This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/9-ZkpJLZAxXzbNNccpqxr1yI3TQ.roa File: 9-ZkpJLZAxXzbNNccpqxr1yI3TQ.roa (raw, json) Hash identifier: JAqKnj2bS/riQd9C2Ai/D19XD9DVFg+M8BKlm0uu5lQ= Subject key identifier: F7:E6:64:A4:92:D9:03:15:F3:6C:D3:5C:72:9A:B1:AF:5C:88:DD:34 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019B7C12DCE7DA3D5EBA678AC08B0C272021 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/9-ZkpJLZAxXzbNNccpqxr1yI3TQ.roa Signing time: Fri 02 Jan 2026 00:19:29 +0000 ROA not before: Fri 02 Jan 2026 00:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 185.255.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:dc:e7:da:3d:5e:ba:67:8a:c0:8b:0c:27:20:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Jan 2 00:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7e664a492d90315f36cd35c729ab1af5c88dd34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:69:38:3e:91:5d:ce:44:6d:e0:2a:bd:7c: 77:9e:7c:86:a6:3b:93:23:ed:d0:ea:f7:cd:e6:ab: ca:71:47:1f:06:33:9b:cd:64:2a:d9:5c:01:7f:56: 26:85:c8:40:5c:9a:23:fc:64:06:d8:e4:d6:dd:0d: 5a:86:33:5e:ac:9d:5b:59:c9:4b:35:e1:c8:df:4b: 61:16:1f:6c:3e:4d:94:c9:2b:c2:5e:33:2c:59:8d: ac:01:30:63:e7:7c:60:8c:e5:95:0f:f1:d1:4a:8b: 6f:17:63:e9:8a:d8:57:19:46:bd:e9:4c:a3:02:41: 69:8f:32:21:eb:bf:41:05:6c:c0:ac:71:6c:69:4c: 2d:c2:8b:21:bb:a4:0a:30:ad:37:d6:f4:b1:b1:24: 11:24:f7:37:db:b9:6a:b0:c3:f7:a6:ea:ad:a8:42: 8d:71:3c:1b:70:fe:b9:59:d2:5a:a5:c5:d9:4a:35: 1d:49:e2:b9:8d:99:ce:dc:f7:0b:d1:a5:ac:2e:e0: dd:5b:3d:d8:db:36:b9:e5:5e:ed:78:25:b3:83:12: 89:6a:d9:67:63:6c:de:9f:4a:03:c8:f8:78:57:2b: a8:ca:bb:2a:cb:9c:6f:40:76:64:60:01:f5:0b:2f: 91:43:d4:48:e3:95:b2:6c:7b:aa:26:f3:86:3e:33: b9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E6:64:A4:92:D9:03:15:F3:6C:D3:5C:72:9A:B1:AF:5C:88:DD:34 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/9-ZkpJLZAxXzbNNccpqxr1yI3TQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.5.0/24 Signature Algorithm: sha256WithRSAEncryption b2:17:6a:e1:4a:e0:de:60:af:95:ae:9d:74:b3:da:e2:ab:9b: e4:ce:34:62:9d:63:ae:a3:0d:9a:3a:1c:8f:f0:e4:6a:b3:42: 08:6d:5b:e2:2f:04:56:69:f4:80:c8:07:16:a3:ef:a1:75:f3: 24:6b:b0:85:56:f5:31:70:5d:2f:23:b5:f8:49:86:ef:da:98: 58:bc:c7:06:1e:2e:9d:06:0c:c0:a8:0e:b3:f1:79:7e:51:b4: 84:d8:46:bc:df:17:3f:03:3e:ac:08:31:79:82:e2:60:74:c2: 78:fb:d9:1f:ac:a8:77:14:88:c6:e5:f3:0c:a1:8f:a3:4f:6c: 7a:cb:6b:36:95:cc:74:c3:29:45:b5:1f:d4:bc:fc:93:ca:b7: b3:53:07:cb:af:fb:a6:ad:8e:01:c4:ab:3e:5d:08:d0:7b:d8: d4:58:78:50:db:95:49:6b:34:19:11:f7:8a:80:51:16:ef:47: ca:14:ad:39:cc:df:63:fb:ff:18:14:0b:2d:2b:0d:49:6d:cb: a3:0d:9a:85:77:61:04:77:20:7f:dc:24:ba:1f:5f:6f:4b:5d: e0:a8:e4:4a:7d:cf:aa:c8:39:1f:2f:f9:a8:36:b6:9d:81:ff: 37:b9:94:12:e7:30:d9:43:ea:62:5c:a6:d8:32:ba:90:82:04: 91:39:42:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Etzn2j1eumeKwIsMJyAhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjYwMTAyMDAxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2U2NjRhNDkyZDkwMzE1ZjM2Y2QzNWM3MjlhYjFhZjVjODhkZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspVpOD6RXc5EbeAqvXx3nnyGpjuT I+3Q6vfN5qvKcUcfBjObzWQq2VwBf1YmhchAXJoj/GQG2OTW3Q1ahjNerJ1bWclL NeHI30thFh9sPk2UySvCXjMsWY2sATBj53xgjOWVD/HRSotvF2PpithXGUa96Uyj AkFpjzIh679BBWzArHFsaUwtwoshu6QKMK031vSxsSQRJPc327lqsMP3puqtqEKN cTwbcP65WdJapcXZSjUdSeK5jZnO3PcL0aWsLuDdWz3Y2za55V7teCWzgxKJatln Y2zen0oDyPh4Vyuoyrsqy5xvQHZkYAH1Cy+RQ9RI45WybHuqJvOGPjO5rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPfmZKSS2QMV82zTXHKasa9ciN00MB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvOS1aa3BKTFpBeFh6Yk5OY2NwcXhyMXlJM1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf8FMA0G CSqGSIb3DQEBCwUAA4IBAQCyF2rhSuDeYK+Vrp10s9riq5vkzjRinWOuow2aOhyP 8ORqs0IIbVviLwRWafSAyAcWo++hdfMka7CFVvUxcF0vI7X4SYbv2phYvMcGHi6d BgzAqA6z8Xl+UbSE2Ea83xc/Az6sCDF5guJgdMJ4+9kfrKh3FIjG5fMMoY+jT2x6 y2s2lcx0wylFtR/UvPyTyrezUwfLr/umrY4BxKs+XQjQe9jUWHhQ25VJazQZEfeK gFEW70fKFK05zN9j+/8YFAstKw1JbcujDZqFd2EEdyB/3CS6H19vS13gqORKfc+q yDkfL/moNradgf83uZQS5zDZQ+piXKbYMrqQggSROULu -----END CERTIFICATE-----Generated at Mon Jan 19 10:36:55 2026 by rpki-client