This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/9u2DZc6_t39AXh0hNQyl49GQcrA.roa File: 9u2DZc6_t39AXh0hNQyl49GQcrA.roa (raw, json) Hash identifier: upTRBVGB5NItiTNl9OAPzE1F31sUOeznk1tVJmk+yGA= Subject key identifier: F6:ED:83:65:CE:BF:B7:7F:40:5E:1D:21:35:0C:A5:E3:D1:90:72:B0 Certificate issuer: /CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Certificate serial: 019B7F1481D570B3B59E19BBED13063D3431 Authority key identifier: E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/9u2DZc6_t39AXh0hNQyl49GQcrA.roa Signing time: Fri 02 Jan 2026 14:20:08 +0000 ROA not before: Fri 02 Jan 2026 14:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 45.159.216.0/22 maxlen: 22 195.13.44.0/23 maxlen: 23 195.13.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.mft rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:81:d5:70:b3:b5:9e:19:bb:ed:13:06:3d:34:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0c5bb3da53435bf41e17f7dec47d4484e7f3129 Validity Not Before: Jan 2 14:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6ed8365cebfb77f405e1d21350ca5e3d19072b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:52:6c:63:e3:03:22:98:51:fb:db:2d:d5: 22:90:5d:7b:68:09:ee:5b:c6:04:01:13:6a:5b:4f: ce:71:65:92:2e:f9:46:77:f3:a5:d3:82:fb:f3:73: 3b:4b:48:16:bc:8d:3a:68:e9:6d:f3:39:35:5c:4e: a4:23:c1:57:b5:a5:fe:88:56:73:29:9f:35:97:85: 9e:74:a8:72:85:ef:fd:c0:80:1f:0b:4f:bc:4f:f1: b1:4f:ca:62:bd:a7:2b:b5:be:0f:ad:61:53:bc:9a: 65:40:b0:39:3e:c3:47:a1:d9:8e:c2:f5:16:e6:83: b3:50:7d:94:c6:61:d6:35:e1:48:11:a9:c7:ce:6c: 2c:31:2f:b8:35:5d:c3:2e:83:fd:f6:a5:10:06:1a: 17:1d:1d:25:bf:a6:08:87:32:42:d9:93:46:f4:aa: ef:46:60:58:a6:26:ef:62:14:ac:86:91:09:3e:c7: 95:bd:7c:31:63:ff:56:7e:27:20:b6:d0:28:fb:60: 2f:36:77:69:bc:f8:0e:81:b4:26:65:e0:22:3a:31: 79:19:01:fd:5d:a5:60:15:0a:ca:07:28:ce:63:e4: a7:bc:7b:51:c2:c5:6c:83:ae:f5:2a:30:12:a8:a7: 2f:19:18:e8:66:6a:77:82:22:ef:53:d0:8c:bd:50: 1b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:ED:83:65:CE:BF:B7:7F:40:5E:1D:21:35:0C:A5:E3:D1:90:72:B0 X509v3 Authority Key Identifier: keyid:E0:C5:BB:3D:A5:34:35:BF:41:E1:7F:7D:EC:47:D4:48:4E:7F:31:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MW7PaU0Nb9B4X997EfUSE5_MSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/9u2DZc6_t39AXh0hNQyl49GQcrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7f7d8f-0dc8-45a2-bc16-80add9ea3e5c/1/4MW7PaU0Nb9B4X997EfUSE5_MSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.216.0/22 195.13.44.0/23 195.13.54.0/23 Signature Algorithm: sha256WithRSAEncryption 63:41:d3:5f:de:b3:f6:84:bf:97:dc:86:1d:69:ce:11:f7:53: 1e:e4:09:c7:e8:14:5e:ab:1a:ca:88:ab:2f:13:a0:ab:26:cd: c6:f6:06:f6:36:56:cb:da:73:af:3b:6b:9f:a1:bb:26:c8:e3: 3c:57:cf:bd:a9:18:fb:31:80:6a:b8:e1:94:bb:18:25:3e:3f: 94:ee:90:a3:06:9b:9a:5a:3b:3a:9d:dc:48:54:1f:54:ab:20: 15:86:09:6c:75:8a:9f:9b:ca:c7:e1:d0:55:59:64:ed:fe:e5: f9:ce:b0:68:ac:69:7b:c6:8f:01:45:c9:e8:d8:8b:2a:e3:cf: 2a:0d:8c:8a:86:39:23:da:0a:12:25:ea:e8:44:c1:78:f5:bc: 40:d6:79:ff:53:98:d8:98:4c:14:20:e8:bf:f2:3d:60:77:61: a6:b2:87:a5:fd:86:f6:ed:39:f2:0f:19:91:a0:7e:ba:cf:5d: d4:e7:8a:f7:13:1e:af:51:18:61:56:b2:ad:a8:7e:ee:61:a5: 1b:dd:9a:f2:bc:a6:3b:9a:8c:7b:ac:47:1d:f8:63:72:3f:ab: 74:59:94:bc:1f:39:e2:2a:2c:34:c5:e4:a7:f2:4e:fa:57:56: fe:c7:bf:84:d8:2b:9e:ab:a9:41:5d:9c:ce:ea:f7:99:a8:58: cf:4c:88:52 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FIHVcLO1nhm77RMGPTQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYzViYjNkYTUzNDM1YmY0MWUxN2Y3ZGVjNDdkNDQ4NGU3 ZjMxMjkwHhcNMjYwMTAyMTQyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmVkODM2NWNlYmZiNzdmNDA1ZTFkMjEzNTBjYTVlM2QxOTA3MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn19SbGPjAyKYUfvbLdUikF17aAnu W8YEARNqW0/OcWWSLvlGd/Ol04L783M7S0gWvI06aOlt8zk1XE6kI8FXtaX+iFZz KZ81l4WedKhyhe/9wIAfC0+8T/GxT8pivacrtb4PrWFTvJplQLA5PsNHodmOwvUW 5oOzUH2UxmHWNeFIEanHzmwsMS+4NV3DLoP99qUQBhoXHR0lv6YIhzJC2ZNG9Krv RmBYpibvYhSshpEJPseVvXwxY/9WficgttAo+2AvNndpvPgOgbQmZeAiOjF5GQH9 XaVgFQrKByjOY+SnvHtRwsVsg671KjASqKcvGRjoZmp3giLvU9CMvVAb2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPbtg2XOv7d/QF4dITUMpePRkHKwMB8GA1UdIwQY MBaAFODFuz2lNDW/QeF/fexH1EhOfzEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYt ODBhZGQ5ZWEzZTVjLzEvOXUyRFpjNl90MzlBWGgwaE5ReWw0OUdRY3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS83ZjdkOGYtMGRjOC00NWEyLWJjMTYtODBhZGQ5ZWEzZTVj LzEvNE1XN1BhVTBOYjlCNFg5OTdFZlVTRTVfTVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZ/YAwQB ww0sAwQBww02MA0GCSqGSIb3DQEBCwUAA4IBAQBjQdNf3rP2hL+X3IYdac4R91Me 5AnH6BReqxrKiKsvE6CrJs3G9gb2NlbL2nOvO2ufobsmyOM8V8+9qRj7MYBquOGU uxglPj+U7pCjBpuaWjs6ndxIVB9UqyAVhglsdYqfm8rH4dBVWWTt/uX5zrBorGl7 xo8BRcno2Isq488qDYyKhjkj2goSJeroRMF49bxA1nn/U5jYmEwUIOi/8j1gd2Gm soel/Yb27TnyDxmRoH66z13U54r3Ex6vURhhVrKtqH7uYaUb3ZryvKY7mox7rEcd +GNyP6t0WZS8HzniKiw0xeSn8k76V1b+x7+E2Cueq6lBXZzO6veZqFjPTIhS -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:20 2026 by rpki-client