This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa File: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (raw, json) Hash identifier: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic= Subject key identifier: AB:D4:22:C2:20:6D:51:76:9E:1B:37:27:F6:A9:D3:4D:70:91:69:82 Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37 Certificate serial: 019B7BA3186908111EDB05222C4034C99336 Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa Signing time: Thu 01 Jan 2026 22:17:24 +0000 ROA not before: Thu 01 Jan 2026 22:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212441 IP address blocks: 77.232.36.0/24 maxlen: 24 77.232.37.0/24 maxlen: 24 77.232.38.0/24 maxlen: 24 77.232.39.0/24 maxlen: 24 77.232.40.0/24 maxlen: 24 77.232.41.0/24 maxlen: 24 77.232.42.0/24 maxlen: 24 77.232.43.0/24 maxlen: 24 91.142.76.0/24 maxlen: 24 91.142.77.0/24 maxlen: 24 91.142.78.0/24 maxlen: 24 91.142.79.0/24 maxlen: 24 185.173.36.0/24 maxlen: 24 185.173.37.0/24 maxlen: 24 185.173.38.0/24 maxlen: 24 185.173.39.0/24 maxlen: 24 193.163.175.0/24 maxlen: 24 2a10:9200::/48 maxlen: 48 2a10:9200:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:18:69:08:11:1e:db:05:22:2c:40:34:c9:93:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37 Validity Not Before: Jan 1 22:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abd422c2206d51769e1b3727f6a9d34d70916982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:fb:e7:76:1c:de:c1:77:3b:81:ff:98:f2:a4: 00:86:68:0a:4a:2a:37:76:83:94:76:92:9d:43:d3: 65:b3:18:d4:af:d3:40:3b:84:df:aa:ce:de:67:f3: 47:de:3b:7c:f2:af:86:31:a5:1e:6e:07:6a:ca:3a: 8b:c3:ea:62:08:8a:3f:f9:18:6a:28:e3:b7:1a:7c: ed:82:b8:1c:bc:0f:ca:e9:42:55:2e:c2:e6:74:f4: 8b:dc:63:82:c7:78:80:05:2e:99:df:66:a0:3e:f2: 22:03:4f:17:32:46:76:3d:2d:4c:eb:7a:c7:eb:30: 93:4b:3c:3d:96:63:a4:59:3c:d3:84:04:2d:3e:e7: 5d:2d:03:9b:3c:b5:7a:c4:97:66:d8:89:6b:29:f6: 34:76:c6:87:07:fd:ab:20:5f:84:28:44:1b:45:23: 47:7b:ef:98:ee:6d:45:a5:60:67:9b:b7:ef:26:25: d2:67:be:e6:9d:7a:66:d1:7b:00:60:48:29:88:28: d4:fb:69:d9:18:52:9e:ee:0b:22:08:af:46:ca:6f: 35:3b:67:37:cd:1c:c4:58:de:91:30:e8:30:29:14: ca:f0:dd:46:89:c2:9e:cf:a8:ca:ad:6f:06:bd:e2: f7:41:0f:f2:3f:01:de:8e:c9:34:f7:f2:a2:51:d1: 85:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D4:22:C2:20:6D:51:76:9E:1B:37:27:F6:A9:D3:4D:70:91:69:82 X509v3 Authority Key Identifier: keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.232.36.0-77.232.43.255 91.142.76.0/22 185.173.36.0/22 193.163.175.0/24 IPv6: 2a10:9200::/47 Signature Algorithm: sha256WithRSAEncryption 40:01:98:2a:ae:88:06:bc:82:50:6e:00:29:b2:cb:0f:2b:04: 6f:32:71:d1:91:51:a3:a7:69:de:e9:82:35:1e:e9:0f:06:e2: ef:89:35:04:e6:8c:49:f0:36:49:c1:c5:cc:90:7f:00:87:97: 68:b0:a2:74:ba:b7:98:40:e5:80:3c:bc:44:f3:8b:fa:3b:0c: 4c:7d:51:47:8b:74:64:14:37:5e:39:45:25:d0:4f:0a:dc:d9: d6:9b:fb:51:a9:93:42:75:9c:db:27:c0:18:f3:54:69:81:49: 58:13:8a:db:9e:0c:bc:fa:d8:3c:9a:f8:7e:5c:94:7c:00:7f: 42:b5:96:1d:1b:fe:68:1d:0a:85:23:f2:22:30:73:90:2c:b0: b8:0e:ab:fe:a4:55:13:60:9b:52:66:93:81:e0:26:2c:53:66: 98:c1:da:22:52:6a:da:95:d8:22:7f:3e:19:f2:7c:6b:c1:d9: 4a:93:a8:f4:0f:25:0b:3a:d6:51:7d:35:64:ac:45:cc:16:94: 0e:71:71:32:f6:7a:f6:82:ff:7a:f9:44:6b:86:c0:7f:ce:24: a3:88:e8:d5:15:f8:66:70:2b:37:b1:28:7c:85:cf:11:8e:75: fb:f3:ae:11:3f:9c:08:fa:5a:51:8b:e8:bc:3a:f7:f7:9f:49: 02:89:02:a9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt7oxhpCBEe2wUiLEA0yZM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTMwMzU5YjU0NjkxMTJlNmUyYmZhZTg1OTViMDU0ODU1 NTFkMzcwHhcNMjYwMTAxMjIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmQ0MjJjMjIwNmQ1MTc2OWUxYjM3MjdmNmE5ZDM0ZDcwOTE2OTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/vndhzewXc7gf+Y8qQAhmgKSio3 doOUdpKdQ9NlsxjUr9NAO4Tfqs7eZ/NH3jt88q+GMaUebgdqyjqLw+piCIo/+Rhq KOO3GnztgrgcvA/K6UJVLsLmdPSL3GOCx3iABS6Z32agPvIiA08XMkZ2PS1M63rH 6zCTSzw9lmOkWTzThAQtPuddLQObPLV6xJdm2IlrKfY0dsaHB/2rIF+EKEQbRSNH e++Y7m1FpWBnm7fvJiXSZ77mnXpm0XsAYEgpiCjU+2nZGFKe7gsiCK9Gym81O2c3 zRzEWN6RMOgwKRTK8N1GicKez6jKrW8GveL3QQ/yPwHejsk09/KiUdGFNwIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFKvUIsIgbVF2nhs3J/ap001wkWmCMB8GA1UdIwQY MBaAFLmTA1m1RpES5uK/roWVsFSFVR03MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTIt YmU1ZjEyOWVhODFhLzEvcTlRaXdpQnRVWGFlR3pjbjlxblRUWENSYVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xNTJlZTctOGQ3YS00ZTExLWI1OTItYmU1ZjEyOWVhODFh LzEvdVpNRFdiVkdrUkxtNHItdWhaV3dWSVZWSFRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgMAwDBAJN6CQD BAJN6CgDBAJbjkwDBAK5rSQDBADBo68wDwQCAAIwCQMHASoQkgAAADANBgkqhkiG 9w0BAQsFAAOCAQEAQAGYKq6IBryCUG4AKbLLDysEbzJx0ZFRo6dp3umCNR7pDwbi 74k1BOaMSfA2ScHFzJB/AIeXaLCidLq3mEDlgDy8RPOL+jsMTH1RR4t0ZBQ3XjlF JdBPCtzZ1pv7UamTQnWc2yfAGPNUaYFJWBOK254MvPrYPJr4flyUfAB/QrWWHRv+ aB0KhSPyIjBzkCywuA6r/qRVE2CbUmaTgeAmLFNmmMHaIlJq2pXYIn8+GfJ8a8HZ SpOo9A8lCzrWUX01ZKxFzBaUDnFxMvZ69oL/evlEa4bAf84ko4jo1RX4ZnArN7Eo fIXPEY51+/OuET+cCPpaUYvovDr3959JAokCqQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:59 2026 by rpki-client