This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/T-09y-oUF-oVxc0rII_IKxv-tqo.roa File: T-09y-oUF-oVxc0rII_IKxv-tqo.roa (raw, json) Hash identifier: mtxY/euYWXc5W24bVNJKERPEbeVn8RYrIiTpc8jewmU= Subject key identifier: 4F:ED:3D:CB:EA:14:17:EA:15:C5:CD:2B:20:8F:C8:2B:1B:FE:B6:AA Certificate issuer: /CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Certificate serial: 019B7FF0674485098F711C547CFFF23D1B07 Authority key identifier: C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/T-09y-oUF-oVxc0rII_IKxv-tqo.roa Signing time: Fri 02 Jan 2026 18:20:20 +0000 ROA not before: Fri 02 Jan 2026 18:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30967 IP address blocks: 79.99.24.0/21 maxlen: 21 85.184.0.0/22 maxlen: 22 85.184.4.0/23 maxlen: 23 85.184.6.0/24 maxlen: 24 91.206.234.0/23 maxlen: 23 91.206.235.0/24 maxlen: 24 185.99.24.0/23 maxlen: 23 185.99.26.0/23 maxlen: 23 194.88.242.0/24 maxlen: 24 194.88.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.mft rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:67:44:85:09:8f:71:1c:54:7c:ff:f2:3d:1b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9e1bbf60ae0eb7d4007627185c5f14723fff3ae Validity Not Before: Jan 2 18:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fed3dcbea1417ea15c5cd2b208fc82b1bfeb6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:9c:36:a8:4c:10:11:7c:60:73:6a:e6:65: 77:97:8b:e7:7f:d3:7d:4b:27:6f:62:4e:06:66:7e: 3f:35:a8:43:5b:e9:ff:c5:11:67:1f:25:63:0c:bd: 75:d4:d4:b0:e9:27:90:d0:b3:5d:c5:a7:73:3e:d8: 2e:6f:99:2b:c1:0b:64:70:68:69:c2:00:a3:ee:75: a2:e4:a8:08:04:79:e3:89:50:be:53:e9:b6:88:27: db:2d:7f:65:ad:68:6e:56:b8:7d:ab:f3:23:40:a4: 22:1f:ad:00:1c:2e:0e:05:1f:b0:64:6d:2b:63:bd: d4:4b:e3:f4:d7:c2:c7:9c:d2:c9:1d:30:ca:76:e3: 12:76:9e:19:15:c9:d0:0f:71:1a:58:72:60:69:96: bd:63:41:21:32:3f:57:36:5b:f7:67:78:13:a1:01: 6b:e6:f9:e7:ed:45:a0:30:dd:a3:6f:68:5a:dc:6c: 51:84:b1:1b:af:99:3f:33:84:7d:12:37:57:cf:db: 6e:e5:d9:5f:eb:13:e9:7e:38:bb:e5:0c:00:a0:89: b6:98:c8:1e:58:c1:58:0a:93:55:e4:da:78:a7:b2: c8:66:94:f5:41:ec:37:f0:5c:71:c9:e3:4d:62:c3: 34:6a:cf:fd:12:c6:80:85:60:65:cc:07:60:89:ba: e8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:ED:3D:CB:EA:14:17:EA:15:C5:CD:2B:20:8F:C8:2B:1B:FE:B6:AA X509v3 Authority Key Identifier: keyid:C9:E1:BB:F6:0A:E0:EB:7D:40:07:62:71:85:C5:F1:47:23:FF:F3:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeG79grg631AB2JxhcXxRyP_864.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/T-09y-oUF-oVxc0rII_IKxv-tqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/da5296-f73b-45d6-a942-e1296b32a11f/1/yeG79grg631AB2JxhcXxRyP_864.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.99.24.0/21 85.184.0.0-85.184.6.255 91.206.234.0/23 185.99.24.0/22 194.88.242.0/23 Signature Algorithm: sha256WithRSAEncryption 43:37:1b:11:a5:b5:97:84:86:dd:9d:ee:a8:13:d0:90:6c:0f: 5d:92:d4:c9:a0:f7:c8:0a:0d:a5:e4:bd:dc:e6:c0:5c:0d:8f: 1a:da:0e:83:86:5e:c4:e8:84:0b:fc:fc:cb:6a:16:01:35:e5: b6:64:58:fd:0b:ad:f6:a3:0c:f0:1f:91:2a:ec:ed:8d:d1:2d: 9f:07:5b:4c:48:dc:89:c4:0b:36:e5:0d:60:cd:e1:b9:29:2f: 41:18:93:5b:59:93:a5:2c:0b:28:12:16:40:04:d8:70:fd:91: 15:0c:21:a4:c5:03:ff:77:4e:9a:43:55:da:5d:50:4b:11:c5: 2c:f5:dd:3a:ca:f6:1f:d1:a6:70:42:5f:df:d1:61:be:80:49: c3:85:2a:e3:77:07:2b:b7:da:27:8c:e9:ea:75:04:56:a1:d2: 28:d8:7d:96:a4:ea:bc:e5:3d:f9:d7:97:5a:60:8f:19:ab:97: 15:dc:eb:94:ab:92:82:3b:95:8c:a3:72:ad:04:5c:11:94:6e: 9a:c1:db:bf:71:3d:9d:10:37:e2:bc:2d:41:af:7e:8d:e3:6e: b6:6e:21:8b:cc:91:5a:4c:43:31:71:43:9e:81:e4:4a:1d:04: d8:f7:91:4a:6b:ba:a4:e8:3d:61:ce:01:46:5c:75:5a:92:b2: db:9b:6a:d1 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt/8GdEhQmPcRxUfP/yPRsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZTFiYmY2MGFlMGViN2Q0MDA3NjI3MTg1YzVmMTQ3MjNm ZmYzYWUwHhcNMjYwMTAyMTgyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmVkM2RjYmVhMTQxN2VhMTVjNWNkMmIyMDhmYzgyYjFiZmViNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrmcNqhMEBF8YHNq5mV3l4vnf9N9 SydvYk4GZn4/NahDW+n/xRFnHyVjDL111NSw6SeQ0LNdxadzPtgub5krwQtkcGhp wgCj7nWi5KgIBHnjiVC+U+m2iCfbLX9lrWhuVrh9q/MjQKQiH60AHC4OBR+wZG0r Y73US+P018LHnNLJHTDKduMSdp4ZFcnQD3EaWHJgaZa9Y0EhMj9XNlv3Z3gToQFr 5vnn7UWgMN2jb2ha3GxRhLEbr5k/M4R9EjdXz9tu5dlf6xPpfji75QwAoIm2mMge WMFYCpNV5Np4p7LIZpT1Qew38FxxyeNNYsM0as/9EsaAhWBlzAdgibrozQIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFE/tPcvqFBfqFcXNKyCPyCsb/raqMB8GA1UdIwQY MBaAFMnhu/YK4Ot9QAdicYXF8Ucj//OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDIt ZTEyOTZiMzJhMTFmLzEvVC0wOXktb1VGLW9WeGMwcklJX0lLeHYtdHFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kYTUyOTYtZjczYi00NWQ2LWE5NDItZTEyOTZiMzJhMTFm LzEveWVHNzlncmc2MzFBQjJKeGhjWHhSeVBfODY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTArBAIAATAlAwQDT2MYMAsD AwNVuAMEAFW4BgMEAVvO6gMEArljGAMEAcJY8jANBgkqhkiG9w0BAQsFAAOCAQEA QzcbEaW1l4SG3Z3uqBPQkGwPXZLUyaD3yAoNpeS93ObAXA2PGtoOg4ZexOiEC/z8 y2oWATXltmRY/Qut9qMM8B+RKuztjdEtnwdbTEjcicQLNuUNYM3huSkvQRiTW1mT pSwLKBIWQATYcP2RFQwhpMUD/3dOmkNV2l1QSxHFLPXdOsr2H9GmcEJf39FhvoBJ w4Uq43cHK7faJ4zp6nUEVqHSKNh9lqTqvOU9+deXWmCPGauXFdzrlKuSgjuVjKNy rQRcEZRumsHbv3E9nRA34rwtQa9+jeNutm4hi8yRWkxDMXFDnoHkSh0E2PeRSmu6 pOg9Yc4BRlx1WpKy25tq0Q== -----END CERTIFICATE-----Generated at Mon Jan 26 00:17:07 2026 by rpki-client