This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9fTzt3uibs5X1jXOFDfs5UrKdPY.roa File: 9fTzt3uibs5X1jXOFDfs5UrKdPY.roa (raw, json) Hash identifier: noq8Db0PW+f2FnHl7c9wlySygf6cuxB7ZgDEFv0BOKY= Subject key identifier: F5:F4:F3:B7:7B:A2:6E:CE:57:D6:35:CE:14:37:EC:E5:4A:CA:74:F6 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1A7F3A3C1E76FFF3791DA5D37111D Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9fTzt3uibs5X1jXOFDfs5UrKdPY.roa Signing time: Fri 02 Jan 2026 18:21:42 +0000 ROA not before: Fri 02 Jan 2026 18:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 45.128.78.0/24 maxlen: 24 84.21.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:a7:f3:a3:c1:e7:6f:ff:37:91:da:5d:37:11:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5f4f3b77ba26ece57d635ce1437ece54aca74f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fd:b6:ee:ea:d1:4b:a2:6b:da:98:f2:76:c3: 0e:2b:95:60:16:d3:8e:85:cd:65:97:23:39:94:cd: 11:b5:5e:18:93:09:f4:b3:38:c2:a3:29:83:8e:a9: 3b:b0:11:6b:11:87:77:38:7e:c4:f6:94:db:d7:cc: f1:5a:e3:06:83:ab:fb:65:e2:e7:86:f9:02:08:66: 95:6e:50:d1:71:cd:c9:7b:6e:f6:dd:5b:1d:96:e4: 99:72:33:b4:09:ec:75:61:87:04:d5:46:ea:6d:da: 00:fe:0c:bc:7c:84:2e:ae:7a:c4:64:3f:57:1a:9f: 70:9f:49:40:f2:fe:9c:9b:f1:41:29:0f:4e:c8:69: 80:a6:76:7a:84:47:ae:f5:d5:b9:09:30:79:c1:d1: 2e:fd:97:ed:02:a4:06:bd:78:f9:b5:f8:24:ef:19: f3:cb:4f:31:d8:39:b4:ab:af:3e:16:27:52:49:a1: d2:a3:f8:a4:1e:3f:20:0f:75:d3:e8:a4:c9:d0:28: 7b:88:d3:ba:92:b0:e2:66:5e:2b:15:04:df:54:9c: 3f:8c:a1:37:28:ec:72:a5:91:da:da:6f:f3:ca:4a: 09:9e:a5:2d:a7:0a:97:f6:df:ed:89:8f:a9:a1:31: 9b:8e:53:73:dd:ec:e0:68:6e:a4:62:fc:fc:64:0f: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F4:F3:B7:7B:A2:6E:CE:57:D6:35:CE:14:37:EC:E5:4A:CA:74:F6 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9fTzt3uibs5X1jXOFDfs5UrKdPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.78.0/24 84.21.188.0/24 Signature Algorithm: sha256WithRSAEncryption cc:89:79:01:31:4c:70:e3:9a:a8:bd:96:19:7f:c0:28:01:a1: 9d:eb:a3:00:a3:89:c7:bf:ec:67:e6:ac:49:dd:65:de:08:dc: 50:8b:87:23:bd:cc:36:05:0d:cf:5d:47:c7:c8:58:22:7a:df: fd:5f:81:ec:51:00:87:f9:8b:1e:0e:d4:4f:fa:20:48:2a:39: 58:ae:c6:db:16:66:d6:1e:8f:6b:d4:22:5e:bf:80:69:dc:57: d8:9c:c8:4f:87:d1:7c:89:9d:d0:0b:bf:91:c3:32:e5:53:0a: 60:82:46:e0:1d:ce:21:99:21:f1:a9:b7:5c:4b:ff:7c:c7:df: 5a:c6:2d:68:8f:49:a7:c6:19:9d:a0:b5:1e:f5:b2:a7:58:9b: 44:ad:0b:e1:9a:0d:14:36:c8:0e:45:a8:fa:8c:15:93:a1:a1: e9:cf:7a:51:f2:55:8e:61:e6:a4:4f:72:d9:72:ed:ed:a7:04: 51:ce:86:70:b5:5b:fe:ec:64:d3:2b:d4:ea:c1:87:39:60:e2: de:0b:74:f5:d2:ac:26:48:52:d7:5b:af:e9:ce:89:f9:be:02: 98:7e:48:e1:56:47:e5:cb:ea:97:be:d3:18:98:ff:e7:43:5f: c9:15:41:0b:d7:b8:67:c4:8a:17:c5:b5:67:d6:ca:af:36:d4: f7:a4:13:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8afzo8Hnb/83kdpdNxEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWY0ZjNiNzdiYTI2ZWNlNTdkNjM1Y2UxNDM3ZWNlNTRhY2E3NGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/227urRS6Jr2pjydsMOK5VgFtOO hc1llyM5lM0RtV4Ykwn0szjCoymDjqk7sBFrEYd3OH7E9pTb18zxWuMGg6v7ZeLn hvkCCGaVblDRcc3Je2723VsdluSZcjO0Cex1YYcE1UbqbdoA/gy8fIQurnrEZD9X Gp9wn0lA8v6cm/FBKQ9OyGmApnZ6hEeu9dW5CTB5wdEu/ZftAqQGvXj5tfgk7xnz y08x2Dm0q68+FidSSaHSo/ikHj8gD3XT6KTJ0Ch7iNO6krDiZl4rFQTfVJw/jKE3 KOxypZHa2m/zykoJnqUtpwqX9t/tiY+poTGbjlNz3ezgaG6kYvz8ZA+YEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPX087d7om7OV9Y1zhQ37OVKynT2MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvOWZUenQzdWliczVYMWpYT0ZEZnM1VXJLZFBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYBOAwQA VBW8MA0GCSqGSIb3DQEBCwUAA4IBAQDMiXkBMUxw45qovZYZf8AoAaGd66MAo4nH v+xn5qxJ3WXeCNxQi4cjvcw2BQ3PXUfHyFgiet/9X4HsUQCH+YseDtRP+iBIKjlY rsbbFmbWHo9r1CJev4Bp3FfYnMhPh9F8iZ3QC7+RwzLlUwpggkbgHc4hmSHxqbdc S/98x99axi1oj0mnxhmdoLUe9bKnWJtErQvhmg0UNsgORaj6jBWToaHpz3pR8lWO YeakT3LZcu3tpwRRzoZwtVv+7GTTK9TqwYc5YOLeC3T10qwmSFLXW6/pzon5vgKY fkjhVkfly+qXvtMYmP/nQ1/JFUEL17hnxIoXxbVn1sqvNtT3pBMk -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:05 2026 by rpki-client