This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9B3MOLySlWfWC6AyD9svl2Zou58.roa File: 9B3MOLySlWfWC6AyD9svl2Zou58.roa (raw, json) Hash identifier: 0hNMBxa0SzqXQr2YABzS2g0VnCXbJvy2LGvtD2iWxWE= Subject key identifier: F4:1D:CC:38:BC:92:95:67:D6:0B:A0:32:0F:DB:2F:97:66:68:BB:9F Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019ABADA8A2C8B6800E69CB8CFB34D4E5226 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9B3MOLySlWfWC6AyD9svl2Zou58.roa Signing time: Tue 25 Nov 2025 11:51:15 +0000 ROA not before: Tue 25 Nov 2025 11:51:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44559 IP address blocks: 45.91.239.0/24 maxlen: 24 80.242.53.0/24 maxlen: 24 84.252.71.0/24 maxlen: 24 130.193.26.0/24 maxlen: 24 146.19.87.0/24 maxlen: 24 146.19.129.0/24 maxlen: 24 193.176.20.0/24 maxlen: 24 193.176.22.0/24 maxlen: 24 193.201.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:da:8a:2c:8b:68:00:e6:9c:b8:cf:b3:4d:4e:52:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Nov 25 11:51:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f41dcc38bc929567d60ba0320fdb2f976668bb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:91:e8:72:a1:89:92:b9:e4:67:b8:63:33:db: c8:00:20:bd:de:6d:31:ea:92:fc:c7:49:b3:4d:35: bc:85:df:36:0f:7e:af:55:83:b8:79:ff:a4:e4:79: fe:da:6c:35:af:ec:be:5a:14:c7:b9:c0:62:17:97: 6a:06:4a:0f:37:08:45:32:e0:65:1d:7a:73:2a:57: 6f:51:38:cb:f6:a8:ee:d5:22:05:aa:3f:8f:4f:b3: f2:ce:0b:ef:27:e9:e7:9f:63:25:bd:32:6d:19:79: 1a:ab:5b:c4:36:b6:8d:9d:d8:46:12:91:99:d1:44: f8:b9:1d:58:33:04:45:c6:48:37:80:a4:99:7d:69: 3e:40:bd:dc:81:ef:49:90:b5:ce:70:3d:d6:5e:06: f7:ee:b0:ec:4f:b2:75:4f:5a:59:92:f6:0a:4b:0e: 6f:e3:94:36:ee:df:19:93:70:ec:77:de:cf:ff:0d: cc:23:c3:2d:1d:0b:51:6c:c1:5c:b5:b3:67:96:ee: 7e:7b:d9:92:63:f1:b6:b1:52:cf:02:61:6a:c9:4e: de:44:14:d2:52:d0:a4:e7:ca:35:01:bc:d7:d9:1e: 91:98:90:29:23:83:e1:30:e0:45:3d:3c:02:5a:e0: 42:84:6a:aa:c9:db:66:3d:ee:a9:d3:71:3f:55:36: 96:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1D:CC:38:BC:92:95:67:D6:0B:A0:32:0F:DB:2F:97:66:68:BB:9F X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/9B3MOLySlWfWC6AyD9svl2Zou58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.239.0/24 80.242.53.0/24 84.252.71.0/24 130.193.26.0/24 146.19.87.0/24 146.19.129.0/24 193.176.20.0/24 193.176.22.0/24 193.201.9.0/24 Signature Algorithm: sha256WithRSAEncryption 41:75:d8:5b:34:83:f2:b7:64:6c:b4:67:9d:8c:57:d9:f1:fd: 31:c0:76:4d:96:ab:12:73:ba:8e:a4:44:33:04:86:1a:58:e8: 2f:81:99:1d:f5:a9:73:a1:a2:7a:ec:a9:14:da:a8:31:e0:07: fa:d0:79:e8:cf:3e:ce:dd:b8:c2:59:3c:4a:33:d5:6d:19:c9: 02:97:c7:2c:63:21:72:b5:d9:28:a6:9a:10:ce:a7:37:0e:2a: 75:b1:ef:82:5f:01:fa:ac:77:d5:0f:25:6c:f1:f1:66:54:06: 41:9a:60:e4:52:4c:c0:a0:4b:ca:b3:fd:4d:8e:3f:6e:e2:f6: c7:50:67:21:aa:8e:9f:36:b7:87:59:fc:de:b0:9a:8a:f8:21: 28:4b:9f:b3:d0:7f:47:78:da:60:23:09:b0:f7:4a:49:35:41: 29:97:75:7d:52:04:3c:d6:51:58:30:9b:de:15:ab:2d:f7:f3: 27:f3:9e:35:b8:e7:fc:b7:3d:26:ae:99:ea:06:e4:aa:18:6a: cc:d5:26:af:43:16:a0:8c:f4:2d:f3:62:51:ee:36:ad:7f:7d: f7:f8:7e:55:38:3b:f5:36:21:12:de:99:6b:18:a1:fc:03:08: 16:ec:9e:19:17:f3:14:c6:d4:62:11:c9:c8:c4:58:a0:f1:dc: 91:92:48:99 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZq62oosi2gA5py4z7NNTlImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMTI1MTE1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDFkY2MzOGJjOTI5NTY3ZDYwYmEwMzIwZmRiMmY5NzY2NjhiYjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopHocqGJkrnkZ7hjM9vIACC93m0x 6pL8x0mzTTW8hd82D36vVYO4ef+k5Hn+2mw1r+y+WhTHucBiF5dqBkoPNwhFMuBl HXpzKldvUTjL9qju1SIFqj+PT7PyzgvvJ+nnn2MlvTJtGXkaq1vENraNndhGEpGZ 0UT4uR1YMwRFxkg3gKSZfWk+QL3cge9JkLXOcD3WXgb37rDsT7J1T1pZkvYKSw5v 45Q27t8Zk3Dsd97P/w3MI8MtHQtRbMFctbNnlu5+e9mSY/G2sVLPAmFqyU7eRBTS UtCk58o1AbzX2R6RmJApI4PhMOBFPTwCWuBChGqqydtmPe6p03E/VTaW5QIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFPQdzDi8kpVn1gugMg/bL5dmaLufMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvOUIzTU9MeVNsV2ZXQzZBeUQ5c3ZsMlpvdTU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALVvvAwQA UPI1AwQAVPxHAwQAgsEaAwQAkhNXAwQAkhOBAwQAwbAUAwQAwbAWAwQAwckJMA0G CSqGSIb3DQEBCwUAA4IBAQBBddhbNIPyt2RstGedjFfZ8f0xwHZNlqsSc7qOpEQz BIYaWOgvgZkd9alzoaJ67KkU2qgx4Af60Hnozz7O3bjCWTxKM9VtGckCl8csYyFy tdkoppoQzqc3Dip1se+CXwH6rHfVDyVs8fFmVAZBmmDkUkzAoEvKs/1Njj9u4vbH UGchqo6fNreHWfzesJqK+CEoS5+z0H9HeNpgIwmw90pJNUEpl3V9UgQ81lFYMJve Fast9/Mn8541uOf8tz0mrpnqBuSqGGrM1SavQxagjPQt82JR7jatf333+H5VODv1 NiES3plrGKH8AwgW7J4ZF/MUxtRiEcnIxFig8dyRkkiZ -----END CERTIFICATE-----Generated at Fri Dec 5 11:50:20 2025 by rpki-client