This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa File: 9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa (raw, json) Hash identifier: Ew3sgvXIFSVbIaXejNH5mh4KuqPNbuNRT+236zCj8P8= Subject key identifier: F5:4F:46:27:68:08:3D:3E:5F:42:5C:2B:4B:F3:CE:45:74:3C:20:4C Certificate issuer: /CN=19ca39890f97f728152bcd85c236d8e5ff460429 Certificate serial: 019B7DCAA8295A0CC3E01A914F0AC02C8DE0 Authority key identifier: 19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa Signing time: Fri 02 Jan 2026 08:19:51 +0000 ROA not before: Fri 02 Jan 2026 08:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 141.249.0.0/16 maxlen: 24 2001:67c:13c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.mft rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a8:29:5a:0c:c3:e0:1a:91:4f:0a:c0:2c:8d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ca39890f97f728152bcd85c236d8e5ff460429 Validity Not Before: Jan 2 08:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f54f462768083d3e5f425c2b4bf3ce45743c204c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:2e:a9:74:d4:19:3c:40:04:91:d0:72:07: da:82:f9:31:0c:53:02:04:a9:a8:23:a1:32:04:4a: d5:ff:95:47:7e:0c:18:46:fe:0c:65:c1:df:a4:98: 5e:7c:d6:74:a3:e7:2d:9b:8f:e8:65:69:d0:c1:cd: 00:d9:52:cd:9f:6a:7e:80:ac:74:6a:6f:5d:1b:31: 4d:46:14:d7:b5:bd:3e:e0:60:81:73:1a:71:ec:6f: 5e:b8:00:cd:42:9a:03:ac:25:e6:74:4a:c7:42:95: 26:0c:6c:d2:58:9c:1e:fb:bf:a1:d6:63:a5:71:23: 3f:3d:7e:09:db:34:73:27:6a:8a:30:fd:b4:f7:75: d7:a5:80:bb:7b:d4:46:2b:6a:df:61:66:a1:60:d4: 1c:96:64:28:eb:ce:89:a1:dd:5e:a7:bb:a5:9c:73: e5:68:92:03:51:83:1a:d1:00:5e:a8:bb:2e:44:d3: dc:60:08:2c:fd:82:cd:6c:2f:d3:15:72:85:57:8b: e0:53:53:df:3f:c9:95:66:9d:35:95:c8:e3:99:9d: 07:fc:07:68:39:e3:e7:3a:4a:1d:bb:60:bb:d0:93: d4:40:83:8a:92:36:6b:f2:a0:d2:e0:a6:42:77:69: 8b:d6:96:d9:14:42:30:bb:28:a9:65:9f:2c:d1:1b: fb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4F:46:27:68:08:3D:3E:5F:42:5C:2B:4B:F3:CE:45:74:3C:20:4C X509v3 Authority Key Identifier: keyid:19:CA:39:89:0F:97:F7:28:15:2B:CD:85:C2:36:D8:E5:FF:46:04:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gco5iQ-X9ygVK82FwjbY5f9GBCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/9U9GJ2gIPT5fQlwrS_PORXQ8IEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/161daf-248f-4e3a-8beb-77efbc362503/1/Gco5iQ-X9ygVK82FwjbY5f9GBCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.249.0.0/16 IPv6: 2001:67c:13c0::/48 Signature Algorithm: sha256WithRSAEncryption 86:9d:c5:b0:41:44:b4:00:4f:ad:8f:32:f6:ed:1a:92:97:04: 7b:d3:06:9a:65:b7:d8:33:7a:bb:b4:3f:3b:67:dd:64:57:e7: 3e:1b:6f:50:6e:45:b0:7c:57:e7:d0:5e:f8:76:e8:ad:fa:1b: d6:fb:80:f7:23:43:68:bd:db:f7:5e:c4:72:c3:c5:49:24:ed: da:69:5b:a6:70:87:ff:c9:8a:f6:4e:7a:a5:b8:4d:49:50:5f: 19:af:53:7d:7a:d6:d7:f7:c3:9d:54:27:c6:43:bf:76:84:1e: 2a:59:a9:04:d3:2b:07:55:cc:c7:46:18:b1:68:1c:42:33:c2: bd:f2:d0:d5:96:8c:20:61:c8:f4:0a:1a:6f:40:27:fc:97:6c: 13:10:ca:e3:c8:fd:d5:04:c9:fd:f8:3b:3a:c7:d6:e6:8b:3c: 2b:f6:4e:26:57:8e:a3:a7:46:81:71:a8:67:28:6c:6f:e0:ff: f8:63:da:49:aa:e4:c6:b7:83:11:e4:86:15:87:0b:03:ed:fc: ce:42:22:76:cd:21:da:82:7a:90:44:99:65:e3:cb:fc:5f:36: c2:db:9a:66:96:4f:94:29:ca:95:b7:ae:36:6f:27:b8:ae:3f: c0:08:eb:7d:58:0b:c2:c9:18:23:68:6c:b2:d0:29:b7:a9:dc: 25:44:28:fa -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt9yqgpWgzD4BqRTwrALI3gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Y2EzOTg5MGY5N2Y3MjgxNTJiY2Q4NWMyMzZkOGU1ZmY0 NjA0MjkwHhcNMjYwMTAyMDgxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTRmNDYyNzY4MDgzZDNlNWY0MjVjMmI0YmYzY2U0NTc0M2MyMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOEuqXTUGTxABJHQcgfagvkxDFMC BKmoI6EyBErV/5VHfgwYRv4MZcHfpJhefNZ0o+ctm4/oZWnQwc0A2VLNn2p+gKx0 am9dGzFNRhTXtb0+4GCBcxpx7G9euADNQpoDrCXmdErHQpUmDGzSWJwe+7+h1mOl cSM/PX4J2zRzJ2qKMP2093XXpYC7e9RGK2rfYWahYNQclmQo686Jod1ep7ulnHPl aJIDUYMa0QBeqLsuRNPcYAgs/YLNbC/TFXKFV4vgU1PfP8mVZp01lcjjmZ0H/Ado OePnOkodu2C70JPUQIOKkjZr8qDS4KZCd2mL1pbZFEIwuyipZZ8s0Rv7HwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPVPRidoCD0+X0JcK0vzzkV0PCBMMB8GA1UdIwQY MBaAFBnKOYkPl/coFSvNhcI22OX/RgQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWIt NzdlZmJjMzYyNTAzLzEvOVU5R0oyZ0lQVDVmUWx3clNfUE9SWFE4SUV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xNjFkYWYtMjQ4Zi00ZTNhLThiZWItNzdlZmJjMzYyNTAz LzEvR2NvNWlRLVg5eWdWSzgyRndqYlk1ZjlHQkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjALBAIAATAFAwMAjfkwDwQC AAIwCQMHACABBnwTwDANBgkqhkiG9w0BAQsFAAOCAQEAhp3FsEFEtABPrY8y9u0a kpcEe9MGmmW32DN6u7Q/O2fdZFfnPhtvUG5FsHxX59Be+Hborfob1vuA9yNDaL3b 917EcsPFSSTt2mlbpnCH/8mK9k56pbhNSVBfGa9TfXrW1/fDnVQnxkO/doQeKlmp BNMrB1XMx0YYsWgcQjPCvfLQ1ZaMIGHI9Aoab0An/JdsExDK48j91QTJ/fg7OsfW 5os8K/ZOJleOo6dGgXGoZyhsb+D/+GPaSarkxreDEeSGFYcLA+38zkIids0h2oJ6 kESZZePL/F82wtuaZpZPlCnKlbeuNm8nuK4/wAjrfVgLwskYI2hsstApt6ncJUQo +g== -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:09 2026 by rpki-client