This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/9ROo0iC15VlIOvkEDWyQwJOCacY.roa File: 9ROo0iC15VlIOvkEDWyQwJOCacY.roa (raw, json) Hash identifier: X5stVJ1ytEh0HyvZJyffab9oO2fx+fQjNKYB1CriIiQ= Subject key identifier: F5:13:A8:D2:20:B5:E5:59:48:3A:F9:04:0D:6C:90:C0:93:82:69:C6 Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e Certificate serial: 019B7DCB0DF17C5A88FDA36DC299CE9CCA26 Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/9ROo0iC15VlIOvkEDWyQwJOCacY.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60117 IP address blocks: 91.204.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0d:f1:7c:5a:88:fd:a3:6d:c2:99:ce:9c:ca:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f513a8d220b5e559483af9040d6c90c0938269c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:89:b9:8a:5e:98:1c:23:f8:78:24:d8:4f: ed:6e:25:5c:99:60:a8:c4:17:5a:64:c9:f4:5e:7b: dc:b8:eb:d8:9c:49:9f:42:c4:83:ea:97:cd:a6:ca: 8b:87:1c:86:74:a2:6b:7f:39:56:11:70:df:2b:57: 72:40:3a:34:97:5c:28:e9:0d:b5:5e:80:66:f8:02: 52:67:20:a5:ed:19:e9:21:11:0d:e7:25:a3:22:72: 81:60:76:84:bb:2b:00:1e:1e:22:1e:ee:41:58:6e: f4:67:7c:3d:e4:9e:13:7d:fa:64:18:61:f9:f9:dd: d8:7d:ad:7c:8c:c7:22:5f:62:71:c2:cb:9e:e0:13: c1:ea:52:2a:26:00:a6:4e:1e:ee:90:60:f1:e4:e6: 64:ce:44:ea:26:49:07:37:7d:31:19:12:69:fa:a7: 6d:fa:61:de:26:53:cd:c8:78:6d:8e:84:20:ff:d2: 95:3f:a1:d0:82:78:bc:a6:3c:62:e1:13:db:0f:9f: 0d:df:89:bf:a4:ed:10:3f:c1:3c:b7:e9:6e:93:8f: b9:df:a2:e8:ab:02:e1:b5:a4:f1:7b:59:b8:90:7e: 28:1e:e2:86:30:41:37:05:30:46:5b:0b:96:cd:b8: 26:d0:b0:2b:3c:db:90:ec:c8:b6:ad:03:42:1f:c8: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:13:A8:D2:20:B5:E5:59:48:3A:F9:04:0D:6C:90:C0:93:82:69:C6 X509v3 Authority Key Identifier: keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/9ROo0iC15VlIOvkEDWyQwJOCacY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.76.0/24 Signature Algorithm: sha256WithRSAEncryption 63:32:cc:99:a2:ed:01:fa:e8:ed:8b:96:1f:df:a8:4a:e7:b9: bd:c1:76:0e:6c:fb:45:16:da:0a:2d:dd:a2:45:3c:88:f8:f4: 8d:cb:f1:91:87:02:9b:19:ba:ed:e2:70:6e:25:0b:93:46:aa: 73:e6:ac:09:a3:b6:f3:3f:68:13:75:bb:7a:58:aa:dd:12:e7: 37:09:95:27:17:15:39:37:4e:e8:d6:3d:2e:1d:b7:99:43:a2: 94:ba:c9:05:25:82:21:df:e0:e3:50:80:61:70:d9:0f:00:fd: a1:5c:41:9e:4b:1a:f3:a7:54:8c:f8:d5:52:c0:f8:26:89:1a: 7c:74:05:75:e6:17:91:7b:98:4a:b2:76:b2:18:03:fe:f4:d5: 4e:5d:f8:8a:eb:88:dd:45:b9:95:2f:c1:c0:8a:35:95:3f:f0: 18:63:f5:1f:74:3f:d7:92:cc:c1:28:84:78:8e:d4:88:5f:43: fb:0f:eb:21:9f:3b:3c:40:e5:71:aa:0e:d1:42:30:78:60:d2: 50:b6:db:86:1c:c8:52:d7:25:af:b9:35:7e:90:f0:50:0e:0b: 44:bf:e1:73:e1:53:cd:3f:63:2b:ca:b6:4a:79:8a:5f:c0:84: 9c:e4:c6:ff:fa:17:72:b9:d2:45:ad:e7:1e:57:7c:54:0a:a4: fb:7e:d5:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yw3xfFqI/aNtwpnOnMomMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTdkMWYwZDczZmU0ODFjMjE4OGQyOGRlZjBlODU4ZTcx NTY5N2UwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTEzYThkMjIwYjVlNTU5NDgzYWY5MDQwZDZjOTBjMDkzODI2OWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r6JuYpemBwj+Hgk2E/tbiVcmWCo xBdaZMn0XnvcuOvYnEmfQsSD6pfNpsqLhxyGdKJrfzlWEXDfK1dyQDo0l1wo6Q21 XoBm+AJSZyCl7RnpIREN5yWjInKBYHaEuysAHh4iHu5BWG70Z3w95J4TffpkGGH5 +d3Yfa18jMciX2Jxwsue4BPB6lIqJgCmTh7ukGDx5OZkzkTqJkkHN30xGRJp+qdt +mHeJlPNyHhtjoQg/9KVP6HQgni8pjxi4RPbD58N34m/pO0QP8E8t+luk4+536Lo qwLhtaTxe1m4kH4oHuKGMEE3BTBGWwuWzbgm0LArPNuQ7Mi2rQNCH8g4GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUTqNIgteVZSDr5BA1skMCTgmnGMB8GA1UdIwQY MBaAFCen0fDXP+SBwhiNKN7w6FjnFWl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZmUjhOY181SUhDR0kwbzN2RG9XT2NWYVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kODJlZjYtODM2YS00N2M3LWE2YzEt ZDZlYWFmYzZiNGY1LzEvOVJPbzBpQzE1VmxJT3ZrRURXeVF3Sk9DYWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kODJlZjYtODM2YS00N2M3LWE2YzEtZDZlYWFmYzZiNGY1 LzEvSjZmUjhOY181SUhDR0kwbzN2RG9XT2NWYVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8xMMA0G CSqGSIb3DQEBCwUAA4IBAQBjMsyZou0B+ujti5Yf36hK57m9wXYObPtFFtoKLd2i RTyI+PSNy/GRhwKbGbrt4nBuJQuTRqpz5qwJo7bzP2gTdbt6WKrdEuc3CZUnFxU5 N07o1j0uHbeZQ6KUuskFJYIh3+DjUIBhcNkPAP2hXEGeSxrzp1SM+NVSwPgmiRp8 dAV15heRe5hKsnayGAP+9NVOXfiK64jdRbmVL8HAijWVP/AYY/UfdD/XkszBKIR4 jtSIX0P7D+shnzs8QOVxqg7RQjB4YNJQttuGHMhS1yWvuTV+kPBQDgtEv+Fz4VPN P2MryrZKeYpfwISc5Mb/+hdyudJFreceV3xUCqT7ftWP -----END CERTIFICATE-----Generated at Wed Jan 21 11:40:45 2026 by rpki-client