This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/s9qhB5SnQzKclx3D0uxrj1RA7JE.roa File: s9qhB5SnQzKclx3D0uxrj1RA7JE.roa (raw, json) Hash identifier: wwci9dWt+nP8ceMuQXyTutOiNIFHMIurRVG0WdzSkH4= Subject key identifier: B3:DA:A1:07:94:A7:43:32:9C:97:1D:C3:D2:EC:6B:8F:54:40:EC:91 Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Certificate serial: 019B7D5CCA7FB4B8A0678366B3BEED0FEAE4 Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/s9qhB5SnQzKclx3D0uxrj1RA7JE.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 64.188.56.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ca:7f:b4:b8:a0:67:83:66:b3:be:ed:0f:ea:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8 Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3daa10794a743329c971dc3d2ec6b8f5440ec91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:32:1a:a2:75:6f:96:83:a3:ac:39:6f:d7:6f: f4:b6:6e:89:e6:7d:f5:4a:fd:1b:e4:b8:ba:30:f0: 19:35:d8:be:eb:68:ab:91:f4:d1:a9:e2:72:c8:24: b8:0f:67:8c:4c:ca:cc:38:e2:83:62:0a:65:0b:c4: 24:ee:4a:d2:70:66:62:e7:7d:4f:12:26:c9:ac:e0: b3:cd:6e:55:27:bd:3b:e3:19:f9:37:f5:82:48:99: 44:88:d2:d9:6a:88:bd:3d:b3:5b:67:40:37:fc:97: 7a:cb:27:7a:ae:01:b5:6e:db:93:2a:47:60:89:78: 48:1a:fe:67:2d:e9:2c:19:ce:dd:c0:88:63:20:29: d5:d4:3d:69:42:ae:d0:7d:72:66:12:cd:10:4b:c9: fd:4f:4d:41:74:35:cc:53:46:e6:a5:8b:f5:19:b8: 1f:e4:74:1e:f1:e3:bc:f8:98:06:bd:b2:32:5c:ef: e6:ef:e2:99:ce:7d:ed:44:48:1d:d7:2e:c0:c5:02: d1:75:16:7d:fb:1c:6d:df:8d:7c:9e:46:22:35:70: 53:cd:b5:16:d9:27:8a:f2:0a:f1:00:0e:42:ee:b3: c6:e6:aa:9b:e4:2c:b2:b4:fd:cc:6c:6a:c2:95:15: e7:89:7f:a5:3b:98:f2:7e:31:74:83:d8:ff:26:60: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DA:A1:07:94:A7:43:32:9C:97:1D:C3:D2:EC:6B:8F:54:40:EC:91 X509v3 Authority Key Identifier: keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/s9qhB5SnQzKclx3D0uxrj1RA7JE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.56.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:d6:20:8e:37:3d:1d:c5:e6:ad:89:f0:d8:f9:27:d7:0c:78: 23:93:9e:c1:c1:c8:17:ef:ef:13:16:d2:5f:18:d8:0b:1a:ca: c6:5a:62:b9:85:bf:7c:bf:7f:c9:73:a3:64:59:a2:d5:29:23: b9:8c:fa:67:5c:20:82:2f:4b:5f:a5:ed:f5:d7:ea:6a:0a:df: 32:55:f1:65:e3:c2:3f:91:37:23:5b:b7:e7:b5:16:e0:d9:5b: fb:4f:bc:d0:6b:11:10:64:63:e0:f9:10:a2:30:73:db:c2:d5: 08:a7:ae:79:61:59:c9:ea:73:64:97:bc:9b:bb:8e:c7:bb:f1: f6:1c:3e:06:c3:13:43:9a:34:9a:10:0e:90:91:bf:30:90:5a: eb:54:0d:b5:c9:52:84:17:a5:b5:9d:e3:ca:9f:c7:0d:c4:af: 61:45:d0:36:52:eb:20:85:ff:d3:ab:7a:d0:a0:26:aa:f7:0a: 1a:30:3c:b0:02:42:39:b4:62:0a:fc:28:24:f6:66:8a:3f:d1: 78:ce:cd:92:81:c2:6c:04:f6:a3:5e:82:e2:1e:c1:a6:a5:4b: 2e:be:90:b6:17:e3:55:e5:e1:e2:3b:11:b5:ee:d2:2f:c5:96: bf:98:53:02:02:07:95:e0:2e:35:99:63:96:c0:1b:c6:05:b6: af:e6:84:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMp/tLigZ4Nms77tD+rkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NzJiOWZiNTQ2YjM2NWUzMjMyMzBkY2VhOWJhOGM5ZmJl ZGZlYjgwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2RhYTEwNzk0YTc0MzMyOWM5NzFkYzNkMmVjNmI4ZjU0NDBlYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TIaonVvloOjrDlv12/0tm6J5n31 Sv0b5Li6MPAZNdi+62irkfTRqeJyyCS4D2eMTMrMOOKDYgplC8Qk7krScGZi531P EibJrOCzzW5VJ7074xn5N/WCSJlEiNLZaoi9PbNbZ0A3/Jd6yyd6rgG1btuTKkdg iXhIGv5nLeksGc7dwIhjICnV1D1pQq7QfXJmEs0QS8n9T01BdDXMU0bmpYv1Gbgf 5HQe8eO8+JgGvbIyXO/m7+KZzn3tREgd1y7AxQLRdRZ9+xxt3418nkYiNXBTzbUW 2SeK8grxAA5C7rPG5qqb5CyytP3MbGrClRXniX+lO5jyfjF0g9j/JmBLQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLPaoQeUp0MynJcdw9Lsa49UQOyRMB8GA1UdIwQY MBaAFCZyuftUazZeMjIw3OqbqMn77f64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYt YTcwZGI1ODI4MGZjLzEvczlxaEI1U25RektjbHgzRDB1eHJqMVJBN0pFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9iMTNiNTUtMTI4OC00NWU2LTg4NzYtYTcwZGI1ODI4MGZj LzEvSm5LNS0xUnJObDR5TWpEYzZwdW95ZnZ0X3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQLw4MA0G CSqGSIb3DQEBCwUAA4IBAQBa1iCONz0dxeatifDY+SfXDHgjk57BwcgX7+8TFtJf GNgLGsrGWmK5hb98v3/Jc6NkWaLVKSO5jPpnXCCCL0tfpe311+pqCt8yVfFl48I/ kTcjW7fntRbg2Vv7T7zQaxEQZGPg+RCiMHPbwtUIp655YVnJ6nNkl7ybu47Hu/H2 HD4GwxNDmjSaEA6Qkb8wkFrrVA21yVKEF6W1nePKn8cNxK9hRdA2Uusghf/Tq3rQ oCaq9woaMDywAkI5tGIK/Cgk9maKP9F4zs2SgcJsBPajXoLiHsGmpUsuvpC2F+NV 5eHiOxG17tIvxZa/mFMCAgeV4C41mWOWwBvGBbav5oT/ -----END CERTIFICATE-----Generated at Wed Jan 21 11:16:09 2026 by rpki-client