This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/a9JkWci0F3TTd0p2sBEzmiEjdq0.roa File: a9JkWci0F3TTd0p2sBEzmiEjdq0.roa (raw, json) Hash identifier: 5j0Wq9PZGQQ7JbTj7Kgmx1x+26TKEMnhbQ7aJjaYgsg= Subject key identifier: 6B:D2:64:59:C8:B4:17:74:D3:77:4A:76:B0:11:33:9A:21:23:76:AD Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878 Certificate serial: 019B7F15395760E7A45A494E392BEAC64AF6 Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/a9JkWci0F3TTd0p2sBEzmiEjdq0.roa Signing time: Fri 02 Jan 2026 14:20:55 +0000 ROA not before: Fri 02 Jan 2026 14:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21485 IP address blocks: 91.231.153.0/24 maxlen: 24 2001:67c:15ec::/48 maxlen: 48 2a0a:3500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:39:57:60:e7:a4:5a:49:4e:39:2b:ea:c6:4a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878 Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bd26459c8b41774d3774a76b011339a212376ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:47:eb:03:71:0c:47:41:17:e6:41:69:70:1d: 45:e1:22:61:ec:ae:65:dd:e7:39:05:9b:da:d3:46: fd:1d:05:ce:db:ae:5d:94:b9:3e:38:c6:c3:d2:57: 5d:b0:6f:30:20:ac:6a:86:b3:af:8f:c3:8e:0d:95: cb:d5:99:4f:c0:6c:ea:d5:6e:ba:50:87:9b:5e:11: 6e:6c:d4:85:7f:6c:c3:a4:73:78:46:1e:ac:38:8c: 08:bd:16:08:29:a1:37:e9:46:1d:ce:92:f0:83:33: d2:83:f8:27:7e:12:ec:a9:fb:12:68:58:eb:91:aa: 41:2f:08:92:8c:9a:67:79:0c:fe:82:58:f8:c8:cc: c1:7e:c5:f0:41:66:30:fd:06:1d:89:64:35:4f:d1: 85:2b:b0:2f:ce:c0:7d:b5:0b:cf:b2:1e:b5:dc:bb: 1a:d1:75:80:2f:b3:f8:95:1b:21:68:bc:a8:a8:f7: 9b:6c:3b:20:c2:97:93:2e:c6:a9:95:54:f4:95:ef: 87:81:6b:d2:42:1c:3f:3e:7b:d4:1d:0b:ba:9f:e7: 1e:10:4f:2f:d9:2e:3d:0e:06:3d:ec:88:9d:79:a1: 00:dd:14:23:7d:97:3b:2d:9a:c8:22:8b:0a:9e:fe: d7:00:a6:d9:00:f8:fd:9b:e9:fa:7c:03:de:2e:d8: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D2:64:59:C8:B4:17:74:D3:77:4A:76:B0:11:33:9A:21:23:76:AD X509v3 Authority Key Identifier: keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/a9JkWci0F3TTd0p2sBEzmiEjdq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.231.153.0/24 IPv6: 2001:67c:15ec::/48 2a0a:3500::/32 Signature Algorithm: sha256WithRSAEncryption 1c:18:64:6f:85:d5:d2:cc:4d:74:d1:18:05:2b:a7:09:29:15: 77:69:a1:10:d2:3a:4f:61:a7:54:7c:4a:ad:55:85:6c:3e:2d: be:56:75:a5:c0:82:2a:4a:71:2f:ec:6d:d0:4e:e6:c8:ef:98: c9:49:54:c7:99:b4:ba:30:e3:29:33:07:42:49:c7:8a:b5:c1: b2:f3:54:a1:0c:85:e7:19:50:c5:16:f0:5a:9a:2c:42:b3:e6: 8b:08:38:f0:57:a2:1e:0e:e2:89:94:7a:da:47:cb:4b:73:c1: 75:de:fd:81:46:83:80:15:62:20:77:5c:10:8b:e7:6a:f6:e1: 5f:a3:3b:5d:d1:df:39:dc:18:58:dc:84:06:8d:09:8b:f4:75: 57:98:32:52:fc:6f:a3:37:4b:6c:16:78:4d:e4:bd:67:8b:7b: 1e:d4:04:61:fc:35:89:fc:9b:a9:dc:08:67:28:a9:6d:a4:6a: c5:9f:cc:5a:33:0e:bb:b7:d8:53:10:27:8b:66:17:7e:d7:b5: f3:35:79:01:8e:e6:de:1c:6c:91:3b:4a:19:a9:da:03:5a:b3: 3d:1e:bb:4c:05:6c:d0:fe:97:5a:27:88:70:2f:fe:1d:ce:0b: 7f:14:43:27:c7:24:ba:93:c7:28:71:58:a2:34:9a:b0:60:0f: b8:83:65:88 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/FTlXYOekWklOOSvqxkr2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0 NDg4NzgwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmQyNjQ1OWM4YjQxNzc0ZDM3NzRhNzZiMDExMzM5YTIxMjM3NmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30frA3EMR0EX5kFpcB1F4SJh7K5l 3ec5BZva00b9HQXO265dlLk+OMbD0lddsG8wIKxqhrOvj8OODZXL1ZlPwGzq1W66 UIebXhFubNSFf2zDpHN4Rh6sOIwIvRYIKaE36UYdzpLwgzPSg/gnfhLsqfsSaFjr kapBLwiSjJpneQz+glj4yMzBfsXwQWYw/QYdiWQ1T9GFK7AvzsB9tQvPsh613Lsa 0XWAL7P4lRshaLyoqPebbDsgwpeTLsaplVT0le+HgWvSQhw/PnvUHQu6n+ceEE8v 2S49DgY97IideaEA3RQjfZc7LZrIIosKnv7XAKbZAPj9m+n6fAPeLtj5LwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGvSZFnItBd003dKdrARM5ohI3atMB8GA1UdIwQY MBaAFKf9P4kzXc+Chmayj62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTIt YzBiMWFkNDM1Yjk1LzEvYTlKa1djaTBGM1RUZDBwMnNCRXptaUVqZHEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1 LzEvcF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAW+eZMBYE AgACMBADBwAgAQZ8FewDBQAqCjUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcGGRvhdXS zE100RgFK6cJKRV3aaEQ0jpPYadUfEqtVYVsPi2+VnWlwIIqSnEv7G3QTubI75jJ SVTHmbS6MOMpMwdCSceKtcGy81ShDIXnGVDFFvBamixCs+aLCDjwV6IeDuKJlHra R8tLc8F13v2BRoOAFWIgd1wQi+dq9uFfoztd0d853BhY3IQGjQmL9HVXmDJS/G+j N0tsFnhN5L1ni3se1ARh/DWJ/Jup3AhnKKltpGrFn8xaMw67t9hTECeLZhd+17Xz NXkBjubeHGyRO0oZqdoDWrM9HrtMBWzQ/pdaJ4hwL/4dzgt/FEMnxyS6k8cocVii NJqwYA+4g2WI -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:30 2026 by rpki-client