This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa File: A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa (raw, json) Hash identifier: HBds/dPFgakP+7Jk7BYLI0SRbVkbpB9JVxok50Ozwgs= Subject key identifier: 03:D5:9B:E5:35:20:CB:AF:E7:7A:CE:3A:9D:02:33:BB:72:76:80:9D Certificate issuer: /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4 Certificate serial: 019B7A598E5A21580432B293B6AACE3E2572 Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa Signing time: Thu 01 Jan 2026 16:17:28 +0000 ROA not before: Thu 01 Jan 2026 16:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201579 IP address blocks: 62.169.151.0/24 maxlen: 24 91.237.124.0/24 maxlen: 24 185.91.69.0/24 maxlen: 24 193.138.195.0/24 maxlen: 24 2a13:2480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:8e:5a:21:58:04:32:b2:93:b6:aa:ce:3e:25:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4 Validity Not Before: Jan 1 16:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03d59be53520cbafe77ace3a9d0233bb7276809d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:42:25:86:da:82:1a:a3:c5:1c:a0:e8:6c:57: 47:3c:8c:e9:ea:2b:99:d9:57:c3:62:ad:ee:30:63: ac:c7:82:80:f5:ce:81:53:ce:e9:fc:79:32:d7:73: db:97:18:f5:c3:e9:3e:9e:a4:b4:df:75:04:6d:57: 5a:b0:9f:ab:6f:bf:b7:cf:ad:bc:1e:ca:be:f1:87: c8:fd:59:aa:50:2f:6c:da:08:02:66:6c:b7:de:ee: ef:14:19:fc:62:5e:88:29:90:a7:09:09:63:b5:32: 8d:4d:da:a8:c1:82:71:72:3d:87:9e:5a:11:e8:a7: 5e:58:25:54:90:00:78:b5:d2:0a:de:ce:fe:95:bd: e4:d7:68:6c:d3:77:1a:8c:59:b7:4e:81:a4:77:60: 06:69:27:f8:d7:42:99:06:58:c9:10:4e:b2:3b:a8: 3e:86:75:bc:6a:9f:09:10:1b:b4:9e:1e:bf:d7:88: 25:92:d6:c8:41:92:e1:df:73:aa:4c:47:49:cc:82: 09:a6:df:7c:38:5c:68:d4:de:1c:97:43:4c:d5:b9: ee:8a:72:64:4e:98:07:3e:d8:68:0b:a4:11:7b:6a: a2:b9:ec:a1:7e:05:4f:3a:30:12:2d:5b:bf:48:43: a9:49:d3:04:47:64:c1:ea:3c:42:d2:2b:91:3b:71: 1a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D5:9B:E5:35:20:CB:AF:E7:7A:CE:3A:9D:02:33:BB:72:76:80:9D X509v3 Authority Key Identifier: keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/A9Wb5TUgy6_nes46nQIzu3J2gJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.151.0/24 91.237.124.0/24 185.91.69.0/24 193.138.195.0/24 IPv6: 2a13:2480::/29 Signature Algorithm: sha256WithRSAEncryption 0d:63:cb:97:dd:98:ce:67:16:f5:4e:1b:52:5e:7c:b4:26:67: f8:4e:7b:df:2e:d4:24:2b:ea:dc:36:38:f0:ae:07:ff:93:ec: 08:e9:cb:70:37:a5:9e:37:b4:e8:a4:4f:25:1d:78:54:39:b9: 07:18:d3:82:a6:e8:eb:f2:89:31:06:27:d5:88:f4:d2:78:4d: ff:e2:25:e2:13:0b:d2:12:1b:13:88:16:7c:39:75:e4:89:05: dc:ae:96:f4:9a:28:49:18:14:3c:24:13:e5:71:05:b0:b1:4a: c7:a6:68:0c:99:81:42:ee:e7:f0:5f:10:e8:dd:27:93:83:36: a7:44:f0:0e:ac:4a:6d:d5:88:c2:0e:53:24:e1:ce:30:6a:1f: cc:42:a2:35:9c:b8:06:3e:04:b9:35:59:eb:b5:70:6d:14:33: 8b:2b:d0:9c:ba:a1:23:8c:eb:18:de:2f:da:14:35:92:bd:7f: ac:0c:a1:f9:d8:ca:b9:c0:c1:1f:d2:8a:51:d6:84:d3:ce:4f: 08:be:3f:2e:27:80:ea:17:1f:5f:42:07:af:03:3a:2e:3b:89: dd:b0:d7:6d:d4:1b:35:ba:1e:0a:36:20:04:bd:0a:0b:6e:10: ea:b3:63:3f:bf:3c:df:d6:76:45:37:b8:fd:ee:9c:de:20:c0: ec:3c:83:79 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6WY5aIVgEMrKTtqrOPiVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZTM2ZmNmYjA0N2I4YzY1M2ZmYTMyN2ZjMmNhNTExNjll OTQ3YTQwHhcNMjYwMTAxMTYxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2Q1OWJlNTM1MjBjYmFmZTc3YWNlM2E5ZDAyMzNiYjcyNzY4MDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0IlhtqCGqPFHKDobFdHPIzp6iuZ 2VfDYq3uMGOsx4KA9c6BU87p/Hky13Pblxj1w+k+nqS033UEbVdasJ+rb7+3z628 Hsq+8YfI/VmqUC9s2ggCZmy33u7vFBn8Yl6IKZCnCQljtTKNTdqowYJxcj2HnloR 6KdeWCVUkAB4tdIK3s7+lb3k12hs03cajFm3ToGkd2AGaSf410KZBljJEE6yO6g+ hnW8ap8JEBu0nh6/14glktbIQZLh33OqTEdJzIIJpt98OFxo1N4cl0NM1bnuinJk TpgHPthoC6QRe2qiueyhfgVPOjASLVu/SEOpSdMER2TB6jxC0iuRO3EabQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAPVm+U1IMuv53rOOp0CM7tydoCdMB8GA1UdIwQY MBaAFBvjb8+wR7jGU/+jJ/wspRFp6UekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMt ZTBjOTY2YzE1ZDVmLzEvQTlXYjVUVWd5Nl9uZXM0Nm5RSXp1M0oyZ0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81ZGRkOTItNDFkNi00NjlmLTg5NmMtZTBjOTY2YzE1ZDVm LzEvRy1Odno3Qkh1TVpUXzZNbl9DeWxFV25wUjZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAPqmXAwQA W+18AwQAuVtFAwQAwYrDMA0EAgACMAcDBQMqEySAMA0GCSqGSIb3DQEBCwUAA4IB AQANY8uX3ZjOZxb1ThtSXny0Jmf4TnvfLtQkK+rcNjjwrgf/k+wI6ctwN6WeN7To pE8lHXhUObkHGNOCpujr8okxBifViPTSeE3/4iXiEwvSEhsTiBZ8OXXkiQXcrpb0 mihJGBQ8JBPlcQWwsUrHpmgMmYFC7ufwXxDo3SeTgzanRPAOrEpt1YjCDlMk4c4w ah/MQqI1nLgGPgS5NVnrtXBtFDOLK9CcuqEjjOsY3i/aFDWSvX+sDKH52Mq5wMEf 0opR1oTTzk8Ivj8uJ4DqFx9fQgevAzouO4ndsNdt1Bs1uh4KNiAEvQoLbhDqs2M/ vzzf1nZFN7j97pzeIMDsPIN5 -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:31 2026 by rpki-client