This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/9PJJMzY2oUycU8l8cSSelJBMcWc.roa File: 9PJJMzY2oUycU8l8cSSelJBMcWc.roa (raw, json) Hash identifier: oL+z5SaUyU8viR3KBSssNRDGEAldy3Dx3YEcED4SCvw= Subject key identifier: F4:F2:49:33:36:36:A1:4C:9C:53:C9:7C:71:24:9E:94:90:4C:71:67 Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb Certificate serial: 019B7A5B8F6EE046A05FE94BD0A5D65BB7C5 Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/9PJJMzY2oUycU8l8cSSelJBMcWc.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61394 IP address blocks: 185.9.152.0/22 maxlen: 22 2a03:2fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8f:6e:e0:46:a0:5f:e9:4b:d0:a5:d6:5b:b7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4f249333636a14c9c53c97c71249e94904c7167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:26:65:3f:43:72:a9:94:c8:b7:69:dd:fd:08: 29:ad:86:d4:24:57:d8:5a:1d:f2:1b:d2:b7:55:af: ed:24:60:4a:1f:95:15:c4:f3:33:fa:8c:89:e2:e0: f0:f3:1c:0e:cf:1a:7a:1c:f7:71:c8:76:68:81:05: ef:23:79:80:54:de:8f:eb:46:58:e5:e7:08:85:14: 5d:1b:40:33:12:b8:ce:f3:0c:be:b4:e3:1f:6c:35: ca:30:63:4c:56:4b:13:7e:87:1c:89:5a:c1:ec:b1: 67:02:25:06:03:68:5a:40:8f:0c:91:af:bc:22:6f: 42:b7:52:57:4e:fc:79:97:1a:cc:70:69:65:69:0e: 49:d8:45:56:6b:28:46:6b:8a:b4:04:0d:6e:7a:83: 64:76:dd:a8:b9:d9:99:b5:7e:87:a8:14:87:9a:b3: 09:19:0c:fc:fa:cc:e5:cb:91:7c:e8:db:2f:c2:db: 03:7e:14:3a:57:90:31:63:02:89:44:01:a9:2f:8c: 12:d5:2b:e5:db:bd:a6:e2:14:20:92:98:19:b9:3a: ab:a7:83:6c:32:34:eb:51:09:7a:e0:c7:1b:04:2f: 0f:00:a5:58:d1:a7:77:09:c2:87:55:d3:8b:40:10: c7:ae:86:59:8d:88:35:5b:87:24:12:ab:f6:9d:18: 2d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F2:49:33:36:36:A1:4C:9C:53:C9:7C:71:24:9E:94:90:4C:71:67 X509v3 Authority Key Identifier: keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/9PJJMzY2oUycU8l8cSSelJBMcWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.152.0/22 IPv6: 2a03:2fc0::/32 Signature Algorithm: sha256WithRSAEncryption 34:aa:28:80:5e:65:99:2a:70:37:a2:77:c1:92:9b:31:13:73: de:2d:cd:db:6e:99:16:e6:ab:2e:8b:e2:8e:33:60:9b:53:10: 89:28:0b:f0:66:64:77:1a:4f:4f:37:50:9c:2d:d6:23:b0:68: 7d:79:07:06:12:be:4e:e9:e2:04:71:bb:aa:49:67:26:b3:00: 86:b6:cc:d5:9e:47:72:8a:8f:26:d7:54:99:65:3d:5b:31:69: fa:d1:3a:be:12:c8:97:04:cf:b2:91:fb:84:fe:30:88:95:e3: cd:43:f5:9e:9b:91:80:d7:bb:6a:5e:3a:02:d6:dd:09:5b:cf: 9b:66:d6:6e:be:6a:80:fc:a6:94:19:f9:6c:3f:b6:65:01:14: 3e:46:ad:7a:9c:2c:86:75:84:43:2f:a7:7a:1e:af:af:10:e8: 4f:2d:41:e6:e9:b0:c9:2a:3d:8c:83:89:8d:4a:ce:53:2f:8e: 47:16:6a:8f:0f:1d:88:cd:9c:90:1d:65:4d:4d:7a:cb:3d:d3: a3:bf:5b:61:41:4c:bf:71:af:37:b9:f4:2e:d5:a7:04:0e:a3: 9d:f9:ec:81:1e:10:0a:4e:bf:9b:76:61:17:41:0c:42:0a:c6: e9:0d:15:07:1f:ea:07:47:84:05:d6:95:a8:df:8e:27:41:0b: 23:72:fc:b4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W49u4EagX+lL0KXWW7fFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTc2MjVjMzk1ZmI4NjdmNWQ4MDhkNTM1OTdhMTFjZTdm M2M0Y2IwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGYyNDkzMzM2MzZhMTRjOWM1M2M5N2M3MTI0OWU5NDkwNGM3MTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyZlP0NyqZTIt2nd/QgprYbUJFfY Wh3yG9K3Va/tJGBKH5UVxPMz+oyJ4uDw8xwOzxp6HPdxyHZogQXvI3mAVN6P60ZY 5ecIhRRdG0AzErjO8wy+tOMfbDXKMGNMVksTfocciVrB7LFnAiUGA2haQI8Mka+8 Im9Ct1JXTvx5lxrMcGllaQ5J2EVWayhGa4q0BA1ueoNkdt2oudmZtX6HqBSHmrMJ GQz8+szly5F86NsvwtsDfhQ6V5AxYwKJRAGpL4wS1Svl272m4hQgkpgZuTqrp4Ns MjTrUQl64McbBC8PAKVY0ad3CcKHVdOLQBDHroZZjYg1W4ckEqv2nRgtFwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPTySTM2NqFMnFPJfHEknpSQTHFnMB8GA1UdIwQY MBaAFBmXYlw5X7hn9dgI1TWXoRzn88TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8xNmU4MTItMjdjNi00MDVkLWE0YzUt YTdmN2I5ODA5MDA3LzEvOVBKSk16WTJvVXljVThsOGNTU2VsSkJNY1djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8xNmU4MTItMjdjNi00MDVkLWE0YzUtYTdmN2I5ODA5MDA3 LzEvR1pkaVhEbGZ1R2YxMkFqVk5aZWhIT2Z6eE1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQmYMA0E AgACMAcDBQAqAy/AMA0GCSqGSIb3DQEBCwUAA4IBAQA0qiiAXmWZKnA3onfBkpsx E3PeLc3bbpkW5qsui+KOM2CbUxCJKAvwZmR3Gk9PN1CcLdYjsGh9eQcGEr5O6eIE cbuqSWcmswCGtszVnkdyio8m11SZZT1bMWn60Tq+EsiXBM+ykfuE/jCIlePNQ/We m5GA17tqXjoC1t0JW8+bZtZuvmqA/KaUGflsP7ZlARQ+Rq16nCyGdYRDL6d6Hq+v EOhPLUHm6bDJKj2Mg4mNSs5TL45HFmqPDx2IzZyQHWVNTXrLPdOjv1thQUy/ca83 ufQu1acEDqOd+eyBHhAKTr+bdmEXQQxCCsbpDRUHH+oHR4QF1pWo344nQQsjcvy0 -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:59 2026 by rpki-client