This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/9xBP8gbc0Dsyc9Whz6ERIkAS30s.roa File: 9xBP8gbc0Dsyc9Whz6ERIkAS30s.roa (raw, json) Hash identifier: dwzxNjVen//HcW2Y8+RmbxhX6tKkrvGhVuNA4kOW63w= Subject key identifier: F7:10:4F:F2:06:DC:D0:3B:32:73:D5:A1:CF:A1:11:22:40:12:DF:4B Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360 Certificate serial: 019B7D5CCF9761877D2D0D2803A4395B1F12 Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/9xBP8gbc0Dsyc9Whz6ERIkAS30s.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28768 IP address blocks: 81.200.32.0/21 maxlen: 21 81.200.40.0/21 maxlen: 21 94.143.216.0/23 maxlen: 23 185.124.216.0/22 maxlen: 22 2a00:1bb0::/32 maxlen: 32 2a03:9060::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cf:97:61:87:7d:2d:0d:28:03:a4:39:5b:1f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7104ff206dcd03b3273d5a1cfa111224012df4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:0e:9a:b8:9d:39:94:92:fb:b4:6d:45:e6: ed:34:0a:3b:08:e6:2e:ab:ed:5a:59:3c:16:44:22: 99:77:c6:8b:6d:28:5c:4b:e9:9a:98:8e:f6:69:55: 72:13:d5:c0:31:2c:54:61:87:ee:6b:05:d6:76:7d: b1:fb:09:a9:a2:06:28:e6:e5:31:a7:bb:96:6d:4d: 2a:2f:57:0f:03:b4:2b:6b:b4:0d:be:dd:ab:42:3d: 8d:a1:56:8f:4b:52:19:ea:fe:94:bb:22:84:dd:4f: 7b:63:d9:e9:40:75:fe:8a:e4:d3:87:63:be:d9:6c: 2a:98:a9:44:0a:65:2b:cf:f9:62:19:da:ae:ab:7a: c8:25:d0:23:6b:3c:19:1e:69:e3:32:73:a4:c4:bc: 12:a9:97:c2:eb:b3:d3:29:1d:a2:66:3f:ff:da:26: cf:3c:0c:9d:c3:d1:aa:6a:1e:2f:ff:81:4e:32:b7: d6:c3:6a:bc:92:5a:b1:fd:b2:45:93:7c:c8:99:49: 78:78:09:73:b3:b8:70:a1:b7:dd:4c:31:9d:11:dd: 33:b2:ff:28:5e:03:14:07:9c:0d:8d:d7:74:70:85: 5b:68:d5:a2:43:1a:d3:20:e8:1e:ae:36:ec:00:09: 4f:bd:b8:8c:83:92:64:4f:1c:66:92:ef:24:1e:97: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:10:4F:F2:06:DC:D0:3B:32:73:D5:A1:CF:A1:11:22:40:12:DF:4B X509v3 Authority Key Identifier: keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/9xBP8gbc0Dsyc9Whz6ERIkAS30s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.200.32.0/20 94.143.216.0/23 185.124.216.0/22 IPv6: 2a00:1bb0::/32 2a03:9060::/32 Signature Algorithm: sha256WithRSAEncryption 9c:48:92:59:23:8f:ee:cf:d1:5c:e9:2f:e0:43:04:44:13:09: bf:dd:ca:34:a7:51:22:39:80:f7:65:fa:db:89:26:51:30:08: 28:cd:30:d3:e6:90:84:6a:4d:8e:8a:4d:83:4e:51:e2:8d:46: f1:94:db:eb:d0:80:11:55:4f:cb:34:e4:60:8a:e5:43:cf:ea: e6:90:4d:07:2b:4d:a6:6d:c8:24:c2:b9:50:36:a4:be:0a:ce: ac:c6:d2:c2:ba:e5:2a:10:ad:0f:81:1e:03:9f:71:4f:74:19: 4d:b9:39:d6:de:0b:7b:b8:b3:b3:f0:a9:4f:01:05:c9:0c:c6: b6:f5:21:75:5b:5d:ab:09:94:01:69:f7:25:24:a0:7f:0e:bf: 77:ed:95:d1:9a:6a:54:9e:d1:56:ca:d3:1c:5c:fc:70:84:0d: 10:19:66:42:f4:68:d2:2d:93:4d:b0:4c:9d:ab:31:c1:bc:47: 1f:2f:b7:20:79:90:87:3a:e9:39:90:aa:b2:88:bf:0a:87:44: b5:09:58:0f:4f:69:d1:c0:86:f9:70:76:ff:19:ac:7a:bc:54: 29:86:14:1b:02:95:99:ae:02:89:e3:43:1f:95:cf:69:f3:34: e5:cf:a4:c2:71:03:c9:3b:7f:8b:48:c8:a4:8c:4b:a6:24:ad: 6b:4e:bb:04 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt9XM+XYYd9LQ0oA6Q5Wx8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMDMwMjA1ZmEzNjVlOWY0OWZmNGVhNzUwNmRmOTEyZDVl ZDgzNjAwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzEwNGZmMjA2ZGNkMDNiMzI3M2Q1YTFjZmExMTEyMjQwMTJkZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE0OmridOZSS+7RtRebtNAo7COYu q+1aWTwWRCKZd8aLbShcS+mamI72aVVyE9XAMSxUYYfuawXWdn2x+wmpogYo5uUx p7uWbU0qL1cPA7Qra7QNvt2rQj2NoVaPS1IZ6v6UuyKE3U97Y9npQHX+iuTTh2O+ 2WwqmKlECmUrz/liGdquq3rIJdAjazwZHmnjMnOkxLwSqZfC67PTKR2iZj//2ibP PAydw9Gqah4v/4FOMrfWw2q8klqx/bJFk3zImUl4eAlzs7hwobfdTDGdEd0zsv8o XgMUB5wNjdd0cIVbaNWiQxrTIOgerjbsAAlPvbiMg5JkTxxmku8kHpdikwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFPcQT/IG3NA7MnPVoc+hESJAEt9LMB8GA1UdIwQY MBaAFE8DAgX6Nl6fSf9Op1Bt+RLV7YNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgt M2NlNjExY2I2Nzk5LzEvOXhCUDhnYmMwRHN5YzlXaHo2RVJJa0FTMzBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgtM2NlNjExY2I2Nzk5 LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQEUcggAwQB Xo/YAwQCuXzYMBQEAgACMA4DBQAqABuwAwUAKgOQYDANBgkqhkiG9w0BAQsFAAOC AQEAnEiSWSOP7s/RXOkv4EMERBMJv93KNKdRIjmA92X624kmUTAIKM0w0+aQhGpN jopNg05R4o1G8ZTb69CAEVVPyzTkYIrlQ8/q5pBNBytNpm3IJMK5UDakvgrOrMbS wrrlKhCtD4EeA59xT3QZTbk51t4Le7izs/CpTwEFyQzGtvUhdVtdqwmUAWn3JSSg fw6/d+2V0ZpqVJ7RVsrTHFz8cIQNEBlmQvRo0i2TTbBMnasxwbxHHy+3IHmQhzrp OZCqsoi/CodEtQlYD09p0cCG+XB2/xmserxUKYYUGwKVma4CieNDH5XPafM05c+k wnEDyTt/i0jIpIxLpiSta067BA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:32:06 2026 by rpki-client