This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/9zanIZ7MEeT1oHmM73KPnI3KUEM.roa File: 9zanIZ7MEeT1oHmM73KPnI3KUEM.roa (raw, json) Hash identifier: Jme7qQGkxTK5eI1p9XNoTtTYwDVKr6hYwFmD3XiO9Sk= Subject key identifier: F7:36:A7:21:9E:CC:11:E4:F5:A0:79:8C:EF:72:8F:9C:8D:CA:50:43 Certificate issuer: /CN=b8d251c4bfd526da062d4ce2af56b6e46e925117 Certificate serial: 019B7EA64384DCC217A667CF3998FCCEE743 Authority key identifier: B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/9zanIZ7MEeT1oHmM73KPnI3KUEM.roa Signing time: Fri 02 Jan 2026 12:19:44 +0000 ROA not before: Fri 02 Jan 2026 12:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 132.75.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.mft rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:43:84:dc:c2:17:a6:67:cf:39:98:fc:ce:e7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d251c4bfd526da062d4ce2af56b6e46e925117 Validity Not Before: Jan 2 12:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f736a7219ecc11e4f5a0798cef728f9c8dca5043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:e3:0a:a1:bf:82:42:45:01:0f:b9:57:a4: a2:3f:66:f2:65:da:f2:c6:30:bc:be:70:dd:79:4d: f2:c1:38:f0:66:e4:ee:62:a7:7a:4d:58:3d:42:89: d3:4c:49:24:44:df:5f:db:a3:60:a8:f6:08:6c:74: f6:d2:f3:82:fd:8b:bb:18:3e:18:30:6c:b8:e0:74: 1e:ee:73:72:51:8d:4a:89:f6:71:83:67:4a:09:bf: 3c:7f:0a:fc:be:c8:6f:8c:f3:58:7f:db:f9:6a:e2: f7:09:0b:c2:bd:9e:76:84:c8:38:a1:1e:c0:81:6c: 3c:d7:34:db:d7:1d:ca:1a:27:63:e1:09:25:7a:ea: be:a1:eb:0f:22:05:01:f0:21:b3:f7:49:71:23:90: 54:81:9e:e1:b7:7d:49:7a:6c:46:ba:03:77:aa:fc: 58:f9:5b:a7:f5:f1:2f:00:c0:53:15:2c:98:60:f7: 3c:7f:c3:f0:ee:dd:7a:49:ea:e9:44:44:c0:e9:dc: 04:5c:bc:5d:6d:cf:2b:cf:0f:6c:cb:a0:17:1e:75: 99:53:dc:b6:25:7a:78:a6:4c:76:ae:7d:9c:33:9e: 28:40:b5:41:b9:b5:e6:a1:ce:58:26:26:03:1c:11: 83:f8:d6:6a:78:b3:3b:70:aa:cd:48:da:c0:78:28: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:36:A7:21:9E:CC:11:E4:F5:A0:79:8C:EF:72:8F:9C:8D:CA:50:43 X509v3 Authority Key Identifier: keyid:B8:D2:51:C4:BF:D5:26:DA:06:2D:4C:E2:AF:56:B6:E4:6E:92:51:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNJRxL_VJtoGLUzir1a25G6SURc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/9zanIZ7MEeT1oHmM73KPnI3KUEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/621941-f53c-448f-bd30-42b3d68b5676/1/uNJRxL_VJtoGLUzir1a25G6SURc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.75.96.0/24 Signature Algorithm: sha256WithRSAEncryption 03:62:82:ba:2b:bb:d6:b9:30:0c:98:64:88:24:c3:e7:1b:95: 00:b3:e0:c3:92:88:ba:ee:01:8a:a2:33:82:8e:5b:bc:0d:10: 2d:c9:fb:5d:21:3b:13:14:ea:c4:09:1d:6c:5d:36:0e:de:fd: 6e:b0:ab:07:80:64:e6:f7:10:6d:c1:6e:e9:f3:9e:47:83:15: 5f:df:34:7b:43:99:ef:41:47:40:ef:94:c4:f4:dd:37:b6:79: 3a:be:60:05:2d:c8:87:9b:28:16:af:48:54:39:8c:c3:36:1f: 2f:ad:04:78:fc:f1:22:31:bb:6e:26:5d:21:bc:dc:4b:4f:eb: 37:9a:ff:2d:9a:8c:dd:20:0d:c2:cb:c4:f9:bb:ef:79:17:1a: a6:e1:96:c7:dd:2d:3a:a5:cb:d7:fd:be:3a:05:ae:b6:6e:f0: 8b:63:c4:0b:04:4c:ce:a7:d2:ad:64:ce:38:f2:cb:78:26:57: 4a:f1:83:80:cc:2e:bd:ca:f7:5f:17:6d:23:da:7d:5e:f2:3a: 64:ec:c1:9e:a0:a5:77:af:c6:69:27:64:9e:98:d2:01:5c:24: 63:e9:8b:5d:fc:35:c7:8b:3b:da:97:a8:0f:b2:ce:5e:f0:09: d4:f1:29:9c:f3:a2:d6:57:d7:46:6c:dc:20:bd:4c:64:c9:3e: a9:65:66:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pkOE3MIXpmfPOZj8zudDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDI1MWM0YmZkNTI2ZGEwNjJkNGNlMmFmNTZiNmU0NmU5 MjUxMTcwHhcNMjYwMTAyMTIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzM2YTcyMTllY2MxMWU0ZjVhMDc5OGNlZjcyOGY5YzhkY2E1MDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW7jCqG/gkJFAQ+5V6SiP2byZdry xjC8vnDdeU3ywTjwZuTuYqd6TVg9QonTTEkkRN9f26NgqPYIbHT20vOC/Yu7GD4Y MGy44HQe7nNyUY1KifZxg2dKCb88fwr8vshvjPNYf9v5auL3CQvCvZ52hMg4oR7A gWw81zTb1x3KGidj4Qkleuq+oesPIgUB8CGz90lxI5BUgZ7ht31JemxGugN3qvxY +Vun9fEvAMBTFSyYYPc8f8Pw7t16SerpRETA6dwEXLxdbc8rzw9sy6AXHnWZU9y2 JXp4pkx2rn2cM54oQLVBubXmoc5YJiYDHBGD+NZqeLM7cKrNSNrAeCigZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPc2pyGezBHk9aB5jO9yj5yNylBDMB8GA1UdIwQY MBaAFLjSUcS/1SbaBi1M4q9WtuRuklEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAt NDJiM2Q2OGI1Njc2LzEvOXphbklaN01FZVQxb0htTTczS1BuSTNLVUVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82MjE5NDEtZjUzYy00NDhmLWJkMzAtNDJiM2Q2OGI1Njc2 LzEvdU5KUnhMX1ZKdG9HTFV6aXIxYTI1RzZTVVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhEtgMA0G CSqGSIb3DQEBCwUAA4IBAQADYoK6K7vWuTAMmGSIJMPnG5UAs+DDkoi67gGKojOC jlu8DRAtyftdITsTFOrECR1sXTYO3v1usKsHgGTm9xBtwW7p855HgxVf3zR7Q5nv QUdA75TE9N03tnk6vmAFLciHmygWr0hUOYzDNh8vrQR4/PEiMbtuJl0hvNxLT+s3 mv8tmozdIA3Cy8T5u+95Fxqm4ZbH3S06pcvX/b46Ba62bvCLY8QLBEzOp9KtZM44 8st4JldK8YOAzC69yvdfF20j2n1e8jpk7MGeoKV3r8ZpJ2SemNIBXCRj6Ytd/DXH izval6gPss5e8AnU8Smc86LWV9dGbNwgvUxkyT6pZWbe -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:34 2026 by rpki-client