This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/9qA9sqmUNbTfjHXf5lbIrMrVJ4U.roa File: 9qA9sqmUNbTfjHXf5lbIrMrVJ4U.roa (raw, json) Hash identifier: MROtdxgdJSiF4ic6iYN7rINtE9+cgZKF4pOEr5+fMag= Subject key identifier: F6:A0:3D:B2:A9:94:35:B4:DF:8C:75:DF:E6:56:C8:AC:CA:D5:27:85 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B78345E01287193E8D00CE8AE7920AE55 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/9qA9sqmUNbTfjHXf5lbIrMrVJ4U.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 193.177.222.0/24 maxlen: 24 2a0d:c7c2::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5e:01:28:71:93:e8:d0:0c:e8:ae:79:20:ae:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6a03db2a99435b4df8c75dfe656c8accad52785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:81:41:ab:b4:81:f0:46:fd:7e:60:7f:f0:f7: c2:a6:d5:56:f5:df:1f:64:b3:10:7a:a3:58:be:44: da:d2:09:24:c4:71:26:81:14:47:f8:7d:e4:1a:21: fe:f1:f2:2a:bd:4f:96:28:13:09:e7:4e:8e:30:79: 66:33:30:eb:aa:e7:6a:75:c0:24:cc:82:60:e3:d8: 77:09:2b:6e:ce:45:bb:cd:c7:75:49:6b:c8:75:11: 9b:3a:d1:cd:9a:3b:c2:c4:c8:43:7e:22:14:c0:81: ad:3d:71:ad:9f:2c:1e:2a:d4:35:e2:8b:5f:b6:6a: 87:41:28:20:3f:08:01:9b:bb:3d:80:ee:cc:50:21: 95:bd:ae:d8:76:2c:cb:70:01:c0:08:c4:bd:9c:24: a5:b0:57:1e:b8:44:0a:75:97:96:29:db:49:0d:a9: 3a:6e:a7:37:d2:ed:74:a8:2d:f6:83:62:61:3e:14: da:08:8c:90:75:49:a6:e7:bb:01:78:2a:cb:f6:da: b4:c8:e7:5a:21:fb:eb:37:4d:2d:08:cd:95:a6:0e: e0:d3:ad:77:b8:a7:74:9c:27:6a:b1:3c:c1:f3:7b: e6:e8:de:ec:11:11:df:9a:c5:6d:6d:5a:f1:8d:a2: 6b:d3:e8:13:ce:50:2f:65:b6:c2:36:26:ec:94:d6: a7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A0:3D:B2:A9:94:35:B4:DF:8C:75:DF:E6:56:C8:AC:CA:D5:27:85 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/9qA9sqmUNbTfjHXf5lbIrMrVJ4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.177.222.0/24 IPv6: 2a0d:c7c2::/32 Signature Algorithm: sha256WithRSAEncryption 27:4b:5e:9a:2e:bd:a0:ba:f5:e7:b0:87:e6:74:9a:b4:d4:3d: 6d:a8:07:bd:24:c6:31:59:a6:99:8a:23:a9:19:7d:b5:c9:33: c9:9f:fe:e9:82:65:85:df:f4:89:6b:3d:a1:98:25:ab:43:05: 89:9f:8e:df:72:19:bd:49:ef:d9:17:3b:eb:b0:5d:3b:b9:ed: de:0c:11:46:a4:9a:50:a7:83:73:13:b7:b6:81:d2:60:8a:11: 67:33:42:14:32:89:54:d2:33:20:9a:bf:17:e5:d4:f5:cb:28: fc:e3:2b:b2:9c:6f:eb:f5:e7:65:d1:58:35:d5:f9:fb:23:51: 67:fd:e3:6b:f4:e5:69:e0:d4:ab:74:f5:01:1c:eb:0d:88:c4: 04:15:37:ff:b9:c9:ba:a9:f6:a4:32:05:09:c2:ce:0a:6c:38: 5c:a1:bf:d1:99:0d:3b:69:a7:48:f8:8a:9a:4e:f9:4b:18:a7: e8:f1:e2:34:b8:05:04:f3:bc:08:f0:87:9f:53:90:8f:99:e1: 5c:dc:c9:ae:9b:1a:e8:a9:de:57:d1:c4:42:33:a1:50:82:58: 8f:c3:85:fe:d1:89:f9:92:20:71:ed:b6:18:6b:7d:0e:90:77: 33:85:f7:59:6d:72:83:5a:f5:bd:1e:61:fc:5c:79:48:0c:8c: 35:63:9b:72 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NF4BKHGT6NAM6K55IK5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmEwM2RiMmE5OTQzNWI0ZGY4Yzc1ZGZlNjU2YzhhY2NhZDUyNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oFBq7SB8Eb9fmB/8PfCptVW9d8f ZLMQeqNYvkTa0gkkxHEmgRRH+H3kGiH+8fIqvU+WKBMJ506OMHlmMzDrqudqdcAk zIJg49h3CStuzkW7zcd1SWvIdRGbOtHNmjvCxMhDfiIUwIGtPXGtnyweKtQ14otf tmqHQSggPwgBm7s9gO7MUCGVva7YdizLcAHACMS9nCSlsFceuEQKdZeWKdtJDak6 bqc30u10qC32g2JhPhTaCIyQdUmm57sBeCrL9tq0yOdaIfvrN00tCM2Vpg7g0613 uKd0nCdqsTzB83vm6N7sERHfmsVtbVrxjaJr0+gTzlAvZbbCNibslNanZQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPagPbKplDW034x13+ZWyKzK1SeFMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvOXFBOXNxbVVOYlRmakhYZjVsYklyTXJWSjRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwbHeMA0E AgACMAcDBQAqDcfCMA0GCSqGSIb3DQEBCwUAA4IBAQAnS16aLr2guvXnsIfmdJq0 1D1tqAe9JMYxWaaZiiOpGX21yTPJn/7pgmWF3/SJaz2hmCWrQwWJn47fchm9Se/Z FzvrsF07ue3eDBFGpJpQp4NzE7e2gdJgihFnM0IUMolU0jMgmr8X5dT1yyj84yuy nG/r9edl0Vg11fn7I1Fn/eNr9OVp4NSrdPUBHOsNiMQEFTf/ucm6qfakMgUJws4K bDhcob/RmQ07aadI+IqaTvlLGKfo8eI0uAUE87wI8IefU5CPmeFc3Mmumxroqd5X 0cRCM6FQgliPw4X+0Yn5kiBx7bYYa30OkHczhfdZbXKDWvW9HmH8XHlIDIw1Y5ty -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:49 2026 by rpki-client