This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/s9H6P_An9Cs8KJ23K6jcUiaST5I.roa File: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (raw, json) Hash identifier: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk= Subject key identifier: B3:D1:FA:3F:F0:27:F4:2B:3C:28:9D:B7:2B:A8:DC:52:26:92:4F:92 Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Certificate serial: 019B791032ECA37F64737314F26A9E19AC98 Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/s9H6P_An9Cs8KJ23K6jcUiaST5I.roa Signing time: Thu 01 Jan 2026 10:17:43 +0000 ROA not before: Thu 01 Jan 2026 10:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 84.54.13.0/24 maxlen: 24 176.98.41.0/24 maxlen: 24 193.31.116.0/24 maxlen: 24 213.226.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:32:ec:a3:7f:64:73:73:14:f2:6a:9e:19:ac:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Validity Not Before: Jan 1 10:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3d1fa3ff027f42b3c289db72ba8dc5226924f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:32:0e:4b:56:23:4e:ef:7c:82:d1:72:92:42: 8c:84:eb:32:2f:36:91:01:43:53:f7:87:07:9d:43: 6d:51:72:3f:e0:fa:cb:ac:0e:93:aa:78:0a:6a:78: eb:e4:a7:20:82:b6:15:32:5a:b1:8c:aa:6a:1f:23: db:d2:d0:04:93:20:fd:4d:51:bc:77:7e:bb:6d:8b: 1e:95:43:76:30:8b:53:18:93:ac:24:15:fe:17:b1: ef:bb:a2:63:03:38:2f:b2:68:12:5c:5b:1a:79:50: a4:aa:ea:8d:c6:17:0f:59:1f:c7:c5:3c:5c:cc:49: 65:68:8b:59:15:18:5c:f7:d5:bd:ab:a0:db:66:ee: 49:ba:56:cd:8c:8f:74:58:75:d9:f2:d2:0b:d1:8a: 31:ad:5a:99:b3:c6:19:b2:e9:9e:ef:0b:70:96:01: b1:fa:bf:11:cb:4c:8c:60:09:70:67:fb:e0:9d:90: e2:40:12:63:00:35:3a:64:c3:96:bf:f8:a3:15:ae: 4e:c0:5c:81:44:47:9d:f7:d5:7d:b7:61:d7:11:f9: 0d:2b:e9:0f:93:da:c6:80:ee:3c:4e:69:bb:c4:ab: c5:dd:10:c7:bf:18:93:1c:df:55:43:b4:ad:f4:8d: ce:20:f2:3e:b2:12:1e:3a:1d:de:a6:be:b5:f1:6a: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:D1:FA:3F:F0:27:F4:2B:3C:28:9D:B7:2B:A8:DC:52:26:92:4F:92 X509v3 Authority Key Identifier: keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/s9H6P_An9Cs8KJ23K6jcUiaST5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.13.0/24 176.98.41.0/24 193.31.116.0/24 213.226.119.0/24 Signature Algorithm: sha256WithRSAEncryption 96:d4:35:99:00:27:29:64:4b:64:34:02:f2:ac:0e:18:9c:c1: c2:ea:47:66:26:6b:dd:58:ad:86:b0:ad:dc:de:46:a6:a8:23: ab:06:9c:2b:26:e0:d4:ae:c1:96:83:ff:ca:a6:c6:28:31:16: 4d:3f:0e:8e:be:8b:0f:08:32:bd:18:55:a0:6c:c9:59:a9:05: 3f:ed:73:3b:eb:75:5c:5c:06:47:dd:5a:c7:30:0f:80:bb:02: 2d:68:aa:0f:bb:23:ba:1d:88:90:f1:74:40:c8:11:fe:30:c9: ca:ea:96:95:dc:87:c6:f0:9c:8d:34:48:22:18:4e:16:37:3b: af:69:84:a2:5f:2a:97:58:53:8e:83:89:57:b6:9c:e8:9e:91: 71:d0:46:46:ac:01:33:9d:a9:69:22:8b:7c:09:e8:75:5b:74: 81:45:8e:d9:9a:61:ae:eb:24:b7:99:a5:8e:e1:34:28:60:d2: 92:8f:19:36:05:f4:7f:fe:75:5b:c3:31:8f:a1:8e:60:39:12: 57:ec:b2:c0:11:e0:2f:90:5f:49:66:ed:bf:93:18:f4:73:a5: 43:10:a8:5e:ed:13:0f:48:29:5d:f0:73:82:c2:a2:39:f6:b4: 5b:a8:df:59:33:13:70:0d:f3:9a:84:eb:3c:ea:dc:1e:1b:d0: f3:a8:3e:ea -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EDLso39kc3MU8mqeGayYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm MjhmNmMwHhcNMjYwMTAxMTAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2QxZmEzZmYwMjdmNDJiM2MyODlkYjcyYmE4ZGM1MjI2OTI0ZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTIOS1YjTu98gtFykkKMhOsyLzaR AUNT94cHnUNtUXI/4PrLrA6TqngKanjr5KcggrYVMlqxjKpqHyPb0tAEkyD9TVG8 d367bYselUN2MItTGJOsJBX+F7Hvu6JjAzgvsmgSXFsaeVCkquqNxhcPWR/HxTxc zEllaItZFRhc99W9q6DbZu5JulbNjI90WHXZ8tIL0YoxrVqZs8YZsume7wtwlgGx +r8Ry0yMYAlwZ/vgnZDiQBJjADU6ZMOWv/ijFa5OwFyBREed99V9t2HXEfkNK+kP k9rGgO48Tmm7xKvF3RDHvxiTHN9VQ7St9I3OIPI+shIeOh3epr618WqfNQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLPR+j/wJ/QrPCidtyuo3FImkk+SMB8GA1UdIwQY MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt YTM4NTU1MDVlYTJlLzEvczlINlBfQW45Q3M4S0oyM0s2amNVaWFTVDVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVDYNAwQA sGIpAwQAwR90AwQA1eJ3MA0GCSqGSIb3DQEBCwUAA4IBAQCW1DWZACcpZEtkNALy rA4YnMHC6kdmJmvdWK2GsK3c3kamqCOrBpwrJuDUrsGWg//KpsYoMRZNPw6OvosP CDK9GFWgbMlZqQU/7XM763VcXAZH3VrHMA+AuwItaKoPuyO6HYiQ8XRAyBH+MMnK 6paV3IfG8JyNNEgiGE4WNzuvaYSiXyqXWFOOg4lXtpzonpFx0EZGrAEznalpIot8 Ceh1W3SBRY7ZmmGu6yS3maWO4TQoYNKSjxk2BfR//nVbwzGPoY5gORJX7LLAEeAv kF9JZu2/kxj0c6VDEKhe7RMPSCld8HOCwqI59rRbqN9ZMxNwDfOahOs86tweG9Dz qD7q -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:41 2026 by rpki-client