This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/9iXPkKQ54sHh9FCulI77t8C1PLY.roa File: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (raw, json) Hash identifier: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw= Subject key identifier: F6:25:CF:90:A4:39:E2:C1:E1:F4:50:AE:94:8E:FB:B7:C0:B5:3C:B6 Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Certificate serial: 019B79ECA593FBD328E8C8F9772C324DD69E Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/9iXPkKQ54sHh9FCulI77t8C1PLY.roa Signing time: Thu 01 Jan 2026 14:18:30 +0000 ROA not before: Thu 01 Jan 2026 14:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43824 IP address blocks: 109.75.64.0/24 maxlen: 24 109.75.65.0/24 maxlen: 24 109.75.66.0/24 maxlen: 24 109.75.67.0/24 maxlen: 24 109.75.68.0/24 maxlen: 24 109.75.69.0/24 maxlen: 24 109.75.70.0/24 maxlen: 24 109.75.71.0/24 maxlen: 24 109.75.72.0/24 maxlen: 24 109.75.73.0/24 maxlen: 24 109.75.74.0/24 maxlen: 24 109.75.75.0/24 maxlen: 24 109.75.76.0/24 maxlen: 24 109.75.77.0/24 maxlen: 24 109.75.79.0/24 maxlen: 24 185.204.48.0/24 maxlen: 24 185.204.49.0/24 maxlen: 24 185.204.50.0/24 maxlen: 24 185.204.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a5:93:fb:d3:28:e8:c8:f9:77:2c:32:4d:d6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64 Validity Not Before: Jan 1 14:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f625cf90a439e2c1e1f450ae948efbb7c0b53cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:54:0c:8d:1d:f5:1a:97:b6:9d:32:5e:90:58: 4f:eb:e6:95:61:94:67:c8:90:60:44:17:21:8d:c4: 90:00:dc:6e:fe:d1:c0:76:76:13:08:b9:b1:ae:4e: 26:81:64:49:68:ed:1d:21:67:18:78:43:d5:ea:e8: 81:20:c3:5d:d8:76:82:84:56:7f:5d:36:12:0b:7d: 56:75:f5:d9:76:0b:bd:c2:b9:24:3b:af:74:05:20: 95:bc:9d:b9:d3:07:ec:1a:2b:7a:fd:d5:e9:53:9b: 23:9a:73:e2:2c:8e:bb:f5:4d:76:29:c8:b0:aa:71: 8a:ab:04:16:4c:34:3c:85:01:30:49:7a:a0:02:87: a0:b8:5a:7f:e3:e5:09:ee:4c:17:2a:97:7f:08:33: 8e:6d:00:c4:ba:b8:25:d1:02:d3:15:ea:3c:32:31: 20:7a:d7:30:70:aa:b2:e4:fd:bd:2a:fc:12:98:95: b0:5e:db:cb:cd:71:d7:03:a6:c6:2f:aa:be:d4:85: c6:f6:fc:d6:e0:6e:91:6f:d2:2f:df:fb:cf:7c:83: 96:1a:f3:ad:0f:a5:74:5a:a1:f1:1e:2a:fe:fa:0d: c5:7b:ed:64:7d:5f:ed:48:27:e2:dd:d3:e8:99:a5: c1:2a:27:1d:42:64:6d:41:ec:3c:e9:34:6f:d0:9b: a8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:25:CF:90:A4:39:E2:C1:E1:F4:50:AE:94:8E:FB:B7:C0:B5:3C:B6 X509v3 Authority Key Identifier: keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/9iXPkKQ54sHh9FCulI77t8C1PLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.75.64.0-109.75.77.255 109.75.79.0/24 185.204.48.0/22 Signature Algorithm: sha256WithRSAEncryption 21:35:4c:cf:c0:a8:19:99:5f:69:66:d5:52:3b:c1:33:19:c2: af:0c:d5:cd:b6:86:f5:68:c0:f5:12:d2:d3:b5:42:e0:bd:03: 1c:ef:96:7a:91:1a:95:5c:59:bf:a9:3c:a4:0b:82:84:00:2c: e8:94:59:32:ce:b5:36:b2:1a:61:6d:8a:7e:f8:12:0e:35:ee: d2:73:f7:ea:ac:3e:5c:f4:4c:d7:99:32:3a:c9:c7:62:09:3e: 81:9f:20:a8:3c:ce:3f:ae:7d:c8:08:78:bc:cf:38:79:25:5f: b8:16:a0:37:d3:3c:0e:f4:b6:7c:e8:7b:46:e3:68:a0:75:30: 91:6c:4b:bd:db:0b:56:62:91:a8:3f:7d:d3:20:ab:35:d8:bb: 99:17:a0:94:bd:05:92:b6:26:68:8f:a8:18:7d:3f:fb:bb:5c: 8e:6b:e4:98:ca:c7:b3:37:3f:a0:c5:37:cf:5f:31:6f:4b:0a: 77:0c:b5:76:67:84:cf:74:ad:d8:be:33:21:08:1f:b8:54:45: 2b:93:3a:07:ad:28:ca:70:42:e1:d4:34:68:9e:df:91:b3:25: f8:82:08:e6:41:4d:78:3d:ee:12:fb:7f:09:fd:58:64:e0:19: 94:40:a1:7a:c1:04:76:b0:2e:2b:9a:26:3c:e7:51:65:a8:9c: 07:65:3f:0f -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt57KWT+9Mo6Mj5dywyTdaeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNWYyZTdjYzJjNjg3ZjU4YzBkMWY2MTMyYmIyZGNmZGYz OGNiNjQwHhcNMjYwMTAxMTQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjI1Y2Y5MGE0MzllMmMxZTFmNDUwYWU5NDhlZmJiN2MwYjUzY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolQMjR31Gpe2nTJekFhP6+aVYZRn yJBgRBchjcSQANxu/tHAdnYTCLmxrk4mgWRJaO0dIWcYeEPV6uiBIMNd2HaChFZ/ XTYSC31WdfXZdgu9wrkkO690BSCVvJ250wfsGit6/dXpU5sjmnPiLI679U12Kciw qnGKqwQWTDQ8hQEwSXqgAoeguFp/4+UJ7kwXKpd/CDOObQDEurgl0QLTFeo8MjEg etcwcKqy5P29KvwSmJWwXtvLzXHXA6bGL6q+1IXG9vzW4G6Rb9Iv3/vPfIOWGvOt D6V0WqHxHir++g3Fe+1kfV/tSCfi3dPomaXBKicdQmRtQew86TRv0JuoLwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFPYlz5CkOeLB4fRQrpSO+7fAtTy2MB8GA1UdIwQY MBaAFN1fLnzCxof1jA0fYTK7Lc/fOMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMt OWRjZmQyZWYzMDIzLzEvOWlYUGtLUTU0c0hoOUZDdWxJNzd0OEMxUExZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iYzBhMjUtOTMzYS00ZjVhLWE1ZjMtOWRjZmQyZWYzMDIz LzEvM1Y4dWZNTEdoX1dNRFI5aE1yc3R6OTg0eTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAZtS0AD BAFtS0wDBABtS08DBAK5zDAwDQYJKoZIhvcNAQELBQADggEBACE1TM/AqBmZX2lm 1VI7wTMZwq8M1c22hvVowPUS0tO1QuC9AxzvlnqRGpVcWb+pPKQLgoQALOiUWTLO tTayGmFtin74Eg417tJz9+qsPlz0TNeZMjrJx2IJPoGfIKg8zj+ufcgIeLzPOHkl X7gWoDfTPA70tnzoe0bjaKB1MJFsS73bC1Zikag/fdMgqzXYu5kXoJS9BZK2JmiP qBh9P/u7XI5r5JjKx7M3P6DFN89fMW9LCncMtXZnhM90rdi+MyEIH7hURSuTOget KMpwQuHUNGie35GzJfiCCOZBTXg97hL7fwn9WGTgGZRAoXrBBHawLiuaJjznUWWo nAdlPw8= -----END CERTIFICATE-----Generated at Sun Jan 25 16:35:51 2026 by rpki-client