This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9Nu06jbmKIP9C5yD_XZGCmciYPE.roa File: 9Nu06jbmKIP9C5yD_XZGCmciYPE.roa (raw, json) Hash identifier: amGMStwDjHM/c79sGqnPcrhwfIvTv+m7al69Zisz0U4= Subject key identifier: F4:DB:B4:EA:36:E6:28:83:FD:0B:9C:83:FD:76:46:0A:67:22:60:F1 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68D47F487ACFE449AB736DA262711 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9Nu06jbmKIP9C5yD_XZGCmciYPE.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199143 IP address blocks: 84.232.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8d:47:f4:87:ac:fe:44:9a:b7:36:da:26:27:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4dbb4ea36e62883fd0b9c83fd76460a672260f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:5f:71:4d:00:10:81:63:c0:ea:bf:6b:b5: cf:78:10:2b:a6:9e:a6:31:b2:6c:df:09:78:75:7c: 62:85:ca:4a:fa:4d:7f:d1:a3:85:31:0f:e4:5d:ef: 0e:b2:c3:41:6f:6c:28:50:03:8d:e8:53:b7:88:0b: c6:54:55:91:d4:04:12:9d:3c:64:cf:16:cc:18:19: 44:70:0e:d2:b4:cb:46:48:71:64:e7:fa:3a:ba:a0: 57:4a:0a:83:67:bb:5e:dc:21:20:e2:aa:b7:a5:71: 3c:0f:65:0b:49:bd:34:95:a6:0c:88:d5:73:9c:7c: e4:cc:ce:5f:32:01:e6:2f:af:ad:43:5b:06:24:33: 06:10:26:81:5a:d3:45:98:78:cb:3c:f7:71:d2:20: a1:b2:7b:69:d7:f8:47:c3:44:88:0d:9d:e7:4a:96: 14:e2:c9:2a:17:4f:84:0f:6e:92:d5:c7:79:b4:39: 1e:00:cd:42:41:11:0b:5f:5d:0b:56:ef:1a:82:9e: b0:98:46:d4:05:47:c0:27:87:57:ce:2a:b9:53:87: 35:fb:af:97:73:34:08:92:0f:8c:f1:a9:9c:e5:9d: c2:79:1f:0c:91:02:7e:94:4d:1e:f6:c3:55:81:eb: 80:fc:2b:bf:c0:70:da:d0:29:4d:8e:54:a2:da:a6: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DB:B4:EA:36:E6:28:83:FD:0B:9C:83:FD:76:46:0A:67:22:60:F1 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/9Nu06jbmKIP9C5yD_XZGCmciYPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.16.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:3c:e1:74:85:87:5b:77:24:16:33:5c:28:dc:45:36:cf:63: 37:14:fa:9c:0b:8f:d7:09:c0:3c:a2:0d:db:a8:ab:91:e1:0f: f2:d1:e5:0c:4c:d8:94:24:55:1f:f6:d6:48:7c:9e:e4:d6:76: eb:e7:0c:1b:17:bc:f4:52:08:6c:56:ca:f1:81:11:a1:a6:da: 6c:e4:c5:ab:6e:e3:0c:09:bf:28:b1:c4:56:ab:af:d8:eb:e5: 80:ab:03:be:a5:b1:63:48:f2:21:e5:38:c4:7b:df:6b:06:10: bf:eb:e2:5b:6e:03:0e:9e:cc:8a:f3:97:a7:2f:29:6f:31:c1: 3b:e1:f5:6b:48:13:37:a5:f6:cb:24:3b:e3:1e:16:74:78:be: b9:b1:64:eb:3a:73:4f:c2:12:7c:6f:dc:0e:ba:4f:6b:33:12: e7:53:b1:e3:60:9e:40:d3:e3:bc:54:cf:ce:5d:be:0b:a9:10: f0:56:2a:ed:35:fc:25:95:2c:e1:87:b9:0e:68:7f:47:61:04: 0e:ee:b5:a4:66:b6:7e:9b:8c:19:28:59:a9:ab:38:0a:34:96: 09:71:bd:71:5c:46:86:3b:68:53:e6:14:e1:4b:c6:b3:8f:7c: d8:01:a8:1a:7d:2c:67:38:bc:4f:2d:08:43:df:24:95:f8:90: 43:92:fe:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xo1H9Ies/kSatzbaJicRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGRiYjRlYTM2ZTYyODgzZmQwYjljODNmZDc2NDYwYTY3MjI2MGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDpfcU0AEIFjwOq/a7XPeBArpp6m MbJs3wl4dXxihcpK+k1/0aOFMQ/kXe8OssNBb2woUAON6FO3iAvGVFWR1AQSnTxk zxbMGBlEcA7StMtGSHFk5/o6uqBXSgqDZ7te3CEg4qq3pXE8D2ULSb00laYMiNVz nHzkzM5fMgHmL6+tQ1sGJDMGECaBWtNFmHjLPPdx0iChsntp1/hHw0SIDZ3nSpYU 4skqF0+ED26S1cd5tDkeAM1CQRELX10LVu8agp6wmEbUBUfAJ4dXziq5U4c1+6+X czQIkg+M8amc5Z3CeR8MkQJ+lE0e9sNVgeuA/Cu/wHDa0ClNjlSi2qaa8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPTbtOo25iiD/Qucg/12RgpnImDxMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvOU51MDZqYm1LSVA5QzV5RF9YWkdDbWNpWVBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVOgQMA0G CSqGSIb3DQEBCwUAA4IBAQBPPOF0hYdbdyQWM1wo3EU2z2M3FPqcC4/XCcA8og3b qKuR4Q/y0eUMTNiUJFUf9tZIfJ7k1nbr5wwbF7z0UghsVsrxgRGhptps5MWrbuMM Cb8oscRWq6/Y6+WAqwO+pbFjSPIh5TjEe99rBhC/6+JbbgMOnsyK85enLylvMcE7 4fVrSBM3pfbLJDvjHhZ0eL65sWTrOnNPwhJ8b9wOuk9rMxLnU7HjYJ5A0+O8VM/O Xb4LqRDwVirtNfwllSzhh7kOaH9HYQQO7rWkZrZ+m4wZKFmpqzgKNJYJcb1xXEaG O2hT5hThS8azj3zYAagafSxnOLxPLQhD3ySV+JBDkv6D -----END CERTIFICATE-----Generated at Sun Jan 25 10:14:41 2026 by rpki-client