This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/9JA9nwwgveuhbehf1dbMMMd0pbA.roa File: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (raw, json) Hash identifier: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo= Subject key identifier: F4:90:3D:9F:0C:20:BD:EB:A1:6D:E8:5F:D5:D6:CC:30:C7:74:A5:B0 Certificate issuer: /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43 Certificate serial: 019B7F844D61BD8B2FF538AEC526F819DCCE Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/9JA9nwwgveuhbehf1dbMMMd0pbA.roa Signing time: Fri 02 Jan 2026 16:22:15 +0000 ROA not before: Fri 02 Jan 2026 16:22:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49882 IP address blocks: 91.208.28.0/24 maxlen: 24 193.105.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4d:61:bd:8b:2f:f5:38:ae:c5:26:f8:19:dc:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43 Validity Not Before: Jan 2 16:22:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4903d9f0c20bdeba16de85fd5d6cc30c774a5b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2c:f8:fd:fa:e7:80:3a:5b:3d:15:ff:2b:86: ec:5e:0a:ec:d3:ea:d6:c5:d8:d7:e9:88:ce:ef:af: 4b:55:53:e5:78:a6:40:f6:e8:e2:8c:a0:a1:22:5d: 01:a2:b8:52:65:16:8e:04:68:1b:8b:98:56:42:ad: 84:5d:39:93:98:ca:dd:66:7b:8c:a8:11:d6:fe:c5: e2:c2:bd:2f:fc:04:d4:6d:15:57:5b:a4:7d:81:e4: 64:b5:9a:ec:65:20:98:85:45:39:68:d9:d9:c3:32: 0a:30:f4:a7:c8:80:12:41:c0:cc:f8:85:5c:17:35: 6e:da:02:f9:c6:2e:b8:e6:05:51:4b:8d:92:db:84: d9:53:f1:69:53:81:8d:2d:76:38:15:a6:44:75:58: a1:8c:c0:b3:99:86:01:9c:ff:5a:2c:d1:1a:9e:14: 7a:51:f5:77:f8:cf:b2:69:43:65:95:d2:5e:84:2c: d0:68:ae:dc:a1:85:31:ce:5d:1b:d6:64:3c:9f:64: f5:c0:de:fa:6e:e8:72:5d:c0:8b:8a:95:2e:09:99: 85:bf:02:2e:4c:72:0f:f6:5b:74:0e:12:9b:3b:25: 99:bf:2a:a6:be:b5:9d:7b:35:6a:58:4d:eb:69:c2: 03:37:16:39:93:6a:56:88:fe:99:4c:cd:a6:09:8d: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:90:3D:9F:0C:20:BD:EB:A1:6D:E8:5F:D5:D6:CC:30:C7:74:A5:B0 X509v3 Authority Key Identifier: keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/9JA9nwwgveuhbehf1dbMMMd0pbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.28.0/24 193.105.47.0/24 Signature Algorithm: sha256WithRSAEncryption 30:dd:67:b5:d1:bc:aa:c4:af:2f:f6:e3:d2:7f:58:ae:9b:76: 05:48:08:75:bb:aa:ba:1e:76:d1:29:14:2e:92:ec:f6:2c:ee: f8:8c:16:29:da:26:99:72:84:b6:d7:4d:98:a8:5d:61:90:69: 69:09:1a:7d:d7:45:92:22:ed:a1:35:da:1d:c6:c2:f9:f7:a9: 57:a1:ce:2d:09:cd:73:ce:14:ca:e2:4c:46:af:5a:b6:4b:c4: d7:98:4c:67:2c:a8:9b:4a:af:40:3b:c1:6f:23:e5:1d:bf:58: b0:06:35:e0:c8:dd:cf:7e:ac:24:20:3b:cd:ee:78:38:f0:85: ae:be:cb:d9:c5:05:c4:f5:b4:8c:b9:f5:45:41:19:07:c1:59: 94:79:d4:06:a0:0c:f2:72:17:16:94:ed:a8:2a:85:5c:4f:d5: 7c:40:e1:cd:b6:4e:24:1c:f0:02:c5:4b:61:f6:66:0e:0b:d1: b7:84:2a:fd:b1:25:78:6f:60:4d:84:e3:f2:34:37:9b:5d:9c: 7b:ed:ba:86:28:9f:bb:d6:75:63:39:b5:72:d0:8b:e7:0d:8d: f8:6a:22:de:69:0e:64:21:fb:fa:7b:49:0b:ba:86:76:3c:94: e7:35:aa:16:7b:d8:88:2e:82:6a:8c:f1:71:e4:ac:41:31:34: 3a:7c:60:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hE1hvYsv9TiuxSb4GdzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjNlOTY1Yzg3NDdlMmZhNWRkZDEyODU3NjczZjA2MDQy ZWZhNDMwHhcNMjYwMTAyMTYyMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDkwM2Q5ZjBjMjBiZGViYTE2ZGU4NWZkNWQ2Y2MzMGM3NzRhNWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSz4/frngDpbPRX/K4bsXgrs0+rW xdjX6YjO769LVVPleKZA9ujijKChIl0BorhSZRaOBGgbi5hWQq2EXTmTmMrdZnuM qBHW/sXiwr0v/ATUbRVXW6R9geRktZrsZSCYhUU5aNnZwzIKMPSnyIASQcDM+IVc FzVu2gL5xi645gVRS42S24TZU/FpU4GNLXY4FaZEdVihjMCzmYYBnP9aLNEanhR6 UfV3+M+yaUNlldJehCzQaK7coYUxzl0b1mQ8n2T1wN76buhyXcCLipUuCZmFvwIu THIP9lt0DhKbOyWZvyqmvrWdezVqWE3racIDNxY5k2pWiP6ZTM2mCY1wnQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPSQPZ8MIL3roW3oX9XWzDDHdKWwMB8GA1UdIwQY MBaAFIqz6WXIdH4vpd3RKFdnPwYELvpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzIt MDQ0MjdhOTlmMWM1LzEvOUpBOW53d2d2ZXVoYmVoZjFkYk1NTWQwcGJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNTEzNjAtYzVjNS00YTQwLWFmNzItMDQ0MjdhOTlmMWM1 LzEvaXJQcFpjaDBmaS1sM2RFb1YyY19CZ1F1LWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9AcAwQA wWkvMA0GCSqGSIb3DQEBCwUAA4IBAQAw3We10byqxK8v9uPSf1ium3YFSAh1u6q6 HnbRKRQukuz2LO74jBYp2iaZcoS2102YqF1hkGlpCRp910WSIu2hNdodxsL596lX oc4tCc1zzhTK4kxGr1q2S8TXmExnLKibSq9AO8FvI+Udv1iwBjXgyN3PfqwkIDvN 7ng48IWuvsvZxQXE9bSMufVFQRkHwVmUedQGoAzychcWlO2oKoVcT9V8QOHNtk4k HPACxUth9mYOC9G3hCr9sSV4b2BNhOPyNDebXZx77bqGKJ+71nVjObVy0IvnDY34 aiLeaQ5kIfv6e0kLuoZ2PJTnNaoWe9iILoJqjPFx5KxBMTQ6fGAM -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:37 2026 by rpki-client