This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9mJ_jPfo-pyvEX3fuvZsQyvPapc.roa File: 9mJ_jPfo-pyvEX3fuvZsQyvPapc.roa (raw, json) Hash identifier: JlO2a5doMxY6Lc2f9Y9l2GvdDf+o4rfwJprnFnjxRH0= Subject key identifier: F6:62:7F:8C:F7:E8:FA:9C:AF:11:7D:DF:BA:F6:6C:43:2B:CF:6A:97 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B3603D5676336686AFFC86813A69299 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9mJ_jPfo-pyvEX3fuvZsQyvPapc.roa Signing time: Thu 01 Jan 2026 20:18:15 +0000 ROA not before: Thu 01 Jan 2026 20:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34358 IP address blocks: 91.250.247.0/24 maxlen: 24 188.212.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:03:d5:67:63:36:68:6a:ff:c8:68:13:a6:92:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6627f8cf7e8fa9caf117ddfbaf66c432bcf6a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:63:95:b9:8d:d3:af:ed:58:4f:5b:1d:7e: 24:b3:e5:83:5d:bd:21:58:bb:4c:08:7d:31:a1:df: f9:7c:28:09:dc:ce:5e:4d:c2:8e:84:c0:ae:63:d0: a0:14:56:fe:26:b5:c9:08:ef:5c:19:7c:1e:0a:fa: e7:02:a1:3c:77:f0:81:d9:30:69:28:94:c0:39:bd: 47:c1:6d:33:83:aa:ae:c4:12:26:c2:f4:87:97:0a: 81:e6:cc:24:dd:00:4a:94:6a:d3:8b:40:22:b6:09: 5a:09:ad:37:98:45:88:69:9c:20:fe:7c:69:7a:6e: 5b:66:0d:ae:28:00:87:e7:c1:18:4d:75:9b:d0:2e: d1:88:f6:c4:26:49:dc:71:57:cc:63:63:8a:a0:5f: 0f:4b:3d:db:4f:a2:dc:7f:ba:55:8b:f1:11:1a:a2: 3d:db:81:2f:39:32:f4:51:d1:59:ff:4f:78:49:c8: dc:4e:62:9f:a7:91:25:1f:f6:c9:0d:6b:0d:d1:f9: fe:04:a5:2d:d7:fc:11:f2:1c:cc:58:f6:2a:4c:9c: b2:c1:64:3a:18:12:58:67:94:a7:aa:0c:fc:29:79: ae:09:03:af:5f:82:13:4b:61:a5:7c:a7:3d:c8:d6: 85:4f:26:52:61:37:d8:07:c8:40:29:23:05:df:26: 64:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:62:7F:8C:F7:E8:FA:9C:AF:11:7D:DF:BA:F6:6C:43:2B:CF:6A:97 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/9mJ_jPfo-pyvEX3fuvZsQyvPapc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.250.247.0/24 188.212.111.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:3f:66:7d:b2:cb:c4:ca:12:12:b8:e7:c2:b6:c5:2b:ae:98: 28:91:a4:3b:a2:eb:17:82:1d:5f:0b:04:05:1e:7b:18:31:52: 64:d1:c1:ce:8f:93:ad:5d:21:ad:a2:6f:3b:ec:09:b3:47:15: 48:13:b7:33:bf:de:26:0a:f8:cd:43:f1:ef:df:e2:4c:ea:ec: e7:60:29:4b:38:b5:dc:02:a4:1c:97:3d:90:23:43:43:84:38: ad:15:eb:c2:9e:3c:0e:1d:48:23:cc:3f:f9:c7:a9:4d:dd:15: 76:49:f9:18:9c:e8:c1:34:7e:6b:d5:c9:c2:ce:5f:ab:8a:0e: bc:20:eb:53:29:82:5e:b1:df:89:9c:86:c2:d7:1d:cb:1d:ed: e6:5c:af:91:cb:7c:32:d5:2d:18:3f:12:06:d6:59:de:b1:e7: 95:be:48:21:ef:48:50:6d:31:fa:01:6d:d8:62:34:8c:35:61: 6b:a4:6f:0f:ad:97:e2:c8:65:66:a2:29:54:c9:6e:85:ba:9e: 1e:10:77:ef:46:e7:10:f8:8a:a2:7b:37:20:ad:9b:26:46:4b: 12:26:b7:12:78:4e:bf:94:58:65:cf:c9:44:12:fa:22:21:46: c9:ea:15:40:8a:9d:6d:61:d1:9f:15:81:e8:19:ec:f3:69:43: 82:23:92:e3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NgPVZ2M2aGr/yGgTppKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjYyN2Y4Y2Y3ZThmYTljYWYxMTdkZGZiYWY2NmM0MzJiY2Y2YTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+5jlbmN06/tWE9bHX4ks+WDXb0h WLtMCH0xod/5fCgJ3M5eTcKOhMCuY9CgFFb+JrXJCO9cGXweCvrnAqE8d/CB2TBp KJTAOb1HwW0zg6quxBImwvSHlwqB5swk3QBKlGrTi0AitglaCa03mEWIaZwg/nxp em5bZg2uKACH58EYTXWb0C7RiPbEJknccVfMY2OKoF8PSz3bT6Lcf7pVi/ERGqI9 24EvOTL0UdFZ/094ScjcTmKfp5ElH/bJDWsN0fn+BKUt1/wR8hzMWPYqTJyywWQ6 GBJYZ5Snqgz8KXmuCQOvX4ITS2GlfKc9yNaFTyZSYTfYB8hAKSMF3yZkaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPZif4z36PqcrxF937r2bEMrz2qXMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvOW1KX2pQZm8tcHl2RVgzZnV2WnNReXZQYXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/r3AwQA vNRvMA0GCSqGSIb3DQEBCwUAA4IBAQBPP2Z9ssvEyhISuOfCtsUrrpgokaQ7ousX gh1fCwQFHnsYMVJk0cHOj5OtXSGtom877AmzRxVIE7czv94mCvjNQ/Hv3+JM6uzn YClLOLXcAqQclz2QI0NDhDitFevCnjwOHUgjzD/5x6lN3RV2SfkYnOjBNH5r1cnC zl+rig68IOtTKYJesd+JnIbC1x3LHe3mXK+Ry3wy1S0YPxIG1lneseeVvkgh70hQ bTH6AW3YYjSMNWFrpG8PrZfiyGVmoilUyW6Fup4eEHfvRucQ+IqiezcgrZsmRksS JrcSeE6/lFhlz8lEEvoiIUbJ6hVAip1tYdGfFYHoGezzaUOCI5Lj -----END CERTIFICATE-----Generated at Sun Jan 25 21:19:38 2026 by rpki-client