This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa File: 9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa (raw, json) Hash identifier: NsC3+Fupa1mo3BaWG6ctFYcneaqQ6slJ0dPljJ/QMXI= Subject key identifier: F4:54:EB:AA:C0:B2:10:05:24:87:86:0F:AE:D9:EF:5D:8F:D7:E2:5D Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C670DD77630C2F38F74D74D9EAFCCD Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25206 IP address blocks: 46.35.170.0/23 maxlen: 24 95.158.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:70:dd:77:63:0c:2f:38:f7:4d:74:d9:ea:fc:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f454ebaac0b210052487860faed9ef5d8fd7e25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2a:a1:1d:e6:52:49:78:54:b4:3a:1d:79:73: ec:d4:f1:e3:50:b0:72:00:40:98:1b:21:51:d5:89: d0:83:a1:f1:bf:ad:2e:91:c7:b9:f7:08:d6:57:13: 34:79:35:df:af:ee:3a:e4:4f:3e:96:22:54:1f:92: d2:3a:10:1d:e3:82:ce:44:9c:63:a8:c4:0e:2f:3e: 2e:3d:d7:ba:64:1f:d5:0e:2d:82:7f:c6:b3:65:78: 48:28:1d:84:a2:7c:c9:81:80:41:16:97:f6:45:74: d7:fe:9e:3f:d5:07:cc:28:3e:7f:dd:0c:db:72:97: a7:5b:41:34:25:f5:0f:78:91:9b:d8:a2:51:bd:4a: fb:1e:97:bf:18:6a:b5:f5:ae:c2:3f:93:de:e4:e2: 2f:67:39:b0:fc:7e:ca:e0:51:cc:6b:41:82:6e:a7: 2e:78:f8:79:31:5c:d2:d7:c6:59:d5:b2:91:67:ac: 5f:90:3d:d7:5a:55:17:5f:c5:bd:22:cd:bf:da:57: 1c:44:00:3b:50:69:67:1c:7f:48:b0:24:fe:c2:db: bc:0e:f1:fe:27:40:06:8c:c4:9a:fa:a3:1b:84:88: f6:be:ce:38:32:37:07:2f:4f:fb:ce:1d:87:47:74: ad:2b:88:14:87:4c:3f:2d:d2:44:45:3f:33:37:e0: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:54:EB:AA:C0:B2:10:05:24:87:86:0F:AE:D9:EF:5D:8F:D7:E2:5D X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/9FTrqsCyEAUkh4YPrtnvXY_X4l0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.35.170.0/23 95.158.168.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:a8:75:dd:94:88:78:74:2c:1a:d9:37:90:bf:7c:8a:08:1e: cb:79:95:6e:18:bc:18:ce:8c:31:38:be:d8:c8:61:3f:91:4f: 5b:18:0d:93:5d:c0:88:20:82:fa:29:43:34:41:14:e2:a7:a3: b2:f6:6c:37:21:93:7a:5f:56:9e:b9:3c:19:15:d0:69:9c:ec: b9:a7:eb:70:b0:95:ca:94:c3:c3:6b:46:b5:10:44:c4:0a:89: 08:b9:63:9d:f1:fa:6b:d2:51:df:62:07:3a:8c:b0:7d:ae:5e: 9b:22:16:53:b9:33:90:3b:41:b0:a1:70:79:b2:e1:91:2f:6f: 87:61:f1:b9:27:3b:68:93:d7:9b:bd:45:88:83:ba:e1:35:03: 8a:21:8d:19:4a:01:f6:0d:ba:8a:a8:f5:5c:41:be:ec:ee:53: 45:02:2d:19:e4:22:5a:f3:a0:c8:66:3c:7c:58:ba:e0:55:8b: eb:e7:a6:20:0d:ab:e4:a8:a3:d4:66:56:91:97:33:ca:18:83: cd:b3:9d:14:a0:9c:f1:da:d8:8f:de:b0:6c:e6:db:16:3e:67: 14:7a:4a:e8:d2:4c:86:2b:98:9d:b7:c3:3f:f2:c3:e4:1e:e7: 1d:f9:f5:33:d8:71:e7:e7:d0:5d:ca:c3:0c:33:ed:6d:b2:33: e4:eb:26:1a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xnDdd2MMLzj3TXTZ6vzNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDU0ZWJhYWMwYjIxMDA1MjQ4Nzg2MGZhZWQ5ZWY1ZDhmZDdlMjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSqhHeZSSXhUtDodeXPs1PHjULBy AECYGyFR1YnQg6Hxv60ukce59wjWVxM0eTXfr+465E8+liJUH5LSOhAd44LORJxj qMQOLz4uPde6ZB/VDi2Cf8azZXhIKB2EonzJgYBBFpf2RXTX/p4/1QfMKD5/3Qzb cpenW0E0JfUPeJGb2KJRvUr7Hpe/GGq19a7CP5Pe5OIvZzmw/H7K4FHMa0GCbqcu ePh5MVzS18ZZ1bKRZ6xfkD3XWlUXX8W9Is2/2lccRAA7UGlnHH9IsCT+wtu8DvH+ J0AGjMSa+qMbhIj2vs44MjcHL0/7zh2HR3StK4gUh0w/LdJERT8zN+C7YwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPRU66rAshAFJIeGD67Z712P1+JdMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvOUZUcnFzQ3lFQVVraDRZUHJ0bnZYWV9YNGwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLiOqAwQA X56oMA0GCSqGSIb3DQEBCwUAA4IBAQCeqHXdlIh4dCwa2TeQv3yKCB7LeZVuGLwY zowxOL7YyGE/kU9bGA2TXcCIIIL6KUM0QRTip6Oy9mw3IZN6X1aeuTwZFdBpnOy5 p+twsJXKlMPDa0a1EETECokIuWOd8fpr0lHfYgc6jLB9rl6bIhZTuTOQO0GwoXB5 suGRL2+HYfG5Jztok9ebvUWIg7rhNQOKIY0ZSgH2DbqKqPVcQb7s7lNFAi0Z5CJa 86DIZjx8WLrgVYvr56YgDavkqKPUZlaRlzPKGIPNs50UoJzx2tiP3rBs5tsWPmcU ekro0kyGK5idt8M/8sPkHucd+fUz2HHn59BdysMMM+1tsjPk6yYa -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:26 2026 by rpki-client