This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/9jQwsZ6VF2I9K3_Gg297Dz4y1gw.roa File: 9jQwsZ6VF2I9K3_Gg297Dz4y1gw.roa (raw, json) Hash identifier: YKW8EWi6VI2meHZlrdgZMKqoWyGxWtkWNwOA1wN8vzs= Subject key identifier: F6:34:30:B1:9E:95:17:62:3D:2B:7F:C6:83:6F:7B:0F:3E:32:D6:0C Certificate issuer: /CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780 Certificate serial: 019A738A57B81D752A97EBFC35E2A0A6F898 Authority key identifier: FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/9jQwsZ6VF2I9K3_Gg297Dz4y1gw.roa Signing time: Tue 11 Nov 2025 15:30:37 +0000 ROA not before: Tue 11 Nov 2025 15:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49784 IP address blocks: 46.244.48.0/20 maxlen: 24 91.236.202.0/23 maxlen: 24 91.239.174.0/23 maxlen: 24 157.97.48.0/20 maxlen: 24 185.12.216.0/22 maxlen: 24 185.28.224.0/22 maxlen: 24 213.109.112.0/20 maxlen: 24 2a03:8940::/32 maxlen: 32 2a04:3640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:8a:57:b8:1d:75:2a:97:eb:fc:35:e2:a0:a6:f8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbcb947651260d9d8b02f31d5bc7f1d5d0b01780 Validity Not Before: Nov 11 15:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f63430b19e9517623d2b7fc6836f7b0f3e32d60c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:e7:5d:44:69:e0:4f:55:97:dd:6d:e9:06: 61:ed:b0:2e:5a:f5:07:2b:75:66:1a:96:6e:26:5a: 7b:89:e6:a5:7b:c5:0d:2e:e8:c1:26:8f:46:11:47: 4d:d4:8b:63:3a:b1:8a:3e:4c:47:42:59:1c:f5:ee: 43:f2:48:5c:c8:8d:a4:e4:c7:ff:47:15:92:3d:93: b2:6b:f8:71:7d:e6:47:a4:8b:cb:45:fc:4f:2e:72: 94:a4:f8:3b:d9:91:fa:93:90:4d:9d:51:be:7f:11: 87:dc:ee:36:5a:a5:f7:7f:7a:da:f9:4b:f7:89:cd: 72:ef:2e:71:bf:3a:17:f6:f3:76:d3:cb:46:36:a7: 8a:52:8d:cb:d2:36:57:f1:4c:97:85:da:5f:88:9d: 70:06:32:1b:82:6d:1d:48:31:96:01:1c:fe:7c:57: 53:ba:ea:df:e5:69:c1:b0:7e:4e:97:ef:c2:9f:22: 2b:2d:33:c9:3f:3f:c6:0d:ef:7d:36:02:6c:8b:11: aa:78:e2:0a:80:d9:6b:88:58:2d:53:b7:42:9a:b7: 54:be:65:f8:b6:5c:15:95:73:32:65:9c:07:1b:5d: 71:42:95:29:c8:5c:83:1d:40:41:a4:1e:ad:b9:4e: 50:19:c5:fc:5a:25:03:4c:36:87:77:b7:9e:53:49: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:34:30:B1:9E:95:17:62:3D:2B:7F:C6:83:6F:7B:0F:3E:32:D6:0C X509v3 Authority Key Identifier: keyid:FB:CB:94:76:51:26:0D:9D:8B:02:F3:1D:5B:C7:F1:D5:D0:B0:17:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/9jQwsZ6VF2I9K3_Gg297Dz4y1gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/da7658-fe5d-4f5a-862c-b56ab282b1c7/1/1-8uUdlEmDZ2LAvMdW8fx1dCwF4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.244.48.0/20 91.236.202.0/23 91.239.174.0/23 157.97.48.0/20 185.12.216.0/22 185.28.224.0/22 213.109.112.0/20 IPv6: 2a03:8940::/32 2a04:3640::/29 Signature Algorithm: sha256WithRSAEncryption 51:73:c5:11:24:05:7c:20:d6:78:5d:ef:cb:df:0d:36:b2:9d: e5:35:1c:14:e0:82:4b:70:c6:31:2f:0d:31:10:a0:c0:61:36: 1a:a7:3a:0d:60:97:c7:f5:ec:b0:b4:fe:be:d4:00:a9:41:ab: 20:50:42:45:e6:eb:ac:37:27:05:be:8e:5b:3f:0b:fb:4b:e6: ca:d3:2b:b3:47:3c:32:db:23:92:3d:ab:f7:5d:5b:29:91:dc: 63:5d:f9:33:32:34:c8:45:ff:a5:c1:93:91:fb:43:86:1a:b5: c2:41:1f:10:bf:82:e9:ca:fd:ec:69:f9:23:fa:cf:87:e3:9f: 6e:d9:ef:58:88:fc:9c:90:8e:1e:65:52:5d:37:bd:f7:12:fd: 55:a4:82:28:71:ee:e0:a9:02:38:8f:85:29:b2:61:20:e0:bc: 72:98:fc:a5:4b:e6:6e:13:ef:f2:9f:1c:5e:69:60:d9:21:eb: b9:d4:4c:0e:ec:58:74:6e:e4:26:d1:95:b7:3d:58:23:06:fc: 72:7d:b0:b5:39:19:f1:bc:d6:6b:ca:93:91:5c:37:42:de:02: 64:1d:b7:44:61:d2:09:5a:54:58:9b:17:24:3b:1f:0c:89:28: 2e:9d:eb:b6:cd:0f:3c:56:10:5c:9a:84:86:a2:42:dc:a5:d4: db:80:5b:e3 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZpzile4HXUql+v8NeKgpviYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiY2I5NDc2NTEyNjBkOWQ4YjAyZjMxZDViYzdmMWQ1ZDBi MDE3ODAwHhcNMjUxMTExMTUzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjM0MzBiMTllOTUxNzYyM2QyYjdmYzY4MzZmN2IwZjNlMzJkNjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV/nXURp4E9Vl91t6QZh7bAuWvUH K3VmGpZuJlp7ieale8UNLujBJo9GEUdN1ItjOrGKPkxHQlkc9e5D8khcyI2k5Mf/ RxWSPZOya/hxfeZHpIvLRfxPLnKUpPg72ZH6k5BNnVG+fxGH3O42WqX3f3ra+Uv3 ic1y7y5xvzoX9vN208tGNqeKUo3L0jZX8UyXhdpfiJ1wBjIbgm0dSDGWARz+fFdT uurf5WnBsH5Ol+/CnyIrLTPJPz/GDe99NgJsixGqeOIKgNlriFgtU7dCmrdUvmX4 tlwVlXMyZZwHG11xQpUpyFyDHUBBpB6tuU5QGcX8WiUDTDaHd7eeU0kawQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFPY0MLGelRdiPSt/xoNvew8+MtYMMB8GA1UdIwQY MBaAFPvLlHZRJg2diwLzHVvH8dXQsBeAMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04dVVkbEVtRFoyTEF2TWRXOGZ4MWRDd0Y0QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEvZGE3NjU4LWZlNWQtNGY1YS04NjJj LWI1NmFiMjgyYjFjNy8xLzlqUXdzWjZWRjJJOUszX0dnMjk3RHo0eTFndy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODEvZGE3NjU4LWZlNWQtNGY1YS04NjJjLWI1NmFiMjgyYjFj Ny8xLzEtOHVVZGxFbURaMkxBdk1kVzhmeDFkQ3dGNEEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwWQYIKwYBBQUHAQcBAf8ESjBIMDAEAgABMCoDBAQu9DAD BAFb7MoDBAFb764DBASdYTADBAK5DNgDBAK5HOADBATVbXAwFAQCAAIwDgMFACoD iUADBQMqBDZAMA0GCSqGSIb3DQEBCwUAA4IBAQBRc8URJAV8INZ4Xe/L3w02sp3l NRwU4IJLcMYxLw0xEKDAYTYapzoNYJfH9eywtP6+1ACpQasgUEJF5uusNycFvo5b Pwv7S+bK0yuzRzwy2yOSPav3XVspkdxjXfkzMjTIRf+lwZOR+0OGGrXCQR8Qv4Lp yv3safkj+s+H459u2e9YiPyckI4eZVJdN733Ev1VpIIoce7gqQI4j4UpsmEg4Lxy mPylS+ZuE+/ynxxeaWDZIeu51EwO7Fh0buQm0ZW3PVgjBvxyfbC1ORnxvNZrypOR XDdC3gJkHbdEYdIJWlRYmxckOx8MiSguneu2zQ88VhBcmoSGokLcpdTbgFvj -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:38 2025 by rpki-client