This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/b9NKUp5ebbUGbJkTuNTrmgi1fuc.roa File: b9NKUp5ebbUGbJkTuNTrmgi1fuc.roa (raw, json) Hash identifier: AyGNKQTPsYrYHZ1HAXTaHMHz0cT3+QNKk6bga2VEm6U= Subject key identifier: 6F:D3:4A:52:9E:5E:6D:B5:06:6C:99:13:B8:D4:EB:9A:08:B5:7E:E7 Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019B7C800EB0E64F6D2C033C39F336996785 Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/b9NKUp5ebbUGbJkTuNTrmgi1fuc.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215837 IP address blocks: 104.167.18.0/24 maxlen: 24 2a13:5682:400::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0e:b0:e6:4f:6d:2c:03:3c:39:f3:36:99:67:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fd34a529e5e6db5066c9913b8d4eb9a08b57ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f9:4c:b9:af:5a:8d:5a:94:7a:8c:21:55:88: eb:81:17:9f:f5:a3:fe:af:8b:16:27:3f:5d:7d:33: 25:94:7b:ff:81:dc:43:9d:72:04:4c:bd:3f:58:cd: 9f:4e:91:c5:1e:f7:6b:3a:3d:99:ad:ec:e2:49:f6: ec:5b:79:36:9f:f1:e8:ad:1e:fb:3d:15:89:b9:3d: 9e:94:3f:54:e6:25:83:c2:41:c4:a4:ce:ce:e8:e1: 5e:92:ad:b2:de:31:dd:36:5b:d9:1d:54:a6:1b:09: 25:3f:26:60:b9:73:6b:fd:d0:c3:6b:31:c2:6f:ba: 64:6c:a7:56:a1:e6:c9:b9:41:c6:3e:51:f5:51:df: 23:ce:c0:d7:9b:05:1b:d7:e5:b7:59:35:ce:3c:1b: 03:65:53:32:19:5c:6b:9c:ee:ff:c6:a5:8e:bc:f0: 88:a8:17:fd:d5:d8:78:74:13:26:db:2f:b9:56:ee: e1:23:b6:da:b2:a1:e0:34:89:6c:6b:60:c0:ea:a6: 71:a6:2d:5d:cf:79:bf:7c:6c:60:96:cf:2c:40:35: 8a:2f:db:1b:5a:ba:c5:82:e9:0b:05:f1:18:c9:c4: b8:04:8f:fe:bb:d0:bf:42:e6:44:e5:be:7c:bc:05: 33:3c:cc:f0:18:c2:20:52:3a:87:e3:3a:f8:46:44: cd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D3:4A:52:9E:5E:6D:B5:06:6C:99:13:B8:D4:EB:9A:08:B5:7E:E7 X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/b9NKUp5ebbUGbJkTuNTrmgi1fuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.167.18.0/24 IPv6: 2a13:5682:400::/44 Signature Algorithm: sha256WithRSAEncryption 67:5a:f7:c1:ab:fd:a4:f2:12:f0:3b:05:39:75:3a:c1:f4:0a: 61:f3:8e:56:a3:73:9d:be:ae:88:f9:51:0a:b4:6e:0e:e4:a8: ec:e8:f8:49:aa:38:aa:e3:3c:13:56:85:d4:53:56:a7:b3:2c: 04:20:bb:ac:74:19:af:19:ea:33:96:93:11:47:ac:ff:d5:3e: d6:81:e4:6b:93:c4:8d:73:49:23:6b:b8:29:0e:78:60:ae:ae: fe:f6:83:66:fe:e3:c2:a7:a4:5b:d3:41:1e:79:a4:d3:00:9c: ad:7f:88:4d:7e:5a:76:77:e0:13:3c:c0:5d:24:52:76:e2:7b: 93:3a:b9:44:6e:78:89:0a:ae:0c:41:7f:32:13:78:54:8c:23: b1:82:2a:92:46:16:87:22:b4:55:46:6e:b0:75:f8:8f:c4:d2: d0:d5:02:5e:29:b0:d2:b0:aa:3e:19:35:c8:62:d3:0f:2b:de: 26:27:5f:a1:78:dd:bf:a3:16:f5:21:c0:a3:26:4e:39:bc:29: 92:d1:fd:43:9c:e3:c1:af:ab:f8:74:e1:2e:86:43:8d:c4:99: 45:94:a0:c4:b9:da:6c:b8:a3:83:aa:c8:5d:31:28:6c:27:4a: 97:07:38:86:23:0a:8f:5b:ba:de:77:fe:dc:d8:85:ba:a7:ac: 2e:51:37:5b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gA6w5k9tLAM8OfM2mWeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmQzNGE1MjllNWU2ZGI1MDY2Yzk5MTNiOGQ0ZWI5YTA4YjU3ZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vlMua9ajVqUeowhVYjrgRef9aP+ r4sWJz9dfTMllHv/gdxDnXIETL0/WM2fTpHFHvdrOj2ZreziSfbsW3k2n/HorR77 PRWJuT2elD9U5iWDwkHEpM7O6OFekq2y3jHdNlvZHVSmGwklPyZguXNr/dDDazHC b7pkbKdWoebJuUHGPlH1Ud8jzsDXmwUb1+W3WTXOPBsDZVMyGVxrnO7/xqWOvPCI qBf91dh4dBMm2y+5Vu7hI7basqHgNIlsa2DA6qZxpi1dz3m/fGxgls8sQDWKL9sb WrrFgukLBfEYycS4BI/+u9C/QuZE5b58vAUzPMzwGMIgUjqH4zr4RkTNnQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG/TSlKeXm21BmyZE7jU65oItX7nMB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEvYjlOS1VwNWViYlVHYkprVHVOVHJtZ2kxZnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAaKcSMA8E AgACMAkDBwQqE1aCBAAwDQYJKoZIhvcNAQELBQADggEBAGda98Gr/aTyEvA7BTl1 OsH0CmHzjlajc52+roj5UQq0bg7kqOzo+EmqOKrjPBNWhdRTVqezLAQgu6x0Ga8Z 6jOWkxFHrP/VPtaB5GuTxI1zSSNruCkOeGCurv72g2b+48KnpFvTQR55pNMAnK1/ iE1+WnZ34BM8wF0kUnbie5M6uURueIkKrgxBfzITeFSMI7GCKpJGFocitFVGbrB1 +I/E0tDVAl4psNKwqj4ZNchi0w8r3iYnX6F43b+jFvUhwKMmTjm8KZLR/UOc48Gv q/h04S6GQ43EmUWUoMS52my4o4OqyF0xKGwnSpcHOIYjCo9but53/tzYhbqnrC5R N1s= -----END CERTIFICATE-----Generated at Thu Jan 22 01:13:32 2026 by rpki-client