This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/ro9Q9RFKhgezIN_wav4dR-eXoZw.roa File: ro9Q9RFKhgezIN_wav4dR-eXoZw.roa (raw, json) Hash identifier: bgN32+4ndLdWd2BsCVHxOm8hcnK6B9MsF19ZhVaVHsY= Subject key identifier: AE:8F:50:F5:11:4A:86:07:B3:20:DF:F0:6A:FE:1D:47:E7:97:A1:9C Certificate issuer: /CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f Certificate serial: 019B797F1EF9DE9B3C2FE1D1AE131CE3752B Authority key identifier: CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/ro9Q9RFKhgezIN_wav4dR-eXoZw.roa Signing time: Thu 01 Jan 2026 12:18:52 +0000 ROA not before: Thu 01 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209838 IP address blocks: 213.170.200.0/23 maxlen: 24 213.170.202.0/23 maxlen: 24 2a03:d2c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.mft rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1e:f9:de:9b:3c:2f:e1:d1:ae:13:1c:e3:75:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccbf95b47ab2b99c222bfe54521efd1ab67d267f Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae8f50f5114a8607b320dff06afe1d47e797a19c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0f:27:09:ef:82:5a:51:60:23:58:d4:bb:3e: 01:54:87:fa:d7:08:9d:49:43:fd:19:52:e4:38:d3: ab:21:27:9d:bf:06:56:72:85:02:35:52:2b:54:fc: d1:39:ec:a8:9a:f4:c8:d4:b8:27:65:6a:7e:a6:a7: ab:0e:0c:06:b5:af:2a:66:99:68:3f:87:9d:2c:ba: f4:b3:bb:6d:ef:39:73:35:7b:b1:c0:48:13:0c:15: 64:39:9f:9b:1c:9f:fe:26:c8:91:4b:c0:3c:02:99: 4a:60:87:34:e5:ad:45:13:b5:2b:e5:d8:72:75:ac: 65:16:16:55:f6:a0:63:7f:b4:15:93:23:70:38:22: 7c:61:0a:f6:e3:6d:12:9e:c4:72:b6:06:61:03:79: fd:cd:ce:99:96:69:f6:f3:0b:88:f6:40:3d:8c:eb: 36:5e:82:dd:55:0e:92:8c:7c:38:5f:73:62:43:a0: 52:d2:55:db:46:fb:2c:43:36:a1:e5:b3:27:ae:72: 28:57:10:0a:66:a3:64:48:33:5c:34:0d:c4:ca:cc: e9:ea:f7:60:b3:cf:ca:87:06:ad:e8:60:48:ff:67: 86:d1:92:61:96:f1:72:bd:4c:81:da:6e:dd:d6:41: 8b:69:7e:53:a9:f7:fa:a8:34:8f:c6:36:38:e7:a3: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8F:50:F5:11:4A:86:07:B3:20:DF:F0:6A:FE:1D:47:E7:97:A1:9C X509v3 Authority Key Identifier: keyid:CC:BF:95:B4:7A:B2:B9:9C:22:2B:FE:54:52:1E:FD:1A:B6:7D:26:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/ro9Q9RFKhgezIN_wav4dR-eXoZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a29b95-ccb3-467b-ab7a-ac5b61493e01/1/zL-VtHqyuZwiK_5UUh79GrZ9Jn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.170.200.0/22 IPv6: 2a03:d2c0::/32 Signature Algorithm: sha256WithRSAEncryption 11:2e:05:89:cb:a3:32:a8:0e:0b:02:e1:1f:39:ee:ce:2d:bf: 66:9c:92:cb:0f:3b:08:61:06:f0:31:6c:f1:4c:90:97:7a:6f: 2d:42:6d:8b:35:02:5e:da:79:65:ad:b1:e3:19:b1:23:2d:53: 73:0d:ef:cd:89:22:fd:a3:64:67:d0:76:cd:d6:a0:cb:14:18: cf:73:e1:4d:5e:31:f2:ef:60:73:c0:b3:1e:c7:92:eb:b9:54: 65:54:85:04:f3:96:0b:95:be:c7:16:11:e0:7f:14:12:81:73: d3:a9:46:a9:97:b1:d3:73:95:75:84:fe:6b:b6:3b:68:3f:f0: 59:3c:3e:41:9b:89:48:47:5e:17:5b:69:13:d0:ed:76:fd:78: 88:be:7f:b1:ca:83:a0:62:6c:3a:ad:82:85:eb:1f:96:85:65: 62:55:f2:0e:7f:36:a5:d5:7a:97:98:b2:ab:20:d3:8e:59:f7: 17:d0:ba:f7:ad:bc:50:6c:6b:aa:da:59:d9:39:2a:87:b0:bb: e7:97:2e:ab:39:6c:ab:f8:36:ba:3c:c4:7d:27:b4:d9:e3:ff: 76:c8:04:b6:8a:6c:16:9d:09:c0:06:67:25:2b:85:f8:1a:ef: 67:93:b9:24:d4:5e:3c:16:c5:19:5b:42:b4:87:56:2b:85:03: 59:ef:30:a6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fx753ps8L+HRrhMc43UrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYmY5NWI0N2FiMmI5OWMyMjJiZmU1NDUyMWVmZDFhYjY3 ZDI2N2YwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZThmNTBmNTExNGE4NjA3YjMyMGRmZjA2YWZlMWQ0N2U3OTdhMTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw8nCe+CWlFgI1jUuz4BVIf61wid SUP9GVLkONOrISedvwZWcoUCNVIrVPzROeyomvTI1LgnZWp+pqerDgwGta8qZplo P4edLLr0s7tt7zlzNXuxwEgTDBVkOZ+bHJ/+JsiRS8A8AplKYIc05a1FE7Ur5dhy daxlFhZV9qBjf7QVkyNwOCJ8YQr2420SnsRytgZhA3n9zc6Zlmn28wuI9kA9jOs2 XoLdVQ6SjHw4X3NiQ6BS0lXbRvssQzah5bMnrnIoVxAKZqNkSDNcNA3Eyszp6vdg s8/Khwat6GBI/2eG0ZJhlvFyvUyB2m7d1kGLaX5Tqff6qDSPxjY456PVKQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK6PUPURSoYHsyDf8Gr+HUfnl6GcMB8GA1UdIwQY MBaAFMy/lbR6srmcIiv+VFIe/Rq2fSZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMjliOTUtY2NiMy00NjdiLWFiN2Et YWM1YjYxNDkzZTAxLzEvcm85UTlSRktoZ2V6SU5fd2F2NGRSLWVYb1p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hMjliOTUtY2NiMy00NjdiLWFiN2EtYWM1YjYxNDkzZTAx LzEvekwtVnRIcXl1WndpS181VVVoNzlHclo5Sm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC1arIMA0E AgACMAcDBQAqA9LAMA0GCSqGSIb3DQEBCwUAA4IBAQARLgWJy6MyqA4LAuEfOe7O Lb9mnJLLDzsIYQbwMWzxTJCXem8tQm2LNQJe2nllrbHjGbEjLVNzDe/NiSL9o2Rn 0HbN1qDLFBjPc+FNXjHy72BzwLMex5LruVRlVIUE85YLlb7HFhHgfxQSgXPTqUap l7HTc5V1hP5rtjtoP/BZPD5Bm4lIR14XW2kT0O12/XiIvn+xyoOgYmw6rYKF6x+W hWViVfIOfzal1XqXmLKrINOOWfcX0Lr3rbxQbGuq2lnZOSqHsLvnly6rOWyr+Da6 PMR9J7TZ4/92yAS2imwWnQnABmclK4X4Gu9nk7kk1F48FsUZW0K0h1YrhQNZ7zCm -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:32 2026 by rpki-client