This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/P9AAwlJ1hAyoBTMnpPtV2ahht98.roa File: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (raw, json) Hash identifier: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo= Subject key identifier: 3F:D0:00:C2:52:75:84:0C:A8:05:33:27:A4:FB:55:D9:A8:61:B7:DF Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Certificate serial: 019B7C135BA992DDDE6FCD1D5E65253AA864 Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/P9AAwlJ1hAyoBTMnpPtV2ahht98.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48806 IP address blocks: 45.93.149.0/24 maxlen: 24 91.212.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5b:a9:92:dd:de:6f:cd:1d:5e:65:25:3a:a8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fd000c25275840ca8053327a4fb55d9a861b7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bd:54:34:37:a1:00:3b:1d:99:78:93:81:ff: d1:7c:0d:87:25:ff:86:ad:9c:1f:d7:d9:2a:1a:f1: 46:ef:37:c3:7f:dd:05:86:e5:60:c2:1c:22:a3:8b: 73:47:6f:7f:9e:c6:66:33:5a:64:98:b7:05:14:61: 62:7c:15:a2:b0:de:39:64:f8:4d:67:8d:ee:d8:20: 65:d8:86:f0:b6:74:ce:f3:71:ac:e9:15:a1:c1:74: 62:e7:20:4e:f4:75:7e:97:b3:8b:59:6c:7d:81:17: 98:05:26:2e:ff:08:2f:8a:b1:63:b7:9b:34:b4:32: a9:b1:6b:97:5b:71:83:3e:c9:a2:35:ef:63:29:7b: 32:bf:23:10:8c:ab:6c:1e:41:00:23:cc:63:04:0a: d1:3f:24:f8:e5:3f:cb:8b:dc:7b:a7:41:49:6c:66: d7:b4:cc:dd:27:e7:53:69:ba:aa:a5:30:86:c7:5e: 38:7b:f8:19:50:e3:5c:e1:2d:5c:e0:e0:e8:ef:5f: b7:8a:b9:e5:45:66:ac:e0:cc:ac:28:23:79:62:9b: 33:59:66:b3:e5:ec:89:78:bf:2a:57:a7:63:98:f8: 7e:ca:bf:87:16:5a:c7:5b:d2:f5:2e:b7:c0:8a:0c: a7:b2:d6:32:80:c3:24:ea:1c:7b:5d:7d:07:b1:84: 38:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D0:00:C2:52:75:84:0C:A8:05:33:27:A4:FB:55:D9:A8:61:B7:DF X509v3 Authority Key Identifier: keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/P9AAwlJ1hAyoBTMnpPtV2ahht98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.149.0/24 91.212.38.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:a3:18:c7:00:ad:43:32:32:dd:b9:6d:44:98:94:5e:c3:61: f1:54:e3:90:28:f0:14:1c:d7:b5:10:02:06:2f:bf:2d:0d:2e: 11:e1:b8:5e:63:9f:f6:e4:fe:c8:ae:f9:02:06:85:ce:1c:cd: 50:b6:2f:bc:9c:47:4b:58:7e:f6:fc:3f:b8:1b:e2:82:c1:ff: 41:a3:7f:1e:34:1b:57:13:42:32:0c:f5:4a:07:4a:d0:d6:96: b9:fd:17:0f:a4:59:f0:56:8b:0e:42:dc:b9:61:42:72:10:bd: 73:b2:87:9b:e9:6a:1c:98:4c:a2:a6:71:9a:6f:f3:a9:fc:d2: 78:b2:b3:3b:ac:aa:81:e6:70:70:ec:a2:91:44:cd:dc:c3:b2: e3:2f:2b:72:3d:46:31:49:68:f4:f6:a8:09:50:c6:44:70:8c: 30:39:57:f9:05:bd:b2:40:f1:e1:e1:29:21:97:07:09:79:8c: 25:43:4a:35:73:99:e9:79:e0:a3:c8:cf:1d:29:0b:63:0b:0c: 02:63:07:2b:f1:41:c5:01:db:b5:ee:8a:6d:55:ed:5d:fd:b1: fb:d9:ca:42:77:0d:5c:de:a7:2d:b6:c6:c8:92:ab:43:ca:3e: 2f:8d:95:43:eb:30:62:9e:74:2b:a5:13:c0:4e:30:c5:0c:66: 9d:1e:e6:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E1upkt3eb80dXmUlOqhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk NGYzMTgwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmQwMDBjMjUyNzU4NDBjYTgwNTMzMjdhNGZiNTVkOWE4NjFiN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr1UNDehADsdmXiTgf/RfA2HJf+G rZwf19kqGvFG7zfDf90FhuVgwhwio4tzR29/nsZmM1pkmLcFFGFifBWisN45ZPhN Z43u2CBl2IbwtnTO83Gs6RWhwXRi5yBO9HV+l7OLWWx9gReYBSYu/wgvirFjt5s0 tDKpsWuXW3GDPsmiNe9jKXsyvyMQjKtsHkEAI8xjBArRPyT45T/Li9x7p0FJbGbX tMzdJ+dTabqqpTCGx144e/gZUONc4S1c4ODo71+3irnlRWas4MysKCN5YpszWWaz 5eyJeL8qV6djmPh+yr+HFlrHW9L1LrfAigynstYygMMk6hx7XX0HsYQ4NQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD/QAMJSdYQMqAUzJ6T7VdmoYbffMB8GA1UdIwQY MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt NjMzNDhjZGJmMDI0LzEvUDlBQXdsSjFoQXlvQlRNbnBQdFYyYWhodDk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0 LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV2VAwQA W9QmMA0GCSqGSIb3DQEBCwUAA4IBAQAaoxjHAK1DMjLduW1EmJRew2HxVOOQKPAU HNe1EAIGL78tDS4R4bheY5/25P7IrvkCBoXOHM1Qti+8nEdLWH72/D+4G+KCwf9B o38eNBtXE0IyDPVKB0rQ1pa5/RcPpFnwVosOQty5YUJyEL1zsoeb6WocmEyipnGa b/Op/NJ4srM7rKqB5nBw7KKRRM3cw7LjLytyPUYxSWj09qgJUMZEcIwwOVf5Bb2y QPHh4SkhlwcJeYwlQ0o1c5npeeCjyM8dKQtjCwwCYwcr8UHFAdu17optVe1d/bH7 2cpCdw1c3qcttsbIkqtDyj4vjZVD6zBinnQrpRPATjDFDGadHuZG -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:32 2026 by rpki-client