This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/9-C51BQ9GR3x8sWko39QajrgzuQ.roa File: 9-C51BQ9GR3x8sWko39QajrgzuQ.roa (raw, json) Hash identifier: 1bZx3qAnqXddYhE0b5hAmr5qKot7DzAZND6Oe0URbRY= Subject key identifier: F7:E0:B9:D4:14:3D:19:1D:F1:F2:C5:A4:A3:7F:50:6A:3A:E0:CE:E4 Certificate issuer: /CN=d914da56e1a934649da02964ac12eba34c5cb84f Certificate serial: 019B7FF1D9D4E019DA0D667FDAE3B9712AB7 Authority key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/9-C51BQ9GR3x8sWko39QajrgzuQ.roa Signing time: Fri 02 Jan 2026 18:21:54 +0000 ROA not before: Fri 02 Jan 2026 18:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212586 IP address blocks: 79.174.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d9:d4:e0:19:da:0d:66:7f:da:e3:b9:71:2a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d914da56e1a934649da02964ac12eba34c5cb84f Validity Not Before: Jan 2 18:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7e0b9d4143d191df1f2c5a4a37f506a3ae0cee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:b3:e9:da:c1:e5:cd:d7:f3:27:23:81:df: a7:72:9d:32:eb:a1:ea:81:7f:bc:dc:21:0b:7a:87: 05:17:c2:8c:c8:6d:e4:50:9d:d6:27:72:35:1f:a6: 7b:70:52:6d:00:39:ed:b2:e5:2e:9c:79:b7:5b:56: cf:b8:f8:e4:b3:81:17:37:05:72:5c:fb:07:78:fb: a8:6f:c3:bb:35:58:d8:c3:45:d1:65:89:16:93:a6: aa:1b:6f:80:ac:b8:44:51:2a:47:df:60:e6:55:92: ae:8e:07:16:f9:32:88:ff:91:49:83:2f:f3:91:29: ab:82:a0:5a:d4:77:96:dc:07:54:3a:78:ca:b0:88: 07:75:d9:cd:40:27:b6:7d:90:69:ee:33:e1:11:c2: cf:c0:d0:ce:b8:f1:b4:65:f5:a6:14:ee:21:19:d0: 56:52:94:ce:76:bc:33:0a:b6:51:14:83:6e:f5:81: ae:3e:62:54:94:94:13:24:0d:7b:58:0b:e8:06:d8: be:a2:bc:a5:19:88:f2:47:b8:5e:14:87:42:33:7e: 3e:29:4c:bd:e9:32:03:6a:28:ef:41:07:45:c2:7b: b2:68:91:15:ff:6b:3c:6c:57:f6:f6:2e:ab:44:34: a1:0d:1c:de:24:1d:5e:e3:4c:34:b4:36:8e:a1:f7: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E0:B9:D4:14:3D:19:1D:F1:F2:C5:A4:A3:7F:50:6A:3A:E0:CE:E4 X509v3 Authority Key Identifier: keyid:D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/9-C51BQ9GR3x8sWko39QajrgzuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.174.2.0/24 Signature Algorithm: sha256WithRSAEncryption 49:fa:f9:97:2a:bb:3c:6a:7e:96:f0:ce:f5:ce:2b:3f:44:f3: 63:37:d2:ea:77:e3:81:fa:0c:25:57:cc:51:f4:8a:9a:11:e6: 62:02:81:8c:63:85:cd:00:61:79:f3:a9:7f:74:ad:d4:38:75: 52:78:cb:a8:c0:15:03:8c:c0:6f:3c:32:79:b3:0e:54:25:a6: 77:e6:1e:30:3d:8a:3f:4b:30:6f:6b:30:f8:e9:d9:20:00:59: bf:8f:fa:ed:c8:b6:7a:54:70:20:de:a9:39:2f:ea:07:26:2e: 52:45:6f:29:be:81:8e:d5:62:f6:70:2e:aa:a4:17:28:cb:6b: 7e:d5:9f:78:7e:22:0b:38:69:ce:36:f7:07:c7:1c:78:d4:79: 57:1f:8c:2f:e5:30:c9:de:5a:43:cf:6e:3e:ca:ba:c1:b8:80: 4f:da:97:e0:15:9d:b9:7e:4e:3c:e2:38:bb:64:fd:e4:07:c8: a0:58:fb:a3:ae:a3:1d:49:73:26:d7:5c:6b:ab:9d:24:da:e8: 4c:8d:cb:4d:f5:e8:83:76:e3:8a:d1:87:28:3d:4e:2b:10:a3: 5e:e7:c3:51:8f:b8:8a:ea:8d:95:ee:08:69:8e:e8:89:4b:ab: e6:fe:2b:62:3d:1f:a4:4f:79:05:10:f7:61:64:8d:8b:9f:01: 49:32:3e:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8dnU4BnaDWZ/2uO5cSq3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MTRkYTU2ZTFhOTM0NjQ5ZGEwMjk2NGFjMTJlYmEzNGM1 Y2I4NGYwHhcNMjYwMTAyMTgyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2UwYjlkNDE0M2QxOTFkZjFmMmM1YTRhMzdmNTA2YTNhZTBjZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFOz6drB5c3X8ycjgd+ncp0y66Hq gX+83CELeocFF8KMyG3kUJ3WJ3I1H6Z7cFJtADntsuUunHm3W1bPuPjks4EXNwVy XPsHePuob8O7NVjYw0XRZYkWk6aqG2+ArLhEUSpH32DmVZKujgcW+TKI/5FJgy/z kSmrgqBa1HeW3AdUOnjKsIgHddnNQCe2fZBp7jPhEcLPwNDOuPG0ZfWmFO4hGdBW UpTOdrwzCrZRFINu9YGuPmJUlJQTJA17WAvoBti+orylGYjyR7heFIdCM34+KUy9 6TIDaijvQQdFwnuyaJEV/2s8bFf29i6rRDShDRzeJB1e40w0tDaOofd3owIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPfgudQUPRkd8fLFpKN/UGo64M7kMB8GA1UdIwQY MBaAFNkU2lbhqTRknaApZKwS66NMXLhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlJUYVZ1R3BOR1Nkb0Nsa3JCTHJvMHhjdUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YTExYjUtYTQwNS00MWNiLTgxY2It ZjZiY2NmMWU1MzFmLzEvOS1DNTFCUTlHUjN4OHNXa28zOVFhanJnenVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83YTExYjUtYTQwNS00MWNiLTgxY2ItZjZiY2NmMWU1MzFm LzEvMlJUYVZ1R3BOR1Nkb0Nsa3JCTHJvMHhjdUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT64CMA0G CSqGSIb3DQEBCwUAA4IBAQBJ+vmXKrs8an6W8M71zis/RPNjN9Lqd+OB+gwlV8xR 9IqaEeZiAoGMY4XNAGF586l/dK3UOHVSeMuowBUDjMBvPDJ5sw5UJaZ35h4wPYo/ SzBvazD46dkgAFm/j/rtyLZ6VHAg3qk5L+oHJi5SRW8pvoGO1WL2cC6qpBcoy2t+ 1Z94fiILOGnONvcHxxx41HlXH4wv5TDJ3lpDz24+yrrBuIBP2pfgFZ25fk484ji7 ZP3kB8igWPujrqMdSXMm11xrq50k2uhMjctN9eiDduOK0YcoPU4rEKNe58NRj7iK 6o2V7ghpjuiJS6vm/itiPR+kT3kFEPdhZI2LnwFJMj4Z -----END CERTIFICATE-----Generated at Mon Jan 26 18:17:24 2026 by rpki-client