This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/K9jBWJnPFWyovoVVDNOHvTVTaLM.roa File: K9jBWJnPFWyovoVVDNOHvTVTaLM.roa (raw, json) Hash identifier: K3SUQLFC2Lr1L1GFZeysffhTkVWpSG3Bk2hiWWGhkrI= Subject key identifier: 2B:D8:C1:58:99:CF:15:6C:A8:BE:85:55:0C:D3:87:BD:35:53:68:B3 Certificate issuer: /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3 Certificate serial: 019B7EA67A61B6413C0FE7A3FB5819142742 Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/K9jBWJnPFWyovoVVDNOHvTVTaLM.roa Signing time: Fri 02 Jan 2026 12:19:57 +0000 ROA not before: Fri 02 Jan 2026 12:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206348 IP address blocks: 89.47.8.0/23 maxlen: 24 2a12:bb40::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:7a:61:b6:41:3c:0f:e7:a3:fb:58:19:14:27:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3 Validity Not Before: Jan 2 12:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bd8c15899cf156ca8be85550cd387bd355368b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:8c:a0:d3:95:f8:93:ec:c9:86:e9:f2:f6: e7:a8:03:a6:f3:75:31:d8:a6:1b:e3:c4:0e:67:9e: c8:1b:b2:6e:2f:2e:6e:29:a5:c4:c1:8f:5f:e4:0a: c3:71:95:2c:ec:52:89:84:21:cb:aa:8e:3b:fb:29: c7:3c:0d:57:e1:9c:57:06:6d:56:b4:1b:1e:d3:4e: cc:f6:8e:10:dc:5a:1d:01:8b:17:b5:e1:ae:b1:4b: f4:ac:da:b6:6f:4b:64:2d:6d:9f:cc:27:07:99:06: 10:c1:d1:9b:a2:aa:5d:6c:00:03:32:07:9b:c5:c6: c0:38:c6:41:b8:38:ab:c1:46:03:73:e5:0d:f8:ef: e3:14:ea:0e:d2:bc:17:48:c4:12:8b:9f:f5:11:d7: ca:24:25:80:6a:1b:6d:7a:0b:6f:60:00:ff:a4:af: 13:a5:cd:73:f9:de:6d:7d:62:73:8a:61:f1:43:dc: 36:24:db:e4:ac:d6:83:a8:23:8f:e4:09:fd:e8:a2: 9b:67:73:c3:0c:51:93:27:6e:da:76:3a:1b:5d:15: 41:b9:8d:48:85:2a:ef:79:90:45:6b:3f:d1:42:ff: 66:ad:a2:82:07:81:9d:81:1a:40:75:49:99:f3:23: 0f:f2:9f:20:54:6b:1f:b7:a3:5b:83:f6:f8:e8:a4: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D8:C1:58:99:CF:15:6C:A8:BE:85:55:0C:D3:87:BD:35:53:68:B3 X509v3 Authority Key Identifier: keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/K9jBWJnPFWyovoVVDNOHvTVTaLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.47.8.0/23 IPv6: 2a12:bb40::/29 Signature Algorithm: sha256WithRSAEncryption 31:f2:f9:79:34:68:71:ae:66:e1:1c:c8:1f:d0:e5:9b:70:f2: 9e:d5:bb:10:2f:6d:6a:07:65:84:69:e7:85:63:1a:08:f7:1f: ee:a8:39:f5:13:f6:13:c8:60:c5:c8:f5:05:8f:a4:23:f7:af: ab:17:b8:9f:1b:07:57:f3:43:5f:62:6b:69:3b:51:b4:69:96: 6f:62:bd:a0:94:7c:2e:a1:ad:37:ec:db:b0:50:09:11:dd:0e: 56:07:8d:49:6e:99:56:b6:54:95:a9:4a:ec:55:43:4b:02:5b: 23:d1:9a:71:a8:a5:f3:b8:da:b9:00:40:3e:70:46:f3:07:99: c9:53:f2:00:65:2c:34:24:7c:17:63:16:2d:01:f1:0f:73:2e: ad:1a:fd:65:2d:14:09:67:ed:fb:0f:2e:ce:2b:61:1b:6f:a7: ea:08:2c:e0:96:10:49:a3:08:18:07:bb:a0:56:fd:da:18:8f: 60:fb:88:c5:42:d4:6c:70:8b:67:01:68:d2:11:85:ae:78:3e: a9:d5:b7:55:81:c4:9c:c3:38:d0:09:5c:a3:46:b0:1a:d7:7a: 0e:60:26:a2:3e:96:df:fd:35:89:e7:f1:2a:7c:57:f7:64:6b: ba:04:54:50:f4:3a:b5:df:7e:05:87:40:af:01:4b:2b:93:c6: fa:e3:53:0d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pnphtkE8D+ej+1gZFCdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliYjM1MGE5MDVkZjNmZGJiYzI0NTZkNWM4MWMyZjIwOWFl NzUyZjMwHhcNMjYwMTAyMTIxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmQ4YzE1ODk5Y2YxNTZjYThiZTg1NTUwY2QzODdiZDM1NTM2OGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCqMoNOV+JPsyYbp8vbnqAOm83Ux 2KYb48QOZ57IG7JuLy5uKaXEwY9f5ArDcZUs7FKJhCHLqo47+ynHPA1X4ZxXBm1W tBse007M9o4Q3FodAYsXteGusUv0rNq2b0tkLW2fzCcHmQYQwdGboqpdbAADMgeb xcbAOMZBuDirwUYDc+UN+O/jFOoO0rwXSMQSi5/1EdfKJCWAahttegtvYAD/pK8T pc1z+d5tfWJzimHxQ9w2JNvkrNaDqCOP5An96KKbZ3PDDFGTJ27adjobXRVBuY1I hSrveZBFaz/RQv9mraKCB4GdgRpAdUmZ8yMP8p8gVGsft6Nbg/b46KS1JwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCvYwViZzxVsqL6FVQzTh701U2izMB8GA1UdIwQY MBaAFJuzUKkF3z/bvCRW1cgcLyCa51LzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYt OWMxZjY5YTI0MmJhLzEvSzlqQldKblBGV3lvdm9WVkROT0h2VFZUYUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iMTRkZGQtYWZkYS00MDhjLTljNDYtOWMxZjY5YTI0MmJh LzEvbTdOUXFRWGZQOXU4SkZiVnlCd3ZJSnJuVXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBWS8IMA0E AgACMAcDBQMqErtAMA0GCSqGSIb3DQEBCwUAA4IBAQAx8vl5NGhxrmbhHMgf0OWb cPKe1bsQL21qB2WEaeeFYxoI9x/uqDn1E/YTyGDFyPUFj6Qj96+rF7ifGwdX80Nf YmtpO1G0aZZvYr2glHwuoa037NuwUAkR3Q5WB41JbplWtlSVqUrsVUNLAlsj0Zpx qKXzuNq5AEA+cEbzB5nJU/IAZSw0JHwXYxYtAfEPcy6tGv1lLRQJZ+37Dy7OK2Eb b6fqCCzglhBJowgYB7ugVv3aGI9g+4jFQtRscItnAWjSEYWueD6p1bdVgcScwzjQ CVyjRrAa13oOYCaiPpbf/TWJ5/EqfFf3ZGu6BFRQ9Dq1334Fh0CvAUsrk8b641MN -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:20 2026 by rpki-client