This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/9_4UojtYW5SzfmwK9paN9NLEoKg.roa File: 9_4UojtYW5SzfmwK9paN9NLEoKg.roa (raw, json) Hash identifier: oH2P/ZUOklA1DXi6jHfKo6VJ9Yt/sX7W1bTPQvlAziI= Subject key identifier: F7:FE:14:A2:3B:58:5B:94:B3:7E:6C:0A:F6:96:8D:F4:D2:C4:A0:A8 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8BDBA90DD64F8E4A13838AA6F828E Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/9_4UojtYW5SzfmwK9paN9NLEoKg.roa Signing time: Thu 01 Jan 2026 18:18:54 +0000 ROA not before: Thu 01 Jan 2026 18:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6906 IP address blocks: 81.198.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:bd:ba:90:dd:64:f8:e4:a1:38:38:aa:6f:82:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7fe14a23b585b94b37e6c0af6968df4d2c4a0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:62:73:e2:2e:7e:32:54:35:9f:b5:e6:bf:7a: 63:c5:87:61:2d:ca:38:89:9e:97:c5:eb:6a:79:a3: e0:cf:73:c3:60:0d:8e:3a:3a:3d:85:80:7e:5f:92: 07:9f:62:f7:95:7b:88:09:96:2c:58:8a:a0:d1:88: 14:be:8b:ce:e8:bd:e8:ba:4e:9a:dd:04:e6:c9:41: d9:43:55:0d:38:ff:1d:d2:0e:b5:f0:89:39:6f:47: fb:b6:40:56:5a:9c:70:48:7d:d9:fb:71:18:8e:f1: c4:33:3d:d7:ea:d7:ca:5b:30:e7:59:09:f6:a2:b0: a3:a9:43:e6:ff:08:b1:c1:c7:9f:73:10:22:10:af: e2:fb:0e:31:6d:1b:9e:67:c7:85:db:eb:b4:d0:58: 94:b5:fd:21:4d:a9:75:3d:5a:76:1d:a2:61:13:be: 94:71:9d:3d:d1:97:38:4c:32:67:2a:ff:76:0c:c5: b7:8b:11:3d:ca:1c:c2:49:b9:9d:41:6c:23:fc:c1: 46:dd:07:20:f8:ba:33:9f:81:16:15:9e:98:96:59: ba:a4:b7:a6:ec:f6:bb:73:ec:c9:20:4a:f8:fc:da: 84:d2:22:da:f4:2c:2f:18:10:9e:2b:c8:63:48:80: a9:e0:f2:ed:92:91:06:8e:39:0e:03:05:c4:4a:f9: 01:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FE:14:A2:3B:58:5B:94:B3:7E:6C:0A:F6:96:8D:F4:D2:C4:A0:A8 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/9_4UojtYW5SzfmwK9paN9NLEoKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.198.174.0/24 Signature Algorithm: sha256WithRSAEncryption 40:38:76:fc:6a:e9:90:b6:1c:f9:48:72:56:24:90:f6:d6:66: 1c:39:6c:ed:51:e0:53:99:ab:c6:f7:19:60:33:ba:f4:61:2a: 23:74:f3:d6:8e:a9:0f:30:23:6e:b7:fd:93:c2:63:2e:7c:bc: 8c:e6:0d:30:93:df:11:78:15:17:c0:8a:4b:46:5b:5e:da:38: 67:15:2a:e6:c2:5a:76:36:7b:eb:07:6c:73:8b:10:1a:e5:93: 61:43:57:05:c0:ff:d2:6e:fd:76:88:bf:c8:63:8a:da:6b:33: 8c:54:74:82:36:6d:d5:10:80:d8:a0:be:f9:86:24:1d:cc:ef: 1b:96:92:5c:cc:12:af:08:b1:62:64:a6:e0:ff:75:d2:dd:a2: 48:bf:bd:a2:95:46:8b:06:49:e8:61:ef:0c:65:50:51:79:e2: 34:ca:f6:0e:76:d9:6c:3e:42:5c:d8:16:9f:b0:4e:dc:cf:e4: 32:c2:38:d3:4b:a0:c9:b0:19:c9:8f:87:7a:67:a8:97:c3:34: 43:d9:06:ea:62:dc:54:74:03:51:bf:ff:7c:5e:d6:3b:42:73: c1:da:f7:35:8e:24:14:40:d4:bc:f4:03:df:2b:72:c7:40:99: e4:8e:b7:4e:f9:e6:11:9e:ce:31:45:b3:76:4f:dd:97:cd:35: 66:54:0f:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yL26kN1k+OShODiqb4KOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2ZlMTRhMjNiNTg1Yjk0YjM3ZTZjMGFmNjk2OGRmNGQyYzRhMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmJz4i5+MlQ1n7Xmv3pjxYdhLco4 iZ6XxetqeaPgz3PDYA2OOjo9hYB+X5IHn2L3lXuICZYsWIqg0YgUvovO6L3ouk6a 3QTmyUHZQ1UNOP8d0g618Ik5b0f7tkBWWpxwSH3Z+3EYjvHEMz3X6tfKWzDnWQn2 orCjqUPm/wixwcefcxAiEK/i+w4xbRueZ8eF2+u00FiUtf0hTal1PVp2HaJhE76U cZ090Zc4TDJnKv92DMW3ixE9yhzCSbmdQWwj/MFG3Qcg+Lozn4EWFZ6Yllm6pLem 7Pa7c+zJIEr4/NqE0iLa9CwvGBCeK8hjSICp4PLtkpEGjjkOAwXESvkB5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPf+FKI7WFuUs35sCvaWjfTSxKCoMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvOV80VW9qdFlXNVN6Zm13SzlwYU45TkxFb0tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUcauMA0G CSqGSIb3DQEBCwUAA4IBAQBAOHb8aumQthz5SHJWJJD21mYcOWztUeBTmavG9xlg M7r0YSojdPPWjqkPMCNut/2TwmMufLyM5g0wk98ReBUXwIpLRlte2jhnFSrmwlp2 NnvrB2xzixAa5ZNhQ1cFwP/Sbv12iL/IY4raazOMVHSCNm3VEIDYoL75hiQdzO8b lpJczBKvCLFiZKbg/3XS3aJIv72ilUaLBknoYe8MZVBReeI0yvYOdtlsPkJc2Baf sE7cz+QywjjTS6DJsBnJj4d6Z6iXwzRD2QbqYtxUdANRv/98XtY7QnPB2vc1jiQU QNS89APfK3LHQJnkjrdO+eYRns4xRbN2T92XzTVmVA/1 -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:07 2026 by rpki-client