This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/9bbps3DMaEFINVblW5WwLZ0bND0.roa File: 9bbps3DMaEFINVblW5WwLZ0bND0.roa (raw, json) Hash identifier: oXqdQvfXjJkBuDkmpNFkzgoIS0yQmdeqKeEgsL+QfaY= Subject key identifier: F5:B6:E9:B3:70:CC:68:41:48:35:56:E5:5B:95:B0:2D:9D:1B:34:3D Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35F6D28397F032C9BA9EBCE5495920 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/9bbps3DMaEFINVblW5WwLZ0bND0.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 45.129.1.0/24 maxlen: 24 45.138.156.0/24 maxlen: 24 88.218.72.0/22 maxlen: 22 91.188.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f6:d2:83:97:f0:32:c9:ba:9e:bc:e5:49:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5b6e9b370cc6841483556e55b95b02d9d1b343d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:48:e3:c8:c1:0f:c0:5f:54:3f:59:88:d1: 69:ca:5c:c4:f5:ac:75:73:53:1a:a3:2a:3d:e8:e3: 4a:03:b7:dd:bb:2b:59:92:ff:48:95:39:4b:fb:40: 66:6e:8c:b4:c0:1c:06:2b:b7:59:d9:b6:b6:53:77: 8e:26:9e:43:78:93:3d:18:17:53:8c:fa:5b:2e:64: 41:b7:19:95:40:4e:8a:64:bf:f7:db:33:e8:1e:b7: e1:af:72:c6:40:08:48:ec:15:c8:76:87:dd:61:db: 0b:5c:b8:08:3f:e4:1c:4c:ab:b6:5e:f8:d0:56:7b: 9e:b3:64:cc:f8:e5:11:52:cf:73:01:2c:6f:43:e3: 04:5c:de:17:74:26:93:80:e1:bf:5c:c0:61:39:a0: ef:f8:30:c3:4e:8a:3e:e4:b3:61:5b:88:36:a5:6e: a6:87:fc:f3:2b:2a:bd:e2:0d:a9:f4:da:9c:21:42: 53:91:e2:1a:13:e5:58:e8:52:72:ec:8a:5a:94:44: 11:be:c4:ad:92:23:bf:73:39:f0:db:58:c4:db:c9: 4d:ef:fd:91:82:3a:11:4d:a2:7b:22:13:91:bc:66: 81:7d:30:1c:d1:cb:66:81:9b:77:9d:cc:f6:b7:10: ef:c3:17:00:cc:3b:44:c8:15:2e:19:a7:7f:f0:bc: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B6:E9:B3:70:CC:68:41:48:35:56:E5:5B:95:B0:2D:9D:1B:34:3D X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/9bbps3DMaEFINVblW5WwLZ0bND0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.1.0/24 45.138.156.0/24 88.218.72.0/22 91.188.221.0/24 Signature Algorithm: sha256WithRSAEncryption 12:82:df:1c:e8:01:db:b5:e3:1e:db:7f:fd:8a:5b:02:07:19: c2:68:0b:32:8f:c9:0b:00:cc:02:7b:d4:65:82:ef:5b:97:38: 1c:05:8a:2e:41:e9:33:9f:56:59:55:81:ae:18:1f:8c:1f:86: d8:90:63:af:fa:81:77:4d:42:90:cd:e2:7e:1e:80:fb:41:86: 02:7d:16:8c:66:41:5c:ad:78:b9:63:b6:27:06:46:e1:c6:96: e6:05:2e:cb:07:b3:17:4e:bf:a9:85:57:b5:16:3d:f4:e6:dc: 9a:de:f8:c6:1b:00:09:0c:bf:39:c8:41:ee:8f:fb:fc:c8:8f: c8:ed:e2:d3:c0:d7:5f:bc:c6:87:fb:fb:06:cf:2a:ce:de:27: d8:c6:53:fa:f5:04:d7:2b:90:81:5c:a7:0b:96:27:0f:bf:66: ff:12:d0:b2:d0:dc:06:a9:eb:07:f7:e3:da:f0:93:f8:af:e1: 06:ef:80:04:04:72:be:fa:96:27:c7:a8:00:66:0b:e2:9d:9c: 99:0f:da:0d:00:79:28:eb:bb:a2:5d:07:48:8f:4d:b9:ae:95: e7:fb:d4:67:a6:3c:b5:d5:b7:8f:38:9b:2e:80:ca:72:fc:ec: 76:cb:6f:04:e8:e2:9b:1f:e7:8d:0a:6f:26:f4:3b:89:44:45: a5:b9:d3:ec -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NfbSg5fwMsm6nrzlSVkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWI2ZTliMzcwY2M2ODQxNDgzNTU2ZTU1Yjk1YjAyZDlkMWIzNDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth9I48jBD8BfVD9ZiNFpylzE9ax1 c1Maoyo96ONKA7fduytZkv9IlTlL+0Bmboy0wBwGK7dZ2ba2U3eOJp5DeJM9GBdT jPpbLmRBtxmVQE6KZL/32zPoHrfhr3LGQAhI7BXIdofdYdsLXLgIP+QcTKu2XvjQ Vnues2TM+OURUs9zASxvQ+MEXN4XdCaTgOG/XMBhOaDv+DDDToo+5LNhW4g2pW6m h/zzKyq94g2p9NqcIUJTkeIaE+VY6FJy7IpalEQRvsStkiO/cznw21jE28lN7/2R gjoRTaJ7IhORvGaBfTAc0ctmgZt3ncz2txDvwxcAzDtEyBUuGad/8LwjJwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPW26bNwzGhBSDVW5VuVsC2dGzQ9MB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvOWJicHMzRE1hRUZJTlZibFc1V3dMWjBiTkQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYEBAwQA LYqcAwQCWNpIAwQAW7zdMA0GCSqGSIb3DQEBCwUAA4IBAQASgt8c6AHbteMe23/9 ilsCBxnCaAsyj8kLAMwCe9Rlgu9blzgcBYouQekzn1ZZVYGuGB+MH4bYkGOv+oF3 TUKQzeJ+HoD7QYYCfRaMZkFcrXi5Y7YnBkbhxpbmBS7LB7MXTr+phVe1Fj305tya 3vjGGwAJDL85yEHuj/v8yI/I7eLTwNdfvMaH+/sGzyrO3ifYxlP69QTXK5CBXKcL licPv2b/EtCy0NwGqesH9+Pa8JP4r+EG74AEBHK++pYnx6gAZgvinZyZD9oNAHko 67uiXQdIj025rpXn+9Rnpjy11bePOJsugMpy/Ox2y28E6OKbH+eNCm8m9DuJREWl udPs -----END CERTIFICATE-----Generated at Thu Jan 15 13:16:47 2026 by rpki-client