This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/9N0xJc7gte-XfDm1ppoFxs2ZNfE.roa File: 9N0xJc7gte-XfDm1ppoFxs2ZNfE.roa (raw, json) Hash identifier: hax45O+BVL2OtEofupJNael1wssJob4JJ/bpd8OtYEo= Subject key identifier: F4:DD:31:25:CE:E0:B5:EF:97:7C:39:B5:A6:9A:05:C6:CD:99:35:F1 Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019B78352835925BFE6FAF3E7621F69F7526 Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/9N0xJc7gte-XfDm1ppoFxs2ZNfE.roa Signing time: Thu 01 Jan 2026 06:18:28 +0000 ROA not before: Thu 01 Jan 2026 06:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138968 IP address blocks: 103.76.85.0/24 maxlen: 24 103.76.86.0/24 maxlen: 24 103.76.87.0/24 maxlen: 24 116.206.92.0/22 maxlen: 24 203.189.232.0/23 maxlen: 24 2a0f:6700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:28:35:92:5b:fe:6f:af:3e:76:21:f6:9f:75:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Jan 1 06:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4dd3125cee0b5ef977c39b5a69a05c6cd9935f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:cb:53:5d:6a:e6:95:c0:61:3b:c8:46:00: 7c:34:96:b8:63:27:da:99:4d:e1:5c:c3:c6:ee:e1: 43:33:05:f6:ee:2b:4b:fd:80:b3:e3:bb:44:08:3d: b7:9e:ff:a5:de:4c:d4:9f:34:97:68:f3:77:8c:79: 45:f1:3e:88:90:f7:51:43:c8:05:50:a8:99:ef:8e: 1e:9e:b9:0e:86:69:f5:e5:4e:7f:d8:b1:41:c4:8e: 24:02:bb:b4:44:56:89:d1:54:af:3b:c7:11:0d:2b: a9:ca:72:1d:44:e2:04:6b:b3:58:fa:77:f6:ac:2f: 78:bc:7d:51:1d:32:2d:36:38:39:84:5f:b6:82:c7: 9e:c9:12:35:f6:1b:b0:a5:67:43:f6:88:5f:e4:b2: cc:30:59:75:25:c3:d7:e8:74:b9:3a:71:6c:b8:29: 8a:9a:3e:0e:8f:3c:ec:50:2f:d7:45:d4:70:35:7c: a3:f9:8f:d5:df:70:30:aa:58:6e:45:2b:b5:35:db: 76:65:80:1e:7a:6d:12:6c:d8:de:a6:d7:68:08:d4: 25:8b:6b:78:9e:57:ef:d3:61:4c:ac:c7:e2:d2:30: 37:42:d8:63:96:e7:de:36:6d:85:4b:1e:6d:af:2d: 3b:a9:4b:1c:b8:c4:d9:00:0c:f0:2d:0a:4c:50:6f: 99:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DD:31:25:CE:E0:B5:EF:97:7C:39:B5:A6:9A:05:C6:CD:99:35:F1 X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/9N0xJc7gte-XfDm1ppoFxs2ZNfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.85.0-103.76.87.255 116.206.92.0/22 203.189.232.0/23 IPv6: 2a0f:6700::/29 Signature Algorithm: sha256WithRSAEncryption 24:c2:72:e0:4f:a7:53:06:39:82:47:97:8b:63:5c:57:ff:a2: c9:a7:a2:bd:c0:92:e8:85:5b:d1:87:54:7c:8b:52:3a:41:30: 6f:79:91:54:bb:ab:cf:30:24:76:0a:49:a0:15:47:a3:da:76: 14:5f:41:7c:73:a3:13:09:70:4f:6a:ba:57:8f:8c:7b:26:36: 02:1e:71:2e:6c:86:b2:62:9b:e4:f7:64:c6:92:67:7a:7c:22: 6c:0c:1a:89:f7:b2:b2:f1:77:51:65:87:5d:f1:42:7a:82:c9: ae:58:3d:10:55:d8:e2:08:55:5f:92:27:36:09:b3:4b:bb:6c: 94:20:c2:67:2f:ba:a4:bd:59:42:38:78:a8:87:70:c3:8d:82: 15:91:97:06:c6:50:ff:e1:f4:54:55:8b:63:67:60:22:7a:07: f2:99:8a:47:64:2e:59:8c:d3:73:c2:04:72:c7:96:20:1a:34: 2b:95:61:75:0a:7c:55:42:6f:f6:0c:19:a1:ea:b0:7d:f7:cc: b3:f7:ff:51:a3:df:99:b9:a3:b7:fe:30:ba:09:b3:90:fc:7e: aa:5c:ca:8d:18:e4:a9:e2:6d:c4:04:cb:ad:c1:98:bf:0a:a3: b5:3f:bf:38:fd:66:a8:44:5c:84:47:ff:03:97:75:35:1b:a4: 7f:f8:e2:84 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt4NSg1klv+b68+diH2n3UmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYwMTAxMDYxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGRkMzEyNWNlZTBiNWVmOTc3YzM5YjVhNjlhMDVjNmNkOTkzNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJPLU11q5pXAYTvIRgB8NJa4Yyfa mU3hXMPG7uFDMwX27itL/YCz47tECD23nv+l3kzUnzSXaPN3jHlF8T6IkPdRQ8gF UKiZ744enrkOhmn15U5/2LFBxI4kAru0RFaJ0VSvO8cRDSupynIdROIEa7NY+nf2 rC94vH1RHTItNjg5hF+2gseeyRI19huwpWdD9ohf5LLMMFl1JcPX6HS5OnFsuCmK mj4OjzzsUC/XRdRwNXyj+Y/V33AwqlhuRSu1Ndt2ZYAeem0SbNjeptdoCNQli2t4 nlfv02FMrMfi0jA3QthjlufeNm2FSx5try07qUscuMTZAAzwLQpMUG+Z5QIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFPTdMSXO4LXvl3w5taaaBcbNmTXxMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvOU4weEpjN2d0ZS1YZkRtMXBwb0Z4czJaTmZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBABnTFUD BANnTFADBAJ0zlwDBAHLvegwDQQCAAIwBwMFAyoPZwAwDQYJKoZIhvcNAQELBQAD ggEBACTCcuBPp1MGOYJHl4tjXFf/osmnor3AkuiFW9GHVHyLUjpBMG95kVS7q88w JHYKSaAVR6PadhRfQXxzoxMJcE9qulePjHsmNgIecS5shrJim+T3ZMaSZ3p8ImwM Gon3srLxd1Flh13xQnqCya5YPRBV2OIIVV+SJzYJs0u7bJQgwmcvuqS9WUI4eKiH cMONghWRlwbGUP/h9FRVi2NnYCJ6B/KZikdkLlmM03PCBHLHliAaNCuVYXUKfFVC b/YMGaHqsH33zLP3/1Gj35m5o7f+MLoJs5D8fqpcyo0Y5KnibcQEy63BmL8Ko7U/ vzj9ZqhEXIRH/wOXdTUbpH/44oQ= -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:40 2026 by rpki-client