This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/9mkH4IzMoq3DwoNvnvYH9-YO79c.roa File: 9mkH4IzMoq3DwoNvnvYH9-YO79c.roa (raw, json) Hash identifier: 3KE8jl9vgjE4AA+K3LRuupb+vjXe25NtIAJuw2cNEMk= Subject key identifier: F6:69:07:E0:8C:CC:A2:AD:C3:C2:83:6F:9E:F6:07:F7:E6:0E:EF:D7 Certificate issuer: /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee Certificate serial: 019B7A5AD6EA703D6C7EF673F375EF5E67FB Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/9mkH4IzMoq3DwoNvnvYH9-YO79c.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48450 IP address blocks: 94.247.64.0/21 maxlen: 21 94.247.64.0/22 maxlen: 22 94.247.68.0/22 maxlen: 22 185.123.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d6:ea:70:3d:6c:7e:f6:73:f3:75:ef:5e:67:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f66907e08ccca2adc3c2836f9ef607f7e60eefd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:17:51:d0:fa:25:ca:ec:1f:db:78:b0:ed: 29:a6:24:3e:fc:5c:63:ee:d2:17:64:f6:83:9b:34: 43:33:51:79:f1:64:71:8a:cd:c8:84:f0:4c:31:16: a5:4d:03:16:ec:51:27:d9:11:94:ca:bf:c3:f6:ce: 9a:fb:ef:1c:b5:fb:49:6d:43:a4:12:bb:46:33:15: 98:04:29:ff:51:52:b4:61:05:77:61:bf:4c:23:70: b3:79:a3:02:36:d2:2f:49:c5:ba:02:5b:70:14:7b: cd:20:07:6e:f1:e8:bf:bd:7b:fa:61:8a:3d:8c:ce: c9:7f:98:13:55:9a:c3:32:99:01:31:21:d7:13:3c: 8b:90:ae:b2:4c:c4:8f:9a:76:41:7a:d1:8d:98:0c: de:63:d8:2c:38:48:42:dc:bc:a8:88:17:bf:a2:cf: 01:22:d3:df:b2:bf:b8:65:bc:20:f5:83:88:83:d6: 92:cd:77:fe:1b:ba:f5:8c:bb:0f:f4:e6:03:81:23: ec:c8:ca:62:17:79:1f:1f:c7:5a:22:8d:1b:d5:7a: e4:59:40:96:8b:09:5e:fc:03:c8:47:e3:c2:71:41: 9f:9c:0d:fe:42:48:98:7e:b8:74:b7:9a:50:f9:83: 6c:ae:96:9c:bd:57:04:54:4c:42:b0:3b:10:7f:02: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:69:07:E0:8C:CC:A2:AD:C3:C2:83:6F:9E:F6:07:F7:E6:0E:EF:D7 X509v3 Authority Key Identifier: keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/9mkH4IzMoq3DwoNvnvYH9-YO79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.64.0/21 185.123.16.0/22 Signature Algorithm: sha256WithRSAEncryption 52:3d:73:7b:46:6b:ec:b3:89:8f:61:10:51:47:cf:cf:e8:9c: a0:64:81:79:a3:fe:9e:7c:24:a6:fb:e9:5b:f0:87:69:2c:d0: ee:83:d3:0f:66:81:73:5f:17:fe:26:55:33:6c:c8:9f:03:26: 5c:f4:94:5c:4f:f9:1b:20:ea:48:e4:6a:3c:75:55:30:72:b3: 8f:e9:d2:44:6f:8c:22:af:2c:62:41:59:ca:c7:c4:58:26:06: 87:5d:68:26:8b:18:00:61:c2:b7:1e:f3:b7:15:7c:3b:63:02: e0:05:ee:e7:d4:13:80:68:6f:be:8e:3c:a0:64:69:98:f9:f9: f4:df:73:89:e5:b4:31:9a:11:b7:98:fd:36:30:05:48:d0:b7: 0f:e0:60:c9:24:7b:70:21:af:c9:8b:aa:f6:93:91:ff:42:ef: 20:92:bc:46:d5:18:6f:f1:58:a9:46:86:4e:fa:25:6e:7f:5d: b5:41:f0:2a:70:b7:94:eb:ea:a8:f1:dd:f9:c9:f3:cd:cd:7c: 84:ba:dd:ed:f7:3a:c1:f0:ca:5e:33:70:55:79:a8:de:4b:48: 32:6c:9a:99:02:84:3f:ff:5b:6f:4c:dd:60:78:f9:89:70:eb: 16:0c:3d:67:ed:49:64:69:d0:35:a9:dd:5f:fe:4a:51:97:56: 1a:9c:a4:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WtbqcD1sfvZz83XvXmf7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWRiMjc4OWJhOGM3ZmYxODhiNzlkZGU0Mjg2YWE2ZTFm MDM3ZWUwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjY5MDdlMDhjY2NhMmFkYzNjMjgzNmY5ZWY2MDdmN2U2MGVlZmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7AXUdD6JcrsH9t4sO0ppiQ+/Fxj 7tIXZPaDmzRDM1F58WRxis3IhPBMMRalTQMW7FEn2RGUyr/D9s6a++8ctftJbUOk ErtGMxWYBCn/UVK0YQV3Yb9MI3CzeaMCNtIvScW6AltwFHvNIAdu8ei/vXv6YYo9 jM7Jf5gTVZrDMpkBMSHXEzyLkK6yTMSPmnZBetGNmAzeY9gsOEhC3LyoiBe/os8B ItPfsr+4Zbwg9YOIg9aSzXf+G7r1jLsP9OYDgSPsyMpiF3kfH8daIo0b1XrkWUCW iwle/APIR+PCcUGfnA3+QkiYfrh0t5pQ+YNsrpacvVcEVExCsDsQfwJFpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPZpB+CMzKKtw8KDb572B/fmDu/XMB8GA1UdIwQY MBaAFLadsnibqMf/GIt53eQoaqbh8DfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHAyeWVKdW94XzhZaTNuZDVDaHFwdUh3Ti00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kNThlZDYtMDQ2MC00NjMxLWEwNjMt YTBjZTViZDgzNzE1LzEvOW1rSDRJek1vcTNEd29Odm52WUg5LVlPNzljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kNThlZDYtMDQ2MC00NjMxLWEwNjMtYTBjZTViZDgzNzE1 LzEvdHAyeWVKdW94XzhZaTNuZDVDaHFwdUh3Ti00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXvdAAwQC uXsQMA0GCSqGSIb3DQEBCwUAA4IBAQBSPXN7Rmvss4mPYRBRR8/P6JygZIF5o/6e fCSm++lb8IdpLNDug9MPZoFzXxf+JlUzbMifAyZc9JRcT/kbIOpI5Go8dVUwcrOP 6dJEb4wiryxiQVnKx8RYJgaHXWgmixgAYcK3HvO3FXw7YwLgBe7n1BOAaG++jjyg ZGmY+fn033OJ5bQxmhG3mP02MAVI0LcP4GDJJHtwIa/Ji6r2k5H/Qu8gkrxG1Rhv 8VipRoZO+iVuf121QfAqcLeU6+qo8d35yfPNzXyEut3t9zrB8MpeM3BVeajeS0gy bJqZAoQ//1tvTN1gePmJcOsWDD1n7UlkadA1qd1f/kpRl1YanKTl -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:35 2026 by rpki-client