This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa File: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (raw, json) Hash identifier: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA= Subject key identifier: F4:D9:7D:50:4E:A2:43:C0:73:61:DC:65:EC:6F:A4:CA:DB:27:18:CD Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe Certificate serial: 019B7CEE03E5A8947CF8A2530D3C0535A699 Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.251.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:03:e5:a8:94:7c:f8:a2:53:0d:3c:05:35:a6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4d97d504ea243c07361dc65ec6fa4cadb2718cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3a:7e:7e:1f:7f:fa:1a:40:8f:8f:a0:9f:8b: d6:45:67:73:ce:72:62:e5:8f:17:de:33:df:42:87: 9d:8e:77:8b:d8:50:ff:f6:65:6e:17:24:64:48:5e: df:10:98:f1:e9:4a:47:fb:09:6d:9d:7d:c1:a8:6b: ca:4b:69:2b:68:a9:ae:3f:d0:79:ba:2d:84:2d:93: 9f:f7:8e:14:a5:98:04:f2:8f:77:17:2e:d7:f8:4d: e1:58:bc:08:90:eb:61:37:38:f6:c0:4b:9c:75:07: 1e:bc:ea:60:ab:c9:a2:76:ba:7b:b8:6d:24:2f:d8: a1:f1:72:af:e1:3a:11:da:42:c7:d4:2a:d0:2f:de: ce:6b:ea:12:24:81:3c:15:1f:70:63:6e:ba:2d:d6: 65:c5:dd:7a:f0:6c:e8:6d:cb:cf:e9:b1:77:bb:a9: 39:4a:23:72:9e:78:55:67:d3:2b:cf:c9:72:2c:ab: 25:51:a1:38:52:39:43:b5:c8:a2:3f:65:4a:e9:74: 46:e1:e1:44:dc:a8:fa:01:c0:83:64:9f:9b:6d:5b: c8:21:92:74:3c:a9:bf:56:4e:3f:b0:c6:04:0b:fb: ce:2e:0f:e6:3d:22:c3:13:12:75:84:b9:52:e4:dc: 2f:8e:a0:4c:d1:c9:47:88:f6:be:c4:a4:0f:2f:d5: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D9:7D:50:4E:A2:43:C0:73:61:DC:65:EC:6F:A4:CA:DB:27:18:CD X509v3 Authority Key Identifier: keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.244.0/22 Signature Algorithm: sha256WithRSAEncryption 58:bb:69:88:4e:93:f1:1a:9e:75:f9:0a:3f:4c:15:be:fc:b9: c4:24:4c:80:a7:0a:20:19:94:df:4c:6a:0b:e8:d7:19:0a:c0: 8c:3d:38:39:2b:7c:22:0d:da:1f:cf:10:a3:b5:f3:54:b5:db: 6e:a5:a1:c5:89:d0:12:ae:fd:d8:86:66:64:53:ad:e8:09:63: 0f:0b:87:71:d0:34:91:29:fc:4e:82:c3:a1:b1:f3:3e:e4:3b: cf:6c:1a:86:1c:6f:3f:20:7b:f4:b7:20:a8:55:07:43:3d:b6: b8:0f:3f:4e:c4:c4:f8:04:52:7d:3a:a8:1c:42:2b:24:6f:ee: 5b:37:66:90:28:48:3a:8b:dd:d7:b9:21:77:61:a7:0f:0d:e4: 26:15:6a:29:ad:42:ab:e1:5d:9e:97:09:2f:53:e5:3d:66:5e: c4:00:11:1f:30:0d:30:0f:94:b4:e7:b1:e0:a0:4e:d2:f3:a0: 0a:ff:db:e5:f5:cd:ca:b4:5b:99:72:4e:6f:56:24:b4:82:c2: 7c:99:27:5f:10:ac:87:3d:20:5a:b2:1d:18:1b:c4:cf:1f:ce: 5c:09:86:62:65:95:66:87:d2:80:ae:b1:e4:fa:d2:e1:a0:de: d2:94:f8:bd:08:16:62:61:8c:ba:70:ee:c8:95:43:1c:80:a3: 0f:b8:3e:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gPlqJR8+KJTDTwFNaaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNDc5MjFlNDQzMDUyMWE3NzI3ODg4YzEzYmM3YjhlMTA0 Y2JkYmUwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGQ5N2Q1MDRlYTI0M2MwNzM2MWRjNjVlYzZmYTRjYWRiMjcxOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzp+fh9/+hpAj4+gn4vWRWdzznJi 5Y8X3jPfQoedjneL2FD/9mVuFyRkSF7fEJjx6UpH+wltnX3BqGvKS2kraKmuP9B5 ui2ELZOf944UpZgE8o93Fy7X+E3hWLwIkOthNzj2wEucdQcevOpgq8midrp7uG0k L9ih8XKv4ToR2kLH1CrQL97Oa+oSJIE8FR9wY266LdZlxd168GzobcvP6bF3u6k5 SiNynnhVZ9Mrz8lyLKslUaE4UjlDtciiP2VK6XRG4eFE3Kj6AcCDZJ+bbVvIIZJ0 PKm/Vk4/sMYEC/vOLg/mPSLDExJ1hLlS5NwvjqBM0clHiPa+xKQPL9X5UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPTZfVBOokPAc2HcZexvpMrbJxjNMB8GA1UdIwQY MBaAFMpHkh5EMFIadyeIjBO8e44QTL2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2It ODNlNTVjNWY2ZjdkLzEvOU5sOVVFNmlROEJ6WWR4bDdHLWt5dHNuR00wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2ItODNlNTVjNWY2Zjdk LzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufv0MA0G CSqGSIb3DQEBCwUAA4IBAQBYu2mITpPxGp51+Qo/TBW+/LnEJEyApwogGZTfTGoL 6NcZCsCMPTg5K3wiDdofzxCjtfNUtdtupaHFidASrv3YhmZkU63oCWMPC4dx0DSR KfxOgsOhsfM+5DvPbBqGHG8/IHv0tyCoVQdDPba4Dz9OxMT4BFJ9OqgcQiskb+5b N2aQKEg6i93XuSF3YacPDeQmFWoprUKr4V2elwkvU+U9Zl7EABEfMA0wD5S057Hg oE7S86AK/9vl9c3KtFuZck5vViS0gsJ8mSdfEKyHPSBash0YG8TPH85cCYZiZZVm h9KArrHk+tLhoN7SlPi9CBZiYYy6cO7IlUMcgKMPuD7f -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:16 2026 by rpki-client