This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/9e__qGyQtHSbfB8cCFuaShvSnmA.roa File: 9e__qGyQtHSbfB8cCFuaShvSnmA.roa (raw, json) Hash identifier: 3iuCXQllyeZX2xf5zOtDaRap97ynVvtPGZuAfarFsMQ= Subject key identifier: F5:EF:FF:A8:6C:90:B4:74:9B:7C:1F:1C:08:5B:9A:4A:1B:D2:9E:60 Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989 Certificate serial: 019B7E383550BEE124F96984C97A10572D82 Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/9e__qGyQtHSbfB8cCFuaShvSnmA.roa Signing time: Fri 02 Jan 2026 10:19:31 +0000 ROA not before: Fri 02 Jan 2026 10:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25581 IP address blocks: 45.81.12.0/22 maxlen: 22 45.90.8.0/23 maxlen: 23 91.207.130.0/23 maxlen: 23 185.34.148.0/22 maxlen: 22 185.34.149.0/24 maxlen: 24 185.170.216.0/21 maxlen: 21 2a00:da60::/32 maxlen: 32 2a00:da60:b01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:35:50:be:e1:24:f9:69:84:c9:7a:10:57:2d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989 Validity Not Before: Jan 2 10:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5efffa86c90b4749b7c1f1c085b9a4a1bd29e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f6:fc:a5:f8:00:a9:c9:12:73:eb:30:9c:91: 30:69:f4:2d:d7:9c:64:00:58:2e:68:18:e4:9c:1d: c1:83:3c:3b:1f:aa:15:26:ee:50:e8:84:4f:6b:9d: 99:83:cf:48:e3:95:68:76:4b:1e:50:b3:5d:ab:4b: 1f:40:88:6d:09:f5:22:1c:96:8e:55:27:1b:f2:03: 23:e7:a0:51:27:08:be:6f:19:18:38:20:de:40:5c: 5a:47:e6:6e:f6:bf:70:3f:5e:51:24:4d:9b:03:5b: 13:a9:7f:de:27:1b:a3:49:bf:b6:0b:03:43:f3:78: ae:ce:ce:00:2a:90:00:51:9a:23:0e:d4:bb:5e:cd: b3:81:09:e5:36:e4:d4:9f:89:34:be:7f:c5:43:93: be:c8:83:48:67:0b:a3:c7:1c:81:56:b6:73:df:58: 9f:1b:98:f5:48:8a:3e:76:e2:54:7d:04:cb:29:fd: 41:79:54:50:03:85:8e:e6:9c:ed:48:74:41:01:17: ec:18:ba:cc:67:7a:b2:bc:bf:86:9b:dc:99:b9:da: 35:ec:6b:fd:ac:3c:34:53:b2:cf:3c:f6:9e:d2:28: e1:2b:f9:89:74:7b:fb:7d:b1:93:7d:42:5b:83:58: 14:25:49:09:c0:38:dc:34:4c:ee:05:1b:9c:a5:52: ab:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EF:FF:A8:6C:90:B4:74:9B:7C:1F:1C:08:5B:9A:4A:1B:D2:9E:60 X509v3 Authority Key Identifier: keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/9e__qGyQtHSbfB8cCFuaShvSnmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.12.0/22 45.90.8.0/23 91.207.130.0/23 185.34.148.0/22 185.170.216.0/21 IPv6: 2a00:da60::/32 Signature Algorithm: sha256WithRSAEncryption 87:a6:8a:90:5d:1d:2d:30:73:91:e5:6d:0a:8f:96:07:c0:07: 98:f5:a0:54:b9:43:cd:29:15:56:0f:8c:a3:00:04:a9:9e:d5: aa:16:f2:f9:91:7d:83:93:b8:6a:77:41:75:aa:3c:25:e3:1d: 1e:5d:05:2e:8a:25:66:b3:aa:49:c1:3d:54:d9:36:fd:71:82: 3f:da:1d:cf:30:5f:3a:c1:53:d5:8e:3f:46:fd:99:65:df:e1: f8:64:be:b7:83:c2:d9:2d:a6:42:3d:15:a2:aa:ee:98:9d:94: b9:f7:0f:da:72:7e:b1:dd:1d:45:e4:84:c6:3a:54:32:7f:3c: b6:67:84:09:8a:7f:d0:23:7e:0f:2a:41:1c:26:b9:cd:b9:32: 52:99:3f:1b:3a:b1:67:a1:e1:03:ad:41:ea:cb:72:92:07:a5: 60:2d:4e:62:cf:5e:44:04:97:13:fc:36:36:d4:10:71:95:d0: 55:1d:4a:b3:34:79:b8:14:91:91:fd:14:83:5c:8a:70:26:d1: 5f:aa:be:61:73:ee:5d:1f:e1:58:40:9b:87:fe:6b:39:05:6e: 1d:69:2f:25:7f:aa:bb:06:02:b6:93:9c:d5:24:19:a9:6c:24: e6:46:68:07:90:40:67:e8:87:a3:6d:c4:da:db:b1:2c:ab:26: 28:6b:fc:61 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt+ODVQvuEk+WmEyXoQVy2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiY2RkMTE3ZWFjNzU3YjZmOGYzOTQyODY1M2FlMTI1MDhj YzY5ODkwHhcNMjYwMTAyMTAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWVmZmZhODZjOTBiNDc0OWI3YzFmMWMwODViOWE0YTFiZDI5ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfb8pfgAqckSc+swnJEwafQt15xk AFguaBjknB3Bgzw7H6oVJu5Q6IRPa52Zg89I45VodkseULNdq0sfQIhtCfUiHJaO VScb8gMj56BRJwi+bxkYOCDeQFxaR+Zu9r9wP15RJE2bA1sTqX/eJxujSb+2CwND 83iuzs4AKpAAUZojDtS7Xs2zgQnlNuTUn4k0vn/FQ5O+yINIZwujxxyBVrZz31if G5j1SIo+duJUfQTLKf1BeVRQA4WO5pztSHRBARfsGLrMZ3qyvL+Gm9yZudo17Gv9 rDw0U7LPPPae0ijhK/mJdHv7fbGTfUJbg1gUJUkJwDjcNEzuBRucpVKrBwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFPXv/6hskLR0m3wfHAhbmkob0p5gMB8GA1UdIwQY MBaAFPvN0Rfqx1e2+POUKGU64SUIzGmJMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS04M1JGLXJIVjdiNDg1UW9aVHJoSlFqTWFZay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIvOWFhOTlkLWJlNDMtNGQ3NC1hZmM5 LTk2NDQyNWMxOGM2Zi8xLzllX19xR3lRdEhTYmZCOGNDRnVhU2h2U25tQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWIvOWFhOTlkLWJlNDMtNGQ3NC1hZmM5LTk2NDQyNWMxOGM2 Zi8xLzEtODNSRi1ySFY3YjQ4NVFvWlRyaEpRak1hWWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4DBAItUQwD BAEtWggDBAFbz4IDBAK5IpQDBAO5qtgwDQQCAAIwBwMFACoA2mAwDQYJKoZIhvcN AQELBQADggEBAIemipBdHS0wc5HlbQqPlgfAB5j1oFS5Q80pFVYPjKMABKme1aoW 8vmRfYOTuGp3QXWqPCXjHR5dBS6KJWazqknBPVTZNv1xgj/aHc8wXzrBU9WOP0b9 mWXf4fhkvreDwtktpkI9FaKq7pidlLn3D9pyfrHdHUXkhMY6VDJ/PLZnhAmKf9Aj fg8qQRwmuc25MlKZPxs6sWeh4QOtQerLcpIHpWAtTmLPXkQElxP8NjbUEHGV0FUd SrM0ebgUkZH9FINcinAm0V+qvmFz7l0f4VhAm4f+azkFbh1pLyV/qrsGAraTnNUk GalsJOZGaAeQQGfoh6NtxNrbsSyrJihr/GE= -----END CERTIFICATE-----Generated at Mon Jan 26 15:33:51 2026 by rpki-client