This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/9gn_Ey5jZ-COR2fvOiyvSDQaMtw.roa File: 9gn_Ey5jZ-COR2fvOiyvSDQaMtw.roa (raw, json) Hash identifier: Bkvsu5pYLIYxEeTzpFG4I0bzHciLlqQK08tuoGJR2qE= Subject key identifier: F6:09:FF:13:2E:63:67:E0:8E:47:67:EF:3A:2C:AF:48:34:1A:32:DC Certificate issuer: /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2 Certificate serial: 019AE9407D0CEF5DDBC9630DC47EA072924F Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/9gn_Ey5jZ-COR2fvOiyvSDQaMtw.roa Signing time: Thu 04 Dec 2025 12:05:08 +0000 ROA not before: Thu 04 Dec 2025 12:05:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50633 IP address blocks: 185.36.146.0/24 maxlen: 24 193.84.50.0/24 maxlen: 24 193.107.72.0/22 maxlen: 22 193.107.72.0/24 maxlen: 24 193.107.73.0/24 maxlen: 24 193.107.74.0/24 maxlen: 24 193.107.75.0/24 maxlen: 24 193.194.124.0/22 maxlen: 22 193.194.124.0/24 maxlen: 24 193.194.126.0/24 maxlen: 24 193.194.127.0/24 maxlen: 24 195.68.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:40:7d:0c:ef:5d:db:c9:63:0d:c4:7e:a0:72:92:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2 Validity Not Before: Dec 4 12:05:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f609ff132e6367e08e4767ef3a2caf48341a32dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:56:ea:6c:d8:be:81:65:a3:bd:c5:b4:3e: 5f:9a:a4:44:5e:57:50:1d:7f:47:29:a8:df:fa:ef: 33:25:42:be:0e:be:5b:d9:8a:4f:be:a1:cf:4c:54: ff:26:32:ca:29:8f:f8:40:a0:f3:fb:19:de:cc:a5: e4:c9:bb:22:b9:d4:08:e2:f3:bb:c8:b8:ae:98:7c: c0:88:8f:16:05:b6:17:27:af:71:b1:0c:f1:a9:5d: 2f:34:11:29:44:d2:1b:b2:a3:f1:58:e6:a5:cd:53: 93:b2:4b:b3:a5:b2:e7:e8:b4:74:18:d3:4f:a3:49: 2b:46:bc:9e:e3:a2:13:ed:08:b3:38:5f:03:b1:a6: 5a:dd:de:8e:24:db:ec:c8:f7:d5:90:4a:69:06:ac: 24:cf:24:02:b1:c1:dd:9e:0d:d4:7d:6c:38:83:8f: 3d:36:eb:15:5d:13:42:0d:ab:e7:d6:a8:c6:c8:0b: 1f:da:ae:7e:57:a2:ce:8c:09:e8:64:b9:2a:99:fc: f4:b5:b5:10:d7:f8:02:77:d4:f4:88:a0:aa:b6:02: 9a:97:f0:23:50:e1:9b:6c:be:27:bb:ca:f0:02:f5: bd:01:63:3c:fa:76:7a:3e:b1:39:b4:80:75:ee:d0: 11:f5:b3:5c:b5:ed:05:b7:34:4a:6e:b7:a1:45:7d: b5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:09:FF:13:2E:63:67:E0:8E:47:67:EF:3A:2C:AF:48:34:1A:32:DC X509v3 Authority Key Identifier: keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/9gn_Ey5jZ-COR2fvOiyvSDQaMtw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.36.146.0/24 193.84.50.0/24 193.107.72.0/22 193.194.124.0/22 195.68.216.0/24 Signature Algorithm: sha256WithRSAEncryption 18:6e:92:e3:b4:17:90:4d:3a:ad:a0:1a:57:86:76:a1:3a:d4: d5:2b:40:65:8c:d2:cc:3e:e3:0f:0d:30:99:40:be:30:ca:02: c3:ad:6e:72:98:b1:4f:58:58:64:13:a8:c1:ac:66:76:b7:0e: 58:a5:d1:fb:8b:9c:44:93:82:f1:74:eb:a6:6f:9a:df:e0:e6: 13:b5:79:be:94:9f:0f:65:00:20:fe:89:79:49:ee:5e:f7:18: ed:d7:5c:75:6a:2a:cd:68:96:de:09:8c:88:06:a0:65:61:6d: 0d:41:c1:67:f6:5e:4e:83:60:35:08:57:86:f3:66:9a:e5:b4: 76:35:7d:19:28:3e:a8:b0:f4:a8:37:24:48:da:57:74:48:fd: 1a:9c:1a:3b:e0:da:8e:11:90:8a:61:8b:4a:80:84:f8:c3:dd: 8e:80:75:c8:f4:51:20:1b:dc:c5:7f:ff:aa:93:ea:59:91:91: 8c:ed:5e:61:61:df:3f:db:81:a6:a8:7e:3d:db:c6:6a:f0:27: 00:e1:f6:29:66:58:52:c6:27:55:25:41:cf:9e:80:f9:55:52: 6b:8c:ba:3b:bb:e6:66:84:85:3d:86:35:9a:45:0a:b1:2a:0a: 1b:ab:c4:d6:b7:2d:73:5b:7d:16:39:6a:a8:0c:cc:4f:ce:b5: 54:f1:42:9c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrpQH0M713byWMNxH6gcpJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OGQ0OTgzYzljNjNiZDhhMTU4MDAzYzU4NWY0M2Q5OTRj MTJkYzIwHhcNMjUxMjA0MTIwNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjA5ZmYxMzJlNjM2N2UwOGU0NzY3ZWYzYTJjYWY0ODM0MWEzMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pNW6mzYvoFlo73FtD5fmqREXldQ HX9HKajf+u8zJUK+Dr5b2YpPvqHPTFT/JjLKKY/4QKDz+xnezKXkybsiudQI4vO7 yLiumHzAiI8WBbYXJ69xsQzxqV0vNBEpRNIbsqPxWOalzVOTskuzpbLn6LR0GNNP o0krRrye46IT7QizOF8DsaZa3d6OJNvsyPfVkEppBqwkzyQCscHdng3UfWw4g489 NusVXRNCDavn1qjGyAsf2q5+V6LOjAnoZLkqmfz0tbUQ1/gCd9T0iKCqtgKal/Aj UOGbbL4nu8rwAvW9AWM8+nZ6PrE5tIB17tAR9bNcte0FtzRKbrehRX21PwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPYJ/xMuY2fgjkdn7zosr0g0GjLcMB8GA1UdIwQY MBaAFKWNSYPJxjvYoVgAPFhfQ9mUwS3CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jM2EzNDMtZGE4Mi00MjdhLTk4YzYt Y2UzMGQ0YTM5OGUwLzEvOWduX0V5NWpaLUNPUjJmdk9peXZTRFFhTXR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jM2EzNDMtZGE4Mi00MjdhLTk4YzYtY2UzMGQ0YTM5OGUw LzEvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAuSSSAwQA wVQyAwQCwWtIAwQCwcJ8AwQAw0TYMA0GCSqGSIb3DQEBCwUAA4IBAQAYbpLjtBeQ TTqtoBpXhnahOtTVK0BljNLMPuMPDTCZQL4wygLDrW5ymLFPWFhkE6jBrGZ2tw5Y pdH7i5xEk4LxdOumb5rf4OYTtXm+lJ8PZQAg/ol5Se5e9xjt11x1airNaJbeCYyI BqBlYW0NQcFn9l5Og2A1CFeG82aa5bR2NX0ZKD6osPSoNyRI2ld0SP0anBo74NqO EZCKYYtKgIT4w92OgHXI9FEgG9zFf/+qk+pZkZGM7V5hYd8/24GmqH4928Zq8CcA 4fYpZlhSxidVJUHPnoD5VVJrjLo7u+ZmhIU9hjWaRQqxKgobq8TWty1zW30WOWqo DMxPzrVU8UKc -----END CERTIFICATE-----Generated at Sat Dec 6 05:41:45 2025 by rpki-client