This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/p9QObIf1OeGL35dA6XPq_krw2hU.roa File: p9QObIf1OeGL35dA6XPq_krw2hU.roa (raw, json) Hash identifier: j+Grnpqo/obd2JzfzoB1ui5FPqoBL910Sxe8EfKjVvM= Subject key identifier: A7:D4:0E:6C:87:F5:39:E1:8B:DF:97:40:E9:73:EA:FE:4A:F0:DA:15 Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Certificate serial: 019B7CED9F136234635B00F5100A4414C964 Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/p9QObIf1OeGL35dA6XPq_krw2hU.roa Signing time: Fri 02 Jan 2026 04:18:26 +0000 ROA not before: Fri 02 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207444 IP address blocks: 147.234.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:9f:13:62:34:63:5b:00:f5:10:0a:44:14:c9:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6 Validity Not Before: Jan 2 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7d40e6c87f539e18bdf9740e973eafe4af0da15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:5f:69:6c:c5:21:89:b3:b7:c9:77:67:60: c9:c3:17:00:d1:49:64:f4:b2:0f:9b:aa:10:56:3a: 85:6b:ea:97:d8:52:d5:0d:5c:d9:4d:02:69:23:58: c4:1c:e2:59:aa:5f:43:63:ec:88:e9:8c:e7:0f:80: ad:c1:da:99:a8:34:49:bc:f1:f9:f9:6c:62:9b:7d: e7:87:82:ad:5a:ad:57:47:cb:c1:e0:3a:da:28:5c: 37:62:13:9c:70:85:4a:8a:00:e3:5c:2a:96:e3:3d: 33:a8:e7:62:ab:82:cd:ed:e9:5f:5e:6e:9d:7a:35: 66:d6:7b:8c:b2:06:61:37:f7:55:65:2e:f9:b0:01: 57:af:87:6e:0e:8f:1c:84:ea:e0:3f:cf:dd:3f:df: ac:b4:8f:b4:d4:ff:c9:a4:6c:18:b7:33:58:a9:56: 5a:88:38:5d:95:69:a6:11:ea:59:2d:c2:c3:48:bd: 27:8e:95:5c:d8:96:3f:51:17:2e:f8:cc:2d:57:13: df:1e:1d:fc:bd:11:9f:0f:8a:c7:0a:78:5d:36:72: 94:70:d0:d5:3e:9a:ee:ad:7d:59:41:cb:86:bc:f0: c2:90:89:ca:1d:3a:c2:f4:7a:01:09:fd:97:db:fc: be:b9:a9:84:65:c6:27:c9:e2:f8:cc:ba:2a:b2:88: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D4:0E:6C:87:F5:39:E1:8B:DF:97:40:E9:73:EA:FE:4A:F0:DA:15 X509v3 Authority Key Identifier: keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/p9QObIf1OeGL35dA6XPq_krw2hU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.234.81.0/24 Signature Algorithm: sha256WithRSAEncryption 01:64:91:b1:b7:a8:d7:c1:83:7b:f1:c7:d2:73:0e:8f:fe:92: 07:8a:65:3a:5c:19:cf:2e:2f:af:5b:24:9c:91:f6:bf:2b:63: 29:be:d3:13:db:c8:1f:de:d8:f3:bb:1d:71:90:a8:bb:2e:32: f5:0e:e9:14:16:70:ac:2f:51:ef:5d:06:de:1a:3d:c9:3b:1f: 22:ea:91:7b:f2:3a:e3:06:cf:f4:4a:9a:ff:50:44:dc:b0:36: 1d:c8:e3:b3:09:15:ea:39:6c:e9:df:e5:e2:be:20:4a:60:99: f2:f2:47:6a:9d:0f:e5:5a:07:7d:c0:3f:19:83:6f:49:3f:be: 50:85:6b:6c:9e:81:5d:2c:74:f1:89:06:3a:8f:5b:c9:52:25: cd:06:94:17:0c:a0:5d:94:9f:cb:dc:c9:90:5d:74:5d:de:40: 21:27:bd:ec:af:62:95:a4:69:1f:40:a2:c6:0d:97:fe:c4:0b: 46:33:cd:6e:13:68:8a:c0:2b:ee:94:91:1c:ff:08:6b:04:09: 58:2c:79:35:61:4c:76:ec:14:17:75:4f:fd:f2:37:80:8d:33: b8:83:d5:86:43:ca:e7:54:34:27:bc:d8:6f:fe:a3:c6:6e:9b: 49:a9:c7:d9:2d:d1:5d:dc:82:95:9a:8d:b4:bf:c9:8f:1c:c5: ce:46:25:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Z8TYjRjWwD1EApEFMlkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi NDUwZTYwHhcNMjYwMTAyMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2Q0MGU2Yzg3ZjUzOWUxOGJkZjk3NDBlOTczZWFmZTRhZjBkYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdtfaWzFIYmzt8l3Z2DJwxcA0Ulk 9LIPm6oQVjqFa+qX2FLVDVzZTQJpI1jEHOJZql9DY+yI6YznD4CtwdqZqDRJvPH5 +Wxim33nh4KtWq1XR8vB4DraKFw3YhOccIVKigDjXCqW4z0zqOdiq4LN7elfXm6d ejVm1nuMsgZhN/dVZS75sAFXr4duDo8chOrgP8/dP9+stI+01P/JpGwYtzNYqVZa iDhdlWmmEepZLcLDSL0njpVc2JY/URcu+MwtVxPfHh38vRGfD4rHCnhdNnKUcNDV PprurX1ZQcuGvPDCkInKHTrC9HoBCf2X2/y+uamEZcYnyeL4zLoqsoj+7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKfUDmyH9Tnhi9+XQOlz6v5K8NoVMB8GA1UdIwQY MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt NDQzMzIyOWE4NDczLzEvcDlRT2JJZjFPZUdMMzVkQTZYUHFfa3J3MmhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+pRMA0G CSqGSIb3DQEBCwUAA4IBAQABZJGxt6jXwYN78cfScw6P/pIHimU6XBnPLi+vWySc kfa/K2MpvtMT28gf3tjzux1xkKi7LjL1DukUFnCsL1HvXQbeGj3JOx8i6pF78jrj Bs/0Spr/UETcsDYdyOOzCRXqOWzp3+XiviBKYJny8kdqnQ/lWgd9wD8Zg29JP75Q hWtsnoFdLHTxiQY6j1vJUiXNBpQXDKBdlJ/L3MmQXXRd3kAhJ73sr2KVpGkfQKLG DZf+xAtGM81uE2iKwCvulJEc/whrBAlYLHk1YUx27BQXdU/98jeAjTO4g9WGQ8rn VDQnvNhv/qPGbptJqcfZLdFd3IKVmo20v8mPHMXORiUA -----END CERTIFICATE-----Generated at Sun Jan 25 16:14:06 2026 by rpki-client