This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/9V-ctiK3OrZZcAKL3tC0kUW2GxM.roa File: 9V-ctiK3OrZZcAKL3tC0kUW2GxM.roa (raw, json) Hash identifier: nTZbJQLNFOotBjznpph2w+kxtUo4D9XsbLL1i612LtY= Subject key identifier: F5:5F:9C:B6:22:B7:3A:B6:59:70:02:8B:DE:D0:B4:91:45:B6:1B:13 Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62 Certificate serial: 019B797F382307BFE826C2A7C99CA0C507DA Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/9V-ctiK3OrZZcAKL3tC0kUW2GxM.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211046 IP address blocks: 91.205.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:38:23:07:bf:e8:26:c2:a7:c9:9c:a0:c5:07:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62 Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f55f9cb622b73ab65970028bded0b49145b61b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:3e:56:fa:3a:50:13:a9:72:be:ed:2a:18: ea:0f:f4:22:c4:86:1d:c9:cd:18:2c:b7:75:10:f3: 18:e8:97:5a:1f:85:ff:79:98:f6:a3:17:e4:cb:7a: 35:71:be:61:3e:00:30:2d:f3:d8:75:27:56:8c:1d: b5:fc:c8:1c:51:53:71:b1:0d:8a:7a:26:06:8a:fe: 49:74:de:d6:8e:5d:b6:bc:bc:03:72:11:8c:5f:a4: b2:6f:7e:65:47:86:18:68:24:9e:d4:ad:f1:b8:ac: 57:1d:f4:d3:0c:f0:56:cd:0b:5d:06:6c:f6:a2:b4: c1:16:b9:ed:d3:97:84:dd:44:85:80:6c:d8:eb:86: 87:6e:cb:1e:8d:2e:62:6a:75:ff:5c:21:ed:4f:34: 39:9b:6b:30:8b:2c:73:a6:2e:be:b5:cb:49:5d:3c: 91:9d:1d:17:d3:7d:08:ea:3f:90:c2:15:f0:86:c5: e7:83:69:2c:0a:e0:14:63:34:5e:eb:64:1c:5c:1a: d4:32:ec:57:5d:05:90:7a:b7:5c:6b:71:ac:10:69: 43:c7:f7:11:0f:b2:bf:a5:00:9f:f0:df:2b:bb:b2: 69:07:f9:68:a9:38:fe:ec:e7:bf:26:59:24:64:7a: b4:83:4c:60:30:fe:c0:44:25:4f:a6:fa:50:ea:f3: 78:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5F:9C:B6:22:B7:3A:B6:59:70:02:8B:DE:D0:B4:91:45:B6:1B:13 X509v3 Authority Key Identifier: keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/9V-ctiK3OrZZcAKL3tC0kUW2GxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.222.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:26:51:26:be:6c:54:90:26:5f:96:6b:21:bc:12:ae:f6:60: 6d:a0:08:1c:57:19:15:51:42:4f:31:c3:b2:c4:42:2d:50:c9: 9c:e2:ee:f3:a0:44:77:f8:49:3d:38:6d:82:c9:8e:ab:b2:61: d4:01:38:00:7f:eb:51:1a:90:04:12:4c:54:87:de:eb:8d:06: bd:27:6f:48:4e:40:0d:17:84:d3:65:fd:4d:e7:31:c1:e4:56: 4e:f2:6f:0a:2a:a5:22:cc:dc:00:d9:09:ce:2d:b0:ba:74:98: 61:d3:8c:5c:67:6d:15:b4:97:75:60:ad:96:ce:b4:31:c0:1d: af:dd:13:73:ee:31:0e:5d:33:af:0e:46:07:8f:87:59:9f:fa: 32:a1:ec:82:a3:7f:1f:13:12:10:3c:0f:85:72:a8:1c:21:10: 77:8d:f9:81:56:de:b2:02:d0:e1:6c:75:ae:eb:1d:f1:4d:3e: 51:43:75:ff:f6:06:39:f0:c0:a6:58:74:7f:95:dc:be:5f:47: ee:fe:e5:f3:4b:16:a9:19:bd:4c:5e:55:4d:e5:cf:b2:48:67: 2d:07:fb:8b:4e:10:cc:0d:42:9e:bf:d3:b7:db:0d:69:e4:18: 7f:8b:4a:66:51:3c:62:51:13:ea:87:2f:4e:94:d2:54:27:81: fd:2d:00:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzgjB7/oJsKnyZygxQfaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYjNlNGYzOWQxYzNjMTRkODMxNjA2YmZjYTE2NjZkZGU5 YmVkNjIwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTVmOWNiNjIyYjczYWI2NTk3MDAyOGJkZWQwYjQ5MTQ1YjYxYjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzU+Vvo6UBOpcr7tKhjqD/QixIYd yc0YLLd1EPMY6JdaH4X/eZj2oxfky3o1cb5hPgAwLfPYdSdWjB21/MgcUVNxsQ2K eiYGiv5JdN7Wjl22vLwDchGMX6Syb35lR4YYaCSe1K3xuKxXHfTTDPBWzQtdBmz2 orTBFrnt05eE3USFgGzY64aHbssejS5ianX/XCHtTzQ5m2swiyxzpi6+tctJXTyR nR0X030I6j+QwhXwhsXng2ksCuAUYzRe62QcXBrUMuxXXQWQerdca3GsEGlDx/cR D7K/pQCf8N8ru7JpB/loqTj+7Oe/JlkkZHq0g0xgMP7ARCVPpvpQ6vN4ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPVfnLYitzq2WXACi97QtJFFthsTMB8GA1UdIwQY MBaAFCKz5POdHDwU2DFga/yhZm3em+1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81MWE2NzgtMzY0NS00Y2E0LThjMGQt ZWQ1OTQ3ZjY2YjcwLzEvOVYtY3RpSzNPclpaY0FLTDN0QzBrVVcyR3hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS81MWE2NzgtMzY0NS00Y2E0LThjMGQtZWQ1OTQ3ZjY2Yjcw LzEvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW83eMA0G CSqGSIb3DQEBCwUAA4IBAQBuJlEmvmxUkCZflmshvBKu9mBtoAgcVxkVUUJPMcOy xEItUMmc4u7zoER3+Ek9OG2CyY6rsmHUATgAf+tRGpAEEkxUh97rjQa9J29ITkAN F4TTZf1N5zHB5FZO8m8KKqUizNwA2QnOLbC6dJhh04xcZ20VtJd1YK2WzrQxwB2v 3RNz7jEOXTOvDkYHj4dZn/oyoeyCo38fExIQPA+FcqgcIRB3jfmBVt6yAtDhbHWu 6x3xTT5RQ3X/9gY58MCmWHR/ldy+X0fu/uXzSxapGb1MXlVN5c+ySGctB/uLThDM DUKev9O32w1p5Bh/i0pmUTxiURPqhy9OlNJUJ4H9LQBa -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:08 2026 by rpki-client