This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/9JWWBiVNBen9pncBrzjpQmgz09A.roa File: 9JWWBiVNBen9pncBrzjpQmgz09A.roa (raw, json) Hash identifier: v34m3+DepC1ZbOZkinh5zqdAB+5w919QO3AxXhxzrps= Subject key identifier: F4:95:96:06:25:4D:05:E9:FD:A6:77:01:AF:38:E9:42:68:33:D3:D0 Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0 Certificate serial: 019BFA2C5E41F87243495493696FF10EE758 Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/9JWWBiVNBen9pncBrzjpQmgz09A.roa Signing time: Mon 26 Jan 2026 11:59:30 +0000 ROA not before: Mon 26 Jan 2026 11:59:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197205 IP address blocks: 83.150.244.0/22 maxlen: 22 195.66.82.0/24 maxlen: 24 213.232.255.0/24 maxlen: 24 2a09:1f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2c:5e:41:f8:72:43:49:54:93:69:6f:f1:0e:e7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0 Validity Not Before: Jan 26 11:59:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4959606254d05e9fda67701af38e9426833d3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:34:bb:b2:c9:3f:0e:24:77:bb:e9:44:56:3b: a4:0e:2a:0e:26:c8:db:d8:f9:eb:43:dc:1f:67:d6: 00:3e:3d:0a:1c:0b:0b:bc:d6:4a:cd:e1:a8:ba:bd: a5:6a:18:fa:bb:e8:d7:66:b7:d7:fc:18:22:4c:af: f0:18:35:0b:3e:7c:80:a0:91:68:90:91:70:57:ca: d1:bd:b0:38:4c:8f:bd:b9:0d:ad:9e:ef:65:ee:18: 7b:02:e1:04:1f:5b:9a:d2:4e:10:4c:d7:2d:e7:bc: 7d:ab:4f:32:d9:c6:c4:4f:d2:88:27:b8:81:4a:5b: e3:6f:34:5b:6e:dc:02:95:21:3b:dd:b2:b0:ee:82: 1c:3f:3a:00:4c:e8:59:e2:98:8d:cd:b2:e5:18:cf: bd:23:fb:8c:87:3a:ce:55:9e:d7:7d:e7:c6:bf:72: a6:c7:26:bd:59:05:a4:0c:65:ef:4c:8d:26:d1:de: 07:06:c7:84:10:e8:93:7a:52:c6:82:f0:b0:14:e1: 02:89:5d:75:9e:01:37:62:ba:a6:db:32:78:67:b6: 50:33:40:58:14:47:f1:cc:8e:0d:ab:45:68:c1:d9: e3:b5:20:fd:e7:72:45:ea:d6:5e:19:f0:8e:41:06: 31:ae:4a:32:21:88:f0:3e:6c:ef:9c:50:5c:ba:62: 6a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:95:96:06:25:4D:05:E9:FD:A6:77:01:AF:38:E9:42:68:33:D3:D0 X509v3 Authority Key Identifier: keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/9JWWBiVNBen9pncBrzjpQmgz09A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.150.244.0/22 195.66.82.0/24 213.232.255.0/24 IPv6: 2a09:1f00::/29 Signature Algorithm: sha256WithRSAEncryption 49:73:3c:51:a0:08:fb:95:87:a2:b3:79:5b:f3:e6:ca:fe:df: bd:e7:b3:eb:6d:46:5f:a2:ce:26:1e:46:1f:1a:0d:ef:bc:b1: 0f:8a:67:f9:67:57:a5:20:fe:bd:1f:b3:ba:dc:7c:bb:7e:c6: 15:86:5d:72:42:c2:ed:ff:10:26:1e:5a:dd:67:62:68:da:38: b8:46:8e:ca:e6:a9:f3:c1:bb:30:e6:0c:a8:26:3a:21:03:aa: 28:bc:6c:81:4b:2b:82:61:b7:4f:19:18:3e:0f:c1:b5:12:d1: e0:9b:ce:68:99:06:f4:d1:15:a9:f1:2c:2b:a2:1e:5f:bc:1d: b1:96:eb:43:81:b9:9a:b2:f1:42:8d:00:55:ec:9c:d7:f1:f0: aa:78:d6:bb:ec:11:f1:3e:28:60:93:3a:58:f0:62:0e:5b:91: ab:e8:26:bc:34:70:b4:c5:c6:83:29:12:7c:59:66:52:68:77: fd:12:34:f4:f5:c8:c4:87:20:46:3b:e8:ad:e9:52:b9:d3:5b: c2:8a:bc:a6:44:14:a0:ca:72:6e:95:64:bb:d2:d3:7d:35:7d: 2a:38:c6:57:91:18:2f:98:49:55:fc:49:09:e4:15:77:0d:1e: 7b:d4:46:9b:53:0f:3b:6c:5b:a7:61:f7:04:c9:53:f9:42:71: 08:84:1a:2e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZv6LF5B+HJDSVSTaW/xDudYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNGIyMDMyYzM4ZmIxN2Y0MmY4ODMyYTRjMjFlMWYwZDVm MTllZTAwHhcNMjYwMTI2MTE1OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDk1OTYwNjI1NGQwNWU5ZmRhNjc3MDFhZjM4ZTk0MjY4MzNkM2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zS7ssk/DiR3u+lEVjukDioOJsjb 2PnrQ9wfZ9YAPj0KHAsLvNZKzeGour2lahj6u+jXZrfX/BgiTK/wGDULPnyAoJFo kJFwV8rRvbA4TI+9uQ2tnu9l7hh7AuEEH1ua0k4QTNct57x9q08y2cbET9KIJ7iB SlvjbzRbbtwClSE73bKw7oIcPzoATOhZ4piNzbLlGM+9I/uMhzrOVZ7XfefGv3Km xya9WQWkDGXvTI0m0d4HBseEEOiTelLGgvCwFOECiV11ngE3Yrqm2zJ4Z7ZQM0BY FEfxzI4Nq0VowdnjtSD953JF6tZeGfCOQQYxrkoyIYjwPmzvnFBcumJqcQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPSVlgYlTQXp/aZ3Aa846UJoM9PQMB8GA1UdIwQY MBaAFDJLIDLDj7F/QviDKkwh4fDV8Z7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMt NDM2MGVlMDZhMjJjLzEvOUpXV0JpVk5CZW45cG5jQnJ6anBRbWd6MDlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC83OWViYzYtNjE3Yi00ZWE5LWI0NTMtNDM2MGVlMDZhMjJj LzEvTWtzZ01zT1BzWDlDLUlNcVRDSGg4Tlh4bnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCU5b0AwQA w0JSAwQA1ej/MA0EAgACMAcDBQMqCR8AMA0GCSqGSIb3DQEBCwUAA4IBAQBJczxR oAj7lYeis3lb8+bK/t+957PrbUZfos4mHkYfGg3vvLEPimf5Z1elIP69H7O63Hy7 fsYVhl1yQsLt/xAmHlrdZ2Jo2ji4Ro7K5qnzwbsw5gyoJjohA6oovGyBSyuCYbdP GRg+D8G1EtHgm85omQb00RWp8Swroh5fvB2xlutDgbmasvFCjQBV7JzX8fCqeNa7 7BHxPihgkzpY8GIOW5Gr6Ca8NHC0xcaDKRJ8WWZSaHf9EjT09cjEhyBGO+it6VK5 01vCirymRBSgynJulWS70tN9NX0qOMZXkRgvmElV/EkJ5BV3DR571EabUw87bFun YfcEyVP5QnEIhBou -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:27 2026 by rpki-client