This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9ApfopST5XecrXNX5W_Af-tjDIg.roa File: 9ApfopST5XecrXNX5W_Af-tjDIg.roa (raw, json) Hash identifier: RHQdxjL8Bu7HEwKPvDMBrwq6IiTNX6h4q2f8yg/1TnY= Subject key identifier: F4:0A:5F:A2:94:93:E5:77:9C:AD:73:57:E5:6F:C0:7F:EB:63:0C:88 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5AA010FBF91824451C029996E7CDA6 Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9ApfopST5XecrXNX5W_Af-tjDIg.roa Signing time: Thu 01 Jan 2026 16:18:38 +0000 ROA not before: Thu 01 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 83.147.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a0:10:fb:f9:18:24:45:1c:02:99:96:e7:cd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f40a5fa29493e5779cad7357e56fc07feb630c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:82:87:9e:e9:3b:28:e8:d6:69:c0:9b:92: 02:68:21:95:a2:7f:54:a6:c6:a9:14:49:33:4c:93: 10:25:24:bd:05:00:24:ed:10:96:55:eb:c4:be:29: 14:69:4f:9f:7b:ce:1e:8f:57:c5:4f:95:54:5f:4a: 8c:c3:92:f9:fd:78:96:97:2e:e1:24:dd:fb:db:61: 45:bd:55:97:d8:a3:3f:f8:66:fe:09:95:ba:a3:62: 1f:4d:60:94:ee:d9:d3:9e:54:c6:34:3a:70:42:46: 4a:47:33:82:aa:d9:a7:f8:0c:17:95:c3:3e:f2:c2: 84:36:06:5b:65:bb:1c:e7:5b:e1:60:04:e3:0a:67: 76:1b:5a:57:69:e0:55:ec:c5:82:bd:4f:0f:69:1d: 0e:ec:d5:8c:ff:84:3d:59:e7:ad:1e:ae:0f:a5:56: 0f:f9:ee:bb:45:63:1f:e8:4e:83:23:48:d7:81:35: 92:75:0f:ad:2f:d6:b3:bb:1a:9e:c1:dc:c8:7e:47: fa:80:e9:8d:cd:f0:36:3c:22:01:72:72:ae:9a:96: 52:33:91:29:cb:4c:3e:de:bc:17:de:8f:a9:63:5d: bb:97:66:a0:f4:93:65:c6:0f:e6:6f:79:04:d1:1b: bc:4e:98:91:d0:24:59:f2:f1:8d:73:04:9b:b3:f0: 7b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0A:5F:A2:94:93:E5:77:9C:AD:73:57:E5:6F:C0:7F:EB:63:0C:88 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9ApfopST5XecrXNX5W_Af-tjDIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.44.0/22 Signature Algorithm: sha256WithRSAEncryption c4:89:86:70:fc:2a:79:b6:17:bf:3a:76:02:d9:04:c1:18:ea: f0:08:b1:75:d9:72:d4:f0:9a:ae:37:f7:dd:93:22:31:04:53: 09:aa:1a:1d:35:a6:f9:1b:89:ee:db:9d:86:1e:73:1c:bd:63: 86:91:34:ae:be:75:32:18:1d:4a:43:4d:07:29:ae:fd:57:a8: d7:bb:06:9b:6f:80:4c:c7:dc:42:11:ac:73:e6:82:0d:a0:1b: d2:09:4e:df:82:12:21:49:8e:16:5f:1e:8c:1b:f3:ee:4f:81: da:6d:35:1d:28:84:b7:ad:40:85:f4:14:02:67:c5:8c:e3:a2: 63:76:77:29:77:5f:b5:98:e6:e0:74:f9:f0:36:b2:4f:f5:e6: e5:bb:39:2c:c8:94:6c:32:5b:a6:a1:d9:dd:07:cc:86:bb:54: 84:4b:14:c8:34:f4:82:53:39:07:59:07:74:41:79:b6:65:b0: 7e:80:90:c6:30:ac:69:8c:90:d9:7a:6f:82:cb:54:8d:fd:d8: da:71:a0:f0:dc:18:77:bb:b9:71:4c:60:de:1c:02:45:62:e5: f3:f8:e9:39:5f:6b:79:92:d5:fd:e6:8a:e9:86:eb:dc:d4:57: 33:dc:c2:31:76:08:7d:25:06:e3:c1:e9:ce:98:bc:3a:1c:5f: 2e:0e:ef:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqAQ+/kYJEUcApmW582mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDBhNWZhMjk0OTNlNTc3OWNhZDczNTdlNTZmYzA3ZmViNjMwYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnmCh57pOyjo1mnAm5ICaCGVon9U psapFEkzTJMQJSS9BQAk7RCWVevEvikUaU+fe84ej1fFT5VUX0qMw5L5/XiWly7h JN3722FFvVWX2KM/+Gb+CZW6o2IfTWCU7tnTnlTGNDpwQkZKRzOCqtmn+AwXlcM+ 8sKENgZbZbsc51vhYATjCmd2G1pXaeBV7MWCvU8PaR0O7NWM/4Q9WeetHq4PpVYP +e67RWMf6E6DI0jXgTWSdQ+tL9azuxqewdzIfkf6gOmNzfA2PCIBcnKumpZSM5Ep y0w+3rwX3o+pY127l2ag9JNlxg/mb3kE0Ru8TpiR0CRZ8vGNcwSbs/B7rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPQKX6KUk+V3nK1zV+VvwH/rYwyIMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvOUFwZm9wU1Q1WGVjclhOWDVXX0FmLXRqRElnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MsMA0G CSqGSIb3DQEBCwUAA4IBAQDEiYZw/Cp5the/OnYC2QTBGOrwCLF12XLU8JquN/fd kyIxBFMJqhodNab5G4nu252GHnMcvWOGkTSuvnUyGB1KQ00HKa79V6jXuwabb4BM x9xCEaxz5oINoBvSCU7fghIhSY4WXx6MG/PuT4HabTUdKIS3rUCF9BQCZ8WM46Jj dncpd1+1mObgdPnwNrJP9ebluzksyJRsMlumodndB8yGu1SESxTINPSCUzkHWQd0 QXm2ZbB+gJDGMKxpjJDZem+Cy1SN/djacaDw3Bh3u7lxTGDeHAJFYuXz+Ok5X2t5 ktX95orphuvc1Fcz3MIxdgh9JQbjwenOmLw6HF8uDu/S -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:39 2026 by rpki-client