy1Fw6DJc2WEWR+5/QWHMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvVTlkVmlsLURMVVhEb01selpZUlpIN245QlljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAiBAIAATAcMAwDBAZeiUAD BAFeiUgwDAMEBF6JUAMEAF6JWDAWBAIAAjAQAwcAKgXEQAAAAwUAKgXEQTANBgkq hkiG9w0BAQsFAAOCAQEAibwhxGUDzmtg4/8VRpAG57t2nz3bVVQUpX7tBRzRccgE QYtVJWI334CVQUB3R+KtUu3IHr84jbveqmAMgxrgsfyBElpJ8T9l5Mqv4Ee45QP3 2FcWPHByUSUB9pbHiZG3em0Hqmsjz9gobrUBtKQHWZiuXz9s2Qy2E3pPNVgQh9i7 Kz6ngdit6N+O2JaS2wkEdAYx/MxyVDZz2pLoc7EbxlBcoCcFXOB6VJA8D2dAnVmk pmPy4dcydCHhTBeIzu/nNn8D6iAcPjwoBsWHV2vT5v6QWUEGHhVPKDws9F9+DbWv PkjditR270BhS63Hp2omyGOneUieirfNBHZCmFWfmg== -----END CERTIFICATE-----Generated at Tue Jan 27 08:47:21 2026 by rpki-client