This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/h9dclcnj73gGMmqKRNemWaDpAK4.roa File: h9dclcnj73gGMmqKRNemWaDpAK4.roa (raw, json) Hash identifier: mJuahx80L+X55SPmqYQeNyVRCkJnTbE2MlO0Pta3IEU= Subject key identifier: 87:D7:5C:95:C9:E3:EF:78:06:32:6A:8A:44:D7:A6:59:A0:E9:00:AE Certificate issuer: /CN=f6f483acd88b51f5d47f577f101b5457785e0edb Certificate serial: 019BE6F7FD503AC5F99E03F4CA4EE0355677 Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/h9dclcnj73gGMmqKRNemWaDpAK4.roa Signing time: Thu 22 Jan 2026 18:29:30 +0000 ROA not before: Thu 22 Jan 2026 18:29:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 89.45.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e6:f7:fd:50:3a:c5:f9:9e:03:f4:ca:4e:e0:35:56:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb Validity Not Before: Jan 22 18:29:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=87d75c95c9e3ef7806326a8a44d7a659a0e900ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ad:e1:bf:4a:ad:9c:0d:bd:40:00:f5:32:d5: 49:92:4d:63:67:c1:5f:eb:db:aa:1b:67:a7:09:f6: 64:5c:b9:df:2d:5c:f3:ed:2c:0d:89:37:ce:1c:ad: 3c:06:09:59:36:9f:c9:9a:cf:e7:b7:f4:e9:fe:06: 48:42:c5:78:32:fb:4d:de:78:4c:65:ec:10:b9:20: 69:e2:ba:85:8a:36:6e:a8:ad:32:a3:79:8f:af:ea: d0:9a:95:3f:15:64:26:4f:5f:46:39:be:c6:35:87: 54:96:60:9b:14:1f:8e:27:61:85:e3:b4:3e:56:98: 9f:c3:86:98:0e:a8:49:4d:8d:d6:81:d4:0b:e0:bc: ac:a5:6b:81:34:69:df:36:bf:7a:44:a2:30:fc:d9: 45:b7:cd:19:d0:83:17:1e:db:ca:61:20:98:29:c6: e6:c8:7a:86:a9:8e:7b:31:9c:92:d5:ee:cb:ab:eb: 9d:4f:20:8f:ef:0c:2f:4c:a5:b3:dc:35:9f:23:5a: f3:da:cc:b2:02:29:2a:24:bb:c8:fc:18:95:66:fe: c0:74:7c:b7:e9:70:a5:a0:6d:7b:65:c4:4e:61:b9: 4e:0e:0d:b4:30:0e:cc:76:03:d7:a3:7d:c7:2d:24: 4a:6d:82:ce:8e:d9:48:fb:59:ca:da:ac:63:bb:01: d5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D7:5C:95:C9:E3:EF:78:06:32:6A:8A:44:D7:A6:59:A0:E9:00:AE X509v3 Authority Key Identifier: keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/h9dclcnj73gGMmqKRNemWaDpAK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.45.9.0/24 Signature Algorithm: sha256WithRSAEncryption 88:fc:14:19:8b:2f:ea:6c:56:83:59:56:b5:b6:4d:4a:b1:00: 77:bb:ce:b2:ba:e8:33:1a:97:f7:09:7b:fb:81:00:af:da:a2: d3:85:4b:26:3f:6a:ba:0a:88:6e:5d:a8:f0:f4:bc:8b:20:f1: d6:ec:d6:1b:0b:61:32:4d:54:dd:65:99:bc:2e:0a:13:b2:6c: 8b:db:c9:ff:af:dd:e1:62:b5:0a:8b:85:f9:81:cb:de:32:07: 86:a5:15:4a:a2:ca:ad:54:16:82:bd:0e:63:d6:f2:ee:a7:99: d5:da:2a:57:01:68:e4:c8:23:e5:6c:88:32:ee:30:17:84:52: c5:af:19:cf:51:72:61:02:75:34:2a:fd:61:ba:66:22:8d:49: a0:4b:4f:83:28:25:b9:f1:14:3a:58:b3:85:61:46:07:b1:88: 56:77:48:25:6d:6f:74:ff:d9:b0:f5:35:fe:af:5d:6b:44:5b: 35:d9:f9:72:31:b4:88:8a:5b:58:e3:1f:2e:37:e3:99:a2:74: 99:0a:e1:8d:6e:48:ee:95:88:d1:3c:0b:0d:c7:ca:03:98:4b: e5:4b:36:cb:58:17:0f:ca:bd:1f:a9:7f:85:82:07:00:cd:dd: a2:54:19:ab:8d:d8:42:49:ff:0d:72:3c:ae:9e:d5:72:36:fc: 07:cb:8a:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvm9/1QOsX5ngP0yk7gNVZ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjQ4M2FjZDg4YjUxZjVkNDdmNTc3ZjEwMWI1NDU3Nzg1 ZTBlZGIwHhcNMjYwMTIyMTgyOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4N2Q3NWM5NWM5ZTNlZjc4MDYzMjZhOGE0NGQ3YTY1OWEwZTkwMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a3hv0qtnA29QAD1MtVJkk1jZ8Ff 69uqG2enCfZkXLnfLVzz7SwNiTfOHK08BglZNp/Jms/nt/Tp/gZIQsV4MvtN3nhM ZewQuSBp4rqFijZuqK0yo3mPr+rQmpU/FWQmT19GOb7GNYdUlmCbFB+OJ2GF47Q+ Vpifw4aYDqhJTY3WgdQL4LyspWuBNGnfNr96RKIw/NlFt80Z0IMXHtvKYSCYKcbm yHqGqY57MZyS1e7Lq+udTyCP7wwvTKWz3DWfI1rz2syyAikqJLvI/BiVZv7AdHy3 6XCloG17ZcROYblODg20MA7MdgPXo33HLSRKbYLOjtlI+1nK2qxjuwHVWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIfXXJXJ4+94BjJqikTXplmg6QCuMB8GA1UdIwQY MBaAFPb0g6zYi1H11H9XfxAbVFd4Xg7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZTRHJOaUxVZlhVZjFkX0VCdFVWM2hlRHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zZjZkZDQtMjI4My00MmJhLWJkNjIt NTJhMTVkNzg1NDAzLzEvaDlkY2xjbmo3M2dHTW1xS1JOZW1XYURwQUs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8zZjZkZDQtMjI4My00MmJhLWJkNjItNTJhMTVkNzg1NDAz LzEvOXZTRHJOaUxVZlhVZjFkX0VCdFVWM2hlRHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS0JMA0G CSqGSIb3DQEBCwUAA4IBAQCI/BQZiy/qbFaDWVa1tk1KsQB3u86yuugzGpf3CXv7 gQCv2qLThUsmP2q6CohuXajw9LyLIPHW7NYbC2EyTVTdZZm8LgoTsmyL28n/r93h YrUKi4X5gcveMgeGpRVKosqtVBaCvQ5j1vLup5nV2ipXAWjkyCPlbIgy7jAXhFLF rxnPUXJhAnU0Kv1humYijUmgS0+DKCW58RQ6WLOFYUYHsYhWd0glbW90/9mw9TX+ r11rRFs12flyMbSIiltY4x8uN+OZonSZCuGNbkjulYjRPAsNx8oDmEvlSzbLWBcP yr0fqX+FggcAzd2iVBmrjdhCSf8NcjyuntVyNvwHy4oz -----END CERTIFICATE-----Generated at Sun Jan 25 18:22:09 2026 by rpki-client