This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa File: D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa (raw, json) Hash identifier: dH6am4VhkjdQhWRQqbXQ4D/HbErjXar5HVgXeANi9W0= Subject key identifier: 0F:D6:94:A4:A5:F6:3D:35:35:C2:65:87:2D:14:6A:3D:A6:6D:2C:12 Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b Certificate serial: 019B7A5AF50DF3E767A7A20FB54AD1869596 Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa Signing time: Thu 01 Jan 2026 16:18:59 +0000 ROA not before: Thu 01 Jan 2026 16:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9211 IP address blocks: 31.24.96.0/21 maxlen: 24 87.253.160.0/20 maxlen: 24 87.253.190.0/24 maxlen: 24 87.253.191.0/24 maxlen: 24 185.205.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:f5:0d:f3:e7:67:a7:a2:0f:b5:4a:d1:86:95:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764928a97be955377013d382c62940e950dd212b Validity Not Before: Jan 1 16:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fd694a4a5f63d3535c265872d146a3da66d2c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:d6:2b:27:05:02:82:19:ee:bf:42:a2:14: 9e:cc:42:66:17:6b:79:a3:9b:9d:1c:18:cb:c3:b3: a3:75:0f:b6:c0:7b:7d:4a:c8:cc:1c:94:f5:1c:6e: 0b:6a:fd:d8:cb:21:4c:8c:d8:cc:0b:9e:11:db:f9: 68:ef:46:19:df:98:10:a0:e4:80:c0:60:84:b0:84: 51:42:69:c3:5d:b5:7e:28:eb:8b:5e:a8:31:f2:a6: 31:a1:88:6d:5c:28:87:d8:1e:96:6b:f9:88:0f:35: 08:79:48:41:0f:51:12:db:0a:eb:bc:26:2c:62:07: 1f:c7:da:2d:0f:7f:a1:ab:bb:f2:07:24:6d:31:71: b2:03:68:f7:28:79:f8:b6:2b:52:a8:b1:61:9f:3b: c9:95:54:57:e8:4c:79:aa:54:1a:2c:3b:d4:1e:46: 17:56:fe:ef:ec:a2:d0:f8:27:81:e6:a6:c3:29:4d: b7:d2:01:3c:00:b9:df:02:1f:1e:cf:41:26:26:88: 47:41:a4:10:5e:25:80:69:24:18:f3:db:97:73:73: f2:b0:22:3a:45:ae:f2:fa:9d:82:04:b0:81:32:e9: 98:9a:c3:fd:24:6e:97:34:de:51:7f:42:fc:af:78: 32:f4:ee:71:a2:a7:75:51:80:11:60:b3:7f:cc:01: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D6:94:A4:A5:F6:3D:35:35:C2:65:87:2D:14:6A:3D:A6:6D:2C:12 X509v3 Authority Key Identifier: keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.96.0/21 87.253.160.0/20 87.253.190.0/23 185.205.216.0/22 Signature Algorithm: sha256WithRSAEncryption 05:28:70:f9:8d:b6:6c:76:a0:f3:2a:8f:3d:30:40:23:83:ce: 67:44:a8:ae:20:88:41:1d:50:91:13:05:3b:98:94:bc:0f:4a: 13:a1:35:bd:6b:cd:e6:b6:cc:e6:24:39:90:5e:d4:27:c2:59: cb:9d:ec:a9:08:6d:c0:68:3e:fa:4d:2b:56:d6:25:c0:15:a7: d8:5a:47:c0:cc:56:09:58:09:b4:20:a6:79:7e:98:b9:ca:b9: c0:2a:11:25:6c:06:ea:e0:cb:ea:24:93:ed:9e:d2:bc:8d:3c: 75:b7:83:91:ca:ce:3c:d1:36:b2:73:e9:a2:d8:c6:31:fe:60: 42:9c:7b:56:24:33:6e:12:35:78:cc:e4:6e:41:6b:45:b2:df: 81:8b:3a:57:b8:e9:c0:fc:b7:be:1b:02:74:31:ec:e1:12:83: ea:19:d7:a3:e5:29:c9:e5:b5:4c:c6:81:99:a0:2f:2e:13:36: 0a:30:8b:83:42:bb:1e:17:6e:b7:b1:69:28:55:1b:ae:cb:0f: 57:6b:07:c5:f5:db:6b:9d:f0:32:e6:84:8b:09:70:6a:dc:39: 24:66:21:77:f5:8d:56:9a:4b:0a:57:a0:e2:ba:fd:17:60:9e: 81:fd:c2:18:50:a1:51:f3:d4:d3:d6:bf:6a:61:a5:30:92:6a: c4:0a:28:03 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6WvUN8+dnp6IPtUrRhpWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk ZDIxMmIwHhcNMjYwMTAxMTYxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmQ2OTRhNGE1ZjYzZDM1MzVjMjY1ODcyZDE0NmEzZGE2NmQyYzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7fWKycFAoIZ7r9CohSezEJmF2t5 o5udHBjLw7OjdQ+2wHt9SsjMHJT1HG4Lav3YyyFMjNjMC54R2/lo70YZ35gQoOSA wGCEsIRRQmnDXbV+KOuLXqgx8qYxoYhtXCiH2B6Wa/mIDzUIeUhBD1ES2wrrvCYs Ygcfx9otD3+hq7vyByRtMXGyA2j3KHn4titSqLFhnzvJlVRX6Ex5qlQaLDvUHkYX Vv7v7KLQ+CeB5qbDKU230gE8ALnfAh8ez0EmJohHQaQQXiWAaSQY89uXc3PysCI6 Ra7y+p2CBLCBMumYmsP9JG6XNN5Rf0L8r3gy9O5xoqd1UYARYLN/zAFdSQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFA/WlKSl9j01NcJlhy0Uaj2mbSwSMB8GA1UdIwQY MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt YmMxNTIyNzg5ZDNiLzEvRDlhVXBLWDJQVFUxd21XSExSUnFQYVp0TEJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDHxhgAwQE V/2gAwQBV/2+AwQCuc3YMA0GCSqGSIb3DQEBCwUAA4IBAQAFKHD5jbZsdqDzKo89 MEAjg85nRKiuIIhBHVCREwU7mJS8D0oToTW9a83mtszmJDmQXtQnwlnLneypCG3A aD76TStW1iXAFafYWkfAzFYJWAm0IKZ5fpi5yrnAKhElbAbq4MvqJJPtntK8jTx1 t4ORys480Tayc+mi2MYx/mBCnHtWJDNuEjV4zORuQWtFst+BizpXuOnA/Le+GwJ0 MezhEoPqGdej5SnJ5bVMxoGZoC8uEzYKMIuDQrseF263sWkoVRuuyw9XawfF9dtr nfAy5oSLCXBq3DkkZiF39Y1WmksKV6Diuv0XYJ6B/cIYUKFR89TT1r9qYaUwkmrE CigD -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:04 2026 by rpki-client