This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/9t9pVno2TX3q9AIdwXJLCYU34e4.roa File: 9t9pVno2TX3q9AIdwXJLCYU34e4.roa (raw, json) Hash identifier: /zZ7SZznSNB6a99s2QKcI1cVhN0Ul78igoVf1JwkrVM= Subject key identifier: F6:DF:69:56:7A:36:4D:7D:EA:F4:02:1D:C1:72:4B:09:85:37:E1:EE Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019B977AB1CD9B7294F9532E09E5CEC4DEBB Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/9t9pVno2TX3q9AIdwXJLCYU34e4.roa Signing time: Wed 07 Jan 2026 08:02:39 +0000 ROA not before: Wed 07 Jan 2026 08:02:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 87.248.132.0/24 maxlen: 24 87.248.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:7a:b1:cd:9b:72:94:f9:53:2e:09:e5:ce:c4:de:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jan 7 08:02:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6df69567a364d7deaf4021dc1724b098537e1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:71:f4:0e:ec:bd:ed:7a:26:d2:a4:cd:f0: 2d:21:0b:d4:4d:11:9b:e5:22:cb:c7:1c:1f:8d:93: f8:de:25:95:ee:72:6d:e9:c4:cd:28:16:23:20:17: d2:45:87:3f:35:f8:07:36:a5:8d:a9:12:08:13:cd: f0:b8:07:f0:61:3f:d7:a7:01:78:84:c9:2d:11:9b: a7:6e:7b:bc:eb:38:6e:2e:48:8f:06:a0:be:11:ef: 79:e2:ff:b1:5a:dd:a8:ea:f1:8a:36:27:fa:45:4a: 0c:7e:61:9c:15:38:58:69:db:b3:4d:84:ec:83:04: 27:9b:1f:74:71:e9:8f:b9:a3:93:55:61:c7:27:74: 38:dc:73:bf:f5:c9:d1:85:b0:29:be:b5:86:0f:4a: 63:b6:25:f3:ef:73:06:5e:22:f8:83:03:d9:07:0e: 65:22:a8:18:32:b1:03:71:a9:19:48:15:da:5b:91: d5:7b:12:19:b3:b2:3c:af:e5:85:eb:15:ea:bb:55: 18:4e:eb:df:71:6b:f1:84:fb:62:87:b8:13:5b:c2: 3d:82:c4:5d:40:99:d6:07:c1:9b:7e:44:d6:88:ce: 54:02:60:5e:d8:53:8c:77:f2:6d:46:eb:91:e4:89: 31:e5:2c:03:af:16:ee:1d:71:41:c4:3d:0b:6e:50: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DF:69:56:7A:36:4D:7D:EA:F4:02:1D:C1:72:4B:09:85:37:E1:EE X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/9t9pVno2TX3q9AIdwXJLCYU34e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.132.0/24 87.248.134.0/24 Signature Algorithm: sha256WithRSAEncryption 09:05:41:25:cf:c6:dd:56:d3:8f:be:0b:e1:fa:a2:0a:8a:19: c0:4b:7a:61:d3:24:6b:5e:be:7c:8e:ad:03:61:50:d7:e9:5b: c3:a9:c2:b2:71:26:09:9e:a2:5a:82:29:79:16:a6:7f:56:55: e3:8e:92:cf:a6:48:21:51:36:5c:74:47:77:63:ef:e2:d3:72: e3:51:23:fe:fa:44:cb:6b:2d:09:63:cf:70:a5:d2:fd:bd:a1: 4d:81:5d:34:58:f7:4a:d7:c4:cd:eb:e5:31:bb:18:e7:01:35: fa:0b:53:25:d2:c2:c4:03:08:9f:d1:5e:48:0c:6f:86:d9:c3: 84:ea:2e:e0:1c:7d:88:cc:86:ac:84:9c:93:94:e4:8b:e6:f7: 71:50:53:0d:f3:2a:5b:f1:b8:5f:95:e0:e0:7b:a6:6f:84:47: 78:b7:56:d0:fa:ec:d1:36:26:43:63:86:8b:d6:7a:a3:36:e0: d2:67:aa:76:11:26:62:ea:e2:82:fe:0a:e6:1d:79:1d:12:5e: e0:7b:68:0b:4c:f5:21:ef:fe:0b:62:9f:55:04:08:22:9c:c8: 58:23:4a:53:67:ee:d8:75:c8:84:de:1a:5c:dc:66:32:b9:c3: 58:41:b0:af:d9:f9:c1:df:bc:d4:b3:3a:09:a3:45:93:68:0a: 87:92:1e:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuXerHNm3KU+VMuCeXOxN67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwMTA3MDgwMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmRmNjk1NjdhMzY0ZDdkZWFmNDAyMWRjMTcyNGIwOTg1MzdlMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA099x9A7sve16JtKkzfAtIQvUTRGb 5SLLxxwfjZP43iWV7nJt6cTNKBYjIBfSRYc/NfgHNqWNqRIIE83wuAfwYT/XpwF4 hMktEZunbnu86zhuLkiPBqC+Ee954v+xWt2o6vGKNif6RUoMfmGcFThYaduzTYTs gwQnmx90cemPuaOTVWHHJ3Q43HO/9cnRhbApvrWGD0pjtiXz73MGXiL4gwPZBw5l IqgYMrEDcakZSBXaW5HVexIZs7I8r+WF6xXqu1UYTuvfcWvxhPtih7gTW8I9gsRd QJnWB8GbfkTWiM5UAmBe2FOMd/JtRuuR5Ikx5SwDrxbuHXFBxD0LblBdRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPbfaVZ6Nk196vQCHcFySwmFN+HuMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvOXQ5cFZubzJUWDNxOUFJZHdYSkxDWVUzNGU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/iEAwQA V/iGMA0GCSqGSIb3DQEBCwUAA4IBAQAJBUElz8bdVtOPvgvh+qIKihnAS3ph0yRr Xr58jq0DYVDX6VvDqcKycSYJnqJagil5FqZ/VlXjjpLPpkghUTZcdEd3Y+/i03Lj USP++kTLay0JY89wpdL9vaFNgV00WPdK18TN6+UxuxjnATX6C1Ml0sLEAwif0V5I DG+G2cOE6i7gHH2IzIashJyTlOSL5vdxUFMN8ypb8bhfleDge6ZvhEd4t1bQ+uzR NiZDY4aL1nqjNuDSZ6p2ESZi6uKC/grmHXkdEl7ge2gLTPUh7/4LYp9VBAginMhY I0pTZ+7YdciE3hpc3GYyucNYQbCv2fnB37zUszoJo0WTaAqHkh4x -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:08 2026 by rpki-client