This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/9GBWdjPw-BNZrNnli56ahbKMkEA.roa File: 9GBWdjPw-BNZrNnli56ahbKMkEA.roa (raw, json) Hash identifier: Oupb+aKsrMig1VIpCyGRplvadhLjMfLJm8H0dkmS7pE= Subject key identifier: F4:60:56:76:33:F0:F8:13:59:AC:D9:E5:8B:9E:9A:85:B2:8C:90:40 Certificate issuer: /CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552 Certificate serial: 019B7CEDB94E1B93AA0AD1D4A8286C1C3DC0 Authority key identifier: 67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/9GBWdjPw-BNZrNnli56ahbKMkEA.roa Signing time: Fri 02 Jan 2026 04:18:32 +0000 ROA not before: Fri 02 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39657 IP address blocks: 217.30.0.0/22 maxlen: 24 217.30.0.0/23 maxlen: 24 217.30.2.0/24 maxlen: 24 217.30.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.mft rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b9:4e:1b:93:aa:0a:d1:d4:a8:28:6c:1c:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67a4ec38f2ff69d2505f7f62e94c3bd798b58552 Validity Not Before: Jan 2 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f460567633f0f81359acd9e58b9e9a85b28c9040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d6:22:ba:d6:8d:46:40:64:24:d7:77:73:b6: eb:67:5d:b7:02:71:ad:3a:9d:97:ba:cb:6e:35:42: bf:1e:ce:34:21:99:05:2b:e8:76:ce:59:c2:03:8d: ce:be:d2:05:e2:5f:de:d2:d4:b9:fc:ea:41:14:50: 89:b3:63:38:4f:d3:68:ff:52:7f:b9:92:40:d5:51: 6f:6c:4e:7c:d3:15:eb:5b:b2:76:9f:da:07:10:7f: 66:5e:ec:9c:0f:44:f9:39:4f:27:c0:fc:0b:83:78: bd:08:92:0f:29:d9:cd:ff:67:ea:9b:c1:fe:59:8b: 71:58:cd:11:5c:e4:09:93:af:45:82:87:14:54:e5: 3f:fc:de:60:c9:49:9a:d1:ea:84:8a:7a:71:49:c2: 59:9b:0c:0a:fb:a6:da:c4:bc:d0:c3:97:fb:71:bc: 47:9b:10:bc:f1:53:66:3b:4b:7a:63:29:0a:e5:03: 81:da:43:ea:fc:53:1e:ce:43:04:78:10:b9:05:85: aa:97:43:2e:b1:2c:19:9c:f3:25:51:90:46:1a:67: d3:b9:7c:cc:44:8f:d5:ac:f8:18:39:29:60:be:0f: d2:d2:b7:4f:0d:e4:e9:6e:bd:c6:c9:6d:ae:d2:ee: aa:38:86:b5:dd:e2:a5:97:ca:18:14:12:9a:47:4f: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:60:56:76:33:F0:F8:13:59:AC:D9:E5:8B:9E:9A:85:B2:8C:90:40 X509v3 Authority Key Identifier: keyid:67:A4:EC:38:F2:FF:69:D2:50:5F:7F:62:E9:4C:3B:D7:98:B5:85:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6TsOPL_adJQX39i6Uw715i1hVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/9GBWdjPw-BNZrNnli56ahbKMkEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/773e49-f4ea-47a7-8a60-d42d4e9c767d/1/Z6TsOPL_adJQX39i6Uw715i1hVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.30.0.0/22 Signature Algorithm: sha256WithRSAEncryption 73:c1:cc:3b:ba:34:7b:fc:44:98:07:26:f6:57:dc:7a:a3:b7: de:ba:db:2c:e9:34:83:49:10:96:a3:e1:af:77:2c:7c:91:32: d3:bc:9b:12:59:87:be:bb:83:55:74:0a:5f:62:55:74:d8:8f: 5d:7c:c9:a4:d4:59:a7:20:d3:3e:4e:a1:ce:ac:60:fb:a8:b6: d2:7e:91:ab:dc:ce:f5:ae:73:ac:d8:d8:91:33:3a:65:b2:98: c7:a9:b2:5f:5e:08:a6:35:99:3b:a0:01:cf:a4:46:37:2a:5a: 3b:3b:2a:f2:9f:4b:44:0a:df:74:a2:65:ad:7f:ab:ff:15:76: cf:b1:7d:4c:e2:19:73:7b:c7:1a:c7:0d:ec:57:35:9f:1f:7e: aa:1b:0f:4c:59:2f:02:6f:ae:bc:e0:de:9f:b5:1b:24:38:89: 68:5d:6b:52:91:e7:15:42:c1:38:7d:04:2d:61:6d:4d:c7:d4: b7:fc:79:a9:60:e5:b9:8b:2a:34:c1:f8:df:d7:61:3e:f5:cc: df:97:d0:52:81:2a:ea:8f:f4:51:cc:e4:e2:de:c1:f8:c8:81: dd:4f:54:9c:d8:83:4c:12:62:1e:d9:61:33:f9:51:e2:14:a0: 46:6e:f5:ca:90:4f:3a:a3:f1:1a:b6:2b:4b:5d:20:bb:65:25: e9:08:18:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87blOG5OqCtHUqChsHD3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YTRlYzM4ZjJmZjY5ZDI1MDVmN2Y2MmU5NGMzYmQ3OThi NTg1NTIwHhcNMjYwMTAyMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDYwNTY3NjMzZjBmODEzNTlhY2Q5ZTU4YjllOWE4NWIyOGM5MDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdYiutaNRkBkJNd3c7brZ123AnGt Op2XustuNUK/Hs40IZkFK+h2zlnCA43OvtIF4l/e0tS5/OpBFFCJs2M4T9No/1J/ uZJA1VFvbE580xXrW7J2n9oHEH9mXuycD0T5OU8nwPwLg3i9CJIPKdnN/2fqm8H+ WYtxWM0RXOQJk69FgocUVOU//N5gyUma0eqEinpxScJZmwwK+6baxLzQw5f7cbxH mxC88VNmO0t6YykK5QOB2kPq/FMezkMEeBC5BYWql0MusSwZnPMlUZBGGmfTuXzM RI/VrPgYOSlgvg/S0rdPDeTpbr3GyW2u0u6qOIa13eKll8oYFBKaR0+zXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPRgVnYz8PgTWazZ5YuemoWyjJBAMB8GA1UdIwQY MBaAFGek7Djy/2nSUF9/YulMO9eYtYVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83NzNlNDktZjRlYS00N2E3LThhNjAt ZDQyZDRlOWM3NjdkLzEvOUdCV2RqUHctQk5ack5ubGk1NmFoYktNa0VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83NzNlNDktZjRlYS00N2E3LThhNjAtZDQyZDRlOWM3Njdk LzEvWjZUc09QTF9hZEpRWDM5aTZVdzcxNWkxaFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2R4AMA0G CSqGSIb3DQEBCwUAA4IBAQBzwcw7ujR7/ESYByb2V9x6o7feutss6TSDSRCWo+Gv dyx8kTLTvJsSWYe+u4NVdApfYlV02I9dfMmk1FmnINM+TqHOrGD7qLbSfpGr3M71 rnOs2NiRMzplspjHqbJfXgimNZk7oAHPpEY3Klo7Oyryn0tECt90omWtf6v/FXbP sX1M4hlze8caxw3sVzWfH36qGw9MWS8Cb6684N6ftRskOIloXWtSkecVQsE4fQQt YW1Nx9S3/HmpYOW5iyo0wfjf12E+9czfl9BSgSrqj/RRzOTi3sH4yIHdT1Sc2INM EmIe2WEz+VHiFKBGbvXKkE86o/EatitLXSC7ZSXpCBiW -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:13 2026 by rpki-client