This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/9wP7mpH_B0PGwWv5_AlRe4xldiA.roa File: 9wP7mpH_B0PGwWv5_AlRe4xldiA.roa (raw, json) Hash identifier: zYLWTc75j+s7gKIa+ebYI+LbuI7qKTL5YSAgcKHFymE= Subject key identifier: F7:03:FB:9A:91:FF:07:43:C6:C1:6B:F9:FC:09:51:7B:8C:65:76:20 Certificate issuer: /CN=f970049cba7f39aeed31d65313c7b953f3fda135 Certificate serial: 019B7E374CAB894A202C4452E819370AE6B7 Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/9wP7mpH_B0PGwWv5_AlRe4xldiA.roa Signing time: Fri 02 Jan 2026 10:18:31 +0000 ROA not before: Fri 02 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197317 IP address blocks: 91.219.152.0/22 maxlen: 24 2a07:ae40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4c:ab:89:4a:20:2c:44:52:e8:19:37:0a:e6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135 Validity Not Before: Jan 2 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f703fb9a91ff0743c6c16bf9fc09517b8c657620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:1a:31:24:45:fc:35:18:68:f0:b7:58:52: 0f:c2:00:10:64:89:48:81:40:30:90:cf:70:ec:90: 4f:0a:6b:88:10:db:7c:13:0e:81:52:7a:90:9c:85: 3d:15:6c:58:ee:86:8e:38:c6:fa:44:4c:56:e2:29: 80:e1:4a:71:99:2a:ff:9d:b8:e5:3b:42:53:c4:2b: b0:2f:5a:2a:e7:a0:ab:f5:bf:70:9f:c0:97:ce:e5: 18:3b:60:95:92:f2:f1:05:28:80:97:be:59:5a:04: 9a:af:02:7a:68:e6:6a:b2:34:14:ca:30:28:7f:67: 05:84:dc:74:e6:7e:a7:b7:b4:3d:b5:48:0f:ac:20: 5e:a5:bc:1e:d6:5c:e2:ef:41:3e:77:26:f0:20:5f: 86:34:b2:2f:b9:4b:28:9a:23:d4:a6:b1:34:69:f7: 4e:fc:7e:6c:e2:9c:25:40:47:46:27:10:ae:93:ec: 94:d0:9e:bd:73:e2:0a:b3:2d:65:37:c9:8c:eb:e0: c8:09:35:a5:95:5c:a4:bf:50:46:8c:b0:86:36:f0: 1e:48:96:4e:90:ce:4d:0b:1a:95:a6:c8:1e:50:5d: bb:56:0a:f4:5d:c5:12:cb:67:61:a5:40:1e:8e:93: 87:9b:84:b7:bd:3b:38:30:3c:e0:ef:c5:0f:93:a6: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:03:FB:9A:91:FF:07:43:C6:C1:6B:F9:FC:09:51:7B:8C:65:76:20 X509v3 Authority Key Identifier: keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/9wP7mpH_B0PGwWv5_AlRe4xldiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.219.152.0/22 IPv6: 2a07:ae40::/29 Signature Algorithm: sha256WithRSAEncryption 54:94:b5:9e:83:71:25:10:c8:67:2f:01:de:de:fd:79:5e:41: 3f:5a:7b:37:fe:52:6a:f6:54:25:9d:cb:ee:db:3a:b3:f2:c0: 30:21:ca:6b:08:99:32:27:38:18:23:90:03:71:a3:76:21:2b: a2:cd:16:75:34:3a:a0:38:fc:ee:ed:c0:92:db:d1:a8:a2:bb: e3:59:74:fe:bb:d6:db:b3:c3:ef:78:3b:e2:19:f0:43:df:89: 04:bf:6b:68:2c:c0:a1:9a:d7:84:21:5f:f9:3c:43:02:0e:ca: 08:09:18:95:97:84:68:b3:51:0b:86:11:03:65:09:20:3e:25: 87:35:0f:fa:08:b5:d6:ea:a2:79:cc:97:c8:bb:fa:43:49:11: c3:6b:48:a4:97:ee:b9:92:0d:03:e5:1d:da:b6:69:07:5c:29: 67:88:ef:bb:62:a5:b1:24:1e:55:98:ee:8d:ac:55:42:cf:39: 92:05:5e:4e:65:c8:94:09:8c:8c:95:6f:a1:d8:84:c2:63:09: fa:c6:c2:1a:7d:37:06:61:fa:83:c8:99:b0:6d:b9:8f:a5:f8: 5c:b1:c3:d1:0a:2f:7b:21:b2:8c:b0:40:d6:43:45:9e:4a:b8: 64:f9:f8:eb:ac:f3:38:c2:e1:67:ef:71:48:17:d5:84:94:53: 55:fe:7f:c7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+N0yriUogLERS6Bk3Cua3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NzAwNDljYmE3ZjM5YWVlZDMxZDY1MzEzYzdiOTUzZjNm ZGExMzUwHhcNMjYwMTAyMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzAzZmI5YTkxZmYwNzQzYzZjMTZiZjlmYzA5NTE3YjhjNjU3NjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdkaMSRF/DUYaPC3WFIPwgAQZIlI gUAwkM9w7JBPCmuIENt8Ew6BUnqQnIU9FWxY7oaOOMb6RExW4imA4UpxmSr/nbjl O0JTxCuwL1oq56Cr9b9wn8CXzuUYO2CVkvLxBSiAl75ZWgSarwJ6aOZqsjQUyjAo f2cFhNx05n6nt7Q9tUgPrCBepbwe1lzi70E+dybwIF+GNLIvuUsomiPUprE0afdO /H5s4pwlQEdGJxCuk+yU0J69c+IKsy1lN8mM6+DICTWllVykv1BGjLCGNvAeSJZO kM5NCxqVpsgeUF27Vgr0XcUSy2dhpUAejpOHm4S3vTs4MDzg78UPk6YLqQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPcD+5qR/wdDxsFr+fwJUXuMZXYgMB8GA1UdIwQY MBaAFPlwBJy6fzmu7THWUxPHuVPz/aE1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1YQUVuTHBfT2E3dE1kWlRFOGU1VV9QOW9UVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1 LTUyMWZhNDFkZmM5Ni8xLzl3UDdtcEhfQjBQR3dXdjVfQWxSZTR4bGRpQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTIvMTNmNWYxLTQ1YjYtNGJjMS1iNWE1LTUyMWZhNDFkZmM5 Ni8xLzEtWEFFbkxwX09hN3RNZFpURThlNVVfUDlvVFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAJb25gw DQQCAAIwBwMFAyoHrkAwDQYJKoZIhvcNAQELBQADggEBAFSUtZ6DcSUQyGcvAd7e /XleQT9aezf+Umr2VCWdy+7bOrPywDAhymsImTInOBgjkANxo3YhK6LNFnU0OqA4 /O7twJLb0aiiu+NZdP671tuzw+94O+IZ8EPfiQS/a2gswKGa14QhX/k8QwIOyggJ GJWXhGizUQuGEQNlCSA+JYc1D/oItdbqonnMl8i7+kNJEcNrSKSX7rmSDQPlHdq2 aQdcKWeI77tipbEkHlWY7o2sVULPOZIFXk5lyJQJjIyVb6HYhMJjCfrGwhp9NwZh +oPImbBtuY+l+Fyxw9EKL3shsoywQNZDRZ5KuGT5+Ous8zjC4WfvcUgX1YSUU1X+ f8c= -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:23 2026 by rpki-client