This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/m9BYl4Aw2fbYyqmFkKXBhcADqBg.roa File: m9BYl4Aw2fbYyqmFkKXBhcADqBg.roa (raw, json) Hash identifier: raOzCXfv2gIYL0xQb0f/9ZqowcC2F2r8bzgcoks8gKQ= Subject key identifier: 9B:D0:58:97:80:30:D9:F6:D8:CA:A9:85:90:A5:C1:85:C0:03:A8:18 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5A9B56FCAD39707D0ED07579CB4CBA Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/m9BYl4Aw2fbYyqmFkKXBhcADqBg.roa Signing time: Thu 01 Jan 2026 16:18:36 +0000 ROA not before: Thu 01 Jan 2026 16:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 83.147.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9b:56:fc:ad:39:70:7d:0e:d0:75:79:cb:4c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bd058978030d9f6d8caa98590a5c185c003a818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:f2:90:fc:97:5f:5c:5c:b0:46:a6:61:7e: bf:85:04:84:11:66:2e:bd:1c:db:92:ff:bf:64:b4: 7c:13:a2:c9:dc:a4:30:5f:3c:07:55:fe:a6:6d:d0: c0:3c:02:d1:47:14:06:b9:66:3f:22:91:7a:37:69: 15:cf:85:39:1b:10:80:ee:72:db:91:77:b6:37:d1: 06:06:77:df:96:32:3d:95:b1:06:69:81:80:52:af: 60:ad:bf:d1:03:ca:f9:4d:b1:33:7c:17:b6:2d:5e: 9c:a9:3d:6d:c8:56:25:96:60:b7:1f:e8:36:5f:4d: a5:2f:02:bd:70:98:55:e4:81:5c:51:cf:66:64:11: 1b:bd:f0:11:46:63:36:d1:08:87:19:f0:88:bd:6c: cd:7e:3c:3e:7a:d0:cd:2a:c1:e2:2b:f8:24:01:68: 92:14:c3:89:3d:8b:b8:6a:61:d1:db:22:ab:97:09: c2:0e:cb:1f:67:6a:bd:41:1c:6d:97:89:d4:db:a0: db:df:ff:2e:23:cf:90:f3:ae:f9:bb:41:a3:af:0b: 8c:cc:b1:0e:f3:6c:0e:02:fd:27:9d:91:fa:06:da: 91:bb:bc:20:3d:20:4f:ad:56:aa:76:f1:1e:bf:aa: 9c:fc:67:2d:36:d9:92:8b:88:b9:26:04:0a:6b:99: 9f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D0:58:97:80:30:D9:F6:D8:CA:A9:85:90:A5:C1:85:C0:03:A8:18 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/m9BYl4Aw2fbYyqmFkKXBhcADqBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.8.0/22 Signature Algorithm: sha256WithRSAEncryption 39:4e:9f:ed:89:50:6d:a5:74:aa:1a:f6:76:95:7b:2a:db:0b: 66:97:48:47:9e:70:94:a6:06:0b:ad:d5:c5:93:44:47:f3:b7: ee:26:7f:87:88:56:95:93:40:e4:3c:9c:c5:11:bd:0e:d9:ca: 44:c5:ec:33:05:1b:a1:f9:3e:35:8d:77:dd:bc:c8:f4:b0:03: be:e6:59:ef:a4:fe:55:c4:49:6a:2b:b8:eb:cf:87:74:32:20: b9:93:94:da:ca:19:4b:ff:86:4c:fd:d1:cf:78:1f:47:06:32: 9d:9d:9d:c2:44:f3:c2:da:97:91:bb:eb:8f:d4:de:c0:79:fb: 27:77:1d:e0:cd:bd:8e:da:f4:08:a4:9f:9d:ca:a7:6f:08:45: c9:c9:15:58:6d:dc:53:2d:b0:24:e4:47:1a:f0:71:02:b5:e4: 95:4c:fd:bb:4f:00:69:77:80:57:b9:a0:13:6a:19:da:16:1a: f1:d3:c9:1c:29:af:3a:e5:69:33:b8:0b:f6:84:d0:4a:2b:68: e6:54:a4:7d:52:e5:e6:3b:16:81:bb:2e:79:8b:89:03:f7:5c: 3c:62:ff:dd:b6:cb:5d:a4:b5:e8:d1:e7:e9:41:67:17:2a:d3: 14:6f:c3:2e:7a:b8:29:0c:de:ee:77:0a:20:85:a9:27:1a:22: 12:33:a2:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WptW/K05cH0O0HV5y0y6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmQwNTg5NzgwMzBkOWY2ZDhjYWE5ODU5MGE1YzE4NWMwMDNhODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXzykPyXX1xcsEamYX6/hQSEEWYu vRzbkv+/ZLR8E6LJ3KQwXzwHVf6mbdDAPALRRxQGuWY/IpF6N2kVz4U5GxCA7nLb kXe2N9EGBnffljI9lbEGaYGAUq9grb/RA8r5TbEzfBe2LV6cqT1tyFYllmC3H+g2 X02lLwK9cJhV5IFcUc9mZBEbvfARRmM20QiHGfCIvWzNfjw+etDNKsHiK/gkAWiS FMOJPYu4amHR2yKrlwnCDssfZ2q9QRxtl4nU26Db3/8uI8+Q8675u0GjrwuMzLEO 82wOAv0nnZH6BtqRu7wgPSBPrVaqdvEev6qc/GctNtmSi4i5JgQKa5mfxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJvQWJeAMNn22MqphZClwYXAA6gYMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvbTlCWWw0QXcyZmJZeXFtRmtLWEJoY0FEcUJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MIMA0G CSqGSIb3DQEBCwUAA4IBAQA5Tp/tiVBtpXSqGvZ2lXsq2wtml0hHnnCUpgYLrdXF k0RH87fuJn+HiFaVk0DkPJzFEb0O2cpExewzBRuh+T41jXfdvMj0sAO+5lnvpP5V xElqK7jrz4d0MiC5k5TayhlL/4ZM/dHPeB9HBjKdnZ3CRPPC2peRu+uP1N7Aefsn dx3gzb2O2vQIpJ+dyqdvCEXJyRVYbdxTLbAk5Eca8HECteSVTP27TwBpd4BXuaAT ahnaFhrx08kcKa865WkzuAv2hNBKK2jmVKR9UuXmOxaBuy55i4kD91w8Yv/dtstd pLXo0efpQWcXKtMUb8MuergpDN7udwoghaknGiISM6LU -----END CERTIFICATE-----Generated at Mon Jan 19 11:29:52 2026 by rpki-client