This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/9-6uMx_1cLtSZmzwRHltNOvbN1Q.roa File: 9-6uMx_1cLtSZmzwRHltNOvbN1Q.roa (raw, json) Hash identifier: qkVhO869SS+g0a8EpShWW+uFhy2C8iltX3D6CRSmnec= Subject key identifier: F7:EE:AE:33:1F:F5:70:BB:52:66:6C:F0:44:79:6D:34:EB:DB:37:54 Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960 Certificate serial: 019B7910A1B709A0F50E7F8E5356BF69C326 Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/9-6uMx_1cLtSZmzwRHltNOvbN1Q.roa Signing time: Thu 01 Jan 2026 10:18:11 +0000 ROA not before: Thu 01 Jan 2026 10:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 79.170.98.0/24 maxlen: 24 2a14:d300:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a1:b7:09:a0:f5:0e:7f:8e:53:56:bf:69:c3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960 Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7eeae331ff570bb52666cf044796d34ebdb3754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:06:70:0e:37:9c:4d:ff:bd:0d:f1:cf:43: 56:df:fb:cd:1b:0b:7e:71:70:d2:05:0b:8b:c4:62: 77:a2:e9:3e:da:d2:90:84:31:c0:80:c8:9c:ec:a1: 94:a2:de:69:02:44:47:ba:cd:51:f7:34:1d:89:c5: 04:fd:fc:76:b1:12:f4:0f:9c:fd:84:b5:b0:bc:9d: 5f:92:6d:52:0a:63:79:06:15:33:32:ed:4a:dd:29: 50:8f:65:ee:b2:1c:b6:eb:f8:ef:a1:0c:e1:17:a6: 15:f0:70:d7:97:10:fd:42:22:b0:71:a0:58:e3:99: 65:4c:46:2b:73:e0:07:2c:e1:dd:65:13:f1:3d:4d: a5:8b:a1:1c:15:bf:08:b3:82:96:c1:09:3f:86:71: 73:4f:12:de:01:71:28:80:a3:2d:a5:7f:c8:ba:22: fb:4a:c3:66:44:93:2b:be:e2:19:5d:45:43:61:b4: a1:6e:20:c0:47:2e:5f:5a:b6:90:20:af:0d:54:94: 56:38:d9:29:3c:da:72:d9:38:83:63:d8:76:98:1f: 63:63:56:93:b7:7d:75:f9:05:d4:e4:89:af:85:4d: 24:b4:99:4e:04:8a:a8:85:ee:a7:1b:4b:7b:4b:90: 94:94:ea:03:92:85:9c:0b:c4:e5:34:41:1a:82:7b: 25:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EE:AE:33:1F:F5:70:BB:52:66:6C:F0:44:79:6D:34:EB:DB:37:54 X509v3 Authority Key Identifier: keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/9-6uMx_1cLtSZmzwRHltNOvbN1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.98.0/24 IPv6: 2a14:d300:3::/48 Signature Algorithm: sha256WithRSAEncryption 26:62:57:39:df:56:12:4c:a1:a3:db:96:ee:cf:29:e5:d8:d8: 9d:10:4b:df:4c:1a:a2:cb:d7:c5:37:53:ca:ab:e4:3d:0b:58: 5b:b1:b4:98:ba:85:48:cf:7d:21:1c:6c:2f:bb:dd:0f:8b:f3: fd:2f:02:f2:69:71:2a:28:df:da:30:0f:f1:17:a8:49:75:4c: b1:1f:ce:ed:89:28:10:89:45:47:eb:30:56:04:99:ba:1a:18: 46:1d:9f:e1:4d:71:b9:7f:6e:c5:5f:d3:ce:c1:46:42:82:8e: 6d:7e:d6:f4:99:e0:47:3c:f8:97:3f:85:11:bd:02:9d:38:fd: d2:a2:10:19:01:72:81:b5:b5:94:82:b3:75:48:e3:8c:04:94: 55:2b:96:22:43:e4:5e:08:54:27:f1:4b:84:ed:20:90:90:60: 76:83:be:a4:f0:3a:78:53:0e:0f:f4:d6:78:c6:d3:48:b9:fc: 48:08:30:83:48:b7:9e:5f:8f:f7:9d:22:53:9b:b4:d7:ed:b2: d6:79:0e:8b:1f:f1:3a:65:65:fd:ba:4b:35:ea:75:8f:24:fa: d0:4b:92:8b:65:1a:36:7e:39:58:87:19:65:e0:d2:45:63:22: 5d:eb:44:f6:7f:ee:9b:d8:85:c7:55:4b:78:d9:fd:4a:f9:ba: 45:58:3e:c5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EKG3CaD1Dn+OU1a/acMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0NDdhZDg0Yjg0YmFlYzQ3ZDU2MjFlMmY3NTYyM2YzZWFm MTM5NjAwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2VlYWUzMzFmZjU3MGJiNTI2NjZjZjA0NDc5NmQzNGViZGIzNzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq8GcA43nE3/vQ3xz0NW3/vNGwt+ cXDSBQuLxGJ3ouk+2tKQhDHAgMic7KGUot5pAkRHus1R9zQdicUE/fx2sRL0D5z9 hLWwvJ1fkm1SCmN5BhUzMu1K3SlQj2Xushy26/jvoQzhF6YV8HDXlxD9QiKwcaBY 45llTEYrc+AHLOHdZRPxPU2li6EcFb8Is4KWwQk/hnFzTxLeAXEogKMtpX/IuiL7 SsNmRJMrvuIZXUVDYbShbiDARy5fWraQIK8NVJRWONkpPNpy2TiDY9h2mB9jY1aT t311+QXU5ImvhU0ktJlOBIqohe6nG0t7S5CUlOoDkoWcC8TlNEEagnslvwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPfurjMf9XC7UmZs8ER5bTTr2zdUMB8GA1UdIwQY MBaAFJRHrYS4S67EfVYh4vdWI/Pq8TlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYt NWIzMThjMzQ5OWZiLzEvOS02dU14XzFjTHRTWm16d1JIbHROT3ZiTjFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYtNWIzMThjMzQ5OWZi LzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAT6piMA8E AgACMAkDBwAqFNMAAAMwDQYJKoZIhvcNAQELBQADggEBACZiVznfVhJMoaPblu7P KeXY2J0QS99MGqLL18U3U8qr5D0LWFuxtJi6hUjPfSEcbC+73Q+L8/0vAvJpcSoo 39owD/EXqEl1TLEfzu2JKBCJRUfrMFYEmboaGEYdn+FNcbl/bsVf087BRkKCjm1+ 1vSZ4Ec8+Jc/hRG9Ap04/dKiEBkBcoG1tZSCs3VI44wElFUrliJD5F4IVCfxS4Tt IJCQYHaDvqTwOnhTDg/01njG00i5/EgIMINIt55fj/edIlObtNftstZ5Dosf8Tpl Zf26SzXqdY8k+tBLkotlGjZ+OViHGWXg0kVjIl3rRPZ/7pvYhcdVS3jZ/Ur5ukVY PsU= -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:28 2026 by rpki-client