This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9RycwxvSS09sSBQcwzUZx3btpQk.roa File: 9RycwxvSS09sSBQcwzUZx3btpQk.roa (raw, json) Hash identifier: MTMhiCC3tAKyeSpzo2O61See41Tc0iuWRHjfGkH9pQI= Subject key identifier: F5:1C:9C:C3:1B:D2:4B:4F:6C:48:14:1C:C3:35:19:C7:76:ED:A5:09 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A25B1DC3585772E49B9CF0568DA5 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9RycwxvSS09sSBQcwzUZx3btpQk.roa Signing time: Fri 02 Jan 2026 14:20:17 +0000 ROA not before: Fri 02 Jan 2026 14:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11351 IP address blocks: 92.71.32.0/20 maxlen: 24 92.71.64.0/18 maxlen: 24 213.201.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a2:5b:1d:c3:58:57:72:e4:9b:9c:f0:56:8d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f51c9cc31bd24b4f6c48141cc33519c776eda509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:92:bb:b4:77:59:8f:bc:61:d9:bf:bc:3e: 13:37:59:7a:f8:aa:aa:7a:59:c6:76:48:9f:be:65: ac:39:21:6f:37:39:9d:90:94:2a:52:4f:2b:e0:43: 6e:2b:1c:19:32:15:40:09:9b:e4:8a:bb:4d:32:3e: 93:27:29:f6:05:ed:a1:11:bb:1e:42:75:38:53:9e: 28:90:cd:52:73:b7:5a:3a:cd:50:f2:86:c4:7a:e1: be:c3:f7:71:8f:a4:4e:6f:8e:71:9a:eb:be:be:47: 3f:67:08:5f:24:e2:b9:60:e4:6b:5b:d3:e7:a0:2d: cf:8b:ef:39:4a:05:88:a4:a1:61:1c:d5:91:67:16: 72:0c:42:fd:5f:6b:93:52:db:8b:1d:9c:91:f7:d0: 26:5e:5f:85:a7:a2:46:9b:bb:d3:66:f5:82:65:52: 5e:f0:95:03:7c:b6:03:4d:36:78:89:57:35:6f:c7: 9e:4a:f3:e3:84:9d:08:1e:65:2a:6d:4a:d1:be:77: 22:b5:3a:36:cd:d9:31:40:2a:05:7c:f8:fb:26:71: 5b:86:c4:65:b8:77:74:c5:42:3d:9c:c0:1d:22:cc: 45:28:c4:71:f5:92:34:0a:40:36:8d:d2:59:89:d9: 16:ca:b9:42:d5:97:8d:71:c7:17:42:59:fd:6e:25: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1C:9C:C3:1B:D2:4B:4F:6C:48:14:1C:C3:35:19:C7:76:ED:A5:09 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/9RycwxvSS09sSBQcwzUZx3btpQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.71.32.0/20 92.71.64.0/18 213.201.240.0/20 Signature Algorithm: sha256WithRSAEncryption e6:e9:d2:1f:96:a4:93:00:02:c7:b0:75:5a:69:50:c5:a4:a1: fb:fa:0c:e0:e2:fb:42:f5:78:98:d5:24:13:20:5c:ef:36:22: b3:a1:a3:52:aa:ea:a4:21:56:ab:0c:a4:dd:83:18:78:0d:ad: e9:d3:14:77:47:8e:3d:a2:5a:66:a3:15:91:cb:b4:99:ce:1f: 5f:27:e5:d8:a9:40:5f:ce:f1:12:59:e7:2b:0f:8d:ce:ac:e0: 49:f9:e7:b0:52:18:a0:44:cb:55:85:8f:89:54:5f:a6:47:68: 87:26:10:89:fe:44:53:4d:19:44:7f:ea:22:33:e9:8b:69:63: 06:ee:06:eb:0d:fa:f1:82:37:96:d7:bd:cb:e4:6a:8a:e0:44: ab:1d:33:bc:0f:63:71:c1:5a:33:f2:f5:63:d7:3c:f1:20:0f: 03:f5:3a:5a:fe:df:3a:cd:f7:80:04:5c:52:1a:6b:b2:36:92: 31:a6:8e:04:d2:69:24:ce:74:e5:6c:a5:3c:dc:c8:dc:a7:f7: e6:4f:d2:8c:0f:68:f6:80:10:51:ac:97:b3:ad:7a:ba:f8:f5: c4:4b:ea:a6:cf:70:7e:86:9f:08:bc:78:63:57:03:a2:a2:27: 25:f7:5a:59:a4:62:b3:b5:e5:1a:4b:c2:43:50:aa:4d:a2:aa: 91:60:d2:9c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FKJbHcNYV3Lkm5zwVo2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTFjOWNjMzFiZDI0YjRmNmM0ODE0MWNjMzM1MTljNzc2ZWRhNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QCSu7R3WY+8Ydm/vD4TN1l6+Kqq elnGdkifvmWsOSFvNzmdkJQqUk8r4ENuKxwZMhVACZvkirtNMj6TJyn2Be2hEbse QnU4U54okM1Sc7daOs1Q8obEeuG+w/dxj6ROb45xmuu+vkc/ZwhfJOK5YORrW9Pn oC3Pi+85SgWIpKFhHNWRZxZyDEL9X2uTUtuLHZyR99AmXl+Fp6JGm7vTZvWCZVJe 8JUDfLYDTTZ4iVc1b8eeSvPjhJ0IHmUqbUrRvncitTo2zdkxQCoFfPj7JnFbhsRl uHd0xUI9nMAdIsxFKMRx9ZI0CkA2jdJZidkWyrlC1ZeNcccXQln9biW4fQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPUcnMMb0ktPbEgUHMM1Gcd27aUJMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvOVJ5Y3d4dlNTMDlzU0JRY3d6VVp4M2J0cFFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEXEcgAwQG XEdAAwQE1cnwMA0GCSqGSIb3DQEBCwUAA4IBAQDm6dIflqSTAALHsHVaaVDFpKH7 +gzg4vtC9XiY1SQTIFzvNiKzoaNSquqkIVarDKTdgxh4Da3p0xR3R449olpmoxWR y7SZzh9fJ+XYqUBfzvESWecrD43OrOBJ+eewUhigRMtVhY+JVF+mR2iHJhCJ/kRT TRlEf+oiM+mLaWMG7gbrDfrxgjeW173L5GqK4ESrHTO8D2NxwVoz8vVj1zzxIA8D 9Tpa/t86zfeABFxSGmuyNpIxpo4E0mkkznTlbKU83Mjcp/fmT9KMD2j2gBBRrJez rXq6+PXES+qmz3B+hp8IvHhjVwOioicl91pZpGKzteUaS8JDUKpNoqqRYNKc -----END CERTIFICATE-----Generated at Wed Jan 21 01:09:26 2026 by rpki-client