This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_9ZRwfoUb6Prx6IL9SoI528ze0c.roa File: _9ZRwfoUb6Prx6IL9SoI528ze0c.roa (raw, json) Hash identifier: rnJiTeApovgUdaxFOxeZTkYxKmTfqeOsI+8gnq1E/UE= Subject key identifier: FF:D6:51:C1:FA:14:6F:A3:EB:C7:A2:0B:F5:2A:08:E7:6F:33:7B:47 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C77936818965050615E9D677F342EC Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_9ZRwfoUb6Prx6IL9SoI528ze0c.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204230 IP address blocks: 62.89.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:79:36:81:89:65:05:06:15:e9:d6:77:f3:42:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffd651c1fa146fa3ebc7a20bf52a08e76f337b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:a1:b9:fc:ec:9c:4b:81:d6:88:e6:bf:eb: 84:3c:17:fb:07:0f:11:f1:54:b4:f7:fa:c8:2e:79: 0d:34:dc:f8:08:39:91:2b:db:32:88:5a:dd:9a:3f: ae:95:8e:df:e0:ac:50:34:85:f3:3f:42:1c:8c:7f: 9b:84:9f:80:fe:fe:7a:0c:be:b9:7d:17:4f:7a:11: 2c:ec:6b:30:ce:c8:6d:21:69:ba:24:54:d4:0a:8e: 3d:64:bd:15:da:46:71:4a:c2:44:a3:3b:e1:57:4b: 6d:3d:40:dc:8b:c2:bc:7d:f0:a7:17:57:63:0c:1f: 77:73:ef:35:c2:64:a4:3c:9d:7a:25:4b:36:a3:43: d6:a0:3c:0c:d1:3d:02:68:05:0a:32:15:5e:58:9c: cd:bd:4f:48:b8:09:71:b5:b5:ce:2f:c0:01:00:44: 17:8c:c9:f6:1c:04:db:cc:1a:e8:87:57:da:b4:32: 20:6f:cd:23:20:17:32:f2:29:39:a9:52:6c:14:36: ea:9b:f6:4f:f0:d2:07:69:11:a2:92:07:94:34:06: a1:b9:9d:1a:58:5d:52:e3:90:3f:7e:e9:6d:aa:24: 5e:98:db:39:ba:25:04:80:bb:8c:9f:ca:3a:f3:77: 05:2e:a6:e8:ac:6f:a5:9d:13:63:d0:23:e6:2e:f7: 91:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D6:51:C1:FA:14:6F:A3:EB:C7:A2:0B:F5:2A:08:E7:6F:33:7B:47 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/_9ZRwfoUb6Prx6IL9SoI528ze0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.195.0/24 Signature Algorithm: sha256WithRSAEncryption 17:f8:eb:e0:83:5a:12:28:22:36:16:8b:36:83:8a:1a:6f:61: 1e:86:3a:a5:01:66:95:af:cc:d3:f8:e5:ee:03:b1:8c:91:36: de:cc:29:63:e3:97:d2:66:1c:73:1d:5e:70:f1:f5:06:85:4a: 71:de:8f:0a:4a:3f:42:d2:8a:81:2c:41:15:d5:13:5b:1a:17: b8:70:cf:8a:51:e2:41:77:0c:b9:37:2c:0b:e2:f4:68:28:91: cb:c4:0c:83:c1:06:81:39:e3:4a:fb:80:0b:3d:17:19:68:f0: f5:da:bc:12:7e:fb:de:1e:14:48:25:17:92:2e:19:66:05:f0: e4:5e:43:0f:67:1b:58:0f:f8:b9:13:b2:8e:43:4a:ca:bf:59: 52:08:6b:88:15:12:89:56:ec:86:53:ef:01:13:dd:65:9e:78: a7:6e:60:b5:cc:58:a3:74:1b:42:2f:bc:4c:f6:5f:7a:a0:62: ed:ba:ae:3f:cf:ac:5d:68:69:6c:f0:11:1a:81:0a:32:f8:23: ef:e2:2f:b7:38:07:c9:e2:94:cd:98:11:aa:3a:1c:80:4b:aa: db:a1:e6:b0:3b:2c:58:ef:54:74:1f:eb:36:b8:36:aa:4a:04: 29:6b:6e:2d:e6:1c:a3:a6:81:cf:28:8b:dd:05:5a:8b:5d:66: e3:7e:05:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3k2gYllBQYV6dZ380LsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmQ2NTFjMWZhMTQ2ZmEzZWJjN2EyMGJmNTJhMDhlNzZmMzM3YjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0ahufzsnEuB1ojmv+uEPBf7Bw8R 8VS09/rILnkNNNz4CDmRK9syiFrdmj+ulY7f4KxQNIXzP0IcjH+bhJ+A/v56DL65 fRdPehEs7GswzshtIWm6JFTUCo49ZL0V2kZxSsJEozvhV0ttPUDci8K8ffCnF1dj DB93c+81wmSkPJ16JUs2o0PWoDwM0T0CaAUKMhVeWJzNvU9IuAlxtbXOL8ABAEQX jMn2HATbzBroh1fatDIgb80jIBcy8ik5qVJsFDbqm/ZP8NIHaRGikgeUNAahuZ0a WF1S45A/fultqiRemNs5uiUEgLuMn8o683cFLqborG+lnRNj0CPmLveRcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/WUcH6FG+j68eiC/UqCOdvM3tHMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvXzlaUndmb1ViNlByeDZJTDlTb0k1Mjh6ZTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPlnDMA0G CSqGSIb3DQEBCwUAA4IBAQAX+Ovgg1oSKCI2Fos2g4oab2EehjqlAWaVr8zT+OXu A7GMkTbezClj45fSZhxzHV5w8fUGhUpx3o8KSj9C0oqBLEEV1RNbGhe4cM+KUeJB dwy5NywL4vRoKJHLxAyDwQaBOeNK+4ALPRcZaPD12rwSfvveHhRIJReSLhlmBfDk XkMPZxtYD/i5E7KOQ0rKv1lSCGuIFRKJVuyGU+8BE91lnninbmC1zFijdBtCL7xM 9l96oGLtuq4/z6xdaGls8BEagQoy+CPv4i+3OAfJ4pTNmBGqOhyAS6rboeawOyxY 71R0H+s2uDaqSgQpa24t5hyjpoHPKIvdBVqLXWbjfgXN -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:04 2026 by rpki-client