This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa File: b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa (raw, json) Hash identifier: zJruMssE6fAWn+HUVB4+RJJ7aVS5WNO5nmK7xyX8S+g= Subject key identifier: 6F:DF:96:55:06:44:3F:12:93:42:EE:07:3B:7B:E9:C8:61:88:83:23 Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Certificate serial: 019B791013EE8F17F210CFF6806048229A6D Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31562 IP address blocks: 83.166.64.0/19 maxlen: 19 83.166.64.0/24 maxlen: 24 2a03:9600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:13:ee:8f:17:f2:10:cf:f6:80:60:48:22:9a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fdf965506443f129342ee073b7be9c861888323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:3c:f8:13:85:79:66:42:64:8d:84:11:2d: 4a:fa:1a:83:ee:a3:f5:83:14:fd:02:52:62:4b:e9: 06:7e:86:4d:b5:cf:d7:d5:31:4d:bd:e6:8d:0c:38: 15:98:1c:fc:e5:44:f5:d8:88:b6:be:2f:33:93:19: df:20:79:36:f2:6a:03:e9:8c:ea:9d:79:83:0c:af: 8b:41:17:a7:bb:3c:2c:aa:23:6b:e5:4f:72:05:85: f5:4b:54:18:e6:81:b9:a8:4e:1f:1e:b0:dc:a9:1d: 17:b8:56:59:00:8c:4e:a5:15:32:d5:6b:83:58:91: eb:f0:4c:6d:f4:1f:97:b8:56:c9:00:63:04:9b:c2: be:53:8b:af:e3:db:a3:1c:74:d0:ba:ac:70:1e:63: b8:0d:04:c0:f8:c0:77:70:73:8e:07:b2:b6:12:f3: 26:ac:78:51:e4:31:bb:ba:cf:5c:ef:d9:05:cc:59: 96:e0:d3:c6:3c:bd:dc:48:dc:cd:20:a2:ca:64:a2: 9a:93:dd:d4:4a:ca:6e:13:62:24:99:66:9c:de:f7: 60:14:18:2e:3a:39:18:6d:42:b4:14:0e:b1:cf:b7: 01:58:00:d4:35:6e:43:ee:d2:48:91:f8:56:f9:aa: 7d:05:1f:ad:5b:80:08:b4:86:f9:13:d9:a0:dd:08: d8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DF:96:55:06:44:3F:12:93:42:EE:07:3B:7B:E9:C8:61:88:83:23 X509v3 Authority Key Identifier: keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/b9-WVQZEPxKTQu4HO3vpyGGIgyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.166.64.0/19 IPv6: 2a03:9600::/32 Signature Algorithm: sha256WithRSAEncryption 78:fb:d7:12:f5:bd:e5:7c:7c:31:37:ed:54:64:35:0b:fa:2f: c1:11:e1:94:6c:71:b0:90:2b:01:cd:88:77:65:02:02:04:e9: d9:97:bd:83:c7:58:d1:a6:7e:1a:5f:e9:65:33:eb:00:ef:90: ab:9b:0e:ce:5b:f3:6f:e9:7e:87:34:1a:c5:e2:92:32:1a:69: 59:72:77:4a:c8:dc:90:77:34:57:da:68:b6:64:df:41:4f:8e: fa:2a:8a:82:1e:76:f1:de:ae:91:93:a7:82:b5:20:cf:94:f7: 0c:06:9e:5f:7d:34:4d:62:ed:f1:45:7e:e2:bd:4c:8e:1f:84: fb:76:67:5c:e9:5e:c3:53:34:56:7f:b5:14:1b:50:46:f1:ee: b0:a4:38:5b:74:fb:0a:fd:ca:29:ee:f0:1f:54:3c:b8:b9:68: 7d:a6:d0:ab:6d:1a:48:c5:2e:3b:16:60:29:24:07:a9:65:91: d4:c7:10:a0:18:b7:12:01:d7:26:fd:ff:91:7d:d2:a1:92:fc: 30:bc:98:97:1f:62:74:15:54:52:8a:09:dc:d1:b6:63:ca:97: f5:6f:b2:25:c4:c0:18:b4:f7:63:94:0c:5e:4a:8e:6c:3e:a2: 94:c4:6b:75:a2:c4:99:cd:0d:17:28:e3:82:3e:83:25:e5:d8: fd:c4:2b:91 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EBPujxfyEM/2gGBIIpptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzZlZDVmNTYyM2VkZWI3OTEwYWNkMzFkNWY2ZWU4MWU1 Y2IxN2UwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmRmOTY1NTA2NDQzZjEyOTM0MmVlMDczYjdiZTljODYxODg4MzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE48+BOFeWZCZI2EES1K+hqD7qP1 gxT9AlJiS+kGfoZNtc/X1TFNveaNDDgVmBz85UT12Ii2vi8zkxnfIHk28moD6Yzq nXmDDK+LQRenuzwsqiNr5U9yBYX1S1QY5oG5qE4fHrDcqR0XuFZZAIxOpRUy1WuD WJHr8Ext9B+XuFbJAGMEm8K+U4uv49ujHHTQuqxwHmO4DQTA+MB3cHOOB7K2EvMm rHhR5DG7us9c79kFzFmW4NPGPL3cSNzNIKLKZKKak93USspuE2IkmWac3vdgFBgu OjkYbUK0FA6xz7cBWADUNW5D7tJIkfhW+ap9BR+tW4AItIb5E9mg3QjYBwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG/fllUGRD8Sk0LuBzt76chhiIMjMB8GA1UdIwQY MBaAFCI27V9WI+3reRCs0x1fbugeXLF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjct NGQxNmJlOWJhMTMyLzEvYjktV1ZRWkVQeEtUUXU0SE8zdnB5R0dJZ3lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8xZDlkZGEtMmFkZi00NmJkLThhZjctNGQxNmJlOWJhMTMy LzEvSWpidFgxWWo3ZXQ1RUt6VEhWOXU2QjVjc1g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFU6ZAMA0E AgACMAcDBQAqA5YAMA0GCSqGSIb3DQEBCwUAA4IBAQB4+9cS9b3lfHwxN+1UZDUL +i/BEeGUbHGwkCsBzYh3ZQICBOnZl72Dx1jRpn4aX+llM+sA75Crmw7OW/Nv6X6H NBrF4pIyGmlZcndKyNyQdzRX2mi2ZN9BT476KoqCHnbx3q6Rk6eCtSDPlPcMBp5f fTRNYu3xRX7ivUyOH4T7dmdc6V7DUzRWf7UUG1BG8e6wpDhbdPsK/cop7vAfVDy4 uWh9ptCrbRpIxS47FmApJAepZZHUxxCgGLcSAdcm/f+RfdKhkvwwvJiXH2J0FVRS ignc0bZjypf1b7IlxMAYtPdjlAxeSo5sPqKUxGt1osSZzQ0XKOOCPoMl5dj9xCuR -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:21 2026 by rpki-client