This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/EL9_D6jbpPm0f93FbIMJFjXA39Q.roa File: EL9_D6jbpPm0f93FbIMJFjXA39Q.roa (raw, json) Hash identifier: u2EHA4Ca3HUJR0DK3eXdJPDlTwL0hlSO69OLTZssz5Y= Subject key identifier: 10:BF:7F:0F:A8:DB:A4:F9:B4:7F:DD:C5:6C:83:09:16:35:C0:DF:D4 Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142 Certificate serial: 019B7A5B1D102C7815C9040CFE0B110C8132 Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/EL9_D6jbpPm0f93FbIMJFjXA39Q.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399641 IP address blocks: 45.132.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1d:10:2c:78:15:c9:04:0c:fe:0b:11:0c:81:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3718b734349bf327d9453b96501e44b192e55142 Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10bf7f0fa8dba4f9b47fddc56c83091635c0dfd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f8:e7:39:c1:27:d3:c2:3f:48:7a:27:9f:9c: d1:c9:8e:54:fc:c9:98:ac:0a:8a:c7:01:4a:2d:15: bf:71:a7:38:ec:77:47:c5:4a:e8:be:a9:79:97:6e: de:f1:ec:83:d3:61:dd:42:73:e8:7b:32:4e:36:4c: e5:c6:5e:17:38:53:9e:8c:92:dc:74:77:b3:e2:b6: 41:e0:72:f6:e8:34:17:5a:b3:3b:ac:c3:a9:09:36: 59:a0:57:24:0f:bc:ad:80:25:e8:cb:73:cb:aa:af: 2a:23:9b:ad:a0:c8:15:21:92:74:91:81:75:e1:73: fe:98:2a:0b:70:ce:9d:18:5a:20:ab:c6:fc:e3:04: 7f:d5:2d:9f:bb:3b:04:f2:de:b6:a7:27:63:b4:a3: ef:c5:ac:44:94:69:b9:80:65:fa:89:f3:b4:a3:93: 68:64:b8:d4:83:93:22:22:df:b1:4a:c5:44:54:21: 0c:64:65:46:a9:ed:72:22:ce:49:3a:37:43:02:50: 34:a1:1f:d5:b0:ee:17:4c:91:71:3a:07:d2:58:3b: 14:cf:41:d2:89:31:a7:53:43:1c:92:65:1e:5a:a4: 66:b5:31:05:3d:51:11:a5:8d:ef:0c:40:83:97:d6: 18:33:3e:4d:01:cb:8d:30:1b:a4:7b:36:db:d0:57: e4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BF:7F:0F:A8:DB:A4:F9:B4:7F:DD:C5:6C:83:09:16:35:C0:DF:D4 X509v3 Authority Key Identifier: keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/EL9_D6jbpPm0f93FbIMJFjXA39Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.26.0/24 Signature Algorithm: sha256WithRSAEncryption 48:0e:1b:19:2c:46:04:d5:db:05:3b:11:61:f0:7c:ee:ce:8e: b7:08:a0:1b:df:f3:a0:18:d1:88:b4:29:37:a3:74:20:d3:8a: a0:15:3c:3a:f6:cd:5c:ae:ba:d1:82:fa:0d:5a:5e:bc:81:95: f1:b8:7e:29:84:0a:d8:de:7a:dc:05:7b:9b:77:ba:2c:c8:ae: 67:9e:02:c7:de:23:9d:d1:58:93:84:be:a9:2f:99:94:16:a8: 23:60:0e:80:f3:c8:49:f4:3c:cb:bf:14:dd:39:eb:06:01:1f: 0a:70:aa:b8:c1:7b:0e:03:ab:7a:20:db:40:5b:a8:94:fe:45: 90:04:f9:51:36:7a:7e:c6:28:51:62:66:f1:03:0b:29:b2:af: ce:bf:d2:92:70:e0:69:1b:59:1d:0c:49:df:fe:d7:d0:65:5e: 6b:a1:10:31:83:53:b8:35:0a:94:90:20:02:46:8b:5c:5e:60: ef:fd:d5:52:f4:41:7d:7c:54:76:5c:05:e3:17:8d:bc:18:4d: f0:a2:9d:cf:7e:63:98:dc:00:07:e0:d2:9d:62:ab:d9:96:80: e3:11:c4:90:d4:78:56:df:bc:db:32:0f:d1:49:1c:79:70:18: 26:6f:72:8c:eb:08:1e:ba:87:6d:d8:65:67:5b:df:ac:c4:66: 89:06:51:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wx0QLHgVyQQM/gsRDIEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl NTUxNDIwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGJmN2YwZmE4ZGJhNGY5YjQ3ZmRkYzU2YzgzMDkxNjM1YzBkZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfjnOcEn08I/SHonn5zRyY5U/MmY rAqKxwFKLRW/cac47HdHxUrovql5l27e8eyD02HdQnPoezJONkzlxl4XOFOejJLc dHez4rZB4HL26DQXWrM7rMOpCTZZoFckD7ytgCXoy3PLqq8qI5utoMgVIZJ0kYF1 4XP+mCoLcM6dGFogq8b84wR/1S2fuzsE8t62pydjtKPvxaxElGm5gGX6ifO0o5No ZLjUg5MiIt+xSsVEVCEMZGVGqe1yIs5JOjdDAlA0oR/VsO4XTJFxOgfSWDsUz0HS iTGnU0MckmUeWqRmtTEFPVERpY3vDECDl9YYMz5NAcuNMBukezbb0Ffk0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBC/fw+o26T5tH/dxWyDCRY1wN/UMB8GA1UdIwQY MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct YzgyM2NjOGYzODM3LzEvRUw5X0Q2amJwUG0wZjkzRmJJTUpGalhBMzlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3 LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYQaMA0G CSqGSIb3DQEBCwUAA4IBAQBIDhsZLEYE1dsFOxFh8Hzuzo63CKAb3/OgGNGItCk3 o3Qg04qgFTw69s1crrrRgvoNWl68gZXxuH4phArY3nrcBXubd7osyK5nngLH3iOd 0ViThL6pL5mUFqgjYA6A88hJ9DzLvxTdOesGAR8KcKq4wXsOA6t6INtAW6iU/kWQ BPlRNnp+xihRYmbxAwspsq/Ov9KScOBpG1kdDEnf/tfQZV5roRAxg1O4NQqUkCAC RotcXmDv/dVS9EF9fFR2XAXjF428GE3wop3PfmOY3AAH4NKdYqvZloDjEcSQ1HhW 37zbMg/RSRx5cBgmb3KM6wgeuodt2GVnW9+sxGaJBlE+ -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:54 2026 by rpki-client