This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/25rt9_J29ttO1C9GDEbj1MTjgJw.roa File: 25rt9_J29ttO1C9GDEbj1MTjgJw.roa (raw, json) Hash identifier: ockTjffISfF+2IUUDsbx7qyCqFjVBQdRev0jKK72TpM= Subject key identifier: DB:9A:ED:F7:F2:76:F6:DB:4E:D4:2F:46:0C:46:E3:D4:C4:E3:80:9C Certificate issuer: /CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88 Certificate serial: 019B7C7FCC131EEFC5157E3B1CF0F5EDBA04 Authority key identifier: E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/25rt9_J29ttO1C9GDEbj1MTjgJw.roa Signing time: Fri 02 Jan 2026 02:18:28 +0000 ROA not before: Fri 02 Jan 2026 02:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206882 IP address blocks: 91.205.4.0/22 maxlen: 22 91.206.194.0/23 maxlen: 24 91.206.194.0/24 maxlen: 24 91.206.195.0/24 maxlen: 24 103.198.80.0/23 maxlen: 24 193.135.112.0/22 maxlen: 24 193.238.120.0/22 maxlen: 24 194.187.128.0/22 maxlen: 24 194.187.128.0/23 maxlen: 23 194.187.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.mft rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:cc:13:1e:ef:c5:15:7e:3b:1c:f0:f5:ed:ba:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9c3d42f3b2921ba7418f382032d6b35c7159b88 Validity Not Before: Jan 2 02:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db9aedf7f276f6db4ed42f460c46e3d4c4e3809c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:9f:93:1c:57:61:56:12:5c:98:4e:ba:b7: 88:8b:dd:17:ba:71:f0:a5:d2:b3:e9:e7:48:12:09: da:2d:a9:45:04:ad:84:a0:38:1d:e7:ef:e9:b3:8f: 46:95:93:01:e5:38:6d:59:16:83:8f:55:64:44:f2: 87:ca:f0:15:4d:96:d2:7a:37:cc:f9:29:0d:db:11: 3f:b6:8a:a4:30:e5:09:50:32:c9:ad:d8:d7:71:76: dc:e3:fa:54:a6:25:8a:de:99:98:81:f8:3d:23:15: f2:68:c7:d0:5e:16:64:87:c3:33:64:55:b2:b8:c9: 4b:5f:04:3f:86:3b:84:0d:59:ac:9f:62:25:f4:cb: 29:c2:97:af:93:2d:bc:f2:f0:f7:42:b2:9b:79:5e: b5:c6:95:49:81:0b:e8:2e:c3:c8:30:2c:be:11:f3: ef:8a:07:8c:17:04:5f:41:e3:91:18:68:4a:e7:37: d4:b0:23:be:8b:2c:e6:c6:0b:c3:26:ed:3d:fd:75: 2d:30:c3:f4:db:97:79:46:4e:9a:80:67:6f:4e:60: 73:6b:98:63:5d:cd:7d:0e:3f:83:50:11:3a:db:1b: 4b:bb:c2:59:8d:13:1d:f3:1d:9e:87:77:31:e3:24: 99:58:39:75:6e:2d:75:d2:30:8f:fb:12:36:df:02: 85:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9A:ED:F7:F2:76:F6:DB:4E:D4:2F:46:0C:46:E3:D4:C4:E3:80:9C X509v3 Authority Key Identifier: keyid:E9:C3:D4:2F:3B:29:21:BA:74:18:F3:82:03:2D:6B:35:C7:15:9B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6cPULzspIbp0GPOCAy1rNccVm4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/25rt9_J29ttO1C9GDEbj1MTjgJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/bdc45b-096a-493a-92d2-1a1ead2cd2b1/1/6cPULzspIbp0GPOCAy1rNccVm4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.4.0/22 91.206.194.0/23 103.198.80.0/23 193.135.112.0/22 193.238.120.0/22 194.187.128.0/22 Signature Algorithm: sha256WithRSAEncryption 80:db:4d:12:3e:a2:8f:59:d5:7a:22:29:38:80:15:1b:16:c1: cb:bf:9a:a9:8f:25:8e:40:d7:04:eb:e6:af:ff:78:d1:d9:bb: 43:f8:e7:d2:a4:7c:67:43:72:2d:ad:61:67:07:e1:b0:0c:6d: 35:66:1b:11:1d:63:ca:47:64:bd:79:e7:d3:82:00:3d:b8:12: 27:73:e8:22:7f:e2:06:fe:82:7a:86:1f:33:5c:89:8f:32:c2: 86:a7:f2:8f:cc:02:f1:e8:06:ba:e0:04:bf:6b:a7:47:49:c5: 91:1b:c2:ab:01:ce:18:12:8a:ef:26:b7:e4:32:47:f1:74:59: ef:b6:d1:b0:60:01:72:38:c7:be:55:00:f3:59:18:1b:11:a0: 32:c5:b8:9c:a6:5d:d9:38:18:f0:8d:b8:08:ba:16:f8:96:86: 60:d9:ce:d3:d7:d1:0f:dd:73:34:85:77:29:03:98:56:2c:48: b6:fb:ca:5b:02:a5:74:ec:56:13:a5:58:1e:75:3a:1d:10:62: a6:e5:1a:21:46:cc:9e:c6:a2:09:96:31:39:7b:05:5f:b3:85: b6:a3:5a:0d:0a:a0:d3:59:da:fa:fc:6f:d6:fe:e3:09:67:9c: 3b:ec:29:89:19:80:4e:f6:a5:50:ce:91:1d:ed:ba:05:2e:d5: fd:7e:7d:3c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt8f8wTHu/FFX47HPD17boEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5YzNkNDJmM2IyOTIxYmE3NDE4ZjM4MjAzMmQ2YjM1Yzcx NTliODgwHhcNMjYwMTAyMDIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjlhZWRmN2YyNzZmNmRiNGVkNDJmNDYwYzQ2ZTNkNGM0ZTM4MDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoafkxxXYVYSXJhOureIi90XunHw pdKz6edIEgnaLalFBK2EoDgd5+/ps49GlZMB5ThtWRaDj1VkRPKHyvAVTZbSejfM +SkN2xE/toqkMOUJUDLJrdjXcXbc4/pUpiWK3pmYgfg9IxXyaMfQXhZkh8MzZFWy uMlLXwQ/hjuEDVmsn2Il9Mspwpevky288vD3QrKbeV61xpVJgQvoLsPIMCy+EfPv igeMFwRfQeORGGhK5zfUsCO+iyzmxgvDJu09/XUtMMP025d5Rk6agGdvTmBza5hj Xc19Dj+DUBE62xtLu8JZjRMd8x2eh3cx4ySZWDl1bi110jCP+xI23wKF3wIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFNua7ffydvbbTtQvRgxG49TE44CcMB8GA1UdIwQY MBaAFOnD1C87KSG6dBjzggMtazXHFZuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iZGM0NWItMDk2YS00OTNhLTkyZDIt MWExZWFkMmNkMmIxLzEvMjVydDlfSjI5dHRPMUM5R0RFYmoxTVRqZ0p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9iZGM0NWItMDk2YS00OTNhLTkyZDItMWExZWFkMmNkMmIx LzEvNmNQVUx6c3BJYnAwR1BPQ0F5MXJOY2NWbTRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCW80EAwQB W87CAwQBZ8ZQAwQCwYdwAwQCwe54AwQCwruAMA0GCSqGSIb3DQEBCwUAA4IBAQCA 200SPqKPWdV6Iik4gBUbFsHLv5qpjyWOQNcE6+av/3jR2btD+OfSpHxnQ3ItrWFn B+GwDG01ZhsRHWPKR2S9eefTggA9uBInc+gif+IG/oJ6hh8zXImPMsKGp/KPzALx 6Aa64AS/a6dHScWRG8KrAc4YEorvJrfkMkfxdFnvttGwYAFyOMe+VQDzWRgbEaAy xbicpl3ZOBjwjbgIuhb4loZg2c7T19EP3XM0hXcpA5hWLEi2+8pbAqV07FYTpVge dTodEGKm5RohRsyexqIJljE5ewVfs4W2o1oNCqDTWdr6/G/W/uMJZ5w77CmJGYBO 9qVQzpEd7boFLtX9fn08 -----END CERTIFICATE-----Generated at Tue Feb 10 06:24:22 2026 by rpki-client