This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/9m_GafqSQ2AMm8MsH5D2DnqV-KI.roa File: 9m_GafqSQ2AMm8MsH5D2DnqV-KI.roa (raw, json) Hash identifier: Orx55/GbVZiMnY5afBvpRTwGYjO1rSCGKjvHSzbLAKk= Subject key identifier: F6:6F:C6:69:FA:92:43:60:0C:9B:C3:2C:1F:90:F6:0E:7A:95:F8:A2 Certificate issuer: /CN=044aacab9a49e143de68979ad156b42dabddde8c Certificate serial: 019AE487133D74CA302536EE8CEE7F49EF37 Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/9m_GafqSQ2AMm8MsH5D2DnqV-KI.roa Signing time: Wed 03 Dec 2025 14:04:08 +0000 ROA not before: Wed 03 Dec 2025 14:04:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2259 IP address blocks: 77.72.40.0/21 maxlen: 24 130.79.0.0/16 maxlen: 16 185.155.92.0/22 maxlen: 22 2a07:2e40::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:87:13:3d:74:ca:30:25:36:ee:8c:ee:7f:49:ef:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c Validity Not Before: Dec 3 14:04:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f66fc669fa9243600c9bc32c1f90f60e7a95f8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:bc:0d:34:ee:29:b6:e9:36:e5:c1:35:75: 1f:9f:a6:ee:59:a0:1b:bf:16:4e:0d:54:08:b6:f3: 1c:be:34:6e:c7:5d:8d:f2:ad:67:7a:16:47:45:87: 71:54:0a:fc:df:8f:08:50:b7:02:24:5f:75:9c:f6: 2c:2c:ca:c7:00:8e:66:63:8b:9a:86:45:a5:af:6d: 9d:ec:e5:f4:32:c5:c9:0b:3f:7a:10:6b:c9:0f:74: 00:0f:c2:21:0f:d8:b9:24:7e:0c:e2:23:e9:08:04: 94:f7:61:00:17:4d:2f:58:26:58:e5:d1:91:79:a6: 1c:9b:ae:2f:99:17:7c:2c:79:3d:89:a1:60:65:66: c6:f9:7e:95:f7:e7:56:79:3b:10:66:45:40:90:28: 38:b5:e8:eb:57:25:e4:34:0b:66:3d:a0:18:7e:f3: c4:a1:07:04:3b:ac:2f:d5:8f:74:9a:1c:db:48:5d: b9:6c:e0:16:97:3d:6a:f6:d2:fb:02:48:c4:e5:64: b6:31:27:d7:51:0c:66:51:bb:76:8b:27:fb:54:74: ec:1e:b8:22:d9:80:34:6d:17:e6:81:74:a3:89:87: 44:b3:71:1e:d0:95:1b:27:48:36:b3:7d:4e:f3:09: 27:42:11:b9:88:83:f4:bf:84:bd:bc:34:7b:dc:13: cc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6F:C6:69:FA:92:43:60:0C:9B:C3:2C:1F:90:F6:0E:7A:95:F8:A2 X509v3 Authority Key Identifier: keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/9m_GafqSQ2AMm8MsH5D2DnqV-KI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.72.40.0/21 130.79.0.0/16 185.155.92.0/22 IPv6: 2a07:2e40::/29 Signature Algorithm: sha256WithRSAEncryption 3a:6b:7e:7f:29:fa:63:d8:ec:52:40:f5:97:ec:af:e9:d1:3b: 53:d0:56:c6:45:87:c9:cb:f9:6c:5e:d2:6c:a4:fb:e0:82:5e: c1:1d:62:39:b4:69:23:d5:a9:a0:12:1f:9d:05:f6:6f:80:8d: c7:66:bc:5a:0b:d5:33:3c:b2:78:fc:c8:9f:69:fa:d9:82:0a: a6:75:35:a2:6b:05:14:06:3d:c0:d0:0f:03:fd:47:01:9b:ab: d8:ac:e8:13:2f:99:b9:0b:96:35:86:ef:26:74:a2:11:f1:ba: fb:ef:53:a3:6f:f3:bc:b6:5c:c2:a4:f7:f4:b2:35:8c:50:dd: c4:58:f9:04:5a:7d:73:aa:69:f7:ab:b6:f9:bd:43:b4:75:b6: 8a:81:e9:3e:d3:e9:12:76:5f:d8:23:ce:7b:c3:a7:9e:d5:ab: 54:dc:d3:67:c4:1c:c7:29:09:49:4e:0d:59:1e:17:a6:4b:dd: d9:bc:cc:19:53:01:a3:57:0d:72:9b:9d:79:4c:8d:39:55:7c: 98:ef:33:a3:c2:bc:08:c0:b1:29:d9:59:f1:05:68:af:c5:b3: 8a:6f:29:09:53:e1:ef:24:9f:7f:88:4b:c4:96:e0:b9:70:8e: 97:d2:33:d0:90:f1:25:8b:35:03:8a:03:84:5a:b6:33:ad:a3: ec:8f:14:99 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZrkhxM9dMowJTbujO5/Se83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NGFhY2FiOWE0OWUxNDNkZTY4OTc5YWQxNTZiNDJkYWJk ZGRlOGMwHhcNMjUxMjAzMTQwNDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjZmYzY2OWZhOTI0MzYwMGM5YmMzMmMxZjkwZjYwZTdhOTVmOGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApye8DTTuKbbpNuXBNXUfn6buWaAb vxZODVQItvMcvjRux12N8q1nehZHRYdxVAr8348IULcCJF91nPYsLMrHAI5mY4ua hkWlr22d7OX0MsXJCz96EGvJD3QAD8IhD9i5JH4M4iPpCASU92EAF00vWCZY5dGR eaYcm64vmRd8LHk9iaFgZWbG+X6V9+dWeTsQZkVAkCg4tejrVyXkNAtmPaAYfvPE oQcEO6wv1Y90mhzbSF25bOAWlz1q9tL7AkjE5WS2MSfXUQxmUbt2iyf7VHTsHrgi 2YA0bRfmgXSjiYdEs3Ee0JUbJ0g2s31O8wknQhG5iIP0v4S9vDR73BPM3QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFPZvxmn6kkNgDJvDLB+Q9g56lfiiMB8GA1UdIwQY MBaAFARKrKuaSeFD3miXmtFWtC2r3d6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDIt M2JiOTI2ODc2MDJjLzEvOW1fR2FmcVNRMkFNbThNc0g1RDJEbnFWLUtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NmE3NGUtNGRiOC00ZmU5LTk4MDItM2JiOTI2ODc2MDJj LzEvQkVxc3E1cEo0VVBlYUplYTBWYTBMYXZkM293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQDTUgoAwMA gk8DBAK5m1wwDQQCAAIwBwMFAyoHLkAwDQYJKoZIhvcNAQELBQADggEBADprfn8p +mPY7FJA9Zfsr+nRO1PQVsZFh8nL+Wxe0myk++CCXsEdYjm0aSPVqaASH50F9m+A jcdmvFoL1TM8snj8yJ9p+tmCCqZ1NaJrBRQGPcDQDwP9RwGbq9is6BMvmbkLljWG 7yZ0ohHxuvvvU6Nv87y2XMKk9/SyNYxQ3cRY+QRafXOqafertvm9Q7R1toqB6T7T 6RJ2X9gjznvDp57Vq1Tc02fEHMcpCUlODVkeF6ZL3dm8zBlTAaNXDXKbnXlMjTlV fJjvM6PCvAjAsSnZWfEFaK/Fs4pvKQlT4e8kn3+IS8SW4LlwjpfSM9CQ8SWLNQOK A4RatjOto+yPFJk= -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:49 2025 by rpki-client