This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa File: 9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa (raw, json) Hash identifier: tv89A0XeQybFhGlMxmSOiFsbHBh2Q6fNjP2cbql77Wk= Subject key identifier: F5:75:E6:30:DC:BE:54:72:74:3C:BB:1B:7F:14:DE:C9:B1:34:38:79 Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Certificate serial: 019B7D5C564B1E5C1841174244278619C83D Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa Signing time: Fri 02 Jan 2026 06:19:21 +0000 ROA not before: Fri 02 Jan 2026 06:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13238 IP address blocks: 5.45.192.0/18 maxlen: 24 5.255.192.0/18 maxlen: 24 37.9.64.0/18 maxlen: 24 37.140.128.0/18 maxlen: 24 77.88.0.0/18 maxlen: 24 84.252.160.0/19 maxlen: 24 87.250.224.0/19 maxlen: 24 90.156.176.0/20 maxlen: 24 92.255.112.0/20 maxlen: 24 92.255.127.0/24 maxlen: 24 93.158.128.0/18 maxlen: 24 95.108.128.0/17 maxlen: 24 141.8.128.0/18 maxlen: 24 178.154.128.0/19 maxlen: 24 178.154.160.0/19 maxlen: 24 185.32.187.0/24 maxlen: 24 213.180.192.0/19 maxlen: 24 2a02:6b8::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:56:4b:1e:5c:18:41:17:42:44:27:86:19:c8:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f575e630dcbe5472743cbb1b7f14dec9b1343879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:a6:c4:8c:2a:37:ca:6e:a8:fd:ab:d7:8f: fa:78:a5:9b:7f:15:ab:b2:44:47:f7:c1:54:5f:55: 4f:7a:ba:00:88:e6:a5:af:92:00:06:ce:17:5a:3e: c9:49:57:81:c7:c2:08:da:e5:84:8f:f1:e8:9a:be: 32:fc:f3:c2:75:cf:56:ca:b6:f8:fd:12:42:0e:f2: a8:32:2f:36:18:63:fa:49:13:e2:f6:ff:0e:0e:19: bd:30:c5:c0:68:f0:6d:ca:34:e7:eb:7c:08:28:49: 6e:cf:b4:a1:ac:23:db:5c:2a:70:56:e8:cc:be:cc: 08:20:11:85:41:a3:b1:97:a5:c7:ce:7c:f6:97:b7: 1b:c6:fe:5c:71:7e:a9:1a:e2:f0:21:9b:3a:7b:69: d8:0c:15:99:c4:2d:5b:fb:4e:f7:a3:7d:03:ab:e4: b0:ef:6c:39:5d:8e:36:9f:13:07:50:ab:38:70:b9: 69:e5:29:5d:f0:39:fa:52:a4:14:e0:9b:30:ee:a4: 3a:fa:1c:46:2a:88:d0:17:d9:7e:e6:84:82:d6:94: 47:84:11:44:c1:38:47:ea:74:db:79:32:4e:86:a3: be:d4:de:c0:17:f6:41:75:33:4c:d6:7e:b1:72:b2: 23:47:e0:c5:af:f4:47:d4:0f:85:ec:15:3c:f6:37: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:75:E6:30:DC:BE:54:72:74:3C:BB:1B:7F:14:DE:C9:B1:34:38:79 X509v3 Authority Key Identifier: keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/9XXmMNy-VHJ0PLsbfxTeybE0OHk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.45.192.0/18 5.255.192.0/18 37.9.64.0/18 37.140.128.0/18 77.88.0.0/18 84.252.160.0/19 87.250.224.0/19 90.156.176.0/20 92.255.112.0/20 93.158.128.0/18 95.108.128.0/17 141.8.128.0/18 178.154.128.0/18 185.32.187.0/24 213.180.192.0/19 IPv6: 2a02:6b8::/29 Signature Algorithm: sha256WithRSAEncryption 61:7c:6c:91:2d:80:3d:bc:3d:0d:f6:3a:d5:b3:7b:c6:7f:92: d5:39:20:72:5c:e6:66:34:d7:e9:d2:01:c5:d8:6b:c6:50:b1: 36:0e:91:9d:ff:10:1f:74:66:fb:4e:22:0e:fd:35:3d:b7:c4: 6f:16:14:e6:76:f4:a6:7d:0b:fd:70:c2:ef:9f:50:f1:28:a1: ef:18:70:3a:35:f2:f6:1c:07:2d:ec:35:55:df:be:f1:97:dc: f3:ad:4c:a1:12:41:0a:f4:85:11:9e:b3:3a:df:f0:2b:36:9d: 68:69:3a:73:23:82:e4:51:9f:eb:bb:70:19:85:97:3e:ee:59: 0d:32:17:23:5c:62:7b:c1:7d:5b:8b:a7:48:cf:31:d5:6b:73: 1a:e0:39:b8:45:77:9b:e5:0c:ab:40:f8:75:23:06:58:4f:f0: 0f:3c:b6:90:14:f4:f9:04:b4:f4:c8:08:bf:e6:58:db:98:2f: e5:58:37:8f:cc:9b:9c:82:fe:e6:00:d4:93:d8:cb:ee:16:52: 58:3e:25:63:e5:f0:92:ed:26:3f:08:35:e8:86:d4:29:51:7e: 57:46:d7:a4:65:49:7a:8f:80:50:88:39:8c:e1:ad:25:16:57: 40:17:6f:51:e6:5a:8a:4e:40:91:6f:2f:ef:80:83:1b:83:46: 47:a9:5d:bc -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt9XFZLHlwYQRdCRCeGGcg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1 NzgzNDIwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTc1ZTYzMGRjYmU1NDcyNzQzY2JiMWI3ZjE0ZGVjOWIxMzQzODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy+mxIwqN8puqP2r14/6eKWbfxWr skRH98FUX1VPeroAiOalr5IABs4XWj7JSVeBx8II2uWEj/Homr4y/PPCdc9Wyrb4 /RJCDvKoMi82GGP6SRPi9v8ODhm9MMXAaPBtyjTn63wIKEluz7ShrCPbXCpwVujM vswIIBGFQaOxl6XHznz2l7cbxv5ccX6pGuLwIZs6e2nYDBWZxC1b+073o30Dq+Sw 72w5XY42nxMHUKs4cLlp5Sld8Dn6UqQU4Jsw7qQ6+hxGKojQF9l+5oSC1pRHhBFE wThH6nTbeTJOhqO+1N7AF/ZBdTNM1n6xcrIjR+DFr/RH1A+F7BU89jfN1wIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFPV15jDcvlRydDy7G38U3smxNDh5MB8GA1UdIwQY MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt MmNkOThlZTUzNTY5LzEvOVhYbU1OeS1WSEowUExzYmZ4VGV5YkUwT0hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5 LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWgMEBgUtwAME BgX/wAMEBiUJQAMEBiWMgAMEBk1YAAMEBVT8oAMEBVf64AMEBFqcsAMEBFz/cAME Bl2egAMEB19sgAMEBo0IgAMEBrKagAMEALkguwMEBdW0wDANBAIAAjAHAwUDKgIG uDANBgkqhkiG9w0BAQsFAAOCAQEAYXxskS2APbw9DfY61bN7xn+S1TkgclzmZjTX 6dIBxdhrxlCxNg6Rnf8QH3Rm+04iDv01PbfEbxYU5nb0pn0L/XDC759Q8Sih7xhw OjXy9hwHLew1Vd++8Zfc861MoRJBCvSFEZ6zOt/wKzadaGk6cyOC5FGf67twGYWX Pu5ZDTIXI1xie8F9W4unSM8x1WtzGuA5uEV3m+UMq0D4dSMGWE/wDzy2kBT0+QS0 9MgIv+ZY25gv5Vg3j8ybnIL+5gDUk9jL7hZSWD4lY+Xwku0mPwg16IbUKVF+V0bX pGVJeo+AUIg5jOGtJRZXQBdvUeZaik5AkW8v74CDG4NGR6ldvA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:03 2026 by rpki-client