This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/9TXMiN2g7ZftVyUXkZ3Cpjx9eOk.roa File: 9TXMiN2g7ZftVyUXkZ3Cpjx9eOk.roa (raw, json) Hash identifier: N1Qb9VSBFAZdjQeaSrLMungD8xv/lsPtyXGvUF1v1co= Subject key identifier: F5:35:CC:88:DD:A0:ED:97:ED:57:25:17:91:9D:C2:A6:3C:7D:78:E9 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA5374BBCD44AF06F76B8CFFE73B83E Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/9TXMiN2g7ZftVyUXkZ3Cpjx9eOk.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43943 IP address blocks: 213.91.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:37:4b:bc:d4:4a:f0:6f:76:b8:cf:fe:73:b8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f535cc88dda0ed97ed572517919dc2a63c7d78e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:01:03:42:60:8a:cb:15:5d:a1:00:85:e1: f5:db:db:dc:7e:92:89:cf:07:6e:c3:f6:e6:26:75: 90:7a:b2:e4:e8:ae:6b:a6:b0:b6:67:26:0b:d2:74: 94:b5:1a:b9:a3:27:d1:a7:53:5a:7e:51:c8:3d:6e: b3:ad:70:74:24:a6:b5:f8:4c:31:2a:4e:4d:96:7e: ec:d3:07:87:b4:5a:ca:5b:dd:35:08:f0:33:dd:d5: bc:aa:34:ce:8e:0f:5c:5e:dc:dd:e9:b8:f8:18:8a: 59:95:5c:83:57:46:f3:9b:52:c4:60:45:94:6b:cf: 0e:6c:cb:07:d8:e3:28:e2:4d:ca:b9:e5:03:9c:b5: 99:8b:f6:97:e9:c0:a0:33:74:69:7c:62:52:da:f2: 15:6e:2c:27:5e:1b:74:33:ca:2d:c1:48:00:f9:20: 95:bf:11:09:4d:5e:2f:16:b5:93:bc:c3:58:22:6d: ce:22:a1:29:1f:9c:71:8d:14:8c:63:55:6c:a7:43: a3:8e:b7:71:e7:db:13:45:71:48:cc:48:ac:58:aa: fa:e1:10:10:ea:eb:dd:37:7d:e7:94:97:ad:35:26: d1:85:2a:c4:58:07:8c:4e:bd:7d:4f:b1:8a:b3:c7: d5:c2:50:fc:42:b6:5f:0a:ee:cc:39:c4:ee:19:97: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:35:CC:88:DD:A0:ED:97:ED:57:25:17:91:9D:C2:A6:3C:7D:78:E9 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/9TXMiN2g7ZftVyUXkZ3Cpjx9eOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.91.176.0/24 Signature Algorithm: sha256WithRSAEncryption 71:e2:d8:aa:b4:d1:29:b3:5e:73:a7:d6:63:fb:2c:8e:d2:ad: b8:14:69:50:b9:66:15:83:5e:47:76:c1:80:bf:44:ad:85:ae: 00:28:d3:ed:9b:bf:ac:46:b6:13:37:53:d9:2b:27:97:c0:04: 73:1a:26:51:25:56:21:69:1a:56:5f:f6:a9:84:a2:46:35:16: ae:a9:91:2f:7a:b4:3e:5e:ea:c9:6c:2e:aa:73:8a:b8:34:23: a7:10:a8:57:d7:96:d6:bf:bf:d1:0c:5f:b5:84:ad:2c:2a:60: 12:c8:da:d6:24:19:65:c8:de:4c:9d:01:6b:b5:ff:65:c8:8d: 24:1b:b4:d8:0d:08:d6:a6:51:42:ed:e4:44:86:52:b7:36:2e: 5c:a8:d5:d3:25:77:e0:24:7a:33:64:5f:af:ff:8c:04:e4:67: 80:22:1b:52:af:6b:46:04:8f:8c:ed:e7:e9:94:65:b1:85:5f: 00:33:bc:70:54:56:d2:9d:b4:ab:2c:f6:ce:6e:8d:bb:73:5a: 25:f0:b0:48:cd:d6:9a:95:f4:3b:2b:55:ca:95:9e:3a:2f:fa: 8c:4e:e4:4f:60:48:18:87:9e:24:61:c0:50:75:12:33:92:cb: 32:59:5c:5b:ec:f1:5e:b3:d0:50:78:d8:4c:ed:f6:2c:bd:df: 10:80:06:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTdLvNRK8G92uM/+c7g+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTM1Y2M4OGRkYTBlZDk3ZWQ1NzI1MTc5MTlkYzJhNjNjN2Q3OGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWcBA0JgissVXaEAheH129vcfpKJ zwduw/bmJnWQerLk6K5rprC2ZyYL0nSUtRq5oyfRp1NaflHIPW6zrXB0JKa1+Ewx Kk5Nln7s0weHtFrKW901CPAz3dW8qjTOjg9cXtzd6bj4GIpZlVyDV0bzm1LEYEWU a88ObMsH2OMo4k3KueUDnLWZi/aX6cCgM3RpfGJS2vIVbiwnXht0M8otwUgA+SCV vxEJTV4vFrWTvMNYIm3OIqEpH5xxjRSMY1Vsp0Ojjrdx59sTRXFIzEisWKr64RAQ 6uvdN33nlJetNSbRhSrEWAeMTr19T7GKs8fVwlD8QrZfCu7MOcTuGZefVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPU1zIjdoO2X7VclF5GdwqY8fXjpMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvOVRYTWlOMmc3WmZ0VnlVWGtaM0Nwang5ZU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VuwMA0G CSqGSIb3DQEBCwUAA4IBAQBx4tiqtNEps15zp9Zj+yyO0q24FGlQuWYVg15HdsGA v0Stha4AKNPtm7+sRrYTN1PZKyeXwARzGiZRJVYhaRpWX/aphKJGNRauqZEverQ+ XurJbC6qc4q4NCOnEKhX15bWv7/RDF+1hK0sKmASyNrWJBllyN5MnQFrtf9lyI0k G7TYDQjWplFC7eREhlK3Ni5cqNXTJXfgJHozZF+v/4wE5GeAIhtSr2tGBI+M7efp lGWxhV8AM7xwVFbSnbSrLPbObo27c1ol8LBIzdaalfQ7K1XKlZ46L/qMTuRPYEgY h54kYcBQdRIzkssyWVxb7PFes9BQeNhM7fYsvd8QgAa1 -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:18 2026 by rpki-client