This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/9nMZrodBdsGgL23GxlelObATv60.roa File: 9nMZrodBdsGgL23GxlelObATv60.roa (raw, json) Hash identifier: rSWUYx/buhG+K0ScAxLaN5xf6/B7iGfzq+9e0Z2WfnQ= Subject key identifier: F6:73:19:AE:87:41:76:C1:A0:2F:6D:C6:C6:57:A5:39:B0:13:BF:AD Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a Certificate serial: 019B7F15D034CB77AD5B6321936BB6EF0F50 Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/9nMZrodBdsGgL23GxlelObATv60.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203931 IP address blocks: 217.29.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d0:34:cb:77:ad:5b:63:21:93:6b:b6:ef:0f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f67319ae874176c1a02f6dc6c657a539b013bfad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:9a:9b:c4:fc:85:39:87:6e:32:1f:b7:2a: 27:28:ad:0c:d5:a3:fb:ba:2b:1e:20:41:69:dc:dd: 95:28:64:87:59:41:b0:ce:a5:f4:05:db:b7:62:f7: 72:35:a0:21:2a:5c:e0:1f:16:f6:12:8e:35:9d:84: 1d:ce:13:09:c8:fb:0a:3b:9c:e0:e3:9a:de:f5:29: 12:7a:09:1b:7d:1a:8a:48:0e:17:cd:27:ee:4d:a9: 92:e6:1e:68:8e:a7:fe:53:80:5e:0c:ad:3d:16:2b: 4c:05:80:de:35:67:47:29:72:0e:6a:0d:1f:8e:d7: 2b:01:6c:d8:b9:00:de:16:2e:80:ac:85:72:11:0c: f2:2b:3d:09:24:b3:8d:3f:04:41:62:9a:69:e5:15: e8:83:b6:fc:2e:cf:b7:bf:de:9d:06:14:cc:b3:58: 42:ff:5c:6c:fd:c5:df:45:c3:e9:64:00:90:ad:3f: ff:37:68:c2:5e:14:dc:ee:dd:62:76:3d:23:26:7f: 9b:68:d8:39:1f:c1:fd:b7:e0:36:3a:30:7b:64:5c: 11:32:48:63:8c:b4:6a:de:b6:1f:af:87:e8:83:14: cb:6c:50:d9:52:73:b8:d9:c0:e3:56:0f:8e:6d:5c: 54:f9:3c:cc:00:46:c3:f2:fa:93:09:ca:ce:4f:51: f2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:73:19:AE:87:41:76:C1:A0:2F:6D:C6:C6:57:A5:39:B0:13:BF:AD X509v3 Authority Key Identifier: keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/9nMZrodBdsGgL23GxlelObATv60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.29.240.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:5b:ba:01:e2:97:9c:3a:05:92:98:1e:6e:c6:18:09:3e:e5: a5:38:66:8f:bc:b5:fc:e8:77:64:63:75:16:be:06:6a:cb:40: d3:fd:e3:97:0e:45:03:c2:41:62:2b:66:80:db:f6:c8:f7:43: 90:b8:eb:36:69:93:c8:88:02:1b:43:46:34:af:28:ee:81:51: ba:4b:33:ce:15:54:b1:87:52:3b:03:80:c0:f6:3d:11:6c:ef: 31:98:3f:19:7f:de:43:30:1b:85:dc:81:ab:49:c9:a7:83:e5: db:e7:c7:ab:35:bc:28:ba:a9:76:b6:06:f4:1b:12:6b:07:e2: 05:4d:32:ef:c3:af:c1:33:76:29:e1:a8:40:da:df:73:ca:23: 19:e1:41:79:03:dd:ac:86:2a:5f:61:10:ea:1a:81:f0:c1:15: 75:3e:fd:db:3f:9d:ad:f3:ee:0b:7b:ea:ac:f8:d9:de:77:3f: f8:60:d3:72:70:fb:98:50:4d:cb:8d:57:b6:b0:4f:ff:96:12: 8a:4d:07:73:9a:35:a0:e7:8e:9e:d4:05:fb:8a:20:a7:1f:cc: 7e:fe:8e:d6:21:8a:70:1c:6d:66:0b:99:23:eb:4f:76:f5:1c: a8:b1:2e:83:db:61:55:22:3e:e3:da:4e:9a:dc:18:d7:6f:ff: 26:ad:fc:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdA0y3etW2Mhk2u27w9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5OGZkNDUzZjVlMzVmOWM3N2QxZDcwNmU1NjUxMzhhZGY4 MjI1NmEwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjczMTlhZTg3NDE3NmMxYTAyZjZkYzZjNjU3YTUzOWIwMTNiZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Kam8T8hTmHbjIftyonKK0M1aP7 uiseIEFp3N2VKGSHWUGwzqX0Bdu3YvdyNaAhKlzgHxb2Eo41nYQdzhMJyPsKO5zg 45re9SkSegkbfRqKSA4XzSfuTamS5h5ojqf+U4BeDK09FitMBYDeNWdHKXIOag0f jtcrAWzYuQDeFi6ArIVyEQzyKz0JJLONPwRBYppp5RXog7b8Ls+3v96dBhTMs1hC /1xs/cXfRcPpZACQrT//N2jCXhTc7t1idj0jJn+baNg5H8H9t+A2OjB7ZFwRMkhj jLRq3rYfr4fogxTLbFDZUnO42cDjVg+ObVxU+TzMAEbD8vqTCcrOT1HywwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZzGa6HQXbBoC9txsZXpTmwE7+tMB8GA1UdIwQY MBaAFEmP1FP141+cd9HXBuVlE4rfgiVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYt Mzk3OWVmMGQzMmRiLzEvOW5NWnJvZEJkc0dnTDIzR3hsZWxPYkFUdjYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYtMzk3OWVmMGQzMmRi LzEvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2R3wMA0G CSqGSIb3DQEBCwUAA4IBAQA7W7oB4pecOgWSmB5uxhgJPuWlOGaPvLX86HdkY3UW vgZqy0DT/eOXDkUDwkFiK2aA2/bI90OQuOs2aZPIiAIbQ0Y0ryjugVG6SzPOFVSx h1I7A4DA9j0RbO8xmD8Zf95DMBuF3IGrScmng+Xb58erNbwouql2tgb0GxJrB+IF TTLvw6/BM3Yp4ahA2t9zyiMZ4UF5A92shipfYRDqGoHwwRV1Pv3bP52t8+4Le+qs +Nnedz/4YNNycPuYUE3LjVe2sE//lhKKTQdzmjWg546e1AX7iiCnH8x+/o7WIYpw HG1mC5kj60929RyosS6D22FVIj7j2k6a3BjXb/8mrfyd -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:37 2026 by rpki-client