This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/9Bk2DNR2uYMUyRc1vkqhEEQ_U7I.roa File: 9Bk2DNR2uYMUyRc1vkqhEEQ_U7I.roa (raw, json) Hash identifier: stlOV3eHfF1Tw/j9xaX8GJThoN6iWH1T13ESnbBJcL8= Subject key identifier: F4:19:36:0C:D4:76:B9:83:14:C9:17:35:BE:4A:A1:10:44:3F:53:B2 Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Certificate serial: 019B79111DDD9D7F25FCA7D205537A7A4D79 Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/9Bk2DNR2uYMUyRc1vkqhEEQ_U7I.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199373 IP address blocks: 5.61.113.0/24 maxlen: 24 5.61.115.0/24 maxlen: 24 5.61.117.0/24 maxlen: 24 5.61.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1d:dd:9d:7f:25:fc:a7:d2:05:53:7a:7a:4d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f419360cd476b98314c91735be4aa110443f53b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:b1:0e:79:e8:69:ea:6e:ed:a4:73:eb:cd: b6:e2:0e:dd:2a:81:e7:0d:77:8e:be:f8:df:1b:d9: bc:28:a3:73:37:c7:1c:ca:ad:85:90:32:c5:37:ec: 01:00:3e:cb:e5:17:6f:1e:8f:84:ec:81:28:ab:4c: 4a:1b:b1:1d:43:ca:8a:bb:25:50:ac:03:9a:3b:44: 00:f4:e6:6d:f7:53:42:e7:29:e4:0e:44:b8:f5:f2: 53:fd:ff:4c:7a:d3:5c:cf:b3:c9:8d:19:10:a8:56: b2:4c:21:3e:0f:60:97:7a:fd:39:99:32:84:88:ff: 89:02:e3:27:f1:4c:cd:20:77:45:42:c6:b1:e8:0a: 56:f7:20:40:fe:35:47:52:1f:eb:25:fe:8f:9a:67: b0:c9:5e:e4:b1:f4:c4:3a:d2:e5:0f:3d:17:92:d3: ed:01:b2:37:cb:c6:1b:14:9b:7e:3d:ea:f5:d7:0b: 00:6d:b9:0d:a2:55:01:ab:47:34:45:5b:37:33:03: 9b:83:1b:72:ee:7e:59:92:1c:26:df:c6:4e:c3:68: 33:87:68:ce:86:45:4b:86:ef:4c:91:13:97:2d:92: 07:ac:bc:24:e1:ff:7d:98:7d:43:87:92:82:ae:0b: 67:61:7e:cb:3b:44:aa:28:3f:ed:51:2b:9d:4a:9b: 80:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:19:36:0C:D4:76:B9:83:14:C9:17:35:BE:4A:A1:10:44:3F:53:B2 X509v3 Authority Key Identifier: keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/9Bk2DNR2uYMUyRc1vkqhEEQ_U7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.113.0/24 5.61.115.0/24 5.61.117.0/24 5.61.119.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:68:6b:cc:66:63:3c:1e:08:66:40:95:8c:26:e5:1b:78:d2: 6f:1b:b6:ba:f9:cf:79:f3:4f:cd:6c:37:00:98:1e:fc:8f:7c: 38:4c:0f:5c:23:a2:d3:16:dd:53:a7:0c:8d:97:7f:ac:44:40: c7:ab:11:50:de:a6:38:96:2e:47:ff:a0:6c:1d:b0:0e:ee:3a: 17:0c:53:ca:ed:e0:b2:9b:a4:ed:7b:26:6e:b1:eb:cb:f9:72: 3f:22:2a:f8:58:8b:df:48:f5:3f:cb:d9:1f:aa:52:df:a2:5c: 69:01:4d:41:62:d2:4f:6b:b1:0b:74:10:55:57:ba:ca:ef:a2: ba:63:30:14:c1:94:67:7a:94:d7:0c:84:ea:06:5b:29:ac:02: f2:4b:c8:cf:37:18:5a:64:00:01:c8:49:9a:10:a2:0f:65:5e: e0:be:14:8e:0d:70:56:37:0a:05:75:39:41:bf:11:0b:32:68: 28:e7:e0:69:2e:47:12:be:f7:dd:3e:5a:e5:a6:c1:09:07:60: 76:ce:b7:8e:b4:49:4c:23:9e:31:b2:37:7c:df:cc:21:3e:46: 17:2a:e9:21:6f:b6:37:f5:e6:66:51:83:40:01:c8:dd:76:ce: 56:97:eb:09:01:42:96:f8:d1:55:28:15:31:87:9d:3c:51:68: f9:31:73:01 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5ER3dnX8l/KfSBVN6ek15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NjRiNDUyM2E4OTcyYjllMmY0NmE0ZjRhMTYzNGU5NzAy N2FlZGYwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDE5MzYwY2Q0NzZiOTgzMTRjOTE3MzViZTRhYTExMDQ0M2Y1M2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcCxDnnoaepu7aRz68224g7dKoHn DXeOvvjfG9m8KKNzN8ccyq2FkDLFN+wBAD7L5RdvHo+E7IEoq0xKG7EdQ8qKuyVQ rAOaO0QA9OZt91NC5ynkDkS49fJT/f9MetNcz7PJjRkQqFayTCE+D2CXev05mTKE iP+JAuMn8UzNIHdFQsax6ApW9yBA/jVHUh/rJf6PmmewyV7ksfTEOtLlDz0XktPt AbI3y8YbFJt+Per11wsAbbkNolUBq0c0RVs3MwObgxty7n5Zkhwm38ZOw2gzh2jO hkVLhu9MkROXLZIHrLwk4f99mH1Dh5KCrgtnYX7LO0SqKD/tUSudSpuAnwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPQZNgzUdrmDFMkXNb5KoRBEP1OyMB8GA1UdIwQY MBaAFLRktFI6iXK54vRqT0oWNOlwJ67fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1Yjct ZmM2ZTc3ODg0MDU0LzEvOUJrMkROUjJ1WU1VeVJjMXZrcWhFRVFfVTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jN2NhZjMtZWIwOC00NTU2LWE1YjctZmM2ZTc3ODg0MDU0 LzEvdEdTMFVqcUpjcm5pOUdwUFNoWTA2WEFucnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABT1xAwQA BT1zAwQABT11AwQABT13MA0GCSqGSIb3DQEBCwUAA4IBAQAaaGvMZmM8HghmQJWM JuUbeNJvG7a6+c9580/NbDcAmB78j3w4TA9cI6LTFt1TpwyNl3+sREDHqxFQ3qY4 li5H/6BsHbAO7joXDFPK7eCym6TteyZusevL+XI/Iir4WIvfSPU/y9kfqlLfolxp AU1BYtJPa7ELdBBVV7rK76K6YzAUwZRnepTXDITqBlsprALyS8jPNxhaZAAByEma EKIPZV7gvhSODXBWNwoFdTlBvxELMmgo5+BpLkcSvvfdPlrlpsEJB2B2zreOtElM I54xsjd838whPkYXKukhb7Y39eZmUYNAAcjdds5Wl+sJAUKW+NFVKBUxh508UWj5 MXMB -----END CERTIFICATE-----Generated at Fri Jan 9 18:20:37 2026 by rpki-client