This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/9y9xEsQB6NNcfJcC_zJMGYUK_PU.roa File: 9y9xEsQB6NNcfJcC_zJMGYUK_PU.roa (raw, json) Hash identifier: Xf/CyTLllj6nPGw8RigMPhz1XPn5cXi3fiwBur0KTbw= Subject key identifier: F7:2F:71:12:C4:01:E8:D3:5C:7C:97:02:FF:32:4C:19:85:0A:FC:F5 Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2 Certificate serial: 019B7E386E5997AB29FCCBF205952328D321 Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/9y9xEsQB6NNcfJcC_zJMGYUK_PU.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214396 IP address blocks: 193.42.32.0/23 maxlen: 23 2001:3600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6e:59:97:ab:29:fc:cb:f2:05:95:23:28:d3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2 Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f72f7112c401e8d35c7c9702ff324c19850afcf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:33:7e:79:49:b2:67:51:3a:a6:90:24:47: 29:5d:73:54:2c:7a:c8:2e:28:8c:7e:ab:5d:c8:3b: 22:62:e8:d0:20:69:b4:9b:d4:04:75:a5:c6:b5:aa: 33:24:61:78:cb:49:c1:ee:ea:02:61:c6:b2:97:5c: 06:94:68:e5:9e:a7:f2:37:07:e0:1c:ca:ac:21:ce: 57:b2:1d:8c:5d:0c:7f:3f:ff:e7:49:65:50:dc:7d: bc:38:74:20:e5:c5:a8:ae:22:41:e9:b6:6d:35:22: d6:17:0e:84:f7:f4:5c:73:84:09:d9:1c:44:77:8f: e4:99:82:bd:ec:67:f5:b7:6a:27:e0:78:e3:52:93: 7b:2f:9e:aa:d5:b3:58:c6:6d:52:df:12:8d:99:66: 07:76:83:03:a5:e1:b3:1e:0e:83:77:20:2e:3c:c8: fd:f1:97:3a:eb:8c:f6:80:1f:81:bc:ab:73:71:d2: 2c:04:19:a4:8e:70:8a:a8:1e:04:67:18:7a:16:1c: b4:bf:5f:81:61:c3:48:2b:0d:a0:bc:0c:48:f3:f8: f6:70:d3:ea:30:2e:44:10:27:c0:f4:d3:5f:10:69: 02:13:a0:b2:f2:21:28:c1:de:45:04:0f:61:77:b7: b3:99:c0:09:c3:74:4f:ef:fe:ca:88:43:6d:92:48: 2e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2F:71:12:C4:01:E8:D3:5C:7C:97:02:FF:32:4C:19:85:0A:FC:F5 X509v3 Authority Key Identifier: keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/9y9xEsQB6NNcfJcC_zJMGYUK_PU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.32.0/23 IPv6: 2001:3600::/32 Signature Algorithm: sha256WithRSAEncryption 54:a8:f5:de:b0:ba:19:c4:24:ae:02:c8:ee:19:06:f4:a0:1c: 54:14:e6:a3:08:9f:14:de:37:42:73:03:bf:d5:40:83:97:fd: 26:5d:27:68:10:14:ea:c7:62:fd:5d:8c:34:be:b0:2e:0a:03: c3:df:d5:9c:4d:93:87:c2:c6:b2:eb:65:cf:62:33:c0:a3:b2: c6:07:38:75:b6:f7:6f:a2:1e:3e:07:43:5b:94:64:41:03:fc: 2f:5f:b3:ae:08:9b:14:af:82:83:93:c0:d9:8d:89:0f:6f:7f: 35:30:a9:ca:be:70:5d:93:7a:50:f0:c0:dd:c8:ab:2b:63:0e: 8c:46:d6:c5:ad:4b:48:5d:f4:5e:50:55:0c:a8:1a:9a:0a:70: c3:ff:c8:75:10:13:98:b6:4d:50:5f:c0:49:b5:8a:cd:c0:60: 30:b9:dd:21:2e:0b:3b:03:52:ff:89:d2:e5:ce:5e:f5:0e:ec: 3b:21:b1:9a:70:3e:b0:fd:a0:e4:77:b9:87:3c:38:f4:00:05: c1:ff:a4:c5:37:0c:62:2b:80:07:48:8c:7b:a8:eb:f9:61:1d: a0:df:86:ab:c1:79:ec:7c:62:38:99:52:3b:b7:b0:ae:c3:19: 7b:c7:6b:1e:4e:8b:33:ab:40:9f:f9:fa:e7:d7:13:10:1f:3c: b0:09:f8:e1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OG5Zl6sp/MvyBZUjKNMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzdkZWZmMDU1YTUxZDkzZTFlZDJmN2M3MzIxN2Q3NjA3 YThjZjIwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzJmNzExMmM0MDFlOGQzNWM3Yzk3MDJmZjMyNGMxOTg1MGFmY2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqczfnlJsmdROqaQJEcpXXNULHrI LiiMfqtdyDsiYujQIGm0m9QEdaXGtaozJGF4y0nB7uoCYcayl1wGlGjlnqfyNwfg HMqsIc5Xsh2MXQx/P//nSWVQ3H28OHQg5cWoriJB6bZtNSLWFw6E9/Rcc4QJ2RxE d4/kmYK97Gf1t2on4HjjUpN7L56q1bNYxm1S3xKNmWYHdoMDpeGzHg6DdyAuPMj9 8Zc664z2gB+BvKtzcdIsBBmkjnCKqB4EZxh6Fhy0v1+BYcNIKw2gvAxI8/j2cNPq MC5EECfA9NNfEGkCE6Cy8iEowd5FBA9hd7ezmcAJw3RP7/7KiENtkkguqQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPcvcRLEAejTXHyXAv8yTBmFCvz1MB8GA1UdIwQY MBaAFJo33v8FWlHZPh7S98cyF9dgeozyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80NzFlODktZDZhNS00OTMzLWEzZTMt ODAyNjMwNTE2ZjA5LzEvOXk5eEVzUUI2Tk5jZkpjQ196Sk1HWVVLX1BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS80NzFlODktZDZhNS00OTMzLWEzZTMtODAyNjMwNTE2ZjA5 LzEvbWpmZV93VmFVZGstSHRMM3h6SVgxMkI2alBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwSogMA0E AgACMAcDBQAgATYAMA0GCSqGSIb3DQEBCwUAA4IBAQBUqPXesLoZxCSuAsjuGQb0 oBxUFOajCJ8U3jdCcwO/1UCDl/0mXSdoEBTqx2L9XYw0vrAuCgPD39WcTZOHwsay 62XPYjPAo7LGBzh1tvdvoh4+B0NblGRBA/wvX7OuCJsUr4KDk8DZjYkPb381MKnK vnBdk3pQ8MDdyKsrYw6MRtbFrUtIXfReUFUMqBqaCnDD/8h1EBOYtk1QX8BJtYrN wGAwud0hLgs7A1L/idLlzl71Duw7IbGacD6w/aDkd7mHPDj0AAXB/6TFNwxiK4AH SIx7qOv5YR2g34arwXnsfGI4mVI7t7Cuwxl7x2seToszq0Cf+frn1xMQHzywCfjh -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:25 2026 by rpki-client