This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9_D7UOYstiOV8fK5O0JMK2PfCpU.roa File: 9_D7UOYstiOV8fK5O0JMK2PfCpU.roa (raw, json) Hash identifier: wSsfcdnGr1ZYp6AUnrL9Mb/IdSMYgc+YsE569ZHNb0w= Subject key identifier: F7:F0:FB:50:E6:2C:B6:23:95:F1:F2:B9:3B:42:4C:2B:63:DF:0A:95 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB5D31ADF913D1A0130A8EFBE91641 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9_D7UOYstiOV8fK5O0JMK2PfCpU.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198825 IP address blocks: 151.242.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5d:31:ad:f9:13:d1:a0:13:0a:8e:fb:e9:16:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7f0fb50e62cb62395f1f2b93b424c2b63df0a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:99:e6:b9:e6:d7:fd:79:87:ec:89:2a:d4: b6:87:d4:d6:8a:c1:87:8a:d3:b6:1e:9e:96:0d:b3: 9e:1e:34:28:08:87:8e:a9:ff:69:87:94:08:b9:48: 1c:2d:20:33:85:95:9d:2c:f4:f3:45:c9:eb:39:fe: 7b:3c:0d:8d:ad:58:12:09:7e:e7:8c:12:18:b9:08: c9:3c:9a:23:62:1d:3a:eb:68:bf:a6:34:7c:5f:31: f0:f1:b5:6a:ab:92:f6:5b:b0:45:40:19:55:e7:37: 3e:8d:77:c6:54:28:63:76:2a:6c:7c:a9:3f:dc:a8: 8c:8b:78:5c:bc:49:db:1d:82:44:ee:0b:8a:b5:d4: 35:9d:81:19:c0:32:83:61:6b:6d:bb:4f:70:77:ab: af:67:0e:5d:ec:de:8e:cb:fa:de:0b:ef:22:e3:4b: aa:f3:f2:1d:51:56:aa:6c:7c:f7:50:51:72:fc:20: c1:61:3e:9d:e3:6f:24:7a:07:01:80:b6:0e:49:80: d9:37:90:65:60:45:60:9a:3e:fd:16:d3:f6:bd:21: 1e:a9:f0:77:a4:ab:56:92:a6:17:ed:96:05:49:41: af:05:b6:e9:9c:01:01:49:8a:41:02:1b:55:f3:82: e3:61:f0:df:bf:3d:b8:c9:c5:1f:c9:97:9a:31:23: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F0:FB:50:E6:2C:B6:23:95:F1:F2:B9:3B:42:4C:2B:63:DF:0A:95 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9_D7UOYstiOV8fK5O0JMK2PfCpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.39.0/24 Signature Algorithm: sha256WithRSAEncryption 67:09:24:15:f1:12:d2:73:27:13:1d:e4:ce:a6:a3:61:07:81: 61:3b:c1:73:de:f7:e3:07:96:5f:2c:04:41:80:3a:2f:77:23: f8:52:e5:a7:ea:d5:64:24:61:ae:26:0a:48:f0:6d:06:46:1e: ce:b7:55:c8:46:07:0e:a9:54:31:e2:b7:b9:7e:40:ad:bf:29: e0:48:f3:05:34:0c:8e:a9:7f:8d:47:5f:cb:24:b4:89:6c:90: 69:fc:d3:94:2f:6a:f6:fc:73:49:da:56:fb:be:ff:c9:9e:2d: 27:d3:bf:c5:4c:07:22:af:50:53:9c:90:f3:8e:e5:d1:9d:59: 8e:f7:cc:e9:96:fe:c2:69:1d:17:25:ae:f2:44:07:35:01:1c: 8d:cd:d7:a0:a7:9d:7f:4c:69:f1:d0:6d:4f:01:ef:b5:db:a7: df:6f:b5:08:da:77:57:da:dc:a6:f6:62:0c:09:b8:95:f3:36: d3:8f:4a:c1:05:c0:59:56:5f:28:0d:53:f1:46:2d:cb:a3:5b: ae:48:82:92:08:4e:f1:1d:a8:f5:25:e1:ae:23:98:5d:f4:f7: 31:eb:70:91:11:33:bf:a6:c5:78:43:c8:dd:3c:df:3b:2f:93: 82:44:7c:87:69:5a:e3:8d:fb:29:25:44:88:40:e4:03:35:3d: f9:b1:99:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y10xrfkT0aATCo776RZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2YwZmI1MGU2MmNiNjIzOTVmMWYyYjkzYjQyNGMyYjYzZGYwYTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oSZ5rnm1/15h+yJKtS2h9TWisGH itO2Hp6WDbOeHjQoCIeOqf9ph5QIuUgcLSAzhZWdLPTzRcnrOf57PA2NrVgSCX7n jBIYuQjJPJojYh0662i/pjR8XzHw8bVqq5L2W7BFQBlV5zc+jXfGVChjdipsfKk/ 3KiMi3hcvEnbHYJE7guKtdQ1nYEZwDKDYWttu09wd6uvZw5d7N6Oy/reC+8i40uq 8/IdUVaqbHz3UFFy/CDBYT6d428kegcBgLYOSYDZN5BlYEVgmj79FtP2vSEeqfB3 pKtWkqYX7ZYFSUGvBbbpnAEBSYpBAhtV84LjYfDfvz24ycUfyZeaMSMt8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPfw+1DmLLYjlfHyuTtCTCtj3wqVMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvOV9EN1VPWXN0aU9WOGZLNU8wSk1LMlBmQ3BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/InMA0G CSqGSIb3DQEBCwUAA4IBAQBnCSQV8RLScycTHeTOpqNhB4FhO8Fz3vfjB5ZfLARB gDovdyP4UuWn6tVkJGGuJgpI8G0GRh7Ot1XIRgcOqVQx4re5fkCtvyngSPMFNAyO qX+NR1/LJLSJbJBp/NOUL2r2/HNJ2lb7vv/Jni0n07/FTAcir1BTnJDzjuXRnVmO 98zplv7CaR0XJa7yRAc1ARyNzdegp51/TGnx0G1PAe+126ffb7UI2ndX2tym9mIM CbiV8zbTj0rBBcBZVl8oDVPxRi3Lo1uuSIKSCE7xHaj1JeGuI5hd9Pcx63CRETO/ psV4Q8jdPN87L5OCRHyHaVrjjfspJUSIQOQDNT35sZkX -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:53 2026 by rpki-client