This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/e9nl5Pnxo4_PNueKHPY3_FUm6DY.roa File: e9nl5Pnxo4_PNueKHPY3_FUm6DY.roa (raw, json) Hash identifier: s4RfX2gBANtJwnzla52YXp/+/wPoOUDbAQSSVBhIKuE= Subject key identifier: 7B:D9:E5:E4:F9:F1:A3:8F:CF:36:E7:8A:1C:F6:37:FC:55:26:E8:36 Certificate issuer: /CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed Certificate serial: 019B775963E882AB9AFEB25D42D5C2044270 Authority key identifier: 13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/e9nl5Pnxo4_PNueKHPY3_FUm6DY.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211417 IP address blocks: 185.144.92.0/22 maxlen: 24 2a03:a920::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.mft rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:63:e8:82:ab:9a:fe:b2:5d:42:d5:c2:04:42:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13afa6ce6542e1bb523e1d03bd00a4d22b7fdaed Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bd9e5e4f9f1a38fcf36e78a1cf637fc5526e836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9e:d6:e8:c3:a3:27:51:f8:a6:46:50:ed:0b: a8:95:be:31:f1:86:47:48:d2:a2:d8:e6:a1:c9:39: b7:3c:e0:7e:96:80:5a:92:49:ab:2b:c9:4e:36:01: 22:c0:18:cb:3c:90:6d:a8:64:9b:f8:d5:d7:41:ba: b9:51:3a:b8:c1:b3:78:76:6f:45:89:d1:c7:0b:5d: f6:6c:de:d3:5f:80:1e:b9:70:3c:6e:39:c4:7c:2a: 3d:24:a6:1b:2e:18:da:dc:3d:db:3d:0d:81:97:f2: b0:70:6d:52:2d:8c:4a:cc:23:25:1a:4f:33:a0:e4: 0f:e3:2c:5e:99:7a:b3:46:c2:79:f9:49:9f:86:fc: 8e:c9:c4:48:9b:77:c4:4e:d0:0e:da:22:39:d2:d4: 0a:18:f6:a7:7b:ac:76:b0:6a:06:8d:06:33:f0:59: 5b:b6:42:60:8e:67:29:7e:cd:6b:0d:a8:56:9b:89: 2d:7d:ed:9d:99:2f:5c:43:5b:c7:0b:36:4f:73:2f: 77:46:f6:73:ed:bc:ae:33:db:e4:f8:ba:99:be:70: df:05:d4:2a:e9:ff:96:7d:4e:96:86:42:67:69:cc: 9a:bf:6d:80:06:b9:5d:b1:b6:01:0b:27:de:46:53: bc:ff:6c:59:1a:2e:c8:63:20:02:4e:c1:a4:0e:f5: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:E5:E4:F9:F1:A3:8F:CF:36:E7:8A:1C:F6:37:FC:55:26:E8:36 X509v3 Authority Key Identifier: keyid:13:AF:A6:CE:65:42:E1:BB:52:3E:1D:03:BD:00:A4:D2:2B:7F:DA:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6-mzmVC4btSPh0DvQCk0it_2u0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/e9nl5Pnxo4_PNueKHPY3_FUm6DY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/731c7c-9a17-4bca-984c-c7fbfc4dc9dc/1/E6-mzmVC4btSPh0DvQCk0it_2u0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.92.0/22 IPv6: 2a03:a920::/32 Signature Algorithm: sha256WithRSAEncryption 8f:03:9c:a7:67:2e:4b:ac:3e:89:63:c2:d4:a9:b7:a0:2e:19: 22:9c:cb:0b:86:5a:91:6c:ba:ff:87:a7:80:a8:17:bc:f2:24: c0:8a:62:73:87:c2:af:79:4d:c7:9b:14:11:58:13:54:56:6e: 50:cd:cd:c2:87:25:47:6b:d8:0b:c7:33:c8:b6:d6:25:a5:38: ff:d2:46:f1:9c:8f:e1:ce:92:36:cd:1d:97:78:fc:f2:d6:73: b0:9c:da:58:40:27:6b:4c:c9:c0:90:41:05:26:42:9d:46:e7: 6d:f2:ec:87:a0:7e:52:16:58:aa:ef:a6:e8:27:8f:fb:ac:06: 1a:f5:11:66:43:38:f3:6d:1d:d5:a9:f2:9a:c4:59:47:99:fa: 6c:53:25:48:6d:ed:ee:75:56:3a:93:02:3c:1a:37:c4:f5:6e: 64:11:1e:1c:b3:6b:5d:0e:82:48:e6:79:57:c6:7a:53:b1:88: 09:9d:5f:f3:d3:19:00:bd:18:7f:09:3c:58:8e:34:1f:b3:9f: 54:3e:fb:47:8e:85:cf:66:bd:1a:c6:02:4b:8d:97:d7:15:28: ea:a6:c9:ba:28:23:6b:82:48:d3:c6:ee:dd:a8:b8:6a:25:31: bc:fa:0c:52:da:6f:64:28:70:a9:ec:9c:54:b9:1e:fa:13:fb: c7:7b:e6:db -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WWPogqua/rJdQtXCBEJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzYWZhNmNlNjU0MmUxYmI1MjNlMWQwM2JkMDBhNGQyMmI3 ZmRhZWQwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmQ5ZTVlNGY5ZjFhMzhmY2YzNmU3OGExY2Y2MzdmYzU1MjZlODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ7W6MOjJ1H4pkZQ7Quolb4x8YZH SNKi2OahyTm3POB+loBakkmrK8lONgEiwBjLPJBtqGSb+NXXQbq5UTq4wbN4dm9F idHHC132bN7TX4AeuXA8bjnEfCo9JKYbLhja3D3bPQ2Bl/KwcG1SLYxKzCMlGk8z oOQP4yxemXqzRsJ5+UmfhvyOycRIm3fETtAO2iI50tQKGPane6x2sGoGjQYz8Flb tkJgjmcpfs1rDahWm4ktfe2dmS9cQ1vHCzZPcy93RvZz7byuM9vk+LqZvnDfBdQq 6f+WfU6WhkJnacyav22ABrldsbYBCyfeRlO8/2xZGi7IYyACTsGkDvVy7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHvZ5eT58aOPzzbnihz2N/xVJug2MB8GA1UdIwQY MBaAFBOvps5lQuG7Uj4dA70ApNIrf9rtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTYtbXptVkM0YnRTUGgwRHZRQ2swaXRfMnUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS83MzFjN2MtOWExNy00YmNhLTk4NGMt YzdmYmZjNGRjOWRjLzEvZTlubDVQbnhvNF9QTnVlS0hQWTNfRlVtNkRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS83MzFjN2MtOWExNy00YmNhLTk4NGMtYzdmYmZjNGRjOWRj LzEvRTYtbXptVkM0YnRTUGgwRHZRQ2swaXRfMnUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZBcMA0E AgACMAcDBQAqA6kgMA0GCSqGSIb3DQEBCwUAA4IBAQCPA5ynZy5LrD6JY8LUqbeg LhkinMsLhlqRbLr/h6eAqBe88iTAimJzh8KveU3HmxQRWBNUVm5Qzc3ChyVHa9gL xzPIttYlpTj/0kbxnI/hzpI2zR2XePzy1nOwnNpYQCdrTMnAkEEFJkKdRudt8uyH oH5SFliq76boJ4/7rAYa9RFmQzjzbR3VqfKaxFlHmfpsUyVIbe3udVY6kwI8GjfE 9W5kER4cs2tdDoJI5nlXxnpTsYgJnV/z0xkAvRh/CTxYjjQfs59UPvtHjoXPZr0a xgJLjZfXFSjqpsm6KCNrgkjTxu7dqLhqJTG8+gxS2m9kKHCp7JxUuR76E/vHe+bb -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:15 2026 by rpki-client