This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa File: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (raw, json) Hash identifier: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo= Subject key identifier: 73:DF:DF:65:14:59:C9:6D:17:0F:2F:4D:BA:3E:60:69:64:8A:16:3C Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3E0BF4D036048DD8D7D200DD16B2A Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa Signing time: Thu 01 Jan 2026 22:18:16 +0000 ROA not before: Thu 01 Jan 2026 22:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16015 IP address blocks: 213.253.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e0:bf:4d:03:60:48:dd:8d:7d:20:0d:d1:6b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=73dfdf651459c96d170f2f4dba3e6069648a163c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b2:0d:7f:31:fe:63:02:00:64:aa:37:6c:a1: ef:f6:bf:4f:86:ae:8f:98:10:ba:de:02:95:94:a7: d2:7c:be:1b:d0:86:1b:c6:0f:35:51:fd:59:0b:3e: 29:d1:5b:a5:73:d4:ed:96:2d:06:cf:88:07:61:c1: 3c:0c:cb:c0:61:33:f5:1e:48:2c:8c:c5:d6:f9:07: fa:ee:5e:43:c5:7c:43:9e:2c:26:cd:01:a4:41:d0: 35:b4:8f:a8:28:3b:11:26:6b:9d:8b:f0:78:05:78: 42:d3:dd:56:69:51:3f:2d:fd:a0:38:e8:71:ba:11: 99:07:92:65:9c:60:ed:0e:73:e2:f4:7a:29:cd:b9: 53:53:b5:3e:ff:6d:ee:0d:90:25:eb:17:98:11:15: 47:d4:ba:1f:7f:7a:f8:66:a7:53:51:cc:94:db:df: 30:13:e3:bc:3c:11:bc:56:eb:cc:8c:64:7a:66:fa: e8:01:82:33:84:1b:e9:d9:de:f2:5d:51:b9:2e:15: 8a:2e:a6:0b:45:57:7b:7e:2d:35:c8:e9:54:0e:fa: c0:f8:18:36:18:c6:0b:c5:73:72:cb:f0:d8:e6:b1: 70:35:84:ae:ab:8e:47:55:8f:a8:33:89:17:9e:1c: 3c:21:9b:7d:5c:c1:c7:1d:5b:4f:cc:45:96:d8:f4: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DF:DF:65:14:59:C9:6D:17:0F:2F:4D:BA:3E:60:69:64:8A:16:3C X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.253.194.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:2d:95:57:e6:ff:90:0d:01:a3:9c:ad:ae:9a:a8:65:ee:00: 69:7a:04:24:0d:17:80:f4:59:d8:f3:85:40:01:4b:7a:73:41: 13:b8:99:69:27:56:4c:b1:47:df:ef:b3:01:48:48:b4:d1:85: fe:e0:3f:4e:5c:30:9b:9a:3b:e9:7d:76:fe:c0:2a:63:bb:d1: f3:2c:7b:8a:31:19:fe:78:56:2e:3e:8d:23:d4:60:42:c1:cf: 91:d1:bc:37:b9:94:0f:49:99:89:28:86:69:ac:ea:a8:0d:b5: 07:7d:29:77:99:93:7c:6d:a2:d2:0c:e1:19:d6:bb:bc:fd:49: e5:d9:1f:a8:64:8d:dc:28:41:23:a4:b8:32:35:15:49:8d:b8: 94:43:b1:09:ff:c4:b8:f9:f8:00:33:78:78:71:85:e6:f4:a3: 40:a7:00:ec:e0:64:c3:13:1b:ed:2c:a1:9d:26:1b:f4:bb:4c: e3:fc:fb:60:22:5c:d4:1d:8e:3c:4d:a2:ec:46:14:f7:47:16: 2f:40:b1:a7:ca:94:30:be:21:5d:e8:61:45:51:80:d5:11:45: cf:79:d4:a2:c8:ee:5c:93:66:ef:9a:20:58:1c:c1:01:fb:ee: c6:59:ac:81:07:5d:1b:d7:80:16:3f:08:a2:06:e3:c1:6d:e5: 87:46:17:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+C/TQNgSN2NfSAN0WsqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2RmZGY2NTE0NTljOTZkMTcwZjJmNGRiYTNlNjA2OTY0OGExNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLINfzH+YwIAZKo3bKHv9r9Phq6P mBC63gKVlKfSfL4b0IYbxg81Uf1ZCz4p0Vulc9Ttli0Gz4gHYcE8DMvAYTP1Hkgs jMXW+Qf67l5DxXxDniwmzQGkQdA1tI+oKDsRJmudi/B4BXhC091WaVE/Lf2gOOhx uhGZB5JlnGDtDnPi9HopzblTU7U+/23uDZAl6xeYERVH1Loff3r4ZqdTUcyU298w E+O8PBG8VuvMjGR6ZvroAYIzhBvp2d7yXVG5LhWKLqYLRVd7fi01yOlUDvrA+Bg2 GMYLxXNyy/DY5rFwNYSuq45HVY+oM4kXnhw8IZt9XMHHHVtPzEWW2PRxPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHPf32UUWcltFw8vTbo+YGlkihY8MB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvYzlfZlpSUlp5VzBYRHk5TnVqNWdhV1NLRmp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1f3CMA0G CSqGSIb3DQEBCwUAA4IBAQA+LZVX5v+QDQGjnK2umqhl7gBpegQkDReA9FnY84VA AUt6c0ETuJlpJ1ZMsUff77MBSEi00YX+4D9OXDCbmjvpfXb+wCpju9HzLHuKMRn+ eFYuPo0j1GBCwc+R0bw3uZQPSZmJKIZprOqoDbUHfSl3mZN8baLSDOEZ1ru8/Unl 2R+oZI3cKEEjpLgyNRVJjbiUQ7EJ/8S4+fgAM3h4cYXm9KNApwDs4GTDExvtLKGd Jhv0u0zj/PtgIlzUHY48TaLsRhT3RxYvQLGnypQwviFd6GFFUYDVEUXPedSiyO5c k2bvmiBYHMEB++7GWayBB10b14AWPwiiBuPBbeWHRhcL -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:52 2026 by rpki-client