This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/X9jumdfIz8slVVJ95KsbkKlBsts.roa File: X9jumdfIz8slVVJ95KsbkKlBsts.roa (raw, json) Hash identifier: v+boiqNbQ/6V3FnAOTBdCBxnaWDx4FJXi35oVmtu8Vk= Subject key identifier: 5F:D8:EE:99:D7:C8:CF:CB:25:55:52:7D:E4:AB:1B:90:A9:41:B2:DB Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Certificate serial: 019B7F15BB304703121CFED5D28A3B40DF38 Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/X9jumdfIz8slVVJ95KsbkKlBsts.roa Signing time: Fri 02 Jan 2026 14:21:29 +0000 ROA not before: Fri 02 Jan 2026 14:21:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49934 IP address blocks: 195.77.132.0/22 maxlen: 22 195.77.132.0/23 maxlen: 23 195.77.132.0/24 maxlen: 24 195.77.133.0/24 maxlen: 24 195.77.134.0/23 maxlen: 23 195.77.134.0/24 maxlen: 24 195.77.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:bb:30:47:03:12:1c:fe:d5:d2:8a:3b:40:df:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1 Validity Not Before: Jan 2 14:21:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fd8ee99d7c8cfcb2555527de4ab1b90a941b2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:fe:df:a1:7d:c4:1f:bd:d2:63:ba:a4:f5: 44:06:6f:6b:e5:e2:3f:9f:7c:69:42:d1:51:36:49: 17:b2:43:16:2b:3a:3c:7d:0e:02:a1:24:7a:aa:01: e2:17:1c:ab:0b:59:73:de:54:18:6d:e9:cd:dc:62: dd:82:9f:23:94:fc:2e:83:61:11:2b:9b:53:4a:22: 31:a7:46:7e:0d:a7:02:db:bc:e7:6e:21:cd:8b:37: df:68:9c:08:05:30:74:16:d6:e7:43:e1:d0:35:e2: 57:29:cf:52:8b:e0:27:3a:45:77:33:e7:6a:b2:0e: aa:1c:5f:eb:76:fe:79:c3:a5:01:26:0f:b6:5e:3c: a8:e2:1d:50:71:e8:22:bb:4b:93:a3:04:e3:fe:9e: 05:88:59:63:8a:dc:bf:f1:d1:c2:75:af:8a:a0:a7: c5:14:46:ed:bc:7d:b0:a4:06:5a:ea:66:5e:0f:54: 61:23:d9:09:5a:e9:78:fd:bd:4b:bd:c8:2c:c8:e1: 97:df:d6:7b:a3:16:de:dc:5d:b0:f3:ea:af:0d:05: e8:15:ca:a2:6e:ab:e7:32:f4:ad:26:60:7b:a9:f0: 2f:30:9e:ce:fe:22:ba:8e:28:c5:29:a7:fd:6c:ac: d0:2c:7b:7e:42:72:80:a8:c4:b1:65:ed:64:06:86: da:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D8:EE:99:D7:C8:CF:CB:25:55:52:7D:E4:AB:1B:90:A9:41:B2:DB X509v3 Authority Key Identifier: keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/X9jumdfIz8slVVJ95KsbkKlBsts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.77.132.0/22 Signature Algorithm: sha256WithRSAEncryption 24:1e:51:39:86:fb:52:23:5a:5f:01:f9:f2:41:bf:1a:c2:7e: 26:af:da:5a:4e:06:cb:13:2a:d7:02:e4:77:1c:25:b6:d1:0d: 23:db:e3:d3:be:f1:ed:1d:05:79:77:12:a0:58:4a:2a:11:ba: 52:a2:65:f6:a1:62:96:fa:e2:a2:4f:b7:9b:2f:fc:e8:ae:ce: cf:9e:6e:e3:0f:2d:c0:f2:37:ea:87:90:47:de:6e:27:fe:61: a3:b3:f4:39:5a:dd:20:c2:93:09:6a:a9:fd:36:ec:62:40:05: 5d:6a:ef:17:d9:35:b1:96:3b:d0:bc:26:cb:d7:79:3a:fa:a9: 43:a1:30:f6:39:3a:37:e6:33:c9:2a:f1:47:06:02:17:60:c8: 09:48:d3:d0:71:46:96:67:74:d0:4a:f8:f0:d7:d7:59:45:be: d7:87:06:8a:44:4a:39:70:6e:2c:f1:d4:c7:01:c1:fd:09:03: 27:e6:c8:9b:af:9d:62:63:5b:f6:de:a1:2a:81:6d:0f:f1:43: 77:6f:b2:21:7e:78:ca:11:9d:b6:d9:34:55:d8:4a:5a:7b:63: d2:39:ea:1b:72:13:d2:e6:3f:c4:9b:e1:1f:db:24:8c:bc:55: 24:4e:85:0f:0e:57:87:b1:66:7a:ef:9a:31:b5:30:c7:1b:52: 41:75:73:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FbswRwMSHP7V0oo7QN84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5 NjdkYTEwHhcNMjYwMTAyMTQyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmQ4ZWU5OWQ3YzhjZmNiMjU1NTUyN2RlNGFiMWI5MGE5NDFiMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUb+36F9xB+90mO6pPVEBm9r5eI/ n3xpQtFRNkkXskMWKzo8fQ4CoSR6qgHiFxyrC1lz3lQYbenN3GLdgp8jlPwug2ER K5tTSiIxp0Z+DacC27znbiHNizffaJwIBTB0FtbnQ+HQNeJXKc9Si+AnOkV3M+dq sg6qHF/rdv55w6UBJg+2Xjyo4h1Qcegiu0uTowTj/p4FiFljity/8dHCda+KoKfF FEbtvH2wpAZa6mZeD1RhI9kJWul4/b1LvcgsyOGX39Z7oxbe3F2w8+qvDQXoFcqi bqvnMvStJmB7qfAvMJ7O/iK6jijFKaf9bKzQLHt+QnKAqMSxZe1kBobajQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/Y7pnXyM/LJVVSfeSrG5CpQbLbMB8GA1UdIwQY MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt NGJhMmY4ZjFmODNiLzEvWDlqdW1kZkl6OHNsVlZKOTVLc2JrS2xCc3RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw02EMA0G CSqGSIb3DQEBCwUAA4IBAQAkHlE5hvtSI1pfAfnyQb8awn4mr9paTgbLEyrXAuR3 HCW20Q0j2+PTvvHtHQV5dxKgWEoqEbpSomX2oWKW+uKiT7ebL/zors7Pnm7jDy3A 8jfqh5BH3m4n/mGjs/Q5Wt0gwpMJaqn9NuxiQAVdau8X2TWxljvQvCbL13k6+qlD oTD2OTo35jPJKvFHBgIXYMgJSNPQcUaWZ3TQSvjw19dZRb7XhwaKREo5cG4s8dTH AcH9CQMn5sibr51iY1v23qEqgW0P8UN3b7IhfnjKEZ222TRV2Epae2PSOeobchPS 5j/Em+Ef2ySMvFUkToUPDleHsWZ675oxtTDHG1JBdXPO -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:20 2026 by rpki-client