This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/9kFFUxQ3ysP-zpJLfgwYPJeN0Rk.roa File: 9kFFUxQ3ysP-zpJLfgwYPJeN0Rk.roa (raw, json) Hash identifier: S42eDxiXdAnmmf/W2DKgqzpMNhr5lHTUSdRaXIEDtqM= Subject key identifier: F6:41:45:53:14:37:CA:C3:FE:CE:92:4B:7E:0C:18:3C:97:8D:D1:19 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019AE3AD2E91F304838E769ABAA5F4FDAF2A Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/9kFFUxQ3ysP-zpJLfgwYPJeN0Rk.roa Signing time: Wed 03 Dec 2025 10:06:08 +0000 ROA not before: Wed 03 Dec 2025 10:06:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211440 IP address blocks: 45.93.224.0/24 maxlen: 24 45.93.225.0/24 maxlen: 24 45.93.226.0/24 maxlen: 24 89.190.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:ad:2e:91:f3:04:83:8e:76:9a:ba:a5:f4:fd:af:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Dec 3 10:06:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f64145531437cac3fece924b7e0c183c978dd119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:40:e5:f1:48:ef:85:2b:94:04:da:cc:c5:f9: 48:e6:a1:3d:b0:8d:ac:6b:ea:1a:24:ba:01:ce:24: ac:1c:39:be:88:1f:9d:c3:16:07:ff:8b:1a:af:d6: 7a:12:3a:c7:64:5f:de:10:65:1b:ae:90:e7:31:cf: f0:85:b2:d0:4a:72:e3:c2:a9:8f:02:aa:63:f0:2f: 67:30:78:8a:a5:07:84:19:27:cc:6d:4b:60:8a:67: b9:af:64:68:21:87:1b:24:39:f0:b8:26:35:27:5b: 12:21:77:cc:fa:56:d0:f8:be:08:54:40:1f:97:98: f2:b4:6a:a1:d0:3e:bc:f2:01:b6:33:6b:32:84:87: 54:c9:44:cf:35:9a:81:d4:7b:09:64:5c:ae:24:5f: 1a:c2:31:6f:15:0c:5e:30:81:b3:e4:14:c5:3c:99: e8:ee:46:3e:0a:f9:ce:b9:50:9d:b5:ac:0e:ee:06: cc:48:bd:1e:51:ca:e6:3c:a1:05:65:72:63:57:b8: ec:c0:4a:8a:0f:ba:8f:db:2b:2d:31:01:e0:da:e9: 76:c4:42:04:d9:01:de:50:d9:e5:f5:09:0f:99:8a: d3:c2:9a:b2:93:06:48:c1:5c:49:5e:12:67:ec:ec: 8b:da:05:9b:d0:36:01:66:88:5d:db:a5:ff:d3:34: 36:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:41:45:53:14:37:CA:C3:FE:CE:92:4B:7E:0C:18:3C:97:8D:D1:19 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/9kFFUxQ3ysP-zpJLfgwYPJeN0Rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.224.0-45.93.226.255 89.190.150.0/24 Signature Algorithm: sha256WithRSAEncryption 67:79:8a:8e:48:1d:97:89:03:42:f0:f2:bb:5b:65:15:ca:31: a4:26:b7:a4:b7:80:f3:75:10:bd:37:59:b8:46:c7:0e:a5:27: c1:1e:ce:8b:84:dc:ed:5d:e7:7d:13:43:72:70:9e:54:c0:9b: 78:22:a1:0b:8e:dd:82:2b:30:1c:fa:d1:b3:93:96:f3:7a:1a: ed:d0:26:52:4a:92:48:c8:d6:e0:44:08:21:53:74:55:62:db: 0e:15:9a:42:d8:73:08:9e:f7:21:cd:eb:0e:c6:95:92:9f:ea: 75:89:e7:55:b6:20:f5:80:05:10:63:2e:85:de:35:cf:ff:74: ae:89:2c:05:9a:20:86:23:22:d2:b3:8f:16:e2:58:75:55:34: ad:d3:1a:8b:ba:74:38:d5:94:93:f4:66:44:37:af:e7:02:6c: a7:b1:8f:9b:9c:d0:ba:04:ed:47:c2:d6:0b:8d:52:9b:63:a9: d0:66:63:70:21:93:5c:0c:32:df:da:95:ae:d4:48:59:cc:a6: 71:96:8e:94:28:93:bb:df:d6:d5:be:0e:96:a3:de:f8:3c:97: 22:dc:8c:aa:93:18:07:d8:6d:05:0e:6b:08:07:a4:3f:f2:66: 55:3d:a7:29:5a:96:51:9d:3c:fb:19:a2:c1:75:db:8e:1e:fb: 63:0c:14:bb -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZrjrS6R8wSDjnaauqX0/a8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjUxMjAzMTAwNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjQxNDU1MzE0MzdjYWMzZmVjZTkyNGI3ZTBjMTgzYzk3OGRkMTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60Dl8UjvhSuUBNrMxflI5qE9sI2s a+oaJLoBziSsHDm+iB+dwxYH/4sar9Z6EjrHZF/eEGUbrpDnMc/whbLQSnLjwqmP Aqpj8C9nMHiKpQeEGSfMbUtgime5r2RoIYcbJDnwuCY1J1sSIXfM+lbQ+L4IVEAf l5jytGqh0D688gG2M2syhIdUyUTPNZqB1HsJZFyuJF8awjFvFQxeMIGz5BTFPJno 7kY+CvnOuVCdtawO7gbMSL0eUcrmPKEFZXJjV7jswEqKD7qP2ystMQHg2ul2xEIE 2QHeUNnl9QkPmYrTwpqykwZIwVxJXhJn7OyL2gWb0DYBZohd26X/0zQ2SQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPZBRVMUN8rD/s6SS34MGDyXjdEZMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvOWtGRlV4UTN5c1AtenBKTGZnd1lQSmVOMFJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAUtXeAD BAAtXeIDBABZvpYwDQYJKoZIhvcNAQELBQADggEBAGd5io5IHZeJA0Lw8rtbZRXK MaQmt6S3gPN1EL03WbhGxw6lJ8EezouE3O1d530TQ3JwnlTAm3gioQuO3YIrMBz6 0bOTlvN6Gu3QJlJKkkjI1uBECCFTdFVi2w4VmkLYcwie9yHN6w7GlZKf6nWJ51W2 IPWABRBjLoXeNc//dK6JLAWaIIYjItKzjxbiWHVVNK3TGou6dDjVlJP0ZkQ3r+cC bKexj5uc0LoE7UfC1guNUptjqdBmY3Ahk1wMMt/ala7USFnMpnGWjpQok7vf1tW+ Dpaj3vg8lyLcjKqTGAfYbQUOawgHpD/yZlU9pylallGdPPsZosF1244e+2MMFLs= -----END CERTIFICATE-----Generated at Fri Dec 5 15:59:30 2025 by rpki-client