This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/9xs44BTciEe79T5DFs_dv3etyAA.roa File: 9xs44BTciEe79T5DFs_dv3etyAA.roa (raw, json) Hash identifier: hm5e8WZY1I0zpkj9lyYKgGK1z/f607v96gqeEkkvWMs= Subject key identifier: F7:1B:38:E0:14:DC:88:47:BB:F5:3E:43:16:CF:DD:BF:77:AD:C8:00 Certificate issuer: /CN=fec6fb5a467974c977a997c6dda1464805ed379f Certificate serial: 019B7CED0C5DF60B2E7B90D643E7F5C2AB10 Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/9xs44BTciEe79T5DFs_dv3etyAA.roa Signing time: Fri 02 Jan 2026 04:17:48 +0000 ROA not before: Fri 02 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 217.194.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0c:5d:f6:0b:2e:7b:90:d6:43:e7:f5:c2:ab:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f Validity Not Before: Jan 2 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f71b38e014dc8847bbf53e4316cfddbf77adc800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c6:6a:b5:0e:48:dd:44:86:43:80:f7:60:d7: 09:a7:1b:b2:2f:44:51:6d:13:3a:84:6d:aa:35:2e: c4:c4:7d:e0:88:62:1a:ef:1f:1a:a3:b0:f5:8f:a9: a1:e7:83:dc:7a:e8:44:8e:c5:89:36:80:37:5f:61: e6:08:aa:bb:2c:35:43:5e:31:ef:c7:f5:db:cc:b0: 98:d8:1d:34:b2:30:3f:95:79:ae:15:ce:a0:c3:32: 35:4b:61:d7:00:4c:65:03:85:4f:2b:38:cd:37:0e: 66:e2:c4:83:75:ed:cd:84:bf:83:87:43:2e:b6:d9: f3:e1:8d:5e:d8:be:33:97:8f:38:f6:05:57:93:50: 1a:fb:65:6b:3f:71:35:b7:d6:26:22:69:06:74:b5: 42:12:63:84:64:d6:67:1a:a6:5b:d3:00:f5:3a:50: df:cf:2b:62:1a:aa:6b:fe:b9:63:24:1f:67:58:01: b5:0f:ac:30:55:fc:70:95:6c:65:99:8a:35:1a:98: 54:91:ee:7d:59:31:98:46:54:26:55:f4:42:03:6f: 8f:c7:ec:dc:0e:e7:d9:cf:f0:28:f2:67:d6:99:c2: 52:da:24:55:40:08:dc:40:5a:7e:b8:c9:1e:29:1d: ee:1a:fe:3c:96:c4:cc:85:5c:a5:7d:ce:fd:ad:bc: 45:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1B:38:E0:14:DC:88:47:BB:F5:3E:43:16:CF:DD:BF:77:AD:C8:00 X509v3 Authority Key Identifier: keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/9xs44BTciEe79T5DFs_dv3etyAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.194.138.0/24 Signature Algorithm: sha256WithRSAEncryption 25:c9:42:27:94:ea:b5:4b:0b:74:db:47:04:e9:ed:21:98:8d: 18:4d:a8:c4:93:54:1f:47:8c:16:b7:ae:e9:f7:af:7d:f4:55: f6:9a:74:a4:1b:3b:5c:a1:21:51:7f:59:73:7c:b3:4b:60:83: 3f:f4:ea:c6:3a:d8:7e:fb:72:2f:5e:df:85:3e:35:bc:e4:9a: d5:99:f3:b2:b5:ca:14:52:42:84:c8:dd:2e:30:ac:2f:6b:b6: 9a:42:8f:c9:b4:2a:fa:70:5a:b6:8b:e2:58:21:1c:d7:4c:93: c4:ce:41:0f:d7:42:27:14:9b:1d:e0:00:a8:a5:c8:03:d0:66: c3:46:6f:49:fe:f5:d3:32:05:1d:c5:fa:75:ac:76:33:33:a5: 50:3b:f0:b9:48:53:72:56:25:e9:50:b1:a2:36:ba:0b:02:b2: 94:20:8f:33:69:e6:88:cb:51:a8:eb:e6:49:54:34:05:ea:0e: 9f:47:7a:26:a1:cd:b4:33:46:c1:7f:4d:c2:46:51:be:6f:c8: 04:28:16:a3:fd:07:52:21:fb:b0:83:78:65:5e:b4:77:c5:d4: 17:78:d8:3c:fd:9b:af:b7:a4:ee:5d:85:cf:64:02:33:39:7d: 84:cb:f6:14:e8:83:b7:aa:bc:f9:03:4b:62:c8:d1:c6:fe:5e: d3:fb:0e:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Qxd9gsue5DWQ+f1wqsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl ZDM3OWYwHhcNMjYwMTAyMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzFiMzhlMDE0ZGM4ODQ3YmJmNTNlNDMxNmNmZGRiZjc3YWRjODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8ZqtQ5I3USGQ4D3YNcJpxuyL0RR bRM6hG2qNS7ExH3giGIa7x8ao7D1j6mh54PceuhEjsWJNoA3X2HmCKq7LDVDXjHv x/XbzLCY2B00sjA/lXmuFc6gwzI1S2HXAExlA4VPKzjNNw5m4sSDde3NhL+Dh0Mu ttnz4Y1e2L4zl4849gVXk1Aa+2VrP3E1t9YmImkGdLVCEmOEZNZnGqZb0wD1OlDf zytiGqpr/rljJB9nWAG1D6wwVfxwlWxlmYo1GphUke59WTGYRlQmVfRCA2+Px+zc DufZz/Ao8mfWmcJS2iRVQAjcQFp+uMkeKR3uGv48lsTMhVylfc79rbxFDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPcbOOAU3IhHu/U+QxbP3b93rcgAMB8GA1UdIwQY MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt MTI2NDFmOWU2ZmMwLzEvOXhzNDRCVGNpRWU3OVQ1REZzX2R2M2V0eUFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cKKMA0G CSqGSIb3DQEBCwUAA4IBAQAlyUInlOq1Swt020cE6e0hmI0YTajEk1QfR4wWt67p 96999FX2mnSkGztcoSFRf1lzfLNLYIM/9OrGOth++3IvXt+FPjW85JrVmfOytcoU UkKEyN0uMKwva7aaQo/JtCr6cFq2i+JYIRzXTJPEzkEP10InFJsd4ACopcgD0GbD Rm9J/vXTMgUdxfp1rHYzM6VQO/C5SFNyViXpULGiNroLArKUII8zaeaIy1Go6+ZJ VDQF6g6fR3omoc20M0bBf03CRlG+b8gEKBaj/QdSIfuwg3hlXrR3xdQXeNg8/Zuv t6TuXYXPZAIzOX2Ey/YU6IO3qrz5A0tiyNHG/l7T+w6N -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:27 2026 by rpki-client