This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/9MezlHXAeGWTxOc7UTvV8DR5uWo.roa File: 9MezlHXAeGWTxOc7UTvV8DR5uWo.roa (raw, json) Hash identifier: n9z8Qm42I0TN2dbDtlo0CkxcfTlhf2U1vO8dzmiyccw= Subject key identifier: F4:C7:B3:94:75:C0:78:65:93:C4:E7:3B:51:3B:D5:F0:34:79:B9:6A Certificate issuer: /CN=e7f26134830ee20dc22986dc8a7366d0972b2930 Certificate serial: 019B7C135F5E679D47022010E5762781BCA7 Authority key identifier: E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/9MezlHXAeGWTxOc7UTvV8DR5uWo.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210423 IP address blocks: 79.108.228.0/22 maxlen: 22 81.172.72.0/21 maxlen: 21 93.157.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.mft rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5f:5e:67:9d:47:02:20:10:e5:76:27:81:bc:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f26134830ee20dc22986dc8a7366d0972b2930 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4c7b39475c0786593c4e73b513bd5f03479b96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:09:5e:48:9b:ac:22:67:bd:f0:dc:f8:5f: 3d:09:44:e4:60:aa:c9:e0:a3:57:72:c2:ff:96:8f: 23:36:e6:7d:df:9f:7a:2d:0b:5f:ba:7b:59:ba:7d: 30:59:30:96:11:99:b9:06:ee:8f:86:80:cd:38:7d: 1a:38:1b:cb:4e:8e:bd:5c:e8:c6:fe:19:1e:37:75: 8a:8e:e7:4d:a4:86:e4:3b:d6:39:a7:a1:85:0e:96: 43:d3:d6:07:1d:05:bb:ea:a5:75:8e:7c:e8:93:e4: 2f:50:42:c7:61:f4:80:e9:35:8d:f1:d0:93:51:b5: 94:b4:cb:b4:9c:df:e3:0a:6c:fe:fc:16:b2:ab:19: dc:30:20:72:e0:30:d5:46:b6:8d:14:cb:a0:57:70: 7a:dc:e9:c0:0c:c4:31:c5:e2:00:b1:41:99:7e:44: 5f:24:56:73:bc:57:a0:2a:ed:6c:38:d7:53:f2:f6: 9a:0c:45:23:12:13:40:40:38:51:c0:a5:dc:28:b6: a4:54:5d:8f:be:9b:dc:c3:5d:a8:73:03:a7:b6:31: cc:22:3c:15:a2:21:51:9f:26:9a:92:6c:7e:11:f2: e9:a3:2a:7a:84:78:f2:1c:26:3f:e6:69:00:43:d7: c6:05:fb:55:aa:96:42:e9:8b:05:c9:fa:fa:f5:c7: 70:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C7:B3:94:75:C0:78:65:93:C4:E7:3B:51:3B:D5:F0:34:79:B9:6A X509v3 Authority Key Identifier: keyid:E7:F2:61:34:83:0E:E2:0D:C2:29:86:DC:8A:73:66:D0:97:2B:29:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_JhNIMO4g3CKYbcinNm0JcrKTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/9MezlHXAeGWTxOc7UTvV8DR5uWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/fe6bac-10b3-4256-84b0-a76292e20458/1/5_JhNIMO4g3CKYbcinNm0JcrKTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.108.228.0/22 81.172.72.0/21 93.157.107.0/24 Signature Algorithm: sha256WithRSAEncryption a3:4a:2b:52:de:2c:06:1c:00:a7:25:34:ea:de:ad:61:50:44: 35:4a:3a:38:81:04:20:cb:b3:38:d8:4b:31:ef:b2:36:ab:b9: d6:cd:8b:8b:b8:bb:20:b1:6a:35:f2:79:1a:49:84:12:69:9b: 19:22:40:a3:b4:38:e8:67:f0:79:9d:43:3f:79:12:95:67:c8: 3e:50:2a:2b:b7:c4:c9:98:e2:30:29:73:ba:83:97:4a:3c:e3: 05:ed:dd:2c:c3:8c:82:81:61:08:5a:70:1d:e6:a2:03:0d:34: e1:a2:ce:80:7a:6d:bf:c4:d1:97:9d:b1:0d:e8:c2:cd:78:3d: 59:d7:73:7c:2d:06:ff:2f:bb:94:9a:8b:39:62:aa:0b:5a:7e: e9:77:31:b4:f6:7d:e4:c8:3f:f2:3e:07:59:d9:a7:04:b4:ef: 2b:cd:3b:94:3a:a7:9f:4b:81:c0:ac:7c:bb:96:1f:1f:50:c4: 6e:58:48:25:39:18:58:2d:91:27:1b:b7:10:87:14:b7:5b:42: 0c:34:33:99:b2:02:e3:de:27:5f:e2:2d:b9:8f:3c:2f:86:f2: c0:79:8f:60:dc:e4:3b:a7:eb:78:6d:eb:9a:9a:24:02:f3:d9: 52:22:59:59:f1:5f:80:38:04:74:24:a1:2e:ae:43:ff:a9:9a: e1:eb:34:a5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8E19eZ51HAiAQ5XYngbynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3ZjI2MTM0ODMwZWUyMGRjMjI5ODZkYzhhNzM2NmQwOTcy YjI5MzAwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGM3YjM5NDc1YzA3ODY1OTNjNGU3M2I1MTNiZDVmMDM0NzliOTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4IJXkibrCJnvfDc+F89CUTkYKrJ 4KNXcsL/lo8jNuZ93596LQtfuntZun0wWTCWEZm5Bu6PhoDNOH0aOBvLTo69XOjG /hkeN3WKjudNpIbkO9Y5p6GFDpZD09YHHQW76qV1jnzok+QvUELHYfSA6TWN8dCT UbWUtMu0nN/jCmz+/BayqxncMCBy4DDVRraNFMugV3B63OnADMQxxeIAsUGZfkRf JFZzvFegKu1sONdT8vaaDEUjEhNAQDhRwKXcKLakVF2Pvpvcw12ocwOntjHMIjwV oiFRnyaakmx+EfLpoyp6hHjyHCY/5mkAQ9fGBftVqpZC6YsFyfr69cdw5wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPTHs5R1wHhlk8TnO1E71fA0eblqMB8GA1UdIwQY MBaAFOfyYTSDDuINwimG3IpzZtCXKykwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAt YTc2MjkyZTIwNDU4LzEvOU1lemxIWEFlR1dUeE9jN1VUdlY4RFI1dVdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9mZTZiYWMtMTBiMy00MjU2LTg0YjAtYTc2MjkyZTIwNDU4 LzEvNV9KaE5JTU80ZzNDS1liY2luTm0wSmNyS1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCT2zkAwQD UaxIAwQAXZ1rMA0GCSqGSIb3DQEBCwUAA4IBAQCjSitS3iwGHACnJTTq3q1hUEQ1 Sjo4gQQgy7M42Esx77I2q7nWzYuLuLsgsWo18nkaSYQSaZsZIkCjtDjoZ/B5nUM/ eRKVZ8g+UCort8TJmOIwKXO6g5dKPOMF7d0sw4yCgWEIWnAd5qIDDTThos6Aem2/ xNGXnbEN6MLNeD1Z13N8LQb/L7uUmos5YqoLWn7pdzG09n3kyD/yPgdZ2acEtO8r zTuUOqefS4HArHy7lh8fUMRuWEglORhYLZEnG7cQhxS3W0IMNDOZsgLj3idf4i25 jzwvhvLAeY9g3OQ7p+t4beuamiQC89lSIllZ8V+AOAR0JKEurkP/qZrh6zSl -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:45 2026 by rpki-client