This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/9M63NstgwzUeByfK3OzkXGj67o8.roa File: 9M63NstgwzUeByfK3OzkXGj67o8.roa (raw, json) Hash identifier: tay9ZLQv2aoJnQQQ+jL+p2hBxKjMDIdF22+hP3qkcxo= Subject key identifier: F4:CE:B7:36:CB:60:C3:35:1E:07:27:CA:DC:EC:E4:5C:68:FA:EE:8F Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA42069124384F04319B0C525C04E72 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/9M63NstgwzUeByfK3OzkXGj67o8.roa Signing time: Thu 01 Jan 2026 22:18:32 +0000 ROA not before: Thu 01 Jan 2026 22:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214927 IP address blocks: 82.115.223.0/24 maxlen: 24 185.106.92.0/24 maxlen: 24 193.124.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:20:69:12:43:84:f0:43:19:b0:c5:25:c0:4e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4ceb736cb60c3351e0727cadcece45c68faee8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b7:f1:37:11:4d:08:2f:34:01:33:ba:08:0e: d9:81:e0:e1:68:5d:1b:3f:52:fe:f6:aa:8e:08:b4: 4e:4f:af:cf:8b:0b:c2:ec:87:9a:79:90:19:4c:d1: b5:51:5e:48:87:6e:bf:bc:a4:91:90:8f:0b:8f:de: d2:13:ac:fb:db:fe:14:b5:42:13:c2:88:2f:20:b7: e2:dc:1c:5e:bb:22:83:ac:a8:4b:28:c7:b5:3e:a1: 1e:ea:b8:1a:29:92:03:be:c4:d4:64:ac:dc:23:2d: a8:2f:fb:df:79:4d:e8:68:18:7d:14:ad:12:25:ea: 28:50:27:61:b2:a5:32:7a:30:7e:5d:0f:c8:78:0a: df:c9:28:66:42:57:d4:d3:3d:f1:6c:60:f4:03:f5: 44:e3:fc:9f:00:14:b6:3a:c1:33:5f:c8:37:22:17: d9:3b:7c:33:d5:a0:7d:54:23:5a:d8:a2:8e:be:54: ec:81:23:ff:26:28:2e:56:0c:fd:c8:b1:a3:ed:53: fa:7c:27:dd:a1:25:b8:52:66:e1:93:b2:5b:07:3f: 8d:88:d2:41:94:09:5f:c3:ec:f8:37:4d:b7:87:da: 42:1e:9e:8f:f3:20:ef:ff:d0:3b:84:2e:67:c3:dc: 35:70:8d:46:4e:7d:8d:b3:ed:2e:f2:9d:0e:e8:74: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CE:B7:36:CB:60:C3:35:1E:07:27:CA:DC:EC:E4:5C:68:FA:EE:8F X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/9M63NstgwzUeByfK3OzkXGj67o8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.223.0/24 185.106.92.0/24 193.124.185.0/24 Signature Algorithm: sha256WithRSAEncryption 84:f5:9a:a7:09:57:6b:88:33:00:03:8b:c3:46:30:cf:26:e1: 70:48:c1:9b:50:d5:74:c9:de:22:6e:d8:d8:a9:22:70:af:88: ee:5e:1f:77:30:27:03:8a:18:43:bf:11:77:c9:83:57:db:4d: 98:85:eb:d8:9b:fa:6e:c0:2c:a3:1d:bd:6b:34:e8:e9:0f:5a: c7:db:12:4c:7d:e9:8d:cd:0f:16:c9:77:7d:02:10:d2:a7:84: 3f:4e:a1:4f:3c:a9:7d:c0:25:59:68:84:62:9e:e9:51:6a:bd: ed:2c:e0:41:9e:c4:8c:99:e8:56:c1:8d:36:36:69:1e:34:09: a7:bd:73:04:92:e5:0e:c6:b3:35:ef:fc:c7:6d:76:ab:1b:4a: 78:29:88:5b:80:ba:e6:27:f7:01:e7:c2:90:c3:b7:93:7b:1a: cb:7b:a8:6a:be:e6:3c:3a:bd:1a:b0:d3:4e:f1:fa:ef:79:17: a4:c5:20:6e:b1:60:9c:20:c5:28:49:12:33:1e:db:54:cd:49: d7:c8:c5:43:f6:ed:e2:c8:ef:8d:b4:d2:dd:25:9e:d5:b7:54: 12:5e:a3:f1:99:39:f7:db:e9:b8:5a:57:be:a4:7e:4f:2a:e9: 5a:d8:53:b3:56:9f:ff:b7:61:30:07:c5:60:9d:9e:80:e8:13: 6d:f3:10:a7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pCBpEkOE8EMZsMUlwE5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGNlYjczNmNiNjBjMzM1MWUwNzI3Y2FkY2VjZTQ1YzY4ZmFlZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LfxNxFNCC80ATO6CA7ZgeDhaF0b P1L+9qqOCLROT6/PiwvC7IeaeZAZTNG1UV5Ih26/vKSRkI8Lj97SE6z72/4UtUIT wogvILfi3BxeuyKDrKhLKMe1PqEe6rgaKZIDvsTUZKzcIy2oL/vfeU3oaBh9FK0S JeooUCdhsqUyejB+XQ/IeArfyShmQlfU0z3xbGD0A/VE4/yfABS2OsEzX8g3IhfZ O3wz1aB9VCNa2KKOvlTsgSP/JiguVgz9yLGj7VP6fCfdoSW4Umbhk7JbBz+NiNJB lAlfw+z4N023h9pCHp6P8yDv/9A7hC5nw9w1cI1GTn2Ns+0u8p0O6HQAcwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPTOtzbLYMM1Hgcnytzs5Fxo+u6PMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvOU02M05zdGd3elVlQnlmSzNPemtYR2o2N284LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUnPfAwQA uWpcAwQAwXy5MA0GCSqGSIb3DQEBCwUAA4IBAQCE9ZqnCVdriDMAA4vDRjDPJuFw SMGbUNV0yd4ibtjYqSJwr4juXh93MCcDihhDvxF3yYNX202YhevYm/puwCyjHb1r NOjpD1rH2xJMfemNzQ8WyXd9AhDSp4Q/TqFPPKl9wCVZaIRinulRar3tLOBBnsSM mehWwY02NmkeNAmnvXMEkuUOxrM17/zHbXarG0p4KYhbgLrmJ/cB58KQw7eTexrL e6hqvuY8Or0asNNO8frveRekxSBusWCcIMUoSRIzHttUzUnXyMVD9u3iyO+NtNLd JZ7Vt1QSXqPxmTn32+m4Wle+pH5PKula2FOzVp//t2EwB8VgnZ6A6BNt8xCn -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:48 2026 by rpki-client