This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/9VNosHGj56snz30vc3qvzEoSPXo.roa File: 9VNosHGj56snz30vc3qvzEoSPXo.roa (raw, json) Hash identifier: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs= Subject key identifier: F5:53:68:B0:71:A3:E7:AB:27:CF:7D:2F:73:7A:AF:CC:4A:12:3D:7A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA53561F18C35D0F86E6E36C0DDE0BC Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/9VNosHGj56snz30vc3qvzEoSPXo.roa Signing time: Fri 02 Jan 2026 12:18:34 +0000 ROA not before: Fri 02 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199760 IP address blocks: 109.160.38.0/24 maxlen: 24 109.160.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:35:61:f1:8c:35:d0:f8:6e:6e:36:c0:dd:e0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f55368b071a3e7ab27cf7d2f737aafcc4a123d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:dc:9e:ea:95:08:3b:9c:e7:c6:93:d2:c8: ae:98:8d:4f:df:7a:2c:05:fb:10:68:97:fe:6f:55: 19:88:2e:b3:aa:84:b6:cd:f7:e8:22:f7:d0:9a:db: f9:0b:75:13:90:8d:90:36:e4:a7:03:90:b7:0a:2e: e2:03:f2:f0:da:80:4e:b9:80:60:af:b1:bf:ba:15: e3:b7:f7:c3:32:32:ce:07:a1:f7:e9:17:2d:29:42: 30:e4:f3:24:51:0e:0b:fe:12:08:1f:a7:fb:33:28: 59:ef:25:21:73:e1:c5:e2:6a:a1:58:e9:89:74:17: 93:13:63:02:48:5e:a0:e3:6e:a1:4b:7f:d5:ff:98: 74:aa:c9:0b:e3:8c:97:f6:8d:26:41:dc:36:17:8f: a5:eb:59:b3:13:8d:0d:bd:27:58:a0:1f:eb:64:43: ab:30:41:17:1c:28:65:a1:41:95:58:05:57:bf:ad: 4f:c5:64:f7:52:8c:69:65:57:2a:99:c2:2a:49:77: e5:52:c0:2c:fb:98:ad:b2:6c:65:9d:36:09:58:9f: 87:2a:97:3b:b5:54:2a:17:7e:dc:ac:bd:aa:a7:44: d3:96:5a:65:be:b6:c1:7d:73:7b:07:71:01:1c:3e: 91:22:14:6b:ff:43:0f:fe:ac:1e:90:54:96:9f:6d: de:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:53:68:B0:71:A3:E7:AB:27:CF:7D:2F:73:7A:AF:CC:4A:12:3D:7A X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/9VNosHGj56snz30vc3qvzEoSPXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.160.38.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:0f:86:99:1a:41:8b:3e:a6:87:2a:47:01:b3:12:bf:16:30: 69:b9:27:73:19:a1:3b:d9:19:5b:d4:f1:a7:65:f0:08:9b:f7: a0:fe:eb:f7:f7:42:af:8e:5d:f0:bc:67:f0:0c:a0:32:a4:cf: 2c:01:a5:42:21:30:a9:a6:75:a8:f0:f5:61:dd:59:4a:0e:d0: db:8f:d4:7a:83:5d:df:49:a7:7d:da:b5:25:9c:aa:8a:29:3a: df:75:5f:5d:d4:4b:46:15:89:a6:e8:45:26:2d:e0:57:f7:f4: 99:30:f5:c0:fe:70:8e:b0:76:28:77:6b:47:9c:e8:eb:9e:aa: b0:4e:ee:bc:7a:b3:c9:46:74:47:af:f1:34:85:69:3a:fc:89: 5c:af:e2:7e:c1:69:6d:20:2c:76:b5:03:6c:fc:8e:18:45:df: 13:be:ed:52:e6:4b:98:78:ed:da:0a:ea:dd:4e:5a:cf:2c:80: 1f:e2:4e:e7:a4:bc:b2:6d:b5:30:46:32:ea:27:4f:7b:47:8b: dd:2f:e3:65:6a:fb:ef:36:2d:22:22:32:1a:f0:13:21:2f:5b: 45:f3:93:db:cd:5a:e1:c9:3b:75:08:49:d5:df:44:b2:8f:57: c2:44:dd:7d:5b:c2:c9:34:75:43:16:a7:d5:aa:12:38:a4:3a: 55:79:e0:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pTVh8Yw10PhubjbA3eC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTUzNjhiMDcxYTNlN2FiMjdjZjdkMmY3MzdhYWZjYzRhMTIzZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvDcnuqVCDuc58aT0siumI1P33os BfsQaJf+b1UZiC6zqoS2zffoIvfQmtv5C3UTkI2QNuSnA5C3Ci7iA/Lw2oBOuYBg r7G/uhXjt/fDMjLOB6H36RctKUIw5PMkUQ4L/hIIH6f7MyhZ7yUhc+HF4mqhWOmJ dBeTE2MCSF6g426hS3/V/5h0qskL44yX9o0mQdw2F4+l61mzE40NvSdYoB/rZEOr MEEXHChloUGVWAVXv61PxWT3UoxpZVcqmcIqSXflUsAs+5itsmxlnTYJWJ+HKpc7 tVQqF37crL2qp0TTllplvrbBfXN7B3EBHD6RIhRr/0MP/qwekFSWn23eewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPVTaLBxo+erJ899L3N6r8xKEj16MB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvOVZOb3NIR2o1NnNuejMwdmMzcXZ6RW9TUFhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbaAmMA0G CSqGSIb3DQEBCwUAA4IBAQCbD4aZGkGLPqaHKkcBsxK/FjBpuSdzGaE72Rlb1PGn ZfAIm/eg/uv390Kvjl3wvGfwDKAypM8sAaVCITCppnWo8PVh3VlKDtDbj9R6g13f Sad92rUlnKqKKTrfdV9d1EtGFYmm6EUmLeBX9/SZMPXA/nCOsHYod2tHnOjrnqqw Tu68erPJRnRHr/E0hWk6/Ilcr+J+wWltICx2tQNs/I4YRd8Tvu1S5kuYeO3aCurd TlrPLIAf4k7npLyybbUwRjLqJ097R4vdL+NlavvvNi0iIjIa8BMhL1tF85PbzVrh yTt1CEnV30Syj1fCRN19W8LJNHVDFqfVqhI4pDpVeeDc -----END CERTIFICATE-----Generated at Tue Jan 20 03:36:38 2026 by rpki-client