This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/SI9TodfQSJlWWZb8yhro2MaPaJk.roa File: SI9TodfQSJlWWZb8yhro2MaPaJk.roa (raw, json) Hash identifier: aM6e75oF3jXWEd+YrXB57ke/b4MdIeNCamy978/v5fQ= Subject key identifier: 48:8F:53:A1:D7:D0:48:99:56:59:96:FC:CA:1A:E8:D8:C6:8F:68:99 Certificate issuer: /CN=ead799026094d60516b527d842b6166805668e9e Certificate serial: 019B7F15486E8196CD5414C6F3ACF1E93875 Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/SI9TodfQSJlWWZb8yhro2MaPaJk.roa Signing time: Fri 02 Jan 2026 14:20:59 +0000 ROA not before: Fri 02 Jan 2026 14:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42880 IP address blocks: 84.246.176.0/21 maxlen: 21 84.246.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:48:6e:81:96:cd:54:14:c6:f3:ac:f1:e9:38:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ead799026094d60516b527d842b6166805668e9e Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=488f53a1d7d04899565996fcca1ae8d8c68f6899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a2:3e:24:72:fc:6c:d6:b5:bc:61:f8:af:bc: e1:c1:e0:96:d8:8c:4d:38:66:87:98:03:69:b3:d2: 60:a5:33:d2:cf:fb:f5:84:74:b8:3c:04:dc:30:fc: 6b:0f:97:95:48:79:d8:6b:78:5f:d0:ce:49:ee:f3: 08:7a:e2:1a:42:7f:37:ef:96:53:1f:df:f0:94:36: 82:e8:be:4c:c4:2b:5f:f0:85:20:ce:f0:cb:93:eb: 26:9d:4e:aa:6a:16:99:e1:dd:8d:ab:97:bc:42:a1: 7e:0e:2d:d9:28:dc:93:d5:9a:e9:a2:ae:00:c6:04: 24:c0:fa:3b:9c:78:d6:fd:03:45:ba:43:39:ad:70: 0c:0e:f9:f4:42:61:16:eb:87:74:37:eb:2a:86:52: 49:d5:eb:0f:40:f3:ca:53:09:91:ed:86:6a:88:01: e9:13:2d:69:3d:33:c9:3d:b3:4d:04:88:74:b2:3c: e8:4c:27:da:d9:5a:85:65:e4:03:20:48:c9:1d:52: 22:6c:2b:4e:27:71:3c:f5:5e:c4:ab:20:fe:33:5c: 00:4e:df:73:2c:5e:d5:13:70:ea:06:f9:37:85:df: 12:33:b9:de:1f:75:fa:ad:01:7f:8b:73:67:61:1e: 8a:94:b0:5c:43:8a:f1:9a:6c:2d:7b:f5:0a:d4:46: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8F:53:A1:D7:D0:48:99:56:59:96:FC:CA:1A:E8:D8:C6:8F:68:99 X509v3 Authority Key Identifier: keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/SI9TodfQSJlWWZb8yhro2MaPaJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.176.0/21 Signature Algorithm: sha256WithRSAEncryption 89:db:ec:1e:bd:c8:41:21:af:7a:06:16:bf:38:2c:09:b7:a1: 07:5b:a5:8b:4b:ea:07:c5:53:73:f4:f5:fa:44:02:7d:90:b7: 4c:5a:f5:b2:8b:06:15:59:34:06:89:ac:25:83:99:56:13:73: e7:76:cc:14:57:63:87:58:dc:a7:20:86:ee:07:d4:32:2a:32: d8:53:3b:b5:39:a7:7a:1b:ac:84:07:96:be:63:d4:49:67:fb: c5:ef:d8:39:13:23:0d:d7:47:2b:66:00:46:10:cb:70:65:d0: a3:5d:34:61:1c:87:5f:ef:68:bc:cd:32:17:3f:11:b2:09:e4: e1:04:f4:f9:5d:ed:b2:9c:22:9e:b1:b4:1b:4a:29:c2:c3:f5: 45:75:fb:7d:4a:6d:70:b8:d5:28:4e:69:d4:38:71:7a:55:38: af:37:3e:dd:68:00:16:4f:57:74:f6:9d:28:94:0f:bf:e5:45: 58:bc:bf:b8:01:8c:7d:d1:86:b4:1b:d1:96:ee:70:66:6f:c7: 2f:de:17:90:0f:12:2f:24:c5:8b:eb:7b:c5:b0:b9:69:bf:d6: f8:49:90:f3:9e:f9:71:52:fe:d5:1f:b5:26:22:9f:b0:60:57: b2:39:a4:c9:40:54:74:21:6f:a6:0a:9c:c5:4b:4d:8c:ac:cb: cf:1b:b6:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FUhugZbNVBTG86zx6Th1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhZDc5OTAyNjA5NGQ2MDUxNmI1MjdkODQyYjYxNjY4MDU2 NjhlOWUwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODhmNTNhMWQ3ZDA0ODk5NTY1OTk2ZmNjYTFhZThkOGM2OGY2ODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6I+JHL8bNa1vGH4r7zhweCW2IxN OGaHmANps9JgpTPSz/v1hHS4PATcMPxrD5eVSHnYa3hf0M5J7vMIeuIaQn8375ZT H9/wlDaC6L5MxCtf8IUgzvDLk+smnU6qahaZ4d2Nq5e8QqF+Di3ZKNyT1Zrpoq4A xgQkwPo7nHjW/QNFukM5rXAMDvn0QmEW64d0N+sqhlJJ1esPQPPKUwmR7YZqiAHp Ey1pPTPJPbNNBIh0sjzoTCfa2VqFZeQDIEjJHVIibCtOJ3E89V7EqyD+M1wATt9z LF7VE3DqBvk3hd8SM7neH3X6rQF/i3NnYR6KlLBcQ4rxmmwte/UK1EY8BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEiPU6HX0EiZVlmW/Moa6NjGj2iZMB8GA1UdIwQY MBaAFOrXmQJglNYFFrUn2EK2FmgFZo6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnRlWkFtQ1UxZ1VXdFNmWVFyWVdhQVZtanA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTg3MGYtODY2Yy00NDIwLWFkMDgt MzBjOWUyMDJlOTk1LzEvU0k5VG9kZlFTSmxXV1piOHlocm8yTWFQYUprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xOTg3MGYtODY2Yy00NDIwLWFkMDgtMzBjOWUyMDJlOTk1 LzEvNnRlWkFtQ1UxZ1VXdFNmWVFyWVdhQVZtanA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVPawMA0G CSqGSIb3DQEBCwUAA4IBAQCJ2+wevchBIa96Bha/OCwJt6EHW6WLS+oHxVNz9PX6 RAJ9kLdMWvWyiwYVWTQGiawlg5lWE3PndswUV2OHWNynIIbuB9QyKjLYUzu1Oad6 G6yEB5a+Y9RJZ/vF79g5EyMN10crZgBGEMtwZdCjXTRhHIdf72i8zTIXPxGyCeTh BPT5Xe2ynCKesbQbSinCw/VFdft9Sm1wuNUoTmnUOHF6VTivNz7daAAWT1d09p0o lA+/5UVYvL+4AYx90Ya0G9GW7nBmb8cv3heQDxIvJMWL63vFsLlpv9b4SZDznvlx Uv7VH7UmIp+wYFeyOaTJQFR0IW+mCpzFS02MrMvPG7aw -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:26 2026 by rpki-client