This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/N9xSU22seEj4Gls_lmMkrISNt44.roa File: N9xSU22seEj4Gls_lmMkrISNt44.roa (raw, json) Hash identifier: 1sZ9jU2yxOzi9JbZQ0lqxHMOKu1AeSCdlUhQs7k0urM= Subject key identifier: 37:DC:52:53:6D:AC:78:48:F8:1A:5B:3F:96:63:24:AC:84:8D:B7:8E Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6 Certificate serial: 019B7BA3F4BDAC5235DD09CA66E767E49B44 Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/N9xSU22seEj4Gls_lmMkrISNt44.roa Signing time: Thu 01 Jan 2026 22:18:21 +0000 ROA not before: Thu 01 Jan 2026 22:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12399 IP address blocks: 185.247.40.0/22 maxlen: 22 212.75.32.0/19 maxlen: 19 212.211.128.0/17 maxlen: 17 2001:a78::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:f4:bd:ac:52:35:dd:09:ca:66:e7:67:e4:9b:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6 Validity Not Before: Jan 1 22:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37dc52536dac7848f81a5b3f966324ac848db78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:00:70:bd:69:c3:67:0c:e8:50:5b:d8:f8: 1b:28:d7:bc:24:c1:10:66:60:6f:98:b0:d7:e4:fd: a7:c8:08:0f:9a:b8:aa:c4:52:26:27:9f:bb:01:71: 65:67:72:e6:1b:0c:e0:7e:7d:81:6d:35:11:8b:1f: 3c:c8:a6:e2:69:0c:cb:01:8e:4a:82:08:9c:b9:5f: 1a:ff:bc:61:65:17:8d:54:70:75:43:e3:88:16:dc: b7:c8:40:91:bb:bd:e4:18:84:ce:dc:07:f9:d9:d4: 0e:59:93:3e:2a:a6:e4:4f:23:3d:61:25:5d:1f:23: 0a:a9:58:ee:fd:af:47:d9:6a:80:52:ff:38:21:be: e4:69:cf:f5:28:2d:46:05:01:d8:bc:c2:d6:0b:67: 7f:3d:46:b0:e1:27:4a:03:4c:32:bb:a4:0d:b8:6f: bf:49:34:24:b5:5f:84:b3:cc:6f:33:20:bc:13:18: 5e:f7:45:63:fe:7a:65:6f:81:24:d0:09:03:aa:b6: 77:69:4d:d2:df:99:c8:ee:0b:dd:88:58:6d:7d:60: 3a:40:2a:ba:44:6c:97:05:78:f8:9a:2e:23:e6:14: 99:fb:88:2b:42:7b:79:b3:dc:77:12:92:81:e7:3a: c0:0e:51:6e:8b:70:b9:7d:11:da:c1:b3:c4:1c:37: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DC:52:53:6D:AC:78:48:F8:1A:5B:3F:96:63:24:AC:84:8D:B7:8E X509v3 Authority Key Identifier: keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/N9xSU22seEj4Gls_lmMkrISNt44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.247.40.0/22 212.75.32.0/19 212.211.128.0/17 IPv6: 2001:a78::/29 Signature Algorithm: sha256WithRSAEncryption 42:74:aa:a5:9d:e5:7c:39:08:86:17:0d:de:30:12:c0:94:86: 79:6c:6c:79:38:1a:38:ed:96:54:e6:66:18:74:83:12:64:52: 1c:81:93:52:10:27:f1:0d:ff:4f:7a:bd:83:c2:76:dd:3c:3d: 2e:5b:81:09:f6:0d:9b:62:e4:ec:30:a2:14:61:e1:06:9c:d3: e3:04:f3:ef:28:e6:64:f1:89:7e:57:44:cc:4e:34:2a:a1:d6: 53:13:5e:bf:1b:b0:3e:67:6d:9a:29:47:98:2e:39:50:09:36: d1:d6:d9:71:ab:fd:e9:1b:68:d9:28:c6:4a:92:72:52:f9:77: 53:08:13:a0:75:5e:47:92:59:64:28:d0:56:f3:4d:40:c4:a7: 84:7f:d4:ca:ac:4f:6d:e1:56:b3:37:01:9e:5a:1d:85:47:ba: e0:83:2b:d1:4b:8d:aa:da:55:78:cc:e8:62:68:90:ed:9e:07: d2:cb:b5:69:3f:84:9e:23:27:4a:0b:94:1a:62:4a:51:61:d3: 9b:c6:cb:1e:45:eb:a3:0a:f6:2e:a4:01:c4:c0:f9:0f:3f:ac: 1e:49:ac:12:ad:fe:d8:f4:d4:df:f7:45:76:11:63:67:c7:9f: 50:97:21:1e:51:b5:c2:dc:c8:36:19:06:93:99:fd:c3:3d:3f: a3:fe:72:5f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7o/S9rFI13QnKZudn5JtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MTY5OWMxMGI4ZmY4YjkxYWI5MDk0MDMxNGVlOTNiMjdh ZmRjZDYwHhcNMjYwMTAxMjIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2RjNTI1MzZkYWM3ODQ4ZjgxYTViM2Y5NjYzMjRhYzg0OGRiNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv4AcL1pw2cM6FBb2PgbKNe8JMEQ ZmBvmLDX5P2nyAgPmriqxFImJ5+7AXFlZ3LmGwzgfn2BbTURix88yKbiaQzLAY5K ggicuV8a/7xhZReNVHB1Q+OIFty3yECRu73kGITO3Af52dQOWZM+KqbkTyM9YSVd HyMKqVju/a9H2WqAUv84Ib7kac/1KC1GBQHYvMLWC2d/PUaw4SdKA0wyu6QNuG+/ STQktV+Es8xvMyC8Exhe90Vj/nplb4Ek0AkDqrZ3aU3S35nI7gvdiFhtfWA6QCq6 RGyXBXj4mi4j5hSZ+4grQnt5s9x3EpKB5zrADlFui3C5fRHawbPEHDcCOQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFDfcUlNtrHhI+BpbP5ZjJKyEjbeOMB8GA1UdIwQY MBaAFEgWmcELj/i5GrkJQDFO6Tsnr9zWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0JhWndRdVAtTGthdVFsQU1VN3BPeWV2M05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xNzIxODAtOGY0NC00MTYxLWFiN2Ut MDIwMzA3YWNiYmI5LzEvTjl4U1UyMnNlRWo0R2xzX2xtTWtySVNOdDQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xNzIxODAtOGY0NC00MTYxLWFiN2UtMDIwMzA3YWNiYmI5 LzEvU0JhWndRdVAtTGthdVFsQU1VN3BPeWV2M05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCufcoAwQF 1EsgAwQH1NOAMA0EAgACMAcDBQMgAQp4MA0GCSqGSIb3DQEBCwUAA4IBAQBCdKql neV8OQiGFw3eMBLAlIZ5bGx5OBo47ZZU5mYYdIMSZFIcgZNSECfxDf9Per2Dwnbd PD0uW4EJ9g2bYuTsMKIUYeEGnNPjBPPvKOZk8Yl+V0TMTjQqodZTE16/G7A+Z22a KUeYLjlQCTbR1tlxq/3pG2jZKMZKknJS+XdTCBOgdV5HkllkKNBW801AxKeEf9TK rE9t4VazNwGeWh2FR7rggyvRS42q2lV4zOhiaJDtngfSy7VpP4SeIydKC5QaYkpR YdObxsseReujCvYupAHEwPkPP6weSawSrf7Y9NTf90V2EWNnx59QlyEeUbXC3Mg2 GQaTmf3DPT+j/nJf -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:38 2026 by rpki-client