This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/9lpk2brynM2xPsQoD2BpQ_zryUY.roa File: 9lpk2brynM2xPsQoD2BpQ_zryUY.roa (raw, json) Hash identifier: 5503yAKytxSCjrZG64w1D2L5jLnQ2qWaYtDDiQB0YCw= Subject key identifier: F6:5A:64:D9:BA:F2:9C:CD:B1:3E:C4:28:0F:60:69:43:FC:EB:C9:46 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B7B3661F90C8B8426DA9028E3847C28F5 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/9lpk2brynM2xPsQoD2BpQ_zryUY.roa Signing time: Thu 01 Jan 2026 20:18:40 +0000 ROA not before: Thu 01 Jan 2026 20:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215727 IP address blocks: 144.56.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:61:f9:0c:8b:84:26:da:90:28:e3:84:7c:28:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Jan 1 20:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f65a64d9baf29ccdb13ec4280f606943fcebc946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6b:b3:b2:a7:3d:10:31:a6:fe:a0:91:76:3c: 5b:af:11:ca:2f:5a:81:54:be:3e:6d:4a:00:99:dd: 79:a3:38:b5:0a:a9:e5:65:08:27:af:fa:91:a0:57: 2f:a0:ab:3c:e5:4f:48:d3:75:d8:f4:fb:6a:a5:f4: 2b:2a:ba:e5:f7:eb:f6:ee:82:17:1b:92:46:aa:c6: 59:2d:9b:fa:c7:4d:25:c3:0f:01:99:71:a3:ab:81: e0:82:e0:99:ae:3d:4c:30:df:ca:d8:ee:ad:7c:d7: ac:f7:7e:2e:de:4d:df:4c:7f:d6:fd:2f:6a:3c:f5: b0:03:8f:71:35:39:ac:5c:07:73:46:f8:22:20:e7: 7f:7e:dd:16:44:4e:56:ef:e3:f6:00:5f:3f:13:21: cb:fc:e9:eb:d0:3b:c7:32:6c:49:d3:c1:d4:9c:08: 0d:2b:58:ae:24:60:f4:52:ce:95:95:dc:87:c3:81: ed:cf:b2:1f:ae:46:b6:16:88:43:ac:89:46:7f:9e: d4:07:da:9c:ec:1e:af:2f:0c:86:7d:4b:e3:be:22: 6e:f4:ed:06:9e:3c:ea:5e:fa:64:66:23:0d:d0:47: 95:84:6d:5c:e8:a5:c5:f3:8a:7d:e9:cd:e6:0d:f7: ea:dc:00:08:55:bf:d1:1d:aa:5f:a8:4a:90:90:97: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5A:64:D9:BA:F2:9C:CD:B1:3E:C4:28:0F:60:69:43:FC:EB:C9:46 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/9lpk2brynM2xPsQoD2BpQ_zryUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.12.0/24 Signature Algorithm: sha256WithRSAEncryption 06:7f:04:ff:45:76:94:a2:d4:93:5c:33:bd:49:79:c1:2b:a1: cb:77:33:46:e1:6f:8e:a5:6e:3b:9e:e1:2d:ef:9b:ff:f6:13: 3d:ec:56:90:33:ad:89:58:53:b7:28:e2:1e:68:e9:c4:56:80: 3f:b2:48:4f:ad:e3:9f:d5:16:ed:49:2e:0a:e3:e8:3e:83:c3: 30:8e:14:f1:34:af:6c:83:77:6a:18:46:1c:5a:0b:91:31:cd: fa:11:a0:e3:e7:1a:88:9e:a5:4b:c9:0f:fc:4f:59:c9:86:d1: 96:16:69:3f:ec:60:d6:d0:8e:9c:04:37:bb:2f:f2:17:5e:0b: 45:42:ea:41:b2:c0:3f:01:e7:4b:8b:90:3f:f9:8e:37:91:d6: 79:6b:06:31:8b:ae:be:f4:30:2b:25:e6:22:d3:24:2f:2e:25: 61:09:b4:92:52:16:07:bb:06:0d:fe:43:60:1b:45:bb:4e:e7: 74:4f:2c:cb:9d:9a:92:58:e4:ee:dd:fb:2a:50:87:12:1a:10: 4f:61:a4:dd:eb:b5:47:6f:80:a7:ed:d7:ce:6a:09:b6:cd:ac: e5:db:28:b8:02:31:0b:02:dc:9f:26:7a:e5:c6:02:dd:e3:e4: 1d:aa:a5:1e:95:05:33:ad:36:ef:4f:8d:c6:cf:90:0c:28:34: 63:cf:f7:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NmH5DIuEJtqQKOOEfCj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjYwMTAxMjAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjVhNjRkOWJhZjI5Y2NkYjEzZWM0MjgwZjYwNjk0M2ZjZWJjOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3muzsqc9EDGm/qCRdjxbrxHKL1qB VL4+bUoAmd15ozi1CqnlZQgnr/qRoFcvoKs85U9I03XY9PtqpfQrKrrl9+v27oIX G5JGqsZZLZv6x00lww8BmXGjq4HgguCZrj1MMN/K2O6tfNes934u3k3fTH/W/S9q PPWwA49xNTmsXAdzRvgiIOd/ft0WRE5W7+P2AF8/EyHL/Onr0DvHMmxJ08HUnAgN K1iuJGD0Us6VldyHw4Htz7Ifrka2FohDrIlGf57UB9qc7B6vLwyGfUvjviJu9O0G njzqXvpkZiMN0EeVhG1c6KXF84p96c3mDffq3AAIVb/RHapfqEqQkJfjqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZaZNm68pzNsT7EKA9gaUP868lGMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvOWxwazJicnluTTJ4UHNRb0QyQnBRX3pyeVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgMMA0G CSqGSIb3DQEBCwUAA4IBAQAGfwT/RXaUotSTXDO9SXnBK6HLdzNG4W+OpW47nuEt 75v/9hM97FaQM62JWFO3KOIeaOnEVoA/skhPreOf1RbtSS4K4+g+g8MwjhTxNK9s g3dqGEYcWguRMc36EaDj5xqInqVLyQ/8T1nJhtGWFmk/7GDW0I6cBDe7L/IXXgtF QupBssA/AedLi5A/+Y43kdZ5awYxi66+9DArJeYi0yQvLiVhCbSSUhYHuwYN/kNg G0W7Tud0TyzLnZqSWOTu3fsqUIcSGhBPYaTd67VHb4Cn7dfOagm2zazl2yi4AjEL AtyfJnrlxgLd4+QdqqUelQUzrTbvT43Gz5AMKDRjz/eO -----END CERTIFICATE-----Generated at Mon Jan 19 18:26:49 2026 by rpki-client