This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9kJoijXp_W2x-CNIVGU2gTyIHu4.roa File: 9kJoijXp_W2x-CNIVGU2gTyIHu4.roa (raw, json) Hash identifier: g/JnEpQSh0oe6cxDrcijYpkgjg+0UyJYEEJmxmRejxg= Subject key identifier: F6:42:68:8A:35:E9:FD:6D:B1:F8:23:48:54:65:36:81:3C:88:1E:EE Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE375FBA995698A8849764FFCE8CB9 Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9kJoijXp_W2x-CNIVGU2gTyIHu4.roa Signing time: Fri 02 Jan 2026 04:19:05 +0000 ROA not before: Fri 02 Jan 2026 04:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11426 IP address blocks: 46.20.212.0/22 maxlen: 24 130.255.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:37:5f:ba:99:56:98:a8:84:97:64:ff:ce:8c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f642688a35e9fd6db1f82348546536813c881eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:71:dd:8c:0d:ac:9b:78:d8:2d:db:18:b2:80: d9:e3:49:8c:54:25:28:b2:4c:31:26:56:e5:f4:f7: 1f:66:9b:3e:95:8f:91:d8:47:d7:d8:fb:4d:35:2b: 37:12:44:c2:a4:58:0c:5f:42:ed:05:b9:ab:73:5f: c5:97:3f:60:a4:ae:52:0b:f7:c6:b6:6a:e0:61:5c: 15:9e:20:28:28:d0:45:09:f1:f4:ea:17:54:51:7c: 18:9d:e9:7b:df:d3:73:41:38:d9:28:bc:f4:6d:c2: 01:df:36:3b:f2:a8:a3:be:35:88:c9:54:c6:76:37: 57:4a:ab:fe:cc:26:1e:8c:2b:de:a9:d0:34:d8:00: c7:e8:1c:86:79:a1:c6:d7:1f:6d:8b:a3:8d:6c:f5: eb:46:a9:0b:dd:00:cd:f1:aa:4f:a7:58:cc:26:b5: 98:8f:09:3a:f8:71:b9:43:f8:ee:18:d0:83:23:1c: c6:4f:49:7b:b3:f0:4e:91:12:39:91:71:c4:1f:cd: f3:40:e6:c4:f3:29:4e:df:15:c8:c5:be:fd:97:a1: 9c:4c:b0:0c:cc:46:58:3f:bc:fe:59:92:39:d9:48: 70:c9:3a:13:7a:c8:c6:80:41:37:2f:83:6a:ee:0d: 4e:db:1b:dd:1e:cf:6d:ae:f4:71:db:62:ce:21:44: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:42:68:8A:35:E9:FD:6D:B1:F8:23:48:54:65:36:81:3C:88:1E:EE X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/9kJoijXp_W2x-CNIVGU2gTyIHu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.212.0/22 130.255.64.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:88:7c:4c:40:87:5f:b1:5b:03:14:57:71:a9:8f:22:6d:ed: 30:34:92:36:ea:ee:c1:bc:19:5e:b7:8c:dc:a4:c8:5d:bf:e3: 19:1e:4b:c9:85:0f:23:15:40:0e:d3:de:67:59:3c:f1:32:9c: 3e:82:3f:5f:11:03:f7:d1:a9:33:4b:07:96:a7:fe:ce:b1:42: b1:83:ac:84:1f:e9:0d:fd:12:cf:33:ba:71:fa:71:86:4c:88: 48:9d:ed:e6:6c:ce:a3:35:37:13:a4:41:bf:20:76:bf:4e:72: 63:08:c3:f1:f2:67:cb:53:cf:ee:8f:a2:c0:d7:dc:82:42:a0: 4a:b2:5e:f0:d1:6a:41:d9:68:dc:c9:33:cd:99:62:7b:5c:e1: 02:e1:44:a2:c2:09:41:c7:a2:0e:68:62:c9:80:b5:73:08:2b: ad:f5:b1:18:f2:a1:d4:c0:d1:22:ad:f1:60:5c:cf:e1:be:28: 94:4c:d2:1a:91:5f:11:08:6b:aa:ee:7d:73:11:fb:cf:9c:0b: ac:38:20:72:17:28:ae:50:7d:98:16:5d:48:0a:3d:9f:81:85: c6:1c:54:28:00:2b:00:3a:a6:43:ca:5e:fb:c4:a3:a1:cb:9f: 3a:c8:a5:dc:8a:f8:8d:8b:c4:0e:d9:8e:c2:c9:17:a3:10:50: b0:c1:38:84 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87jdfuplWmKiEl2T/zoy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjQyNjg4YTM1ZTlmZDZkYjFmODIzNDg1NDY1MzY4MTNjODgxZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+XHdjA2sm3jYLdsYsoDZ40mMVCUo skwxJlbl9PcfZps+lY+R2EfX2PtNNSs3EkTCpFgMX0LtBbmrc1/Flz9gpK5SC/fG tmrgYVwVniAoKNBFCfH06hdUUXwYnel739NzQTjZKLz0bcIB3zY78qijvjWIyVTG djdXSqv+zCYejCveqdA02ADH6ByGeaHG1x9ti6ONbPXrRqkL3QDN8apPp1jMJrWY jwk6+HG5Q/juGNCDIxzGT0l7s/BOkRI5kXHEH83zQObE8ylO3xXIxb79l6GcTLAM zEZYP7z+WZI52UhwyToTesjGgEE3L4Nq7g1O2xvdHs9trvRx22LOIUSutQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPZCaIo16f1tsfgjSFRlNoE8iB7uMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvOWtKb2lqWHBfVzJ4LUNOSVZHVTJnVHlJSHU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLhTUAwQC gv9AMA0GCSqGSIb3DQEBCwUAA4IBAQB7iHxMQIdfsVsDFFdxqY8ibe0wNJI26u7B vBlet4zcpMhdv+MZHkvJhQ8jFUAO095nWTzxMpw+gj9fEQP30akzSweWp/7OsUKx g6yEH+kN/RLPM7px+nGGTIhIne3mbM6jNTcTpEG/IHa/TnJjCMPx8mfLU8/uj6LA 19yCQqBKsl7w0WpB2WjcyTPNmWJ7XOEC4USiwglBx6IOaGLJgLVzCCut9bEY8qHU wNEirfFgXM/hviiUTNIakV8RCGuq7n1zEfvPnAusOCByFyiuUH2YFl1ICj2fgYXG HFQoACsAOqZDyl77xKOhy586yKXciviNi8QO2Y7CyRejEFCwwTiE -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:55 2026 by rpki-client