This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9CjZF1KsjRXm7etW3ESiI7b0aIw.roa File: 9CjZF1KsjRXm7etW3ESiI7b0aIw.roa (raw, json) Hash identifier: Vd8RjBIJTi/V+GfUzlzRlxWTlorvvME4N9rNd+8D8Ls= Subject key identifier: F4:28:D9:17:52:AC:8D:15:E6:ED:EB:56:DC:44:A2:23:B6:F4:68:8C Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAFCF2F73EC5A3E5BDA4D29DA9ED35 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9CjZF1KsjRXm7etW3ESiI7b0aIw.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209642 IP address blocks: 45.146.242.0/23 maxlen: 24 89.251.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fc:f2:f7:3e:c5:a3:e5:bd:a4:d2:9d:a9:ed:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f428d91752ac8d15e6edeb56dc44a223b6f4688c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7d:a2:3e:a2:b1:7f:04:51:3d:ba:26:25:72: c0:86:cd:68:1f:f8:2c:43:46:27:48:76:8e:5a:ff: fd:63:34:f7:c9:55:19:2a:89:46:3f:29:d6:b9:fd: 47:e5:8d:12:42:5b:82:45:93:c4:11:a6:37:9f:25: 7c:85:30:a4:66:13:44:5c:5d:fb:93:53:1d:e4:a2: a8:c6:8e:58:79:8d:bb:df:09:bc:01:35:e0:37:b1: a6:b9:e5:6a:52:55:e4:d3:3e:45:af:c5:72:9d:42: e0:11:d7:a3:11:6d:46:6a:21:3e:8d:65:1e:3e:5e: 69:0c:96:ef:eb:4d:7d:13:35:fb:5c:ae:0c:b4:41: f1:20:68:f8:06:fc:59:3a:b0:96:46:eb:92:39:f8: fc:c9:8c:f3:8f:66:93:e5:37:0d:53:00:ee:87:29: f0:c3:62:35:19:92:09:f1:dd:a8:c5:f8:ce:b2:26: a1:63:0f:de:8c:a7:e4:64:4f:a5:49:da:49:60:54: 4f:59:6d:99:41:d5:74:f5:50:de:48:42:7e:b9:4f: fe:73:4b:c7:f2:1c:a7:14:64:10:b7:e1:ad:6b:7a: f0:49:41:ca:56:5b:33:f2:81:03:3f:4a:e5:33:7a: 84:e0:37:26:32:39:cc:6b:51:da:85:04:50:0b:7c: 81:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:28:D9:17:52:AC:8D:15:E6:ED:EB:56:DC:44:A2:23:B6:F4:68:8C X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/9CjZF1KsjRXm7etW3ESiI7b0aIw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.242.0/23 89.251.11.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:b6:ec:4c:d2:f2:1d:c3:43:65:ac:41:71:09:b2:5a:f0:61: 61:f2:ec:cf:0d:df:d9:01:7b:66:5e:60:b1:df:50:1b:7a:b5: ed:40:a2:23:c4:5b:82:40:b0:ad:06:37:e7:16:00:09:e8:c6: e5:56:95:9c:62:3c:41:ac:ff:b0:c8:11:69:0f:5c:a8:27:f1: f4:43:a2:ce:a7:fd:6e:09:8e:4a:cd:46:b8:49:e9:76:93:20: a0:a5:48:5a:77:73:e0:73:78:b1:b4:3e:2e:38:8c:dd:16:02: dc:2d:62:ad:07:62:c1:b4:51:8b:74:45:21:6a:ba:5a:74:37: 95:6b:73:c5:17:83:39:a5:42:f5:96:83:a6:f8:be:fd:29:93: 3c:23:a1:66:1d:84:d4:34:e6:09:62:b9:79:0e:28:b9:60:e8: 96:b0:ea:98:f0:00:e7:87:bd:77:95:2b:a9:a6:bf:b1:fd:4a: 4b:71:59:0b:e0:4f:62:e0:9e:bf:59:86:21:82:ee:89:30:a0: a7:6e:7a:11:bd:df:68:6f:bc:ac:46:26:4d:f1:5d:dd:35:93: be:67:fd:0b:0a:cf:09:55:22:91:2e:1a:79:40:ca:6c:5d:77: 5e:80:ff:d0:a2:d9:3e:e8:27:32:c1:ed:bb:5e:41:3a:ef:04: 6d:32:66:13 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26vzy9z7Fo+W9pNKdqe01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDI4ZDkxNzUyYWM4ZDE1ZTZlZGViNTZkYzQ0YTIyM2I2ZjQ2ODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh32iPqKxfwRRPbomJXLAhs1oH/gs Q0YnSHaOWv/9YzT3yVUZKolGPynWuf1H5Y0SQluCRZPEEaY3nyV8hTCkZhNEXF37 k1Md5KKoxo5YeY273wm8ATXgN7GmueVqUlXk0z5Fr8VynULgEdejEW1GaiE+jWUe Pl5pDJbv6019EzX7XK4MtEHxIGj4BvxZOrCWRuuSOfj8yYzzj2aT5TcNUwDuhynw w2I1GZIJ8d2oxfjOsiahYw/ejKfkZE+lSdpJYFRPWW2ZQdV09VDeSEJ+uU/+c0vH 8hynFGQQt+Gta3rwSUHKVlsz8oEDP0rlM3qE4DcmMjnMa1HahQRQC3yBuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPQo2RdSrI0V5u3rVtxEoiO29GiMMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvOUNqWkYxS3NqUlhtN2V0VzNFU2lJN2IwYUl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZLyAwQA WfsLMA0GCSqGSIb3DQEBCwUAA4IBAQAatuxM0vIdw0NlrEFxCbJa8GFh8uzPDd/Z AXtmXmCx31AberXtQKIjxFuCQLCtBjfnFgAJ6MblVpWcYjxBrP+wyBFpD1yoJ/H0 Q6LOp/1uCY5KzUa4Sel2kyCgpUhad3Pgc3ixtD4uOIzdFgLcLWKtB2LBtFGLdEUh arpadDeVa3PFF4M5pUL1loOm+L79KZM8I6FmHYTUNOYJYrl5Dii5YOiWsOqY8ADn h713lSuppr+x/UpLcVkL4E9i4J6/WYYhgu6JMKCnbnoRvd9ob7ysRiZN8V3dNZO+ Z/0LCs8JVSKRLhp5QMpsXXdegP/Qotk+6Ccywe27XkE67wRtMmYT -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:06 2026 by rpki-client