This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/9JGQPsaWzqRWIOApF5whvE4AxIc.roa File: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (raw, json) Hash identifier: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c= Subject key identifier: F4:91:90:3E:C6:96:CE:A4:56:20:E0:29:17:9C:21:BC:4E:00:C4:87 Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912 Certificate serial: 019B7CEDDBE6A92F20E6C5DAFD15D0148E2A Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/9JGQPsaWzqRWIOApF5whvE4AxIc.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206176 IP address blocks: 45.135.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:db:e6:a9:2f:20:e6:c5:da:fd:15:d0:14:8e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912 Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f491903ec696cea45620e029179c21bc4e00c487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:7a:2f:37:e4:4a:3b:9d:de:6f:a1:60:0c: 99:db:74:a0:d0:ea:f3:84:48:1c:03:07:a6:b6:cb: e9:88:d6:e4:a7:49:83:d7:ad:26:5c:ee:4f:6a:7b: 9b:5b:53:be:f6:0c:1c:ae:cf:9f:7c:72:f9:ca:3d: 99:32:22:77:a6:74:65:ff:94:54:1b:c6:54:ea:4d: 5e:1b:dc:65:0e:0f:92:cc:d4:1f:20:43:c5:a7:2b: 0a:d0:d5:03:fe:c9:2f:f7:94:fd:d4:10:91:85:d6: bb:57:c2:bf:cc:af:fa:c4:58:56:2d:d1:e9:64:48: 08:65:ce:2b:4d:a3:93:b9:a1:64:65:e6:1a:83:6b: a4:41:94:e3:2b:7d:d2:b2:bc:00:be:69:e5:74:44: 77:2e:39:5d:ed:bb:d9:3d:4c:86:7c:c0:94:e7:71: c6:e9:b6:c1:b7:4e:6a:d6:f1:6b:a7:3f:fb:29:6e: f8:49:cf:d3:3b:00:95:1e:11:3e:13:3d:b0:1a:8f: 6b:bd:91:07:f7:eb:51:31:d1:16:52:14:82:68:3b: 5a:e8:08:64:c6:df:50:56:09:75:f9:7a:a3:6a:66: e6:7b:82:39:6d:62:d1:49:71:1a:6f:b5:4c:33:53: 5c:b3:dd:b2:47:63:1f:d0:df:f3:ee:da:de:3e:66: a9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:91:90:3E:C6:96:CE:A4:56:20:E0:29:17:9C:21:BC:4E:00:C4:87 X509v3 Authority Key Identifier: keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/9JGQPsaWzqRWIOApF5whvE4AxIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.56.0/22 Signature Algorithm: sha256WithRSAEncryption 64:48:aa:3d:41:5d:56:d4:d4:46:e7:1e:c2:ec:13:ff:23:37: 5d:61:fc:c3:87:83:8a:b8:12:31:9c:13:88:23:b9:24:9f:8c: bc:16:83:03:cd:46:18:ac:c5:40:25:69:f0:53:b2:9d:09:cb: f7:f9:e5:0f:1e:7d:c8:e6:f7:bf:b1:de:3a:86:56:77:08:8d: 18:a1:a2:60:1f:18:65:cb:a8:62:3b:95:3b:a4:11:b7:bf:a9: 5a:d9:5a:c0:f9:00:c1:de:7b:c3:9c:f1:ce:02:20:59:db:aa: 91:d1:a0:81:9e:ac:89:a6:16:50:00:10:7b:34:9e:6b:b1:ab: 5d:e2:56:ba:02:b2:a4:19:9b:8e:12:83:e8:7b:19:77:52:4a: 31:8e:9f:a5:81:b2:81:06:c9:61:04:1a:a8:ee:28:75:7e:ec: eb:5d:2a:8b:58:71:a5:5a:84:d9:96:14:3f:fe:2d:09:b9:45: d2:0e:2f:61:46:de:21:c5:9e:78:d7:a5:86:71:6c:10:98:ad: cb:e2:42:5f:69:89:e4:8e:33:52:37:89:cc:4a:f7:4b:b9:90: 09:3a:69:8c:73:75:90:a0:13:12:af:33:e4:1e:92:d6:af:a2: 86:a5:b7:72:a8:3c:7e:77:09:fe:69:7d:b9:ce:3d:40:6c:b3: 15:e6:ec:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87dvmqS8g5sXa/RXQFI4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi NDM5MTIwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDkxOTAzZWM2OTZjZWE0NTYyMGUwMjkxNzljMjFiYzRlMDBjNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3J6LzfkSjud3m+hYAyZ23Sg0Orz hEgcAwemtsvpiNbkp0mD160mXO5PanubW1O+9gwcrs+ffHL5yj2ZMiJ3pnRl/5RU G8ZU6k1eG9xlDg+SzNQfIEPFpysK0NUD/skv95T91BCRhda7V8K/zK/6xFhWLdHp ZEgIZc4rTaOTuaFkZeYag2ukQZTjK33SsrwAvmnldER3Ljld7bvZPUyGfMCU53HG 6bbBt05q1vFrpz/7KW74Sc/TOwCVHhE+Ez2wGo9rvZEH9+tRMdEWUhSCaDta6Ahk xt9QVgl1+Xqjambme4I5bWLRSXEab7VMM1Ncs92yR2Mf0N/z7trePmapwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPSRkD7Gls6kViDgKRecIbxOAMSHMB8GA1UdIwQY MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt MmQ5MWNmZDdhYWY0LzEvOUpHUVBzYVd6cVJXSU9BcEY1d2h2RTRBeEljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0 LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYc4MA0G CSqGSIb3DQEBCwUAA4IBAQBkSKo9QV1W1NRG5x7C7BP/IzddYfzDh4OKuBIxnBOI I7kkn4y8FoMDzUYYrMVAJWnwU7KdCcv3+eUPHn3I5ve/sd46hlZ3CI0YoaJgHxhl y6hiO5U7pBG3v6la2VrA+QDB3nvDnPHOAiBZ26qR0aCBnqyJphZQABB7NJ5rsatd 4la6ArKkGZuOEoPoexl3Ukoxjp+lgbKBBslhBBqo7ih1fuzrXSqLWHGlWoTZlhQ/ /i0JuUXSDi9hRt4hxZ5416WGcWwQmK3L4kJfaYnkjjNSN4nMSvdLuZAJOmmMc3WQ oBMSrzPkHpLWr6KGpbdyqDx+dwn+aX25zj1AbLMV5uw7 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:30 2026 by rpki-client