This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/9_MYsPE4gd2lbb7TZYORycFaWd0.roa File: 9_MYsPE4gd2lbb7TZYORycFaWd0.roa (raw, json) Hash identifier: dw91LpI/SCTexr9LU7pGF2p5zGloMmSS6LWqMDLhx9U= Subject key identifier: F7:F3:18:B0:F1:38:81:DD:A5:6D:BE:D3:65:83:91:C9:C1:5A:59:DD Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Certificate serial: 019B79ECBE4B1712AD5B21D97F4C59BF7280 Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/9_MYsPE4gd2lbb7TZYORycFaWd0.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48943 IP address blocks: 94.136.0.0/19 maxlen: 24 185.36.16.0/22 maxlen: 24 185.202.148.0/23 maxlen: 24 185.202.150.0/24 maxlen: 24 2a02:ab8::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:be:4b:17:12:ad:5b:21:d9:7f:4c:59:bf:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7f318b0f13881dda56dbed3658391c9c15a59dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:55:56:0e:2d:6a:e4:de:d4:9c:c0:f6:9e: ac:7f:2c:90:a9:96:b1:15:5d:09:40:d1:87:e9:aa: 23:f5:8f:ba:bd:fd:aa:f4:0b:d5:a5:b9:0f:71:33: 5a:05:d8:7c:ad:1a:96:b9:1e:33:9b:0c:46:07:8b: 99:d7:8a:e6:c8:92:fb:16:3b:3d:ec:cb:f7:c2:67: 78:ba:a0:71:c9:83:35:a0:0a:48:ed:07:fe:96:80: 70:f2:32:7e:e8:50:07:e9:c8:f0:e0:09:f1:0a:82: 58:90:5c:46:a5:f6:a0:af:1d:5d:f5:27:e6:60:34: ca:d7:2d:29:bb:68:65:8e:1d:15:09:b8:39:7c:3e: 29:c6:52:94:a2:6d:5b:54:a4:4e:3a:5d:5b:d8:c5: 7c:eb:de:11:bc:d2:62:65:b2:41:d6:71:21:be:9a: 35:23:50:a9:e0:d6:79:4c:95:f4:e4:d3:2a:fd:17: a5:10:2b:5e:a4:d8:5c:26:fb:09:90:83:46:c2:32: b9:ef:db:a2:37:c3:09:43:e0:da:b7:76:3c:fd:21: f6:8a:f7:0b:b6:fd:7e:0c:9d:b5:54:6c:f6:00:2d: 8a:16:93:f8:52:14:62:79:23:c4:0f:08:d0:de:6d: 29:88:02:da:0c:94:3f:b0:8e:17:f2:ae:0c:96:89: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F3:18:B0:F1:38:81:DD:A5:6D:BE:D3:65:83:91:C9:C1:5A:59:DD X509v3 Authority Key Identifier: keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/9_MYsPE4gd2lbb7TZYORycFaWd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.0.0/19 185.36.16.0/22 185.202.148.0-185.202.150.255 IPv6: 2a02:ab8::/29 Signature Algorithm: sha256WithRSAEncryption 9e:5f:49:ad:25:1e:48:d5:3d:e2:e7:e2:42:d3:41:0f:92:7e: 47:1e:ed:a2:3a:e6:79:d2:2a:d6:55:9c:d9:96:98:6d:b4:c8: 82:8b:d1:6d:c0:ee:f6:26:98:cb:17:f1:43:63:36:03:9e:15: 6e:3f:5f:79:03:6e:0f:46:a5:3d:fa:ab:a7:33:aa:cb:56:58: d6:89:3f:a3:59:ca:a7:bf:b5:08:da:95:bb:2d:20:e9:49:1b: 80:b9:8b:70:7f:8f:df:3f:f0:f9:f0:dd:78:39:e9:0d:14:1c: 68:90:44:14:1d:e4:3d:27:19:94:b2:82:71:67:bd:86:45:47: 1d:cb:0a:ca:e2:03:6a:a8:2c:65:a0:5a:3a:9d:7b:20:7d:44: 4f:ca:d1:ff:ee:9f:6d:65:54:6b:da:23:c8:76:d8:ce:da:65: c5:31:4e:68:d9:91:04:fd:77:fe:d8:9c:6d:1b:8a:ca:18:f6: fd:cc:5d:59:75:0f:ad:97:22:cb:89:64:c6:00:f0:e1:0a:2b: 98:63:3b:35:aa:4c:90:4b:53:18:17:d3:d0:41:72:ec:63:6f: 72:a7:68:07:86:6a:25:f4:e0:fe:2d:d6:79:6a:21:4b:6c:ad: 70:dc:ef:55:ec:db:62:a0:95:fd:72:9c:47:98:b8:95:04:3c: 4d:75:69:14 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt57L5LFxKtWyHZf0xZv3KAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjY1MGMwYTBmMTY1MTVhNzJkZWE2MDFjZTljYTJkNGMx NjQ5OTMwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2YzMThiMGYxMzg4MWRkYTU2ZGJlZDM2NTgzOTFjOWMxNWE1OWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu45VVg4tauTe1JzA9p6sfyyQqZax FV0JQNGH6aoj9Y+6vf2q9AvVpbkPcTNaBdh8rRqWuR4zmwxGB4uZ14rmyJL7Fjs9 7Mv3wmd4uqBxyYM1oApI7Qf+loBw8jJ+6FAH6cjw4AnxCoJYkFxGpfagrx1d9Sfm YDTK1y0pu2hljh0VCbg5fD4pxlKUom1bVKROOl1b2MV8694RvNJiZbJB1nEhvpo1 I1Cp4NZ5TJX05NMq/RelECtepNhcJvsJkINGwjK579uiN8MJQ+Dat3Y8/SH2ivcL tv1+DJ21VGz2AC2KFpP4UhRieSPEDwjQ3m0piALaDJQ/sI4X8q4MlonBnQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFPfzGLDxOIHdpW2+02WDkcnBWlndMB8GA1UdIwQY MBaAFDP2UMCg8WUVpy3qYBzpyi1MFkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjct ODUwNjkxMjVkM2JmLzEvOV9NWXNQRTRnZDJsYmI3VFpZT1J5Y0ZhV2QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjctODUwNjkxMjVkM2Jm LzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQFXogAAwQC uSQQMAwDBAK5ypQDBAC5ypYwDQQCAAIwBwMFAyoCCrgwDQYJKoZIhvcNAQELBQAD ggEBAJ5fSa0lHkjVPeLn4kLTQQ+Sfkce7aI65nnSKtZVnNmWmG20yIKL0W3A7vYm mMsX8UNjNgOeFW4/X3kDbg9GpT36q6czqstWWNaJP6NZyqe/tQjalbstIOlJG4C5 i3B/j98/8Pnw3Xg56Q0UHGiQRBQd5D0nGZSygnFnvYZFRx3LCsriA2qoLGWgWjqd eyB9RE/K0f/un21lVGvaI8h22M7aZcUxTmjZkQT9d/7YnG0bisoY9v3MXVl1D62X IsuJZMYA8OEKK5hjOzWqTJBLUxgX09BBcuxjb3KnaAeGaiX04P4t1nlqIUtsrXDc 71Xs22Kglf1ynEeYuJUEPE11aRQ= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:33 2026 by rpki-client