This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/9GyPy5VxmA8Grjp6KPGlBXEzQEs.roa File: 9GyPy5VxmA8Grjp6KPGlBXEzQEs.roa (raw, json) Hash identifier: cZRk0f4ULOIcvr4Kq3jJj23UFievd5ZXiHt0/5E2LwY= Subject key identifier: F4:6C:8F:CB:95:71:98:0F:06:AE:3A:7A:28:F1:A5:05:71:33:40:4B Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd Certificate serial: 019B7E38D5477490CADB91472CC6F9C55908 Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/9GyPy5VxmA8Grjp6KPGlBXEzQEs.roa Signing time: Fri 02 Jan 2026 10:20:12 +0000 ROA not before: Fri 02 Jan 2026 10:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202282 IP address blocks: 194.62.184.0/22 maxlen: 24 195.72.52.0/22 maxlen: 24 2a07:e400::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d5:47:74:90:ca:db:91:47:2c:c6:f9:c5:59:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd Validity Not Before: Jan 2 10:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f46c8fcb9571980f06ae3a7a28f1a5057133404b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:10:09:c2:15:bf:18:7f:de:4e:0e:11:45: 5f:96:15:ac:b4:d3:5b:68:ae:02:0c:43:eb:56:57: f0:a0:6c:c0:16:99:c1:a2:02:6c:5c:a7:90:1d:40: 6b:9a:40:44:33:50:c0:88:4d:ea:64:80:8a:3c:f0: 9b:a2:df:2d:29:6f:b6:5a:83:50:38:11:76:6e:81: 06:22:12:52:29:a2:f1:19:97:0f:7e:12:59:a4:4b: 1f:c9:4b:eb:c3:a9:ff:1c:b1:d1:ef:d9:81:fa:6f: 40:7f:44:67:c5:a7:10:7d:86:28:f6:90:d1:38:37: 2f:d9:2f:df:ba:bf:f5:02:f0:a8:f2:50:ea:1c:5d: 41:64:4c:30:8d:84:cb:a5:02:69:7c:b6:84:2d:bc: 50:07:57:77:6f:a2:d2:0c:6f:56:d8:92:13:40:70: bf:8e:58:c9:f2:50:3e:20:67:2b:bf:58:b5:6a:42: da:7a:02:63:2e:0d:63:d2:99:0e:41:78:1a:4d:b4: 26:fc:44:89:60:cf:45:f8:f4:3e:5e:b0:74:37:04: fe:7b:7a:07:ca:f6:25:1a:8f:dd:77:a0:47:cc:50: 19:4b:e2:3c:67:4f:bc:c8:c7:99:a8:b6:18:1a:3f: d0:1b:2a:57:bd:5c:ac:d7:ba:db:fa:ab:6f:c0:43: bd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6C:8F:CB:95:71:98:0F:06:AE:3A:7A:28:F1:A5:05:71:33:40:4B X509v3 Authority Key Identifier: keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/9GyPy5VxmA8Grjp6KPGlBXEzQEs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.184.0/22 195.72.52.0/22 IPv6: 2a07:e400::/29 Signature Algorithm: sha256WithRSAEncryption 13:6f:f2:34:03:6a:58:b4:c1:0a:71:ce:0a:0f:8d:e1:b5:6b: cc:86:68:80:81:e7:25:ba:ba:a6:94:4e:af:7b:11:41:4d:8f: 09:92:99:d4:dc:41:fe:5e:a3:4c:07:fb:1c:7d:09:24:b9:a8: e1:d4:b2:12:4a:fc:bf:2a:52:9c:22:ea:5b:a4:08:58:df:22: 73:e4:4c:11:64:d0:ba:c7:c1:71:62:93:fb:f7:fe:11:ec:d1: e5:41:7f:19:fc:68:de:d9:95:b2:1d:cb:76:ca:51:3e:a7:9a: 4b:41:0b:9c:88:8e:e9:6c:82:8c:e7:ca:3b:43:2f:7d:37:5e: b4:88:41:8e:2c:70:5a:8b:f2:ac:a4:69:48:23:c6:b5:78:ba: 44:e9:9b:34:64:34:47:72:42:88:c0:3a:75:f8:ca:1c:2d:41: c9:94:31:aa:ce:40:4e:00:ba:1e:a6:ae:6a:4d:f0:b5:af:f3: 71:ff:2d:78:38:4e:db:21:8a:61:75:dc:71:1b:1b:36:b4:8a: 04:a0:c7:bb:c8:70:1e:c8:fb:49:b8:be:7b:2a:15:fd:e1:e9: 6a:78:53:1b:77:dd:fd:51:23:8e:86:d1:c7:57:71:7d:f1:3a: ad:5d:7d:f6:df:fe:16:d1:9a:e9:b0:17:0c:2e:ff:77:5c:8e: b2:61:02:01 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+ONVHdJDK25FHLMb5xVkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOGIxMzhiYTkzNTIzNGYxMWNhMTAyNWQ2NjdmMTMzZjA3 ZDU1ZmQwHhcNMjYwMTAyMTAyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDZjOGZjYjk1NzE5ODBmMDZhZTNhN2EyOGYxYTUwNTcxMzM0MDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzswQCcIVvxh/3k4OEUVflhWstNNb aK4CDEPrVlfwoGzAFpnBogJsXKeQHUBrmkBEM1DAiE3qZICKPPCbot8tKW+2WoNQ OBF2boEGIhJSKaLxGZcPfhJZpEsfyUvrw6n/HLHR79mB+m9Af0RnxacQfYYo9pDR ODcv2S/fur/1AvCo8lDqHF1BZEwwjYTLpQJpfLaELbxQB1d3b6LSDG9W2JITQHC/ jljJ8lA+IGcrv1i1akLaegJjLg1j0pkOQXgaTbQm/ESJYM9F+PQ+XrB0NwT+e3oH yvYlGo/dd6BHzFAZS+I8Z0+8yMeZqLYYGj/QGypXvVys17rb+qtvwEO9FwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPRsj8uVcZgPBq46eijxpQVxM0BLMB8GA1UdIwQY MBaAFHGLE4upNSNPEcoQJdZn8TPwfVX9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1lzVGk2azFJMDhSeWhBbDFtZnhNX0I5VmYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kNDMwODUtZDk0ZS00NjlkLTk3Nzgt M2I4ZWMxYTY1ODgwLzEvOUd5UHk1VnhtQThHcmpwNktQR2xCWEV6UUVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kNDMwODUtZDk0ZS00NjlkLTk3NzgtM2I4ZWMxYTY1ODgw LzEvY1lzVGk2azFJMDhSeWhBbDFtZnhNX0I5VmYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCwj64AwQC w0g0MA0EAgACMAcDBQMqB+QAMA0GCSqGSIb3DQEBCwUAA4IBAQATb/I0A2pYtMEK cc4KD43htWvMhmiAgeclurqmlE6vexFBTY8JkpnU3EH+XqNMB/scfQkkuajh1LIS Svy/KlKcIupbpAhY3yJz5EwRZNC6x8FxYpP79/4R7NHlQX8Z/Gje2ZWyHct2ylE+ p5pLQQuciI7pbIKM58o7Qy99N160iEGOLHBai/KspGlII8a1eLpE6Zs0ZDRHckKI wDp1+MocLUHJlDGqzkBOALoepq5qTfC1r/Nx/y14OE7bIYphddxxGxs2tIoEoMe7 yHAeyPtJuL57KhX94elqeFMbd939USOOhtHHV3F98TqtXX323/4W0ZrpsBcMLv93 XI6yYQIB -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:24 2026 by rpki-client