This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/9sanimaWXZjeVWS-vHt3uwj21c8.roa File: 9sanimaWXZjeVWS-vHt3uwj21c8.roa (raw, json) Hash identifier: xXtjrWCXxmfH7nH10gBJiS5Jtsr3rg2O1NowVzhxzC4= Subject key identifier: F6:C6:A7:8A:66:96:5D:98:DE:55:64:BE:BC:7B:77:BB:08:F6:D5:CF Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Certificate serial: 019B77590ED68588C686CB9BAB2B7C0775C6 Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/9sanimaWXZjeVWS-vHt3uwj21c8.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3215 IP address blocks: 156.28.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0e:d6:85:88:c6:86:cb:9b:ab:2b:7c:07:75:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6c6a78a66965d98de5564bebc7b77bb08f6d5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:42:8a:e1:93:9f:46:eb:46:5d:a2:73:76: 85:2f:06:90:99:64:c9:bc:93:a0:65:90:da:4d:80: 94:71:f4:c7:f9:a9:0d:a1:ee:01:5e:58:c7:79:bc: 67:d2:cc:8a:07:4f:06:18:49:37:4b:36:bd:78:2b: d6:08:52:90:d5:b8:62:f9:a7:02:61:dc:df:d9:66: a7:74:db:ac:73:4f:01:a7:70:62:f9:b5:23:b8:28: 09:65:ce:4f:0b:8e:07:1a:59:3e:1d:87:d7:06:d3: 6b:ba:49:91:25:52:56:64:0c:3d:d4:bb:a0:54:af: 68:7d:e8:d6:0c:c4:fb:56:31:31:5b:6e:07:91:4c: d0:7c:f3:8d:c1:04:6c:61:7c:ed:02:8b:49:ba:76: a2:f1:f1:30:d9:a4:2c:d1:eb:b9:ea:5b:0e:65:1a: bb:90:e2:2a:3e:01:68:1b:a3:9e:79:5b:39:00:21: d1:8b:bc:30:64:c4:a8:b7:f6:2d:7f:aa:62:21:f6: f6:c8:d0:f0:d5:6e:1f:81:b8:04:80:e5:8f:6a:14: c7:36:b2:24:45:a8:3f:66:94:24:e0:f5:e1:34:73: 85:ca:32:63:b2:bb:80:b6:28:81:bb:38:e9:41:74: e1:78:06:fa:39:e6:45:03:86:59:b4:fd:28:30:20: 8b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C6:A7:8A:66:96:5D:98:DE:55:64:BE:BC:7B:77:BB:08:F6:D5:CF X509v3 Authority Key Identifier: keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/9sanimaWXZjeVWS-vHt3uwj21c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.28.6.0/23 Signature Algorithm: sha256WithRSAEncryption 59:88:98:7c:63:91:31:98:a6:ca:9b:f5:59:24:70:cb:a8:2d: 7e:b3:9e:0e:57:1f:9d:ec:5f:f8:80:7d:eb:92:58:44:8f:0a: ce:a0:71:ba:9f:37:76:24:fb:bd:1d:a4:b2:a0:cb:5c:88:da: b8:57:6c:29:b0:6b:84:f8:97:28:1a:7d:9e:79:ae:96:6d:f2: 81:40:78:77:01:d1:b1:62:fd:ee:76:ad:7b:7a:81:cc:62:2e: 75:53:ba:0a:b8:85:21:93:cd:b1:66:be:60:f7:76:79:bb:15: e6:2d:b2:c3:4a:28:d2:08:08:cf:66:2d:39:ea:23:e6:54:92: cc:41:f4:d4:b5:06:32:6f:3d:0b:fc:3c:32:79:d8:10:16:3f: d4:95:6c:31:37:78:c4:a6:91:1d:46:74:40:2d:5a:66:72:cb: e1:af:0f:4d:57:bf:66:51:8e:3c:38:80:ac:b3:18:4f:01:b7: fd:46:1b:f6:78:06:21:0a:be:e7:38:6a:d3:46:cf:de:5b:27: c8:04:44:57:94:47:65:7c:6f:7e:74:d6:62:48:af:ee:f5:d4: 13:d4:53:b3:b3:69:7d:0d:92:e0:2b:c6:be:58:17:88:c6:5f: df:2a:68:3a:21:79:99:f6:a8:51:83:4a:e5:c6:59:b0:39:e5: 60:cc:9e:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQ7WhYjGhsubqyt8B3XGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTk0NzU3YWMzZjcwYjQwZjM2OTMwN2QzNjVlYmM5NjU3 YmFiNjkwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmM2YTc4YTY2OTY1ZDk4ZGU1NTY0YmViYzdiNzdiYjA4ZjZkNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA239CiuGTn0brRl2ic3aFLwaQmWTJ vJOgZZDaTYCUcfTH+akNoe4BXljHebxn0syKB08GGEk3Sza9eCvWCFKQ1bhi+acC Ydzf2WandNusc08Bp3Bi+bUjuCgJZc5PC44HGlk+HYfXBtNrukmRJVJWZAw91Lug VK9ofejWDMT7VjExW24HkUzQfPONwQRsYXztAotJunai8fEw2aQs0eu56lsOZRq7 kOIqPgFoG6OeeVs5ACHRi7wwZMSot/Ytf6piIfb2yNDw1W4fgbgEgOWPahTHNrIk Rag/ZpQk4PXhNHOFyjJjsruAtiiBuzjpQXTheAb6OeZFA4ZZtP0oMCCLAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPbGp4pmll2Y3lVkvrx7d7sI9tXPMB8GA1UdIwQY MBaAFJzpR1esP3C0DzaTB9Nl68lle6tpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDIt ZTFlYTQxYzlhMmU2LzEvOXNhbmltYVdYWmplVldTLXZIdDN1d2oyMWM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDItZTFlYTQxYzlhMmU2 LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnBwGMA0G CSqGSIb3DQEBCwUAA4IBAQBZiJh8Y5ExmKbKm/VZJHDLqC1+s54OVx+d7F/4gH3r klhEjwrOoHG6nzd2JPu9HaSyoMtciNq4V2wpsGuE+JcoGn2eea6WbfKBQHh3AdGx Yv3udq17eoHMYi51U7oKuIUhk82xZr5g93Z5uxXmLbLDSijSCAjPZi056iPmVJLM QfTUtQYybz0L/DwyedgQFj/UlWwxN3jEppEdRnRALVpmcsvhrw9NV79mUY48OICs sxhPAbf9Rhv2eAYhCr7nOGrTRs/eWyfIBERXlEdlfG9+dNZiSK/u9dQT1FOzs2l9 DZLgK8a+WBeIxl/fKmg6IXmZ9qhRg0rlxlmwOeVgzJ6X -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:30 2026 by rpki-client