This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/9SI52VgDBaEJ9HFrw-u80rGAzb0.roa File: 9SI52VgDBaEJ9HFrw-u80rGAzb0.roa (raw, json) Hash identifier: Wz599kBFdu7Ri93DGJbDH1V1UHfOg0eqQwOYmctUo4M= Subject key identifier: F5:22:39:D9:58:03:05:A1:09:F4:71:6B:C3:EB:BC:D2:B1:80:CD:BD Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455 Certificate serial: 019B78344E1AD3B9DF55C0E35760DB667AA4 Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/9SI52VgDBaEJ9HFrw-u80rGAzb0.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201227 IP address blocks: 45.90.72.0/24 maxlen: 24 45.90.73.0/24 maxlen: 24 45.90.74.0/24 maxlen: 24 45.90.75.0/24 maxlen: 24 185.81.96.0/24 maxlen: 24 185.81.97.0/24 maxlen: 24 185.81.99.0/24 maxlen: 24 194.59.170.0/24 maxlen: 24 194.59.171.0/24 maxlen: 24 2a05:8642::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.mft rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4e:1a:d3:b9:df:55:c0:e3:57:60:db:66:7a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455 Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f52239d9580305a109f4716bc3ebbcd2b180cdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:07:e9:8c:3e:04:b0:a0:0a:14:76:02:7b: 0f:bf:73:4a:8c:dd:df:2e:48:24:f6:56:8e:90:92: 1a:a3:34:13:d5:f9:02:68:db:e5:7e:22:16:4a:d2: 93:48:e3:bf:57:29:04:8e:f8:b0:6d:24:60:cc:53: 11:38:84:c7:a7:99:7c:e3:c4:af:f0:8a:01:ac:90: 42:31:dc:63:f7:bf:0a:43:39:1c:8b:da:16:6f:48: d1:17:f3:72:6e:e1:1b:d8:13:19:4c:4d:31:71:a3: e6:12:c2:17:7e:80:bc:17:84:9b:0d:57:83:e7:15: cd:5f:e3:1f:31:b1:4b:c1:2b:c2:5c:eb:37:79:cd: c1:b8:91:93:52:d1:e7:8a:a7:ed:b6:d0:3e:13:f6: 69:29:78:7a:a2:45:a7:d1:dd:e5:dd:a5:22:97:5b: e6:42:b0:fc:a0:63:2f:ee:aa:e2:3b:48:b1:bd:a1: 7c:a9:86:cc:2d:5f:b6:29:72:fc:0e:90:a2:bf:0e: 2e:48:f4:85:22:a6:9b:42:28:30:cb:a9:e5:f1:ce: 47:7b:8f:af:90:ce:11:89:d8:3b:f7:c4:78:34:22: 68:cc:f0:34:93:5f:02:1e:71:8d:c2:79:93:ae:c1: e3:c9:90:9a:8d:1a:c4:8b:c4:ac:10:44:32:f7:91: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:22:39:D9:58:03:05:A1:09:F4:71:6B:C3:EB:BC:D2:B1:80:CD:BD X509v3 Authority Key Identifier: keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/9SI52VgDBaEJ9HFrw-u80rGAzb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.72.0/22 185.81.96.0/23 185.81.99.0/24 194.59.170.0/23 IPv6: 2a05:8642::/32 Signature Algorithm: sha256WithRSAEncryption 22:b8:06:6e:3b:92:0d:5f:65:42:fb:90:80:e4:5e:22:36:86: c4:39:ef:ea:52:de:2b:1a:3f:c2:3b:9c:c9:d6:d7:ce:fc:9c: d2:15:4c:c0:f3:35:79:90:d7:74:6e:f9:77:a4:20:41:c7:f3: 74:9f:73:6f:d5:ad:54:e6:92:c1:3c:7a:69:07:c3:0b:16:9c: ce:bc:8d:bd:3d:7d:81:01:10:ba:1c:84:7a:53:b3:92:97:2f: 99:93:f8:5c:22:5f:26:c9:18:1d:06:b4:55:72:da:96:6e:f9: 19:3a:31:06:cb:29:6d:96:2a:3e:42:94:87:e2:38:05:75:18: a9:9d:87:be:c5:20:91:0b:ed:ab:36:5b:b3:ea:7a:f2:9b:fe: 0a:c5:f1:68:7a:98:4f:54:ce:29:c8:02:86:52:49:bb:70:98: 11:f3:b1:a7:87:77:50:c3:47:da:62:22:40:c8:7b:16:21:ed: 07:50:bc:77:b2:73:c9:b5:57:10:9c:50:c6:4d:b4:8d:74:14: d8:a5:62:20:01:2f:d0:e4:72:e8:ec:f2:64:3d:39:e1:e9:e1: 14:52:1c:a7:f1:85:09:8a:2d:51:1a:7a:11:f3:e8:d2:3b:32: 60:71:5d:8f:eb:55:49:48:90:50:4e:05:04:c3:81:16:ca:2c: 23:ce:29:4b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4NE4a07nfVcDjV2DbZnqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZWEzN2E4ZTczZTc2NzlhOTMzZDcwZjdiOWM4NzIwODEw MjQ0NTUwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTIyMzlkOTU4MDMwNWExMDlmNDcxNmJjM2ViYmNkMmIxODBjZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTgH6Yw+BLCgChR2AnsPv3NKjN3f Lkgk9laOkJIaozQT1fkCaNvlfiIWStKTSOO/VykEjviwbSRgzFMROITHp5l848Sv 8IoBrJBCMdxj978KQzkci9oWb0jRF/NybuEb2BMZTE0xcaPmEsIXfoC8F4SbDVeD 5xXNX+MfMbFLwSvCXOs3ec3BuJGTUtHniqftttA+E/ZpKXh6okWn0d3l3aUil1vm QrD8oGMv7qriO0ixvaF8qYbMLV+2KXL8DpCivw4uSPSFIqabQigwy6nl8c5He4+v kM4Ridg798R4NCJozPA0k18CHnGNwnmTrsHjyZCajRrEi8SsEEQy95HBiwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFPUiOdlYAwWhCfRxa8PrvNKxgM29MB8GA1UdIwQY MBaAFBbqN6jnPnZ5qTPXD3uchyCBAkRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWIt NDcyYjBkMDcyZTgzLzEvOVNJNTJWZ0RCYUVKOUhGcnctdTgwckdBemIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My81MWNkOTQtYTA1NS00M2VlLWEwOWItNDcyYjBkMDcyZTgz LzEvRnVvM3FPYy1kbm1wTTljUGU1eUhJSUVDUkZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLVpIAwQB uVFgAwQAuVFjAwQBwjuqMA0EAgACMAcDBQAqBYZCMA0GCSqGSIb3DQEBCwUAA4IB AQAiuAZuO5INX2VC+5CA5F4iNobEOe/qUt4rGj/CO5zJ1tfO/JzSFUzA8zV5kNd0 bvl3pCBBx/N0n3Nv1a1U5pLBPHppB8MLFpzOvI29PX2BARC6HIR6U7OSly+Zk/hc Il8myRgdBrRVctqWbvkZOjEGyyltlio+QpSH4jgFdRipnYe+xSCRC+2rNluz6nry m/4KxfFoephPVM4pyAKGUkm7cJgR87Gnh3dQw0faYiJAyHsWIe0HULx3snPJtVcQ nFDGTbSNdBTYpWIgAS/Q5HLo7PJkPTnh6eEUUhyn8YUJii1RGnoR8+jSOzJgcV2P 61VJSJBQTgUEw4EWyiwjzilL -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:20 2026 by rpki-client