This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/9Szxj7ksKuCXA-mU4WJw6FwBa-8.roa File: 9Szxj7ksKuCXA-mU4WJw6FwBa-8.roa (raw, json) Hash identifier: dbreI6iiuCYJc1Zi2XdOuKeWZjsIDBcTLiyZ8rQ+QKg= Subject key identifier: F5:2C:F1:8F:B9:2C:2A:E0:97:03:E9:94:E1:62:70:E8:5C:01:6B:EF Certificate issuer: /CN=486889ce4eb4fd747818248395de5fb93d1fe142 Certificate serial: 019B7D5C6AC58CB972FF0A45453C3DC24714 Authority key identifier: 48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/9Szxj7ksKuCXA-mU4WJw6FwBa-8.roa Signing time: Fri 02 Jan 2026 06:19:27 +0000 ROA not before: Fri 02 Jan 2026 06:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199005 IP address blocks: 91.241.31.0/24 maxlen: 24 91.241.36.0/22 maxlen: 22 91.241.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.mft rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:6a:c5:8c:b9:72:ff:0a:45:45:3c:3d:c2:47:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=486889ce4eb4fd747818248395de5fb93d1fe142 Validity Not Before: Jan 2 06:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f52cf18fb92c2ae09703e994e16270e85c016bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:c1:f0:48:3b:e9:32:6c:27:c3:ce:ce:40: fe:70:45:d1:30:dc:fe:e3:b0:8c:8c:5a:ae:80:ae: cd:c6:05:8e:f7:0d:23:c5:10:9a:e1:63:0a:af:4f: f0:93:91:fa:29:1e:8e:49:6b:8d:25:4e:7f:f8:e2: 60:c9:b7:c7:a1:6d:a5:d6:e3:0f:b2:c0:c3:09:b2: a4:57:79:48:9f:15:94:24:68:65:b2:5f:ef:ab:d6: c5:dc:ea:0c:2c:f8:a8:3e:26:ac:0e:8a:f3:a9:39: e2:8d:04:7f:65:13:9c:33:b2:46:df:8e:62:c5:0c: b8:4d:2a:d6:1a:76:3e:58:bd:cf:6a:f3:21:e7:e5: 43:2c:4f:30:a7:28:ec:1c:c4:04:bc:28:f1:6f:f3: 24:97:4f:b7:f8:ef:b9:0e:83:39:55:cf:d5:7d:ff: 53:b7:b2:d8:b8:b9:88:8c:e5:65:32:6f:d4:9b:61: 0e:3d:e9:09:74:a0:ee:40:8a:3e:7e:89:3f:8e:1a: 8b:86:c5:57:14:af:2a:75:e0:58:a5:d6:b6:b1:f2: 46:96:46:61:27:fb:81:bc:4a:0a:bb:24:a1:30:ad: a5:6d:73:d8:5f:4a:aa:3f:e9:96:78:53:e6:0b:90: 44:bf:be:dd:43:26:54:2a:1a:39:80:24:38:ce:9f: 62:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2C:F1:8F:B9:2C:2A:E0:97:03:E9:94:E1:62:70:E8:5C:01:6B:EF X509v3 Authority Key Identifier: keyid:48:68:89:CE:4E:B4:FD:74:78:18:24:83:95:DE:5F:B9:3D:1F:E1:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGiJzk60_XR4GCSDld5fuT0f4UI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/9Szxj7ksKuCXA-mU4WJw6FwBa-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c9242e-e424-4ed1-ac8b-c136405b7bb7/1/SGiJzk60_XR4GCSDld5fuT0f4UI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.241.31.0/24 91.241.36.0-91.241.41.255 Signature Algorithm: sha256WithRSAEncryption bb:36:82:b7:c1:e8:d6:cf:f8:66:70:8b:3a:c7:2a:03:69:4a: e2:72:06:72:55:4d:51:35:da:19:a6:aa:20:48:67:5a:b8:01: bf:c5:a8:18:40:ce:2d:65:b3:67:7d:57:63:7f:b8:8c:ea:3e: 44:2c:1b:0a:0c:8e:e0:4f:f3:8c:58:1f:9d:59:b3:64:46:f1: a0:54:e1:54:5e:3b:a4:d2:cc:e4:7b:32:e1:52:b7:4f:f7:3a: 29:99:8d:31:1d:58:cd:ab:33:49:01:dc:73:61:80:f5:44:f7: c3:a4:c2:29:6f:ad:cd:6e:0b:ca:c0:3b:b9:a0:32:82:a3:fd: a4:75:7e:c0:f0:80:65:85:27:51:d5:96:ea:bf:a9:6a:b4:12: d1:3d:32:6d:52:7e:ed:21:cb:0a:d4:48:68:7e:75:59:71:f2: 9a:56:31:54:a4:c8:71:cc:a6:61:32:70:1e:a7:56:47:bf:0c: e5:d7:a5:8d:91:98:32:5c:77:b8:54:90:2c:f3:20:c2:59:e4: 0e:09:51:a2:d7:6a:7a:de:eb:5b:29:17:f8:0b:86:c9:eb:2b: 00:46:34:80:8d:19:dc:55:70:42:c0:94:e0:56:8a:88:bf:69: fe:31:e5:56:52:50:3f:82:98:d4:3e:0f:e4:61:0b:b1:69:a9: 82:f8:02:67 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XGrFjLly/wpFRTw9wkcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4Njg4OWNlNGViNGZkNzQ3ODE4MjQ4Mzk1ZGU1ZmI5M2Qx ZmUxNDIwHhcNMjYwMTAyMDYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTJjZjE4ZmI5MmMyYWUwOTcwM2U5OTRlMTYyNzBlODVjMDE2YmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU7B8Eg76TJsJ8POzkD+cEXRMNz+ 47CMjFqugK7NxgWO9w0jxRCa4WMKr0/wk5H6KR6OSWuNJU5/+OJgybfHoW2l1uMP ssDDCbKkV3lInxWUJGhlsl/vq9bF3OoMLPioPiasDorzqTnijQR/ZROcM7JG345i xQy4TSrWGnY+WL3PavMh5+VDLE8wpyjsHMQEvCjxb/Mkl0+3+O+5DoM5Vc/Vff9T t7LYuLmIjOVlMm/Um2EOPekJdKDuQIo+fok/jhqLhsVXFK8qdeBYpda2sfJGlkZh J/uBvEoKuyShMK2lbXPYX0qqP+mWeFPmC5BEv77dQyZUKho5gCQ4zp9i7wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPUs8Y+5LCrglwPplOFicOhcAWvvMB8GA1UdIwQY MBaAFEhoic5OtP10eBgkg5XeX7k9H+FCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jOTI0MmUtZTQyNC00ZWQxLWFjOGIt YzEzNjQwNWI3YmI3LzEvOVN6eGo3a3NLdUNYQS1tVTRXSnc2RndCYS04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jOTI0MmUtZTQyNC00ZWQxLWFjOGItYzEzNjQwNWI3YmI3 LzEvU0dpSnprNjBfWFI0R0NTRGxkNWZ1VDBmNFVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAW/EfMAwD BAJb8SQDBAFb8SgwDQYJKoZIhvcNAQELBQADggEBALs2grfB6NbP+GZwizrHKgNp SuJyBnJVTVE12hmmqiBIZ1q4Ab/FqBhAzi1ls2d9V2N/uIzqPkQsGwoMjuBP84xY H51Zs2RG8aBU4VReO6TSzOR7MuFSt0/3OimZjTEdWM2rM0kB3HNhgPVE98Okwilv rc1uC8rAO7mgMoKj/aR1fsDwgGWFJ1HVluq/qWq0EtE9Mm1Sfu0hywrUSGh+dVlx 8ppWMVSkyHHMpmEycB6nVke/DOXXpY2RmDJcd7hUkCzzIMJZ5A4JUaLXanre61sp F/gLhsnrKwBGNICNGdxVcELAlOBWioi/af4x5VZSUD+CmNQ+D+RhC7FpqYL4Amc= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:31 2026 by rpki-client