This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa File: 9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa (raw, json) Hash identifier: 9BXX00EqfHS9Z+w4cbgMB5Q/vF0Ya/E+TQ5+Mz+KYTQ= Subject key identifier: F6:9C:72:27:FE:57:2A:4D:7F:AF:05:99:F7:25:D5:77:4C:22:29:30 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019B7910D5B8946B33D979AB6B933A72B8FB Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa Signing time: Thu 01 Jan 2026 10:18:25 +0000 ROA not before: Thu 01 Jan 2026 10:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 84.247.110.0/24 maxlen: 24 89.149.15.0/24 maxlen: 24 89.149.42.0/24 maxlen: 24 89.149.43.0/24 maxlen: 24 89.149.44.0/24 maxlen: 24 89.149.45.0/24 maxlen: 24 89.149.46.0/24 maxlen: 24 89.149.47.0/24 maxlen: 24 89.149.48.0/24 maxlen: 24 89.149.52.0/24 maxlen: 24 89.149.53.0/24 maxlen: 24 89.149.56.0/24 maxlen: 24 89.149.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d5:b8:94:6b:33:d9:79:ab:6b:93:3a:72:b8:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jan 1 10:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f69c7227fe572a4d7faf0599f725d5774c222930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a2:72:93:08:88:bb:64:ee:b6:35:29:71:a5: 1b:3f:81:62:f2:22:f5:b3:ea:a6:56:5f:b0:22:ec: 57:67:3c:a6:ed:f3:ba:03:74:52:7a:47:f4:b1:4c: da:bb:0d:d6:dc:57:b9:a6:ce:9b:c5:e0:29:62:4f: 30:4e:88:92:f0:b0:a6:eb:88:2f:45:f2:a4:cc:3d: 54:92:54:11:df:9b:2a:47:21:21:b9:f9:b9:2b:bf: eb:6d:3d:13:0e:fd:25:b4:81:85:0f:11:97:06:ea: 3f:92:59:d5:89:32:38:e2:3b:d0:94:c0:b7:5a:58: 39:b7:8f:dd:04:0f:72:ac:cd:ba:b5:a1:ce:de:ff: a7:7b:38:b9:55:22:ea:a0:7f:38:da:72:4d:03:82: 35:31:73:80:df:4a:b5:21:ca:d5:80:ca:97:3d:e0: b4:ef:89:d3:31:37:4e:74:bf:bb:95:1a:d2:d6:c5: 25:01:f3:66:21:34:d0:8d:eb:f1:b5:18:c0:96:c2: d3:f9:ab:e4:74:67:14:3a:c5:af:ae:ce:cf:80:26: 1b:7e:66:d6:e0:a7:80:f2:b9:2c:9e:f3:0e:95:69: 0f:8a:0a:66:28:f8:1a:ea:2c:d6:3e:e6:8c:43:9e: 1a:f7:49:d9:fc:8f:26:2f:1e:12:31:1d:8c:af:40: eb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9C:72:27:FE:57:2A:4D:7F:AF:05:99:F7:25:D5:77:4C:22:29:30 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/9pxyJ_5XKk1_rwWZ9yXVd0wiKTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.110.0/24 89.149.15.0/24 89.149.42.0-89.149.48.255 89.149.52.0/23 89.149.56.0/24 89.149.62.0/24 Signature Algorithm: sha256WithRSAEncryption 29:4b:0c:51:04:95:f8:fc:5c:b3:4f:fb:69:1d:77:d8:a8:ce: 63:b3:a2:b7:19:9c:66:2f:d3:f6:a2:9d:01:6b:91:bc:4d:70: 29:75:9b:6a:25:62:ca:2f:98:2e:c9:70:1a:2c:2e:1e:40:74: 86:52:d3:56:2b:e2:b7:67:7d:1e:92:b1:39:71:7e:4e:2d:62: 33:eb:8c:a1:5a:28:8b:5e:51:14:30:e3:a3:e7:f9:0f:06:32: 7c:0b:23:95:dc:9f:2b:ea:d6:28:4f:71:0a:19:76:7a:ea:96: 0a:eb:83:19:ee:e4:1e:ba:c2:f6:5d:55:05:84:8a:6b:9f:7e: b2:1a:22:72:31:0b:ff:cf:df:99:80:9d:09:35:2d:59:72:3f: f6:7a:e8:5d:8b:c5:af:89:8f:0a:e4:5b:77:8c:6a:33:43:d2: a4:9b:ab:81:a5:97:39:b6:aa:bd:21:18:97:1d:03:49:82:b5: 68:80:d7:39:00:9e:70:46:f0:64:ee:b2:e3:a9:a6:0e:b3:1a: 5c:91:a0:a8:02:ad:c7:40:c9:4a:48:2e:8a:74:7f:1a:3d:9e: e5:2d:1a:8d:15:fb:e2:77:c7:5b:8d:81:97:e2:e3:1b:69:00: d0:fb:31:9d:46:e0:56:58:ea:e0:f2:a7:23:cf:83:57:63:89: 67:1a:f0:bf -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt5ENW4lGsz2Xmra5M6crj7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwMTAxMTAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjljNzIyN2ZlNTcyYTRkN2ZhZjA1OTlmNzI1ZDU3NzRjMjIyOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36JykwiIu2TutjUpcaUbP4Fi8iL1 s+qmVl+wIuxXZzym7fO6A3RSekf0sUzauw3W3Fe5ps6bxeApYk8wToiS8LCm64gv RfKkzD1UklQR35sqRyEhufm5K7/rbT0TDv0ltIGFDxGXBuo/klnViTI44jvQlMC3 Wlg5t4/dBA9yrM26taHO3v+nezi5VSLqoH842nJNA4I1MXOA30q1IcrVgMqXPeC0 74nTMTdOdL+7lRrS1sUlAfNmITTQjevxtRjAlsLT+avkdGcUOsWvrs7PgCYbfmbW 4KeA8rksnvMOlWkPigpmKPga6izWPuaMQ54a90nZ/I8mLx4SMR2Mr0DrEQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFPaccif+VypNf68Fmfcl1XdMIikwMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvOXB4eUpfNVhLazFfcndXWjl5WFZkMHdpS1RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAVPduAwQA WZUPMAwDBAFZlSoDBABZlTADBAFZlTQDBABZlTgDBABZlT4wDQYJKoZIhvcNAQEL BQADggEBAClLDFEElfj8XLNP+2kdd9iozmOzorcZnGYv0/ainQFrkbxNcCl1m2ol YsovmC7JcBosLh5AdIZS01Yr4rdnfR6SsTlxfk4tYjPrjKFaKIteURQw46Pn+Q8G MnwLI5Xcnyvq1ihPcQoZdnrqlgrrgxnu5B66wvZdVQWEimuffrIaInIxC//P35mA nQk1LVlyP/Z66F2Lxa+JjwrkW3eMajND0qSbq4Gllzm2qr0hGJcdA0mCtWiA1zkA nnBG8GTusuOppg6zGlyRoKgCrcdAyUpILop0fxo9nuUtGo0V++J3x1uNgZfi4xtp AND7MZ1G4FZY6uDypyPPg1djiWca8L8= -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:45 2026 by rpki-client