This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/9_cNflmMqGmXtLc9sI5jl1QlQaM.roa File: 9_cNflmMqGmXtLc9sI5jl1QlQaM.roa (raw, json) Hash identifier: WaSwh01afw0+7AltVHO2SZoKM+p5egBh/VFl1fJY0VA= Subject key identifier: F7:F7:0D:7E:59:8C:A8:69:97:B4:B7:3D:B0:8E:63:97:54:25:41:A3 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B791074413DB7D8BF2EF8B64CD18EADCA Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/9_cNflmMqGmXtLc9sI5jl1QlQaM.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201021 IP address blocks: 5.144.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:74:41:3d:b7:d8:bf:2e:f8:b6:4c:d1:8e:ad:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7f70d7e598ca86997b4b73db08e6397542541a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c5:9d:9a:44:7b:33:69:6b:f0:17:ad:bb:01: de:d2:54:bb:c3:a6:e6:12:c2:03:c1:2a:8b:40:74: 2d:cf:30:af:cf:00:57:31:f4:79:f7:da:0f:6a:f8: a7:48:da:77:74:3b:47:4a:6a:70:be:84:43:4a:28: 67:c3:fc:8b:5e:43:71:0b:95:cd:1b:45:74:88:32: d0:8f:65:87:a5:cf:40:82:9c:a4:1d:b5:3c:8f:30: a1:6f:86:73:8d:97:6c:46:4c:f2:a5:7c:28:8e:40: ee:0b:86:25:01:03:8a:0f:d8:8d:ac:f0:e3:ae:ea: 5d:ae:0c:be:be:b6:36:9f:1e:a2:17:f8:97:5b:a8: e4:fc:6a:f5:a0:f7:6a:57:38:14:95:e3:87:1b:54: 93:7d:60:6c:4e:f2:1d:f1:e7:a9:36:7e:72:f2:c7: b3:3c:56:c1:fb:f8:fd:2c:ad:9d:e9:b1:a9:26:04: 0c:54:98:2d:9e:e1:9d:83:6d:4b:7f:f5:f3:0f:0c: 36:90:f4:34:16:cf:57:50:c8:46:6f:93:0e:5a:22: 3c:af:c9:fc:df:ca:a5:50:af:8b:5c:76:c5:24:98: 60:d2:af:ea:24:39:be:56:e0:ee:68:87:24:1e:93: f9:75:18:9e:55:9b:ef:79:2e:70:52:69:65:12:2b: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F7:0D:7E:59:8C:A8:69:97:B4:B7:3D:B0:8E:63:97:54:25:41:A3 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/9_cNflmMqGmXtLc9sI5jl1QlQaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.183.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:1d:3a:26:96:58:50:66:19:6a:ac:08:d5:8c:13:0b:96:94: 57:9d:fc:9e:ca:3c:3d:97:c4:28:52:cf:47:6e:ed:59:b4:fd: aa:c4:ae:0b:e1:07:48:09:cc:e8:96:8c:ec:87:8b:06:91:d8: b2:53:26:3b:df:2b:4c:2a:a8:51:21:5a:a0:7b:da:11:d1:31: 2f:57:09:13:35:65:79:08:29:e5:58:38:15:e1:5f:fd:ce:e6: 58:e0:fd:83:ac:55:b4:40:97:d5:15:ba:55:4d:2c:11:09:7a: 32:e8:aa:c9:a2:9b:84:21:df:84:48:f3:dc:76:fa:f9:04:7e: 8b:4d:c7:f4:dd:66:84:59:94:b0:99:6c:5e:4e:fe:ee:69:32: 4e:81:6f:21:26:8f:1f:68:f3:63:b7:67:a7:b6:51:aa:12:06: 07:df:e4:cb:c6:1a:a6:62:62:5e:64:08:43:fb:86:9e:e0:64: 5e:b8:b2:00:99:d6:af:02:8b:de:89:91:d5:91:fa:2e:6f:46: 17:8a:0d:c7:16:ee:d4:e7:c7:8e:76:3b:92:68:b9:93:95:6f: f3:6f:a8:e9:5b:61:8c:a1:e3:a0:ac:8e:96:73:c9:9e:6e:00: e1:df:bd:d7:18:cf:96:2e:9c:41:da:b4:ac:84:68:6d:f4:57: 00:53:41:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHRBPbfYvy74tkzRjq3KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2Y3MGQ3ZTU5OGNhODY5OTdiNGI3M2RiMDhlNjM5NzU0MjU0MWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cWdmkR7M2lr8BetuwHe0lS7w6bm EsIDwSqLQHQtzzCvzwBXMfR599oPavinSNp3dDtHSmpwvoRDSihnw/yLXkNxC5XN G0V0iDLQj2WHpc9AgpykHbU8jzChb4ZzjZdsRkzypXwojkDuC4YlAQOKD9iNrPDj rupdrgy+vrY2nx6iF/iXW6jk/Gr1oPdqVzgUleOHG1STfWBsTvId8eepNn5y8sez PFbB+/j9LK2d6bGpJgQMVJgtnuGdg21Lf/XzDww2kPQ0Fs9XUMhGb5MOWiI8r8n8 38qlUK+LXHbFJJhg0q/qJDm+VuDuaIckHpP5dRieVZvveS5wUmllEiv5qwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPf3DX5ZjKhpl7S3PbCOY5dUJUGjMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvOV9jTmZsbU1xR21YdExjOXNJNWpsMVFsUWFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZC3MA0G CSqGSIb3DQEBCwUAA4IBAQArHTomllhQZhlqrAjVjBMLlpRXnfyeyjw9l8QoUs9H bu1ZtP2qxK4L4QdICczolozsh4sGkdiyUyY73ytMKqhRIVqge9oR0TEvVwkTNWV5 CCnlWDgV4V/9zuZY4P2DrFW0QJfVFbpVTSwRCXoy6KrJopuEId+ESPPcdvr5BH6L Tcf03WaEWZSwmWxeTv7uaTJOgW8hJo8faPNjt2entlGqEgYH3+TLxhqmYmJeZAhD +4ae4GReuLIAmdavAoveiZHVkfoub0YXig3HFu7U58eOdjuSaLmTlW/zb6jpW2GM oeOgrI6Wc8mebgDh373XGM+WLpxB2rSshGht9FcAU0Eo -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:59 2026 by rpki-client