This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/m9orr3_HDB2VIxsnO3nw4fOWGlA.roa File: m9orr3_HDB2VIxsnO3nw4fOWGlA.roa (raw, json) Hash identifier: IDz4lKOdFmT1RLfeCHLt7gBIXRdFVo8h3QOhQHPZfWE= Subject key identifier: 9B:DA:2B:AF:7F:C7:0C:1D:95:23:1B:27:3B:79:F0:E1:F3:96:1A:50 Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a Certificate serial: 019B7C800BC23A07CF703548661191899D3F Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/m9orr3_HDB2VIxsnO3nw4fOWGlA.roa Signing time: Fri 02 Jan 2026 02:18:44 +0000 ROA not before: Fri 02 Jan 2026 02:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5386 IP address blocks: 62.61.0.0/20 maxlen: 20 62.61.0.0/21 maxlen: 21 62.61.8.0/21 maxlen: 21 195.170.224.0/19 maxlen: 19 195.170.224.0/20 maxlen: 20 195.170.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0b:c2:3a:07:cf:70:35:48:66:11:91:89:9d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a Validity Not Before: Jan 2 02:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bda2baf7fc70c1d95231b273b79f0e1f3961a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:48:6b:63:a3:a1:ac:eb:6e:f4:cb:e3:b9: 03:71:47:3c:ce:03:6f:b3:18:b4:72:d0:67:e8:da: ce:0b:9e:3c:42:75:b7:df:d1:48:22:78:83:0d:90: 40:11:fa:af:65:02:2f:29:74:5f:a5:c9:6d:f6:c7: 8a:95:86:50:a5:80:6a:ed:76:61:00:a8:73:41:f4: b5:82:08:82:88:0f:09:2d:80:c4:a2:30:2a:e7:d2: 67:05:09:6f:8d:57:37:e7:fa:eb:90:5e:68:ff:5a: 3b:74:b1:5d:98:15:36:60:07:07:03:94:8b:60:48: 2c:ee:dc:03:11:e6:d3:6f:ce:6f:3f:4c:d2:49:e3: cf:59:35:32:a0:fd:9e:5b:63:99:e4:bd:df:e6:57: cd:11:df:95:e5:51:6b:89:3d:38:04:df:71:f1:56: 06:d5:e9:6a:01:0d:31:50:08:fc:12:9e:80:4a:3a: 04:9b:24:ee:36:47:92:cf:b8:c4:bf:44:51:b5:9b: e1:1a:a5:36:57:93:45:ec:da:cd:9d:92:db:f8:c5: 72:d4:e9:3e:66:80:1e:40:de:1b:f9:8f:d3:31:d5: 02:43:0a:93:ae:2a:64:69:1c:99:8e:9e:00:93:35: b5:06:6c:ef:26:4f:2c:db:d4:2d:5b:ea:be:b2:94: 62:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DA:2B:AF:7F:C7:0C:1D:95:23:1B:27:3B:79:F0:E1:F3:96:1A:50 X509v3 Authority Key Identifier: keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/m9orr3_HDB2VIxsnO3nw4fOWGlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.61.0.0/20 195.170.224.0/19 Signature Algorithm: sha256WithRSAEncryption 2f:5a:b3:11:7d:fa:87:e1:99:9a:43:b8:2f:da:d3:b1:a9:5f: 20:f9:51:be:72:21:36:41:f3:54:2d:af:62:ee:ce:fa:f3:c4: 83:0a:c7:b5:09:5b:56:55:27:3c:3c:1b:46:7c:09:bd:63:68: 01:80:29:17:a3:7f:06:0d:95:c5:77:d0:a5:15:03:99:8f:95: cb:fc:3b:86:9a:17:31:37:19:5d:18:3b:1b:f7:a2:98:4d:be: 2e:75:76:76:6e:4d:c6:88:a3:13:3a:0c:85:6e:da:15:8f:cd: 76:3d:d6:0c:b3:db:c6:03:89:bd:1d:38:ce:e0:6b:25:11:9b: ad:08:70:2b:9c:8c:66:e3:4a:ae:a0:33:1f:ce:a8:9f:db:e1: 66:0f:b1:82:50:b9:5d:f2:bc:b0:f9:d8:0c:c2:40:3a:6e:00: 7a:34:ff:b0:82:f3:bf:53:0a:26:ac:3f:75:18:f1:08:fb:83: 1a:f9:e8:28:f5:5f:90:6b:e8:96:36:2e:a7:3c:20:7e:3f:06: 65:58:3d:79:04:b3:f3:4a:35:a5:fc:5a:19:ca:71:40:b6:85: 3c:36:64:d2:97:d1:c3:1f:9c:1c:f8:75:94:6c:4f:30:2d:6e: e8:61:a3:4a:b2:0f:37:a5:21:bc:43:1e:bc:0b:87:3a:33:c1: 5e:e4:d9:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gAvCOgfPcDVIZhGRiZ0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOGU4ZGY1YzAzMTEwNzExOGRhNjFmMjlhYjRmNDE5ZDI5 ZDVhOGEwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmRhMmJhZjdmYzcwYzFkOTUyMzFiMjczYjc5ZjBlMWYzOTYxYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfFIa2OjoazrbvTL47kDcUc8zgNv sxi0ctBn6NrOC548QnW339FIIniDDZBAEfqvZQIvKXRfpclt9seKlYZQpYBq7XZh AKhzQfS1ggiCiA8JLYDEojAq59JnBQlvjVc35/rrkF5o/1o7dLFdmBU2YAcHA5SL YEgs7twDEebTb85vP0zSSePPWTUyoP2eW2OZ5L3f5lfNEd+V5VFriT04BN9x8VYG 1elqAQ0xUAj8Ep6ASjoEmyTuNkeSz7jEv0RRtZvhGqU2V5NF7NrNnZLb+MVy1Ok+ ZoAeQN4b+Y/TMdUCQwqTripkaRyZjp4AkzW1BmzvJk8s29QtW+q+spRiZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJvaK69/xwwdlSMbJzt58OHzlhpQMB8GA1UdIwQY MBaAFB2OjfXAMRBxGNph8pq09BnSnVqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS81NWFjNjctOWM3Ni00ODkzLTg5YTUt YjFkMzhiMTNmZGE5LzEvbTlvcnIzX0hEQjJWSXhzbk8zbnc0Zk9XR2xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS81NWFjNjctOWM3Ni00ODkzLTg5YTUtYjFkMzhiMTNmZGE5 LzEvSFk2TjljQXhFSEVZMm1IeW1yVDBHZEtkV29vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEPj0AAwQF w6rgMA0GCSqGSIb3DQEBCwUAA4IBAQAvWrMRffqH4ZmaQ7gv2tOxqV8g+VG+ciE2 QfNULa9i7s7688SDCse1CVtWVSc8PBtGfAm9Y2gBgCkXo38GDZXFd9ClFQOZj5XL /DuGmhcxNxldGDsb96KYTb4udXZ2bk3GiKMTOgyFbtoVj812PdYMs9vGA4m9HTjO 4GslEZutCHArnIxm40quoDMfzqif2+FmD7GCULld8ryw+dgMwkA6bgB6NP+wgvO/ UwomrD91GPEI+4Ma+ego9V+Qa+iWNi6nPCB+PwZlWD15BLPzSjWl/FoZynFAtoU8 NmTSl9HDH5wc+HWUbE8wLW7oYaNKsg83pSG8Qx68C4c6M8Fe5Nmf -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:30 2026 by rpki-client