This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/X9Plsh78iLxMym05erYr23A5nAM.roa File: X9Plsh78iLxMym05erYr23A5nAM.roa (raw, json) Hash identifier: JnUoidyO7+02A7tvFvdT39dCgzkQhJHPQPcV1/E2iHk= Subject key identifier: 5F:D3:E5:B2:1E:FC:88:BC:4C:CA:6D:39:7A:B6:2B:DB:70:39:9C:03 Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9 Certificate serial: 019C43105383F90620396B0F4874FEDFAA5C Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/X9Plsh78iLxMym05erYr23A5nAM.roa Signing time: Mon 09 Feb 2026 15:41:09 +0000 ROA not before: Mon 09 Feb 2026 15:41:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213291 IP address blocks: 89.169.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:10:53:83:f9:06:20:39:6b:0f:48:74:fe:df:aa:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9 Validity Not Before: Feb 9 15:41:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fd3e5b21efc88bc4cca6d397ab62bdb70399c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:84:17:30:41:db:a3:b1:6a:7a:dd:bb:b5: 79:13:32:42:4d:03:75:df:a6:a3:62:5f:75:0e:f6: 35:62:b5:35:86:af:67:c0:c0:ba:11:ef:dc:57:61: 7a:b9:70:ba:4e:b9:81:7b:eb:09:72:c5:06:71:27: e8:e7:05:39:c0:c2:69:e4:39:63:da:3d:ae:8a:ed: 38:65:f2:46:02:eb:15:23:1d:5c:e3:0b:86:42:00: 31:e7:1b:a4:9f:06:87:74:77:b2:33:98:b8:db:9e: de:33:4e:c0:5b:11:1e:67:94:1c:38:e5:9c:02:54: 77:57:27:87:7b:75:ea:51:3a:a9:1a:cf:82:c6:e3: 5d:6c:02:7b:c4:15:ec:1f:0e:b6:9b:fa:32:2d:8a: a5:23:29:4b:96:eb:f1:a3:e8:fd:4e:5e:de:24:05: c6:8e:92:3f:b0:1e:d8:85:ee:1b:74:80:27:75:1d: 0a:30:56:c0:32:8a:4f:66:4c:2e:af:6b:00:5f:62: d4:10:e5:fb:4c:9c:c4:38:43:a3:a6:00:06:96:33: 07:4f:0f:f1:a1:e5:ea:cd:67:f3:f9:8e:1b:6b:14: dd:a6:8e:9e:a5:95:69:47:05:14:09:5b:66:29:25: d8:b4:97:0a:3f:8b:d1:fc:8d:d4:2c:9a:8a:8c:0a: 52:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D3:E5:B2:1E:FC:88:BC:4C:CA:6D:39:7A:B6:2B:DB:70:39:9C:03 X509v3 Authority Key Identifier: keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/X9Plsh78iLxMym05erYr23A5nAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.169.120.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:4f:e1:bc:a3:47:a0:d8:5d:49:95:1d:b1:6f:b5:41:28:0c: 3f:71:7e:ba:cc:18:7c:a5:91:99:97:0c:7a:a3:90:7e:71:4e: 0d:fc:c0:77:01:34:ec:5f:43:e1:b8:02:1b:01:40:4b:07:5d: ae:93:42:84:43:12:0b:43:ed:33:f3:12:9c:04:2c:e9:93:5a: fb:2e:ad:be:bd:5b:35:93:8b:cc:2c:66:80:32:85:70:aa:f0: 0a:1d:06:ce:db:1e:ee:86:7e:f6:28:32:bd:38:78:83:55:60: f8:47:d6:71:bc:07:c7:89:8f:e4:5b:9d:f5:fa:06:96:42:2a: 23:0e:10:53:7e:c6:58:01:c5:05:00:30:81:5d:28:03:6b:56: dc:8e:68:6f:99:d7:02:8f:66:f7:63:f3:c8:b3:38:bd:14:6f: 06:e0:62:57:3c:96:7f:d2:b7:cb:e4:9e:16:4a:b0:f8:34:66: ea:a7:34:34:a9:8c:aa:20:94:30:60:14:50:f9:bf:a1:cb:b6: 7a:07:6e:d1:4f:7b:2e:55:bc:30:6e:7c:cc:cf:d3:67:2e:66: 84:b5:6e:26:5b:56:9a:3b:7c:65:a6:71:02:4b:a5:e3:d5:98: 4e:34:4f:68:31:2e:0c:79:a0:6a:08:16:6f:5e:19:2f:5b:24: 86:6f:d4:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZxDEFOD+QYgOWsPSHT+36pcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MDE5ZjljMGFiMjliNDJlMGRiMTJlOWFjODdiMzI3YmZj NTVhZjkwHhcNMjYwMjA5MTU0MTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmQzZTViMjFlZmM4OGJjNGNjYTZkMzk3YWI2MmJkYjcwMzk5YzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+yEFzBB26Oxanrdu7V5EzJCTQN1 36ajYl91DvY1YrU1hq9nwMC6Ee/cV2F6uXC6TrmBe+sJcsUGcSfo5wU5wMJp5Dlj 2j2uiu04ZfJGAusVIx1c4wuGQgAx5xuknwaHdHeyM5i4257eM07AWxEeZ5QcOOWc AlR3VyeHe3XqUTqpGs+CxuNdbAJ7xBXsHw62m/oyLYqlIylLluvxo+j9Tl7eJAXG jpI/sB7Yhe4bdIAndR0KMFbAMopPZkwur2sAX2LUEOX7TJzEOEOjpgAGljMHTw/x oeXqzWfz+Y4baxTdpo6epZVpRwUUCVtmKSXYtJcKP4vR/I3ULJqKjApSnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/T5bIe/Ii8TMptOXq2K9twOZwDMB8GA1UdIwQY MBaAFDkBn5wKsptC4NsS6ayHsye/xVr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYt Nzg4ZjVhNTgwNDRmLzEvWDlQbHNoNzhpTHhNeW0wNWVyWXIyM0E1bkFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYtNzg4ZjVhNTgwNDRm LzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWal4MA0G CSqGSIb3DQEBCwUAA4IBAQAsT+G8o0eg2F1JlR2xb7VBKAw/cX66zBh8pZGZlwx6 o5B+cU4N/MB3ATTsX0PhuAIbAUBLB12uk0KEQxILQ+0z8xKcBCzpk1r7Lq2+vVs1 k4vMLGaAMoVwqvAKHQbO2x7uhn72KDK9OHiDVWD4R9ZxvAfHiY/kW531+gaWQioj DhBTfsZYAcUFADCBXSgDa1bcjmhvmdcCj2b3Y/PIszi9FG8G4GJXPJZ/0rfL5J4W SrD4NGbqpzQ0qYyqIJQwYBRQ+b+hy7Z6B27RT3suVbwwbnzMz9NnLmaEtW4mW1aa O3xlpnECS6Xj1ZhONE9oMS4MeaBqCBZvXhkvWySGb9Qh -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:04 2026 by rpki-client