This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9PjE-FT5x3lfbDy22uURpGtuaH8.roa File: 9PjE-FT5x3lfbDy22uURpGtuaH8.roa (raw, json) Hash identifier: Qc8PbJ+121WDG0jcNdRI6MTD3GMXfVRF32u77QXsW1U= Subject key identifier: F4:F8:C4:F8:54:F9:C7:79:5F:6C:3C:B6:DA:E5:11:A4:6B:6E:68:7F Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE3C5F87CA40FB91C8BBAACE06432D Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9PjE-FT5x3lfbDy22uURpGtuaH8.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 82.163.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3c:5f:87:ca:40:fb:91:c8:bb:aa:ce:06:43:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4f8c4f854f9c7795f6c3cb6dae511a46b6e687f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:45:ee:6a:e2:4d:79:77:09:d4:30:e9:6d: d8:76:20:ea:f2:a2:80:2d:c9:e5:ac:86:5b:07:f1: 39:70:b2:a2:cb:56:22:c5:f5:b2:76:7e:23:e4:67: 43:65:a9:1c:1e:0b:66:16:ad:aa:2f:8f:41:13:1b: 57:de:e5:65:2e:12:fa:35:2c:43:6f:d9:c4:40:63: 8a:a0:7d:87:45:94:af:49:29:c7:eb:21:b6:76:cd: 01:22:16:f3:5e:4b:c7:51:0f:c7:91:ce:82:c3:ff: e7:62:7a:be:86:5e:5f:d3:cf:1f:58:26:e5:c3:8f: b6:49:29:d6:7b:5b:91:01:0d:c3:c3:ff:6a:10:4e: b2:b4:74:01:1e:97:8f:ee:bf:ee:34:0a:2f:8c:65: ca:fc:83:9b:8c:1d:48:15:90:de:62:ff:89:e2:b9: bf:64:fe:5d:7e:69:ea:4e:a9:08:b5:6e:29:3b:c5: 7f:53:4a:f0:f3:13:9a:f4:ef:09:0a:8f:e3:b2:02: 2b:ae:6e:9f:45:4d:c8:91:a0:bf:ec:70:ae:f4:5f: ee:8a:7b:e3:5b:a4:ed:38:0b:39:d7:38:88:df:59: 6c:55:eb:a8:e3:8a:45:37:1f:b5:e7:a2:ec:3b:16: 0f:7e:2d:18:13:14:4c:c6:6f:fd:4d:81:ee:1e:88: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F8:C4:F8:54:F9:C7:79:5F:6C:3C:B6:DA:E5:11:A4:6B:6E:68:7F X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9PjE-FT5x3lfbDy22uURpGtuaH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.163.52.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:45:88:de:c8:d0:51:44:c1:45:ce:fd:e8:71:6a:6b:f2:0e: f6:02:60:06:40:21:21:ea:bc:bf:02:47:51:6a:5f:d8:ff:42: f1:22:6a:07:32:56:87:9f:93:3c:19:9d:36:7b:b3:f8:c2:7e: bb:3f:80:85:bc:c4:59:f5:bd:81:da:28:a7:d3:a7:8e:cc:21: 5e:9b:f8:3a:be:08:81:9c:47:39:ec:4f:94:c9:4a:12:98:9a: 24:cb:3a:87:5c:2a:32:06:ab:05:11:fb:75:23:a8:f4:e0:a2: e3:7e:f4:84:c4:bd:6b:a0:0a:c3:d3:25:03:3e:f4:db:f3:b9: d7:9e:b9:2c:8c:9c:aa:76:83:e9:e0:6b:16:4b:80:6b:8a:ee: 5b:29:9d:71:77:08:f5:8e:57:d9:6e:19:b9:ed:c8:c4:17:94: 4e:c9:c5:44:ea:9c:9f:4c:d2:ab:37:5c:c3:cb:6c:75:fb:da: 9f:3f:18:f9:b1:01:e3:23:4b:54:39:b1:78:95:ee:08:c5:7f: a5:82:ab:56:a9:0c:a5:80:e5:e0:f2:98:3a:93:2d:dc:09:fe: c4:81:2c:44:a4:77:af:2a:af:e3:ff:91:5f:cc:2f:bf:bd:90: a2:55:73:b8:83:3f:b4:ef:91:a4:1f:28:1b:2a:19:b4:ed:54: a2:04:f9:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jxfh8pA+5HIu6rOBkMtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGY4YzRmODU0ZjljNzc5NWY2YzNjYjZkYWU1MTFhNDZiNmU2ODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLVF7mriTXl3CdQw6W3YdiDq8qKA LcnlrIZbB/E5cLKiy1YixfWydn4j5GdDZakcHgtmFq2qL49BExtX3uVlLhL6NSxD b9nEQGOKoH2HRZSvSSnH6yG2ds0BIhbzXkvHUQ/Hkc6Cw//nYnq+hl5f088fWCbl w4+2SSnWe1uRAQ3Dw/9qEE6ytHQBHpeP7r/uNAovjGXK/IObjB1IFZDeYv+J4rm/ ZP5dfmnqTqkItW4pO8V/U0rw8xOa9O8JCo/jsgIrrm6fRU3IkaC/7HCu9F/uinvj W6TtOAs51ziI31lsVeuo44pFNx+156LsOxYPfi0YExRMxm/9TYHuHohNTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPT4xPhU+cd5X2w8ttrlEaRrbmh/MB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvOVBqRS1GVDV4M2xmYkR5MjJ1VVJwR3R1YUg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUqM0MA0G CSqGSIb3DQEBCwUAA4IBAQBuRYjeyNBRRMFFzv3ocWpr8g72AmAGQCEh6ry/AkdR al/Y/0LxImoHMlaHn5M8GZ02e7P4wn67P4CFvMRZ9b2B2iin06eOzCFem/g6vgiB nEc57E+UyUoSmJokyzqHXCoyBqsFEft1I6j04KLjfvSExL1roArD0yUDPvTb87nX nrksjJyqdoPp4GsWS4Briu5bKZ1xdwj1jlfZbhm57cjEF5ROycVE6pyfTNKrN1zD y2x1+9qfPxj5sQHjI0tUObF4le4IxX+lgqtWqQylgOXg8pg6ky3cCf7EgSxEpHev Kq/j/5FfzC+/vZCiVXO4gz+075GkHygbKhm07VSiBPlF -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:17 2026 by rpki-client