This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa File: 9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa (raw, json) Hash identifier: 51rv5VaG8OxclhZBSDZarO+xxvZazg5aJ0EVnW1xLb4= Subject key identifier: F6:DF:A4:8F:D2:92:80:4F:E6:B4:9A:C6:BB:FB:C5:EF:77:74:97:A6 Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249 Certificate serial: 019B7E3852885F80B43FFD325FFE2E54072B Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa Signing time: Fri 02 Jan 2026 10:19:38 +0000 ROA not before: Fri 02 Jan 2026 10:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209845 IP address blocks: 167.150.86.0/24 maxlen: 24 2001:67c:ad4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:52:88:5f:80:b4:3f:fd:32:5f:fe:2e:54:07:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249 Validity Not Before: Jan 2 10:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6dfa48fd292804fe6b49ac6bbfbc5ef777497a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:01:12:0d:a5:1f:86:0e:af:25:f4:79:f1:39: 93:3a:1e:99:13:36:fd:d3:50:7c:76:cd:c9:fd:69: a8:ff:e6:13:3e:a3:33:2e:eb:5e:44:b4:5a:c1:6a: ae:28:69:37:65:23:f0:29:d8:a0:24:42:26:ab:c3: fa:92:b5:cc:9b:bc:68:7a:82:09:a3:09:2e:e5:a6: 1a:83:2a:63:8d:57:a6:63:0f:e2:c4:67:0b:22:92: 09:17:3f:ef:ab:78:e9:c7:74:12:38:da:05:f0:2f: ef:a0:06:7c:56:57:bf:ad:28:f9:79:02:a6:42:94: 37:ad:cd:b3:99:f2:02:02:1f:18:6b:ed:0e:00:c4: a3:ce:17:b5:31:66:cb:67:d0:e4:f5:1d:a7:56:8d: 6e:04:74:21:e8:13:c9:36:5d:a9:e1:06:2a:a3:35: 1a:de:90:62:53:23:04:a8:ee:1a:67:da:65:94:7b: dd:62:f6:4b:9f:b8:78:59:a3:ad:79:41:95:4c:ac: 97:2a:78:fe:cd:e4:24:57:86:a0:06:b1:cf:ec:11: 66:db:21:ea:4e:5b:e0:24:11:d3:8b:bc:2b:e3:fe: 9b:d4:7e:af:d7:b4:87:df:ba:5a:c2:cb:8d:8d:1d: ad:e3:0a:ba:55:76:80:63:10:2e:75:f7:67:23:f7: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DF:A4:8F:D2:92:80:4F:E6:B4:9A:C6:BB:FB:C5:EF:77:74:97:A6 X509v3 Authority Key Identifier: keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.150.86.0/24 IPv6: 2001:67c:ad4::/48 Signature Algorithm: sha256WithRSAEncryption 60:46:b1:05:f3:66:45:13:66:ed:83:77:a4:90:f9:db:27:1d: 61:b1:20:33:28:a7:0c:af:08:58:9b:51:8d:bc:83:88:ea:2d: 11:f6:59:7b:62:69:36:8a:ab:d8:c6:b5:38:3c:2f:ff:13:f9: a8:dc:56:1e:6a:fd:23:5a:0d:b9:63:ea:d3:93:b4:9c:42:ae: e9:65:08:4b:9b:95:08:ce:74:ba:f1:b6:b6:07:38:b0:98:ed: 92:21:ea:51:78:52:92:d8:dc:c3:4b:43:43:6a:11:e1:96:f4: 2a:08:f5:e4:95:2c:34:8f:c5:3e:19:f4:62:44:ff:d9:12:e0: 1d:30:31:4a:86:38:a6:f1:55:6f:f9:66:a4:80:0a:44:af:1c: 8b:95:c6:c8:8b:6b:e6:ba:1c:f5:53:1e:ca:33:f7:5a:ef:ea: 4a:4d:5d:b2:d4:7f:e3:35:49:c6:50:3f:9a:09:c7:ca:9f:8a: 1f:43:b2:db:11:a1:ea:1a:fd:56:37:72:0d:df:06:46:5a:02: 0a:f7:58:d9:e8:28:e8:cc:72:dd:3d:34:41:6f:82:f9:e4:be: 1a:4d:c1:f1:e1:75:b5:b6:eb:27:b5:b6:c0:3d:04:fb:54:8d: 00:f8:34:26:93:b1:55:9e:e9:24:06:c8:5d:ef:a5:26:bf:6e: 58:75:bb:82 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OFKIX4C0P/0yX/4uVAcrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDIxMWM5MWU5ZTBkMzVjYjUxMzM0NTkxM2UwYTFhNjFi ZmQyNDkwHhcNMjYwMTAyMTAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmRmYTQ4ZmQyOTI4MDRmZTZiNDlhYzZiYmZiYzVlZjc3NzQ5N2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngESDaUfhg6vJfR58TmTOh6ZEzb9 01B8ds3J/Wmo/+YTPqMzLuteRLRawWquKGk3ZSPwKdigJEImq8P6krXMm7xoeoIJ owku5aYagypjjVemYw/ixGcLIpIJFz/vq3jpx3QSONoF8C/voAZ8Vle/rSj5eQKm QpQ3rc2zmfICAh8Ya+0OAMSjzhe1MWbLZ9Dk9R2nVo1uBHQh6BPJNl2p4QYqozUa 3pBiUyMEqO4aZ9pllHvdYvZLn7h4WaOteUGVTKyXKnj+zeQkV4agBrHP7BFm2yHq TlvgJBHTi7wr4/6b1H6v17SH37pawsuNjR2t4wq6VXaAYxAudfdnI/c2YQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPbfpI/SkoBP5rSaxrv7xe93dJemMB8GA1UdIwQY MBaAFF8CEckeng01y1EzRZE+Chphv9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEt MjFmZDM1Y2Y0YmI5LzEvOXQta2o5S1NnRV9tdEpyR3VfdkY3M2QwbDZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82NmQwNTctNzdlNS00MjQxLTgwYWEtMjFmZDM1Y2Y0YmI5 LzEvWHdJUnlSNmVEVFhMVVRORmtUNEtHbUdfMGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAp5ZWMA8E AgACMAkDBwAgAQZ8CtQwDQYJKoZIhvcNAQELBQADggEBAGBGsQXzZkUTZu2Dd6SQ +dsnHWGxIDMopwyvCFibUY28g4jqLRH2WXtiaTaKq9jGtTg8L/8T+ajcVh5q/SNa Dblj6tOTtJxCrullCEublQjOdLrxtrYHOLCY7ZIh6lF4UpLY3MNLQ0NqEeGW9CoI 9eSVLDSPxT4Z9GJE/9kS4B0wMUqGOKbxVW/5ZqSACkSvHIuVxsiLa+a6HPVTHsoz 91rv6kpNXbLUf+M1ScZQP5oJx8qfih9DstsRoeoa/VY3cg3fBkZaAgr3WNnoKOjM ct09NEFvgvnkvhpNwfHhdbW26ye1tsA9BPtUjQD4NCaTsVWe6SQGyF3vpSa/blh1 u4I= -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:16 2026 by rpki-client