This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/T9C9mSfUzTgvxqZJLjWuayrILKE.roa File: T9C9mSfUzTgvxqZJLjWuayrILKE.roa (raw, json) Hash identifier: jbBkfXN2XtW57R+Xos+HqO04xHgS8FtWq55RRuKfCzM= Subject key identifier: 4F:D0:BD:99:27:D4:CD:38:2F:C6:A6:49:2E:35:AE:6B:2A:C8:2C:A1 Certificate issuer: /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Certificate serial: 019B78A31F6E20305EA5B35733268BBFA4BC Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/T9C9mSfUzTgvxqZJLjWuayrILKE.roa Signing time: Thu 01 Jan 2026 08:18:34 +0000 ROA not before: Thu 01 Jan 2026 08:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47152 IP address blocks: 109.205.193.0/24 maxlen: 24 2a01:fb02::/34 maxlen: 34 2a01:fb02:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1f:6e:20:30:5e:a5:b3:57:33:26:8b:bf:a4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6 Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fd0bd9927d4cd382fc6a6492e35ae6b2ac82ca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:ad:c1:2e:1e:58:51:44:8d:3f:f4:00:47: ed:80:81:59:09:e9:25:99:f6:61:0e:a3:82:cc:9c: 43:c8:80:7b:c9:af:70:15:21:9e:d3:c1:c7:e6:fa: 27:4e:14:e5:52:28:ca:9f:15:45:3c:21:02:df:66: 4f:fc:ce:f0:f3:c8:28:7f:c6:f5:e7:16:c5:dc:45: ea:80:d8:04:07:cd:ac:f4:3d:ee:6a:43:1f:d4:38: b7:e5:e8:1c:e1:cc:e7:5b:ce:55:5f:a4:31:ee:f5: d7:87:83:f3:ad:8e:3a:7a:30:31:7f:ef:c9:de:bd: b0:f3:64:14:8d:a5:b2:8f:82:d3:ef:7e:b9:0c:5c: c1:09:42:d3:4e:7b:ba:fc:51:78:d2:bc:fc:3b:20: 19:52:48:4b:48:d2:4b:df:2a:0a:5f:90:2f:a4:3e: 1c:ec:52:98:f0:f2:0e:af:bc:88:05:29:c5:a6:5b: 3e:71:12:95:86:b2:fa:54:34:c6:90:d2:a4:4c:9c: 34:49:ef:44:a5:5d:f2:cb:be:b5:81:54:de:3d:44: 31:e7:3a:6b:dc:cd:97:69:f4:9e:d2:39:ac:38:32: f4:e2:4a:a2:db:fd:14:31:c7:81:f0:1f:e1:4e:8a: 9c:92:44:36:03:fb:d0:5c:ad:c5:12:a8:b9:70:b7: 07:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D0:BD:99:27:D4:CD:38:2F:C6:A6:49:2E:35:AE:6B:2A:C8:2C:A1 X509v3 Authority Key Identifier: keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/T9C9mSfUzTgvxqZJLjWuayrILKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.193.0/24 IPv6: 2a01:fb02::/34 2a01:fb02:8000::/34 Signature Algorithm: sha256WithRSAEncryption 46:06:31:ac:59:00:89:24:e4:a0:9b:07:4d:75:52:96:20:e0: 96:90:a1:6b:53:87:74:e7:fa:ab:88:ff:c2:16:de:03:4e:99: 91:a2:1f:62:e3:7a:19:09:98:56:65:2a:0b:b6:fe:a5:75:15: bf:5d:ce:87:f0:32:1c:09:e6:e3:d6:2b:3b:55:32:b5:c3:84: 14:94:4d:ed:db:ff:da:fe:20:47:80:75:92:a7:ed:59:15:cb: cb:17:96:d4:ae:8c:aa:be:9f:f4:cc:30:b8:ad:86:09:5e:cc: 8d:3f:81:00:a0:40:98:20:64:2f:db:be:db:36:36:7d:96:42: f2:2e:3b:97:90:87:cf:83:ca:69:a2:4a:5a:ec:c2:45:41:31: ff:05:39:66:5a:94:ed:9a:19:76:1d:db:b6:ed:c6:6b:46:93: 53:5c:60:22:04:02:5d:d9:5b:3d:d8:28:1a:d5:21:89:43:44: 8e:af:00:6b:43:b8:55:bc:da:63:4c:8f:56:85:7b:aa:c4:53: 94:25:41:1a:a0:01:af:79:7c:f0:2d:77:51:a2:6d:67:62:85: 71:1a:3b:7e:4d:c9:a2:b6:e7:93:67:1f:b3:ac:57:11:8d:92: 76:f7:f6:d3:d7:10:f9:2e:3e:6c:b0:90:1a:9c:0f:2b:8f:a5: 9b:11:66:e7 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4ox9uIDBepbNXMyaLv6S8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0 Yzk1ZTYwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmQwYmQ5OTI3ZDRjZDM4MmZjNmE2NDkyZTM1YWU2YjJhYzgyY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCqtwS4eWFFEjT/0AEftgIFZCekl mfZhDqOCzJxDyIB7ya9wFSGe08HH5vonThTlUijKnxVFPCEC32ZP/M7w88gof8b1 5xbF3EXqgNgEB82s9D3uakMf1Di35egc4cznW85VX6Qx7vXXh4PzrY46ejAxf+/J 3r2w82QUjaWyj4LT7365DFzBCULTTnu6/FF40rz8OyAZUkhLSNJL3yoKX5AvpD4c 7FKY8PIOr7yIBSnFpls+cRKVhrL6VDTGkNKkTJw0Se9EpV3yy761gVTePUQx5zpr 3M2XafSe0jmsODL04kqi2/0UMceB8B/hToqckkQ2A/vQXK3FEqi5cLcHPQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFE/QvZkn1M04L8amSS41rmsqyCyhMB8GA1UdIwQY MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt NmUyZDk3Y2ExNWZmLzEvVDlDOW1TZlV6VGd2eHFaSkxqV3VheXJJTEtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAbc3BMBYE AgACMBADBgYqAfsCAAMGBioB+wKAMA0GCSqGSIb3DQEBCwUAA4IBAQBGBjGsWQCJ JOSgmwdNdVKWIOCWkKFrU4d05/qriP/CFt4DTpmRoh9i43oZCZhWZSoLtv6ldRW/ Xc6H8DIcCebj1is7VTK1w4QUlE3t2//a/iBHgHWSp+1ZFcvLF5bUroyqvp/0zDC4 rYYJXsyNP4EAoECYIGQv277bNjZ9lkLyLjuXkIfPg8ppokpa7MJFQTH/BTlmWpTt mhl2Hdu27cZrRpNTXGAiBAJd2Vs92Cga1SGJQ0SOrwBrQ7hVvNpjTI9WhXuqxFOU JUEaoAGveXzwLXdRom1nYoVxGjt+TcmitueTZx+zrFcRjZJ29/bT1xD5Lj5ssJAa nA8rj6WbEWbn -----END CERTIFICATE-----Generated at Sat Jan 10 22:08:19 2026 by rpki-client