This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/9F2eSvzEg-NwJPxH3jLBMFwvvso.roa File: 9F2eSvzEg-NwJPxH3jLBMFwvvso.roa (raw, json) Hash identifier: 1nmqFaGNPZFiIGtm1pYBrJj5MMAV9XVtAtKjbh5pTPc= Subject key identifier: F4:5D:9E:4A:FC:C4:83:E3:70:24:FC:47:DE:32:C1:30:5C:2F:BE:CA Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1 Certificate serial: 019B78A2A06BB91B5169E32372DA38149968 Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/9F2eSvzEg-NwJPxH3jLBMFwvvso.roa Signing time: Thu 01 Jan 2026 08:18:02 +0000 ROA not before: Thu 01 Jan 2026 08:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199570 IP address blocks: 45.143.44.0/22 maxlen: 22 2a13:ad00::/29 maxlen: 29 2a13:ad06::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:a0:6b:b9:1b:51:69:e3:23:72:da:38:14:99:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1 Validity Not Before: Jan 1 08:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f45d9e4afcc483e37024fc47de32c1305c2fbeca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7f:7c:06:10:3c:b7:0c:c7:6d:c1:1f:6b:b1: 15:53:7d:ed:88:30:ad:08:98:a2:b0:4e:cf:12:8f: 9e:0c:c4:be:33:b4:21:40:1d:c5:e9:b6:bd:fc:84: ba:be:e8:7d:d3:e0:e8:4c:5e:c2:69:fd:62:4b:af: 54:ec:1d:09:96:1c:0f:99:97:4d:dc:19:86:66:f6: 94:d8:49:14:47:e0:4e:b1:a3:65:17:f3:2f:d3:b0: 24:42:30:2c:c1:ec:21:ab:6a:22:53:97:aa:62:eb: a2:3e:68:b8:c2:21:72:93:76:3e:4f:b2:6a:8f:48: fd:3e:ed:3b:9f:1f:f7:29:6e:95:1e:b8:63:db:ce: da:e4:92:8a:a3:ab:73:cf:dc:78:a4:9b:6d:2e:91: 70:9b:3b:90:d5:76:c5:56:41:07:83:a5:1a:33:e3: f9:2a:d3:77:b4:fd:cb:e3:98:a9:6c:00:fc:54:90: ff:f0:7d:b1:d6:0b:c9:5e:06:cd:dd:e4:d9:0e:08: bd:94:f5:4f:c5:57:5d:26:72:f2:40:9e:ab:94:97: 8b:72:15:b2:32:03:ba:02:0f:25:2e:de:f9:db:1f: 92:ac:1e:7a:f3:42:e2:38:84:34:20:76:c5:50:87: 31:24:5f:90:e1:0e:95:cf:41:94:5c:31:63:fe:95: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5D:9E:4A:FC:C4:83:E3:70:24:FC:47:DE:32:C1:30:5C:2F:BE:CA X509v3 Authority Key Identifier: keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/9F2eSvzEg-NwJPxH3jLBMFwvvso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.44.0/22 IPv6: 2a13:ad00::/29 Signature Algorithm: sha256WithRSAEncryption 6e:56:96:f2:e6:d0:92:cb:49:bf:45:38:f9:f2:06:7b:cf:37: a6:ae:97:11:a9:10:03:32:40:0b:72:83:59:e6:80:07:98:67: 1f:30:df:31:91:79:03:80:3c:ea:2f:33:84:b7:60:37:e1:c8: 03:d0:93:a1:4e:f4:e6:0c:ce:ef:dc:f2:f6:85:6b:f3:dc:db: f7:18:3f:48:c4:17:07:bc:bb:18:e3:21:44:35:29:65:44:a0: 13:51:c5:cf:88:fc:fe:ce:84:61:de:56:54:4e:d8:7f:70:f7: a1:8d:eb:6a:4b:06:27:7c:da:36:8e:87:a7:a7:f6:1a:52:20: e3:d9:87:e6:4e:05:df:fc:b8:6b:cc:3d:9e:67:d7:5a:22:28: 1e:08:53:35:be:37:26:3e:eb:9f:42:63:6f:66:43:74:85:75: e8:11:94:b8:ea:ea:15:22:c6:7d:5e:95:d1:16:fa:59:d7:a6: 58:69:07:cb:54:93:f2:d4:72:99:44:71:1f:be:c8:d9:12:32: 64:28:5a:3a:e7:15:49:a8:98:6d:ca:a7:8c:55:5b:aa:4a:a5: b8:0d:99:15:dd:c0:f1:7a:a4:4c:1e:bb:5d:ca:29:b7:7e:a3: d2:dd:71:e1:5f:d6:a9:03:57:f0:4a:b7:b8:a5:61:73:8e:ce: b3:c6:1f:34 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oqBruRtRaeMjcto4FJloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWQ1NWE4NjlmMTA1YWY2YWJjZGZhMGNhNDA2YWYxZjQ5 YjI0ZjEwHhcNMjYwMTAxMDgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDVkOWU0YWZjYzQ4M2UzNzAyNGZjNDdkZTMyYzEzMDVjMmZiZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn98BhA8twzHbcEfa7EVU33tiDCt CJiisE7PEo+eDMS+M7QhQB3F6ba9/IS6vuh90+DoTF7Caf1iS69U7B0JlhwPmZdN 3BmGZvaU2EkUR+BOsaNlF/Mv07AkQjAswewhq2oiU5eqYuuiPmi4wiFyk3Y+T7Jq j0j9Pu07nx/3KW6VHrhj287a5JKKo6tzz9x4pJttLpFwmzuQ1XbFVkEHg6UaM+P5 KtN3tP3L45ipbAD8VJD/8H2x1gvJXgbN3eTZDgi9lPVPxVddJnLyQJ6rlJeLchWy MgO6Ag8lLt752x+SrB5680LiOIQ0IHbFUIcxJF+Q4Q6Vz0GUXDFj/pVDXwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPRdnkr8xIPjcCT8R94ywTBcL77KMB8GA1UdIwQY MBaAFFMdVahp8QWvarzfoMpAavH0myTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZWMyY2QtMzZkZS00Zjk2LTlmYjIt NGRjMWVmODkwNDRiLzEvOUYyZVN2ekVnLU53SlB4SDNqTEJNRnd2dnNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lZWMyY2QtMzZkZS00Zjk2LTlmYjItNGRjMWVmODkwNDRi LzEvVXgxVnFHbnhCYTlxdk4tZ3lrQnE4ZlNiSlBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLY8sMA0E AgACMAcDBQMqE60AMA0GCSqGSIb3DQEBCwUAA4IBAQBuVpby5tCSy0m/RTj58gZ7 zzemrpcRqRADMkALcoNZ5oAHmGcfMN8xkXkDgDzqLzOEt2A34cgD0JOhTvTmDM7v 3PL2hWvz3Nv3GD9IxBcHvLsY4yFENSllRKATUcXPiPz+zoRh3lZUTth/cPehjetq SwYnfNo2joenp/YaUiDj2YfmTgXf/LhrzD2eZ9daIigeCFM1vjcmPuufQmNvZkN0 hXXoEZS46uoVIsZ9XpXRFvpZ16ZYaQfLVJPy1HKZRHEfvsjZEjJkKFo65xVJqJht yqeMVVuqSqW4DZkV3cDxeqRMHrtdyim3fqPS3XHhX9apA1fwSre4pWFzjs6zxh80 -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:18 2026 by rpki-client