This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa File: 9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa (raw, json) Hash identifier: 51qlFEt7ImYM42zkx6CqPj6U5NF6HAtJZkurWYKoa7k= Subject key identifier: F5:3C:7A:5F:D9:BD:90:79:F2:66:8E:92:6D:BE:FB:89:EE:8D:F4:95 Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Certificate serial: 019B783539ABE927408E07C262F58BB4194C Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa Signing time: Thu 01 Jan 2026 06:18:32 +0000 ROA not before: Thu 01 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61102 IP address blocks: 185.104.195.0/24 maxlen: 24 2a01:8640:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:39:ab:e9:27:40:8e:07:c2:62:f5:8b:b4:19:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8 Validity Not Before: Jan 1 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f53c7a5fd9bd9079f2668e926dbefb89ee8df495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:46:e3:97:ab:7f:8d:a7:86:e5:b2:75:47: 59:ea:d0:51:c2:a6:de:02:24:de:d4:c6:cd:e4:ae: e7:51:13:21:7f:c1:8b:a7:aa:27:d1:21:ef:76:54: 08:c5:e7:97:89:4e:e2:88:47:60:7f:f4:d9:1d:6d: 08:7d:f1:35:fb:f3:c5:e2:7b:65:c1:d1:68:8c:dd: ca:5f:62:6f:fd:da:61:66:92:46:20:15:d2:04:e3: a8:7e:dc:20:9c:b4:ae:46:5c:4f:d0:8b:40:be:43: 40:06:08:aa:a0:0c:a3:4b:e7:d2:96:ef:51:84:c9: c6:2d:c3:0f:07:1f:f8:4d:20:40:e9:9b:e8:d9:4e: ea:00:cc:48:8c:3e:8c:eb:1b:4a:e1:d4:d5:6e:2b: 8c:18:6f:83:13:64:43:14:2e:67:0d:4a:49:39:cd: ff:4d:6d:9e:30:e7:00:b9:fc:c2:c4:7a:55:51:dc: 71:37:93:17:51:a0:aa:cd:b0:ce:c8:2d:7e:f8:89: 39:63:2a:fb:e3:62:35:07:c6:8a:cb:6d:7a:69:92: a3:39:a1:c5:22:7f:5d:cf:19:d5:6b:28:f3:0a:20: 44:cf:1a:cb:24:7c:eb:90:c9:bb:af:24:3d:d5:98: 72:9f:4f:3b:3c:3e:18:42:22:28:79:eb:ee:63:93: a8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3C:7A:5F:D9:BD:90:79:F2:66:8E:92:6D:BE:FB:89:EE:8D:F4:95 X509v3 Authority Key Identifier: keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/9Tx6X9m9kHnyZo6Sbb77ie6N9JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.195.0/24 IPv6: 2a01:8640:c::/48 Signature Algorithm: sha256WithRSAEncryption 78:b4:b6:f5:f4:79:df:97:a3:58:98:17:98:b6:15:6e:73:c7: d6:02:63:56:8a:1e:c4:71:b4:b4:ae:06:03:ae:3f:f7:81:6b: 51:01:ea:7e:b8:0b:39:26:4f:8e:0d:db:7e:f3:98:63:12:cc: 90:30:c1:14:bb:f1:e3:ad:b8:d8:06:c9:c4:83:82:93:23:9b: af:5b:71:47:b0:8f:ab:b3:fa:50:34:26:6a:1d:0a:7a:34:79: e7:e1:2d:f3:54:37:fb:96:f3:29:65:bc:b8:92:ef:89:0e:12: 53:88:62:45:e1:00:11:b5:d7:a1:58:39:92:88:0a:8d:d0:fd: e8:b7:09:ef:ae:f2:60:b2:5e:af:da:1e:47:2c:79:36:ba:2a: 9d:4c:02:bf:6f:f4:36:4d:1d:4d:37:78:bb:81:d8:79:7d:49: 85:5f:ae:07:4a:fc:fc:88:e0:8f:58:c6:3c:e5:71:d5:81:c1: cf:fa:a1:15:8e:63:aa:6f:6e:d5:65:40:b4:4e:db:ac:26:29: db:c1:49:3a:37:d7:54:01:f2:64:72:14:55:f3:c2:c6:29:1f: 8c:42:7a:ef:2a:1f:d1:61:95:7a:18:ef:65:02:98:f5:4a:19: 73:19:3e:19:88:d9:c0:78:b2:f7:14:ff:55:99:bb:bf:d1:dd: 1e:68:39:d6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NTmr6SdAjgfCYvWLtBlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTI0MmMzM2JjMmUyZTllNDU4NTBhMGZjNjRhYjJjNzUw NmE0YjgwHhcNMjYwMTAxMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTNjN2E1ZmQ5YmQ5MDc5ZjI2NjhlOTI2ZGJlZmI4OWVlOGRmNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyhG45erf42nhuWydUdZ6tBRwqbe AiTe1MbN5K7nURMhf8GLp6on0SHvdlQIxeeXiU7iiEdgf/TZHW0IffE1+/PF4ntl wdFojN3KX2Jv/dphZpJGIBXSBOOoftwgnLSuRlxP0ItAvkNABgiqoAyjS+fSlu9R hMnGLcMPBx/4TSBA6Zvo2U7qAMxIjD6M6xtK4dTVbiuMGG+DE2RDFC5nDUpJOc3/ TW2eMOcAufzCxHpVUdxxN5MXUaCqzbDOyC1++Ik5Yyr742I1B8aKy216aZKjOaHF In9dzxnVayjzCiBEzxrLJHzrkMm7ryQ91Zhyn087PD4YQiIoeevuY5OoAQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPU8el/ZvZB58maOkm2++4nujfSVMB8GA1UdIwQY MBaAFGkSQsM7wuLp5FhQoPxkqyx1BqS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjkt MzYyZmZlOGVlMjcwLzEvOVR4Nlg5bTlrSG55Wm82U2JiNzdpZTZOOUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzU2YjktYzQ5Zi00YjRkLThlMjktMzYyZmZlOGVlMjcw LzEvYVJKQ3d6dkM0dW5rV0ZDZ19HU3JMSFVHcExnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuWjDMA8E AgACMAkDBwAqAYZAAAwwDQYJKoZIhvcNAQELBQADggEBAHi0tvX0ed+Xo1iYF5i2 FW5zx9YCY1aKHsRxtLSuBgOuP/eBa1EB6n64CzkmT44N237zmGMSzJAwwRS78eOt uNgGycSDgpMjm69bcUewj6uz+lA0JmodCno0eefhLfNUN/uW8yllvLiS74kOElOI YkXhABG116FYOZKICo3Q/ei3Ce+u8mCyXq/aHkcseTa6Kp1MAr9v9DZNHU03eLuB 2Hl9SYVfrgdK/PyI4I9YxjzlcdWBwc/6oRWOY6pvbtVlQLRO26wmKdvBSTo311QB 8mRyFFXzwsYpH4xCeu8qH9FhlXoY72UCmPVKGXMZPhmI2cB4svcU/1WZu7/R3R5o OdY= -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:19 2026 by rpki-client