This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9bDYsswbxJxr7-Zn5BMu9Bk-P3o.roa File: 9bDYsswbxJxr7-Zn5BMu9Bk-P3o.roa (raw, json) Hash identifier: WAaxyNRAVSW2JdQMsAgGZVZqV0Y4J4br/EJ5KO5MX3g= Subject key identifier: F5:B0:D8:B2:CC:1B:C4:9C:6B:EF:E6:67:E4:13:2E:F4:19:3E:3F:7A Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76D22C064A88E44E70E81F04A9B41 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9bDYsswbxJxr7-Zn5BMu9Bk-P3o.roa Signing time: Fri 02 Jan 2026 12:21:00 +0000 ROA not before: Fri 02 Jan 2026 12:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34267 IP address blocks: 37.19.32.0/20 maxlen: 20 84.42.32.0/19 maxlen: 24 84.42.72.0/21 maxlen: 24 94.75.128.0/18 maxlen: 18 109.198.192.0/19 maxlen: 19 109.198.192.0/21 maxlen: 21 213.155.192.0/19 maxlen: 19 213.155.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6d:22:c0:64:a8:8e:44:e7:0e:81:f0:4a:9b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5b0d8b2cc1bc49c6befe667e4132ef4193e3f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2d:d4:7c:ac:35:e6:4e:6c:1f:97:9c:a3:42: 8a:a3:b3:e5:c0:ee:ef:9b:8b:f1:eb:f3:bd:e9:2a: 15:90:a1:10:b2:fb:dc:5e:72:a0:4c:3b:a1:8a:a8: be:8d:77:2b:bb:b5:cb:e6:be:e7:3a:cd:b5:e4:67: 8f:1d:af:7b:5d:1e:a1:2b:21:df:d9:55:1d:e2:e1: 39:da:f2:27:d2:b4:bf:81:ab:66:54:25:9a:62:a7: a3:bd:0f:dc:00:97:70:5b:71:05:ad:53:d0:47:e4: 35:58:d5:d2:8e:52:12:22:af:5d:f9:26:24:c9:db: bc:8d:59:3f:bd:fd:ab:17:3a:0a:5d:ba:d3:76:7f: 0c:0a:c2:a7:e2:9a:e5:8f:ac:f8:3c:91:81:ee:ea: 35:d1:b6:10:b3:2b:6a:a4:72:cc:93:b3:c3:47:84: 08:84:39:0e:f2:b6:da:68:59:bd:be:72:df:08:52: fc:4c:55:74:61:63:d0:51:6f:76:7b:d3:26:15:7d: a6:fd:0c:a8:f2:9a:63:61:29:65:4d:b5:1e:a8:a5: d9:47:8a:ff:6c:bd:c1:74:fe:0c:8e:e9:83:be:cd: 72:e0:a1:3d:6f:d2:d7:49:bb:86:ed:fa:25:c0:e4: 32:f0:73:58:f4:f5:2a:4b:39:2b:4c:27:a3:c2:9d: ba:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B0:D8:B2:CC:1B:C4:9C:6B:EF:E6:67:E4:13:2E:F4:19:3E:3F:7A X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/9bDYsswbxJxr7-Zn5BMu9Bk-P3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.19.32.0/20 84.42.32.0/19 84.42.72.0/21 94.75.128.0/18 109.198.192.0/19 213.155.192.0/19 Signature Algorithm: sha256WithRSAEncryption 82:e9:03:35:8b:27:2a:2b:99:ff:16:70:1f:b0:3f:95:45:1d: 9b:91:f1:36:ab:35:61:a5:06:18:36:1b:1a:18:6c:5c:9c:4a: f1:1f:97:73:49:68:62:d3:d8:27:8e:6f:2a:c4:e4:8b:67:06: cb:c5:aa:a7:ed:dd:59:f1:76:66:39:f5:8d:1e:08:12:10:2c: 64:29:f2:35:02:15:e7:ff:5e:8e:bc:6b:11:0b:ee:90:c9:10: 4f:a7:73:c0:b2:1e:58:f5:b4:50:05:d4:ef:8c:7b:e9:6d:79: 54:ca:e4:bd:73:52:a0:f4:d8:08:ed:4a:35:a4:1f:7d:82:6e: f1:a6:a3:a4:67:00:05:3e:7c:e8:7e:20:0c:dc:01:4e:7d:6b: 79:a2:60:0b:63:e7:f6:b8:bb:9e:a9:60:10:76:5b:f2:b0:e0: de:dd:e8:6a:74:e1:6f:6c:55:3b:04:aa:87:bd:19:5e:03:43: da:f3:c7:1f:99:d3:2d:a4:6c:f1:0f:4d:e1:aa:56:72:8d:34: 9c:27:34:46:13:e5:87:05:c7:c4:99:46:16:8a:33:ab:22:89: 80:5e:05:82:d5:d4:ae:58:d8:e7:61:13:11:72:09:9a:09:ac: d8:e5:99:37:e2:34:af:e6:3e:64:4d:25:59:3a:25:ae:b8:22: 1a:eb:a0:6b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt+p20iwGSojkTnDoHwSptBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWIwZDhiMmNjMWJjNDljNmJlZmU2NjdlNDEzMmVmNDE5M2UzZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8S3UfKw15k5sH5eco0KKo7PlwO7v m4vx6/O96SoVkKEQsvvcXnKgTDuhiqi+jXcru7XL5r7nOs215GePHa97XR6hKyHf 2VUd4uE52vIn0rS/gatmVCWaYqejvQ/cAJdwW3EFrVPQR+Q1WNXSjlISIq9d+SYk ydu8jVk/vf2rFzoKXbrTdn8MCsKn4prlj6z4PJGB7uo10bYQsytqpHLMk7PDR4QI hDkO8rbaaFm9vnLfCFL8TFV0YWPQUW92e9MmFX2m/Qyo8ppjYSllTbUeqKXZR4r/ bL3BdP4MjumDvs1y4KE9b9LXSbuG7folwOQy8HNY9PUqSzkrTCejwp26MwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPWw2LLMG8Sca+/mZ+QTLvQZPj96MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvOWJEWXNzd2J4SnhyNy1abjVCTXU5QmstUDNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEJRMgAwQF VCogAwQDVCpIAwQGXkuAAwQFbcbAAwQF1ZvAMA0GCSqGSIb3DQEBCwUAA4IBAQCC 6QM1iycqK5n/FnAfsD+VRR2bkfE2qzVhpQYYNhsaGGxcnErxH5dzSWhi09gnjm8q xOSLZwbLxaqn7d1Z8XZmOfWNHggSECxkKfI1AhXn/16OvGsRC+6QyRBPp3PAsh5Y 9bRQBdTvjHvpbXlUyuS9c1Kg9NgI7Uo1pB99gm7xpqOkZwAFPnzofiAM3AFOfWt5 omALY+f2uLueqWAQdlvysODe3ehqdOFvbFU7BKqHvRleA0Pa88cfmdMtpGzxD03h qlZyjTScJzRGE+WHBcfEmUYWijOrIomAXgWC1dSuWNjnYRMRcgmaCazY5Zk34jSv 5j5kTSVZOiWuuCIa66Br -----END CERTIFICATE-----Generated at Mon Jan 26 11:29:27 2026 by rpki-client