This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/9gK4FgXH9pzUHb_OgQw9DCHAKyU.roa File: 9gK4FgXH9pzUHb_OgQw9DCHAKyU.roa (raw, json) Hash identifier: 0t8+O9jLtAo/1H+w73CAi6kuuXrnIZhfR+LlCnD8Ix8= Subject key identifier: F6:02:B8:16:05:C7:F6:9C:D4:1D:BF:CE:81:0C:3D:0C:21:C0:2B:25 Certificate issuer: /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928 Certificate serial: 019B7EA53C8CF3EA98DAC7490DE0A9F0B894 Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/9gK4FgXH9pzUHb_OgQw9DCHAKyU.roa Signing time: Fri 02 Jan 2026 12:18:36 +0000 ROA not before: Fri 02 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35007 IP address blocks: 81.30.138.0/23 maxlen: 24 91.201.120.0/22 maxlen: 24 93.157.112.0/21 maxlen: 24 185.6.112.0/22 maxlen: 24 185.221.80.0/22 maxlen: 24 195.160.184.0/23 maxlen: 24 195.225.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:3c:8c:f3:ea:98:da:c7:49:0d:e0:a9:f0:b8:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928 Validity Not Before: Jan 2 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f602b81605c7f69cd41dbfce810c3d0c21c02b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:d3:4f:c8:d5:11:98:57:98:46:89:f2:0e: 53:18:ba:e3:4a:3c:69:e7:78:a8:26:bf:81:fb:2a: 20:98:dd:46:68:09:23:fd:68:91:8b:f6:88:a9:c6: dc:07:95:31:54:51:8c:a6:5d:a6:84:60:42:8e:a0: bc:86:1f:54:0b:95:95:92:8b:4b:2b:94:dd:7a:94: 91:8a:d6:1d:ee:17:66:3f:e0:7a:87:81:2d:fe:bd: 44:41:18:08:43:99:1d:e8:e6:94:d2:51:11:10:24: f4:1f:29:a1:6e:83:c5:35:d4:c2:ff:7f:d1:ef:4d: cc:6e:ab:c6:1e:da:52:9d:3b:31:06:8c:4b:b2:c2: 2a:39:7c:0b:1c:8d:42:25:84:f1:80:dd:8b:43:f8: 7a:b3:a2:41:b2:e8:c6:de:cc:99:5c:da:cd:a4:a5: bb:82:ee:60:6b:41:cc:bb:1e:5e:be:9c:fc:84:06: 98:15:d7:a6:da:7f:97:41:30:eb:08:65:2c:b7:4f: d4:ac:9a:da:80:71:47:5d:0d:a7:60:c5:43:44:18: 5e:bb:40:40:d0:5a:45:5a:6b:7d:a0:ea:6d:68:ef: 77:7c:a6:08:5d:8c:2c:a2:be:24:32:66:5b:89:28: 30:ef:ce:f3:76:b7:4b:dc:a4:bc:3e:53:76:4c:bc: 2c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:02:B8:16:05:C7:F6:9C:D4:1D:BF:CE:81:0C:3D:0C:21:C0:2B:25 X509v3 Authority Key Identifier: keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/9gK4FgXH9pzUHb_OgQw9DCHAKyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.30.138.0/23 91.201.120.0/22 93.157.112.0/21 185.6.112.0/22 185.221.80.0/22 195.160.184.0/23 195.225.36.0/23 Signature Algorithm: sha256WithRSAEncryption 81:b5:59:5d:0d:dd:a8:05:7c:ac:59:3c:ea:f0:f9:2c:18:35: fd:2a:1c:8f:86:78:69:4a:82:cc:ac:ed:af:79:9b:28:8c:63: 01:a2:93:f5:4a:f9:47:16:2e:51:3d:0c:70:8a:35:d4:85:20: 54:c1:70:39:68:fe:3d:56:da:89:12:87:8a:67:36:3e:3e:09: 00:e1:36:fd:0d:c5:8a:87:58:04:16:1b:b0:a4:ed:7c:ae:30: b7:20:d8:7a:a6:80:38:73:ed:dc:1f:3e:f7:26:0d:04:b0:63: af:58:5a:78:60:2f:aa:d0:21:cc:37:ef:77:f9:3b:81:7c:c9: c9:6a:55:6d:1d:db:c0:09:29:14:f1:b8:e1:bb:08:f8:3f:5d: 52:e9:a0:82:d2:71:ff:5c:b7:bd:ab:3c:fd:93:49:36:c0:01: 30:17:ad:ad:dc:3c:60:73:c7:4a:1d:25:99:45:1e:6d:cb:89: fd:b0:f4:55:59:70:4b:b0:5a:ca:7c:1b:55:69:3c:ca:79:70: aa:57:e3:d7:ea:61:7d:48:44:f1:52:27:8d:42:16:ba:15:5d: 10:74:b4:e0:d5:ea:84:41:22:b2:d3:e5:fd:8f:95:96:a4:18: 42:76:87:ff:ac:43:fc:11:c6:61:da:ec:28:a2:fa:2c:0f:77: 63:d2:2e:0c -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt+pTyM8+qY2sdJDeCp8LiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmY3ZWE5MGQyYTJiNDIwMmU1NzhiMjViYTEzOWIzYzhl NjI5MjgwHhcNMjYwMTAyMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjAyYjgxNjA1YzdmNjljZDQxZGJmY2U4MTBjM2QwYzIxYzAyYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqLTT8jVEZhXmEaJ8g5TGLrjSjxp 53ioJr+B+yogmN1GaAkj/WiRi/aIqcbcB5UxVFGMpl2mhGBCjqC8hh9UC5WVkotL K5TdepSRitYd7hdmP+B6h4Et/r1EQRgIQ5kd6OaU0lERECT0HymhboPFNdTC/3/R 703MbqvGHtpSnTsxBoxLssIqOXwLHI1CJYTxgN2LQ/h6s6JBsujG3syZXNrNpKW7 gu5ga0HMux5evpz8hAaYFdem2n+XQTDrCGUst0/UrJragHFHXQ2nYMVDRBheu0BA 0FpFWmt9oOptaO93fKYIXYwsor4kMmZbiSgw787zdrdL3KS8PlN2TLwsBQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFPYCuBYFx/ac1B2/zoEMPQwhwCslMB8GA1UdIwQY MBaAFFQvfqkNKitCAuV4sluhObPI5ikoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjkt ZWUxZTFkZWQyZjlmLzEvOWdLNEZnWEg5cHpVSGJfT2dRdzlEQ0hBS3lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjktZWUxZTFkZWQyZjlm LzEvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBUR6KAwQC W8l4AwQDXZ1wAwQCuQZwAwQCud1QAwQBw6C4AwQBw+EkMA0GCSqGSIb3DQEBCwUA A4IBAQCBtVldDd2oBXysWTzq8PksGDX9KhyPhnhpSoLMrO2veZsojGMBopP1SvlH Fi5RPQxwijXUhSBUwXA5aP49VtqJEoeKZzY+PgkA4Tb9DcWKh1gEFhuwpO18rjC3 INh6poA4c+3cHz73Jg0EsGOvWFp4YC+q0CHMN+93+TuBfMnJalVtHdvACSkU8bjh uwj4P11S6aCC0nH/XLe9qzz9k0k2wAEwF62t3Dxgc8dKHSWZRR5ty4n9sPRVWXBL sFrKfBtVaTzKeXCqV+PX6mF9SETxUieNQha6FV0QdLTg1eqEQSKy0+X9j5WWpBhC dof/rEP8EcZh2uwoovosD3dj0i4M -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:32 2026 by rpki-client