This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/9_F-ohmzuw9hqAt9IdDaoYs-_mM.roa File: 9_F-ohmzuw9hqAt9IdDaoYs-_mM.roa (raw, json) Hash identifier: 8numDPiPkLyyLOp9MrexvsAw0xjV1AhK6wH2Jp+kVUY= Subject key identifier: F7:F1:7E:A2:19:B3:BB:0F:61:A8:0B:7D:21:D0:DA:A1:8B:3E:FE:63 Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC94A77176E94D7A48A7FFE58AAE566 Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/9_F-ohmzuw9hqAt9IdDaoYs-_mM.roa Signing time: Thu 01 Jan 2026 18:19:30 +0000 ROA not before: Thu 01 Jan 2026 18:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49985 IP address blocks: 5.59.194.0/24 maxlen: 24 5.59.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4a:77:17:6e:94:d7:a4:8a:7f:fe:58:aa:e5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7f17ea219b3bb0f61a80b7d21d0daa18b3efe63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:c2:2c:1e:2f:94:42:db:1f:6f:60:b0:5a: 05:e0:84:1b:58:55:3b:12:1c:ee:78:0a:5d:43:e7: 77:e9:4e:04:c4:76:4c:e8:0d:f0:23:83:ae:79:7c: 78:60:15:77:e9:83:0f:e7:3e:9f:e9:88:28:90:d2: 11:7c:2c:c4:86:fe:eb:3c:79:cc:d8:85:d1:eb:b0: ba:b1:f3:47:d5:a7:e1:83:5e:0a:40:49:e8:b2:7b: d5:ee:43:d3:50:2b:33:94:95:40:f5:0c:f6:59:26: 70:9d:88:41:1f:71:af:41:c8:8e:01:0d:49:02:70: 0e:61:b2:b8:87:ae:ff:5f:c7:95:c8:58:83:a1:5a: f6:44:5b:76:90:e4:77:8b:11:b7:73:04:2f:bb:41: 1d:fe:44:b5:ec:bf:be:08:c9:e3:49:86:30:6a:2d: 4a:09:5b:19:6c:77:9e:75:27:66:c4:bd:82:b1:c4: e5:eb:b9:af:8a:82:64:88:f6:31:7e:8a:a5:b0:c9: 94:9c:6e:ef:36:2c:35:6b:ca:64:fe:43:ba:5a:7d: 2b:11:8a:e6:7a:7c:ea:7b:dd:1a:a8:3b:8f:f5:2e: db:e6:27:a3:4b:a5:1e:6a:0a:49:f4:c0:38:f5:9d: d2:aa:6f:f9:a8:24:0f:ca:80:68:f8:42:4a:ca:02: c5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F1:7E:A2:19:B3:BB:0F:61:A8:0B:7D:21:D0:DA:A1:8B:3E:FE:63 X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/9_F-ohmzuw9hqAt9IdDaoYs-_mM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.59.194.0/23 Signature Algorithm: sha256WithRSAEncryption 03:8e:d4:0a:ba:72:6c:14:32:d5:91:87:c0:14:10:55:99:4f: 5f:77:1d:98:36:16:35:e1:ac:15:41:e3:19:d7:2a:f0:9e:f2: 1a:30:30:75:6f:fc:dd:f9:f6:93:3e:10:ec:0f:fd:5e:22:c3: 7f:41:a5:17:c2:37:e2:91:4d:21:db:41:8d:1d:8f:fd:17:91: eb:19:38:47:6c:fe:98:49:77:b4:5e:2d:4d:48:90:19:23:12: fa:51:4f:b2:44:db:da:48:05:f4:fd:ab:2f:fd:46:56:2b:fa: db:36:89:6f:6e:af:15:06:b2:91:e8:c6:d3:d3:74:a7:29:bf: a9:9a:63:58:9b:e0:bb:b5:92:50:61:79:37:fa:95:de:16:4b: 8c:06:29:92:95:c2:68:3e:4b:cc:b4:43:04:a3:d5:aa:9a:ac: 8b:12:f0:9d:09:2d:50:f0:6d:25:18:50:07:92:ed:42:16:b2: 9f:66:62:21:f5:48:05:89:bd:83:31:63:a9:e8:8d:0f:c8:c6: 00:d0:00:48:b3:d5:bd:3a:50:3d:53:76:1b:c2:03:5f:04:16: 71:ca:9d:68:90:25:e6:88:d8:32:8a:b6:bc:26:40:42:96:b8: ba:da:e6:86:10:e1:4a:db:e9:d6:24:0d:59:4d:16:ec:bf:cc: 5b:bc:7d:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUp3F26U16SKf/5YquVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2YxN2VhMjE5YjNiYjBmNjFhODBiN2QyMWQwZGFhMThiM2VmZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXvCLB4vlELbH29gsFoF4IQbWFU7 EhzueApdQ+d36U4ExHZM6A3wI4OueXx4YBV36YMP5z6f6YgokNIRfCzEhv7rPHnM 2IXR67C6sfNH1afhg14KQEnosnvV7kPTUCszlJVA9Qz2WSZwnYhBH3GvQciOAQ1J AnAOYbK4h67/X8eVyFiDoVr2RFt2kOR3ixG3cwQvu0Ed/kS17L++CMnjSYYwai1K CVsZbHeedSdmxL2CscTl67mvioJkiPYxfoqlsMmUnG7vNiw1a8pk/kO6Wn0rEYrm enzqe90aqDuP9S7b5iejS6UeagpJ9MA49Z3Sqm/5qCQPyoBo+EJKygLFrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPfxfqIZs7sPYagLfSHQ2qGLPv5jMB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvOV9GLW9obXp1dzlocUF0OUlkRGFvWXMtX21NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2 LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBTvCMA0G CSqGSIb3DQEBCwUAA4IBAQADjtQKunJsFDLVkYfAFBBVmU9fdx2YNhY14awVQeMZ 1yrwnvIaMDB1b/zd+faTPhDsD/1eIsN/QaUXwjfikU0h20GNHY/9F5HrGThHbP6Y SXe0Xi1NSJAZIxL6UU+yRNvaSAX0/asv/UZWK/rbNolvbq8VBrKR6MbT03SnKb+p mmNYm+C7tZJQYXk3+pXeFkuMBimSlcJoPkvMtEMEo9WqmqyLEvCdCS1Q8G0lGFAH ku1CFrKfZmIh9UgFib2DMWOp6I0PyMYA0ABIs9W9OlA9U3YbwgNfBBZxyp1okCXm iNgyira8JkBClri62uaGEOFK2+nWJA1ZTRbsv8xbvH2w -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:46 2026 by rpki-client