This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/9Zo27dHF-vw_0K466CifKnlKYa0.roa File: 9Zo27dHF-vw_0K466CifKnlKYa0.roa (raw, json) Hash identifier: mQvlsq1h1CY3hlUWwc5QZHG7R4dpxOgO9TKLwqyOFcE= Subject key identifier: F5:9A:36:ED:D1:C5:FA:FC:3F:D0:AE:3A:E8:28:9F:2A:79:4A:61:AD Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135 Certificate serial: 019B7D5BA2ADE2CD6775FDB20AF6F0E365B2 Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/9Zo27dHF-vw_0K466CifKnlKYa0.roa Signing time: Fri 02 Jan 2026 06:18:35 +0000 ROA not before: Fri 02 Jan 2026 06:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25627 IP address blocks: 79.170.64.0/22 maxlen: 22 79.170.64.0/23 maxlen: 23 79.170.65.0/24 maxlen: 24 79.170.66.0/23 maxlen: 23 79.170.68.0/22 maxlen: 22 79.170.68.0/23 maxlen: 23 79.170.69.0/24 maxlen: 25 79.170.70.0/23 maxlen: 23 79.170.70.0/24 maxlen: 24 79.170.71.0/24 maxlen: 26 87.237.80.0/23 maxlen: 23 87.237.80.0/24 maxlen: 24 87.237.81.0/24 maxlen: 24 87.237.82.0/23 maxlen: 23 87.237.82.0/24 maxlen: 24 87.237.83.0/24 maxlen: 24 87.237.84.0/22 maxlen: 22 87.237.84.0/24 maxlen: 24 87.237.86.0/24 maxlen: 24 87.237.87.0/24 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:a2:ad:e2:cd:67:75:fd:b2:0a:f6:f0:e3:65:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135 Validity Not Before: Jan 2 06:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f59a36edd1c5fafc3fd0ae3ae8289f2a794a61ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:eb:04:37:f4:db:88:68:cb:00:42:4d:13: c5:18:31:3b:cb:24:d7:4f:e9:93:ef:7c:23:ce:0b: 95:ec:7e:16:e6:68:ce:af:4a:31:c0:0e:e9:58:6d: 76:16:5a:f0:af:b5:7c:71:e0:ad:36:2c:6c:72:33: 06:cf:0c:85:4d:40:04:6b:ff:19:a9:14:a8:98:96: 2f:7d:91:66:9e:38:e6:de:5a:b0:04:c6:75:e0:43: 57:de:95:94:f5:f9:7e:36:c5:21:05:02:99:3c:81: ef:d7:14:63:51:16:2c:33:7b:37:4f:13:91:41:d9: 96:f1:2d:f9:2b:df:c8:42:9e:a3:6f:5a:f7:d3:14: 4d:d0:b5:f2:84:23:d3:21:d2:e8:45:9a:d2:3b:3a: 36:94:3c:6d:db:46:14:a0:3a:1b:91:fe:56:fb:8b: a8:97:29:75:14:a0:96:11:98:75:20:97:4f:63:fe: 21:de:14:aa:65:2e:5c:ce:aa:72:82:8d:66:9e:6e: b2:ee:d1:7d:95:84:de:ec:4f:83:2a:ba:d4:58:4d: 32:90:93:48:d9:6a:f4:38:e9:fc:d0:78:4f:13:09: 9b:35:bc:f1:10:f6:c8:5d:f2:53:55:13:cc:2e:8a: 60:07:78:8f:47:e3:e2:1c:82:bc:7f:0b:d9:b2:db: aa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9A:36:ED:D1:C5:FA:FC:3F:D0:AE:3A:E8:28:9F:2A:79:4A:61:AD X509v3 Authority Key Identifier: keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/9Zo27dHF-vw_0K466CifKnlKYa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.64.0/21 87.237.80.0/21 Signature Algorithm: sha256WithRSAEncryption 57:77:80:7d:3b:b7:5b:85:15:9d:fb:4e:d5:b8:72:97:af:f0: cd:40:2f:aa:d5:1a:5e:d3:23:89:da:75:2a:cf:ca:01:b7:7d: 66:c7:ba:bf:3d:0e:0a:16:eb:d4:45:f1:d7:2c:96:bb:90:a2: 4b:8f:3c:03:82:d5:73:63:42:c8:a4:b6:81:b2:15:f3:ef:ad: 05:0e:e4:15:05:10:62:ee:c6:20:88:bc:e4:2b:56:94:e4:30: f8:70:82:33:19:99:ee:b5:ba:5d:81:18:1a:d9:e0:dc:5f:e8: 49:9c:8e:6e:43:9f:4c:11:b2:a5:68:dd:e4:17:f9:12:78:d5: c0:f2:fb:af:85:40:5d:8e:1d:ac:1c:d3:d1:ae:c0:66:4c:7c: 8e:3b:df:36:d0:8b:60:a8:ef:d9:6f:b1:8d:06:77:4f:42:9f: 71:6c:d2:d4:7e:a4:27:32:b1:97:00:60:62:22:75:d5:ed:aa: a9:0e:76:ad:7d:3c:62:33:f1:e5:5d:18:4b:2f:a1:a2:f1:b8: a0:76:e0:36:1c:e6:5f:11:15:da:d4:c7:8f:8e:94:2b:b0:4a: 9f:50:51:bd:f3:12:c9:ee:cf:1b:b6:35:1b:94:7d:72:62:66: a8:05:b3:b2:29:d6:77:8a:5f:e1:8e:6f:91:fa:80:0e:d9:da: 0d:2e:b0:c6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9W6Kt4s1ndf2yCvbw42WyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlZDM1M2UyZjVkMzE4YzM0ODc3MmE4ZmYxMDVhYTcwNzE5 ZTQxMzUwHhcNMjYwMTAyMDYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTlhMzZlZGQxYzVmYWZjM2ZkMGFlM2FlODI4OWYyYTc5NGE2MWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM3rBDf024hoywBCTRPFGDE7yyTX T+mT73wjzguV7H4W5mjOr0oxwA7pWG12Flrwr7V8ceCtNixscjMGzwyFTUAEa/8Z qRSomJYvfZFmnjjm3lqwBMZ14ENX3pWU9fl+NsUhBQKZPIHv1xRjURYsM3s3TxOR QdmW8S35K9/IQp6jb1r30xRN0LXyhCPTIdLoRZrSOzo2lDxt20YUoDobkf5W+4uo lyl1FKCWEZh1IJdPY/4h3hSqZS5czqpygo1mnm6y7tF9lYTe7E+DKrrUWE0ykJNI 2Wr0OOn80HhPEwmbNbzxEPbIXfJTVRPMLopgB3iPR+PiHIK8fwvZstuqZQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPWaNu3Rxfr8P9CuOugonyp5SmGtMB8GA1UdIwQY MBaAFN7TU+L10xjDSHcqj/EFqnBxnkE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgt NGU4NWRhYmQ2NDc0LzEvOVpvMjdkSEYtdndfMEs0NjZDaWZLbmxLWWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jYmFjY2UtZWZiZi00ZjMyLThkODgtNGU4NWRhYmQ2NDc0 LzEvM3ROVDR2WFRHTU5JZHlxUDhRV3FjSEdlUVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDT6pAAwQD V+1QMA0GCSqGSIb3DQEBCwUAA4IBAQBXd4B9O7dbhRWd+07VuHKXr/DNQC+q1Rpe 0yOJ2nUqz8oBt31mx7q/PQ4KFuvURfHXLJa7kKJLjzwDgtVzY0LIpLaBshXz760F DuQVBRBi7sYgiLzkK1aU5DD4cIIzGZnutbpdgRga2eDcX+hJnI5uQ59MEbKlaN3k F/kSeNXA8vuvhUBdjh2sHNPRrsBmTHyOO9820ItgqO/Zb7GNBndPQp9xbNLUfqQn MrGXAGBiInXV7aqpDnatfTxiM/HlXRhLL6Gi8bigduA2HOZfERXa1MePjpQrsEqf UFG98xLJ7s8btjUblH1yYmaoBbOyKdZ3il/hjm+R+oAO2doNLrDG -----END CERTIFICATE-----Generated at Sun Jan 25 15:00:08 2026 by rpki-client