This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/9zaRlCn0gczXu12ohCe3QgkXVBs.roa File: 9zaRlCn0gczXu12ohCe3QgkXVBs.roa (raw, json) Hash identifier: GFRIGvhId965KMNvduitzSvTCdVS7BD0/L+NeCzaKg8= Subject key identifier: F7:36:91:94:29:F4:81:CC:D7:BB:5D:A8:84:27:B7:42:09:17:54:1B Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37ACF32ADC76A65E05E60C3F342D43 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/9zaRlCn0gczXu12ohCe3QgkXVBs.roa Signing time: Fri 02 Jan 2026 10:18:56 +0000 ROA not before: Fri 02 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 170.62.239.0/24 maxlen: 24 170.62.244.0/24 maxlen: 24 170.62.245.0/24 maxlen: 24 193.142.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ac:f3:2a:dc:76:a6:5e:05:e6:0c:3f:34:2d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f736919429f481ccd7bb5da88427b7420917541b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8e:2b:7e:a4:d3:5a:b1:7a:aa:ca:9f:ff:3b: d7:39:d0:e2:0c:88:c9:c7:a0:1a:a1:82:d0:3b:be: 8e:25:3a:84:8c:28:80:0e:55:12:40:7b:0f:09:2e: 2c:c1:d1:d1:a5:a0:94:2a:3a:d6:a1:be:a8:3f:4f: 5d:45:95:3c:5e:c9:59:bc:1d:69:9e:ff:75:3c:1c: a3:7e:30:55:72:5b:5c:b4:05:2c:f0:bc:c7:5c:df: e6:1b:fd:6c:29:9b:a4:d2:70:e9:00:bd:14:cb:cc: f6:ad:d5:d5:87:0f:58:8b:34:67:9b:cc:74:52:54: 94:5d:d6:15:c0:e8:8b:47:bf:b0:b0:4c:f6:74:25: f2:53:cb:0b:43:14:6d:b2:31:1c:ad:7f:26:a5:36: ec:38:9c:f8:f2:f5:96:ab:0b:2f:18:1e:6e:ef:5e: 19:e8:29:b1:82:53:06:5b:b0:9d:92:07:68:2f:7c: 55:dc:de:04:20:47:64:0b:a0:5a:98:2f:99:41:38: 2a:a0:cc:2e:53:e0:c3:13:d0:85:99:7c:b6:3a:d9: 00:a7:df:bf:ea:4e:b8:b0:39:3a:94:b3:46:2b:14: e8:11:a2:ef:95:1c:8e:03:56:22:93:8d:88:3f:df: 60:21:85:2e:76:cf:53:bf:ed:7b:63:c2:bd:cc:f2: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:36:91:94:29:F4:81:CC:D7:BB:5D:A8:84:27:B7:42:09:17:54:1B X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/9zaRlCn0gczXu12ohCe3QgkXVBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.62.239.0/24 170.62.244.0/23 193.142.58.0/24 Signature Algorithm: sha256WithRSAEncryption c9:bf:cd:a3:33:c0:2b:79:53:34:92:4c:1c:e4:e4:e5:1b:57: a1:d3:1a:21:41:79:48:c8:9e:0d:f2:14:59:b4:7b:90:5c:a5: cf:91:7e:42:30:44:e5:a5:bf:a8:f2:37:86:8c:8b:6f:f5:f5: ad:ae:a8:83:2c:5f:f9:7d:f8:f7:29:21:c2:cd:02:c8:f7:80: 10:f8:ea:4c:b7:b2:34:e5:5b:42:6a:1c:e2:1e:ea:aa:e9:41: 20:e5:ae:d8:28:01:d4:92:66:21:64:48:04:ed:62:68:c6:b2: 69:53:3c:e9:ba:e2:7c:b6:44:7d:9c:8a:b0:71:c0:ec:f9:78: a2:c6:3b:7d:25:20:8e:68:28:c1:65:5a:80:48:67:62:8b:69: 13:9d:62:f3:20:4c:49:77:ea:10:86:27:b1:91:99:1a:b9:2e: 98:58:2c:b8:ab:22:f9:cd:5f:de:ec:6b:f5:6b:a5:89:e5:6a: 66:60:66:cc:9e:4a:21:2a:ed:6a:ef:a1:1a:bc:03:c9:d1:81: da:62:71:89:33:ee:eb:14:f6:fb:f5:80:15:43:c9:9c:64:4b: 58:05:bd:9b:fb:2d:f7:db:10:55:24:70:e8:8e:86:41:2a:b9: 25:47:8e:87:d9:bc:11:71:de:ab:4a:c3:7e:c1:82:9d:94:f4: b2:7f:2c:96 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+N6zzKtx2pl4F5gw/NC1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzM2OTE5NDI5ZjQ4MWNjZDdiYjVkYTg4NDI3Yjc0MjA5MTc1NDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI4rfqTTWrF6qsqf/zvXOdDiDIjJ x6AaoYLQO76OJTqEjCiADlUSQHsPCS4swdHRpaCUKjrWob6oP09dRZU8XslZvB1p nv91PByjfjBVcltctAUs8LzHXN/mG/1sKZuk0nDpAL0Uy8z2rdXVhw9YizRnm8x0 UlSUXdYVwOiLR7+wsEz2dCXyU8sLQxRtsjEcrX8mpTbsOJz48vWWqwsvGB5u714Z 6CmxglMGW7CdkgdoL3xV3N4EIEdkC6BamC+ZQTgqoMwuU+DDE9CFmXy2OtkAp9+/ 6k64sDk6lLNGKxToEaLvlRyOA1Yik42IP99gIYUuds9Tv+17Y8K9zPLvCwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPc2kZQp9IHM17tdqIQnt0IJF1QbMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvOXphUmxDbjBnY3pYdTEyb2hDZTNRZ2tYVkJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAqj7vAwQB qj70AwQAwY46MA0GCSqGSIb3DQEBCwUAA4IBAQDJv82jM8AreVM0kkwc5OTlG1eh 0xohQXlIyJ4N8hRZtHuQXKXPkX5CMETlpb+o8jeGjItv9fWtrqiDLF/5ffj3KSHC zQLI94AQ+OpMt7I05VtCahziHuqq6UEg5a7YKAHUkmYhZEgE7WJoxrJpUzzpuuJ8 tkR9nIqwccDs+Xiixjt9JSCOaCjBZVqASGdii2kTnWLzIExJd+oQhiexkZkauS6Y WCy4qyL5zV/e7Gv1a6WJ5WpmYGbMnkohKu1q76EavAPJ0YHaYnGJM+7rFPb79YAV Q8mcZEtYBb2b+y332xBVJHDojoZBKrklR46H2bwRcd6rSsN+wYKdlPSyfyyW -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:46 2026 by rpki-client