This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/9As_XsenM5-QTmM1X_BCn4yPeqA.roa File: 9As_XsenM5-QTmM1X_BCn4yPeqA.roa (raw, json) Hash identifier: Dxtnn5XYXXhgv4gymsVhkJbLhB4m0DGlBCGRadS6kHQ= Subject key identifier: F4:0B:3F:5E:C7:A7:33:9F:90:4E:63:35:5F:F0:42:9F:8C:8F:7A:A0 Certificate issuer: /CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e Certificate serial: 019B7D5BA3D49A829C8E0ECFD0F93C5E764F Authority key identifier: CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/9As_XsenM5-QTmM1X_BCn4yPeqA.roa Signing time: Fri 02 Jan 2026 06:18:36 +0000 ROA not before: Fri 02 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 185.9.53.0/24 maxlen: 24 185.203.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.mft rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:a3:d4:9a:82:9c:8e:0e:cf:d0:f9:3c:5e:76:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce741e7de657e4a10f93ca92c517a81b2c0b251e Validity Not Before: Jan 2 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f40b3f5ec7a7339f904e63355ff0429f8c8f7aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:07:9e:3b:e8:5d:a6:e0:c3:77:53:c4:39: fd:94:b8:e1:b4:01:6c:7c:a5:f2:40:68:11:a9:2a: 90:48:77:1d:56:3e:77:45:5d:36:2a:7e:a4:d7:fb: 57:87:6e:5c:36:fa:d7:bd:85:57:0a:d5:b7:ac:bc: d1:20:d9:e9:90:3c:0e:92:f8:55:5e:88:12:38:c3: 76:d3:98:27:c6:6f:53:10:0a:67:36:4c:93:3a:d2: 6b:c0:ae:b9:88:89:b7:4b:39:79:87:47:4d:83:a2: 9a:e3:2a:8e:0d:5f:15:79:12:bf:d1:e5:36:a2:9a: 57:e8:34:3b:2a:37:a8:a1:cd:76:1d:d0:a9:43:a6: e6:0e:e5:92:49:3e:96:b5:b7:c5:44:04:0d:52:94: 26:4e:a5:07:c8:8d:b6:ac:77:92:04:9d:03:cf:50: 30:54:d6:e6:62:56:c5:6d:c4:f2:3f:a6:44:1c:a6: 18:b7:d1:3c:8c:a3:e0:e3:d1:78:db:a1:c4:79:e9: e4:30:71:91:98:21:63:68:42:8e:3d:6d:b7:9f:a8: 7f:74:3b:8e:59:b0:6e:b1:fa:70:62:c9:ad:dd:02: dd:d1:40:b4:6c:56:b4:e0:6a:54:74:8a:ab:08:1d: 1b:3a:e1:fb:00:b9:6f:fe:d4:c6:c7:9a:06:a2:29: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0B:3F:5E:C7:A7:33:9F:90:4E:63:35:5F:F0:42:9F:8C:8F:7A:A0 X509v3 Authority Key Identifier: keyid:CE:74:1E:7D:E6:57:E4:A1:0F:93:CA:92:C5:17:A8:1B:2C:0B:25:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znQefeZX5KEPk8qSxReoGywLJR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/9As_XsenM5-QTmM1X_BCn4yPeqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c9a9d1-b13c-403d-bd1c-d12a372f5173/1/znQefeZX5KEPk8qSxReoGywLJR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.53.0/24 185.203.88.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:66:f1:43:12:1b:5d:55:1b:d0:69:01:b0:7d:02:0e:6f:0f: f4:56:42:f1:93:e1:1b:d5:67:0c:36:46:52:fb:2a:43:43:59: 38:2b:f1:c6:fc:b6:fc:fb:0e:10:d6:97:85:57:b9:59:61:97: 40:e0:c0:fb:58:48:6e:df:55:43:fe:00:4e:08:ba:eb:e8:39: 7f:20:99:d0:4e:41:13:ad:5a:5f:30:80:4d:21:75:ae:38:85: d9:b6:b3:77:72:ed:f8:90:ba:66:c5:15:a5:b2:28:5d:02:e6: 96:b2:b7:86:4e:12:5a:81:b7:ea:0b:5a:a7:f5:dd:b7:c4:8a: 37:f7:e6:3c:d1:21:0c:19:ec:9c:05:79:8c:ea:16:92:2e:3d: c6:be:0e:0a:04:89:d0:9e:04:4d:3f:af:aa:7c:2c:aa:70:8a: fa:6f:80:87:ea:d3:d8:83:4d:fc:e2:c8:9a:bb:20:04:ad:de: f3:be:b2:ae:06:0f:01:54:9e:70:f5:17:69:c7:af:b5:6e:04: 1f:86:fd:df:58:7d:e0:9a:cf:ad:2c:27:97:b2:d5:e0:b3:9c: 92:c2:d1:0b:32:c7:09:f2:ab:d1:89:ef:d0:bb:95:a5:b3:10: c0:c6:f3:49:4e:51:57:9a:38:ca:a7:48:c4:66:96:e9:2a:00: 88:a3:3c:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9W6PUmoKcjg7P0Pk8XnZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzQxZTdkZTY1N2U0YTEwZjkzY2E5MmM1MTdhODFiMmMw YjI1MWUwHhcNMjYwMTAyMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDBiM2Y1ZWM3YTczMzlmOTA0ZTYzMzU1ZmYwNDI5ZjhjOGY3YWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aEHnjvoXabgw3dTxDn9lLjhtAFs fKXyQGgRqSqQSHcdVj53RV02Kn6k1/tXh25cNvrXvYVXCtW3rLzRINnpkDwOkvhV XogSOMN205gnxm9TEApnNkyTOtJrwK65iIm3Szl5h0dNg6Ka4yqODV8VeRK/0eU2 oppX6DQ7Kjeooc12HdCpQ6bmDuWSST6WtbfFRAQNUpQmTqUHyI22rHeSBJ0Dz1Aw VNbmYlbFbcTyP6ZEHKYYt9E8jKPg49F426HEeenkMHGRmCFjaEKOPW23n6h/dDuO WbBusfpwYsmt3QLd0UC0bFa04GpUdIqrCB0bOuH7ALlv/tTGx5oGoinqRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPQLP17HpzOfkE5jNV/wQp+Mj3qgMB8GA1UdIwQY MBaAFM50Hn3mV+ShD5PKksUXqBssCyUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMt ZDEyYTM3MmY1MTczLzEvOUFzX1hzZW5NNS1RVG1NMVhfQkNuNHlQZXFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9jOWE5ZDEtYjEzYy00MDNkLWJkMWMtZDEyYTM3MmY1MTcz LzEvem5RZWZlWlg1S0VQazhxU3hSZW9HeXdMSlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuQk1AwQA uctYMA0GCSqGSIb3DQEBCwUAA4IBAQB+ZvFDEhtdVRvQaQGwfQIObw/0VkLxk+Eb 1WcMNkZS+ypDQ1k4K/HG/Lb8+w4Q1peFV7lZYZdA4MD7WEhu31VD/gBOCLrr6Dl/ IJnQTkETrVpfMIBNIXWuOIXZtrN3cu34kLpmxRWlsihdAuaWsreGThJagbfqC1qn 9d23xIo39+Y80SEMGeycBXmM6haSLj3Gvg4KBInQngRNP6+qfCyqcIr6b4CH6tPY g0384siauyAErd7zvrKuBg8BVJ5w9Rdpx6+1bgQfhv3fWH3gms+tLCeXstXgs5yS wtELMscJ8qvRie/Qu5WlsxDAxvNJTlFXmjjKp0jEZpbpKgCIozyc -----END CERTIFICATE-----Generated at Tue Jan 27 08:30:42 2026 by rpki-client