This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/_n9Da1G8YJ8NYQdVuZcssGdIcSQ.roa File: _n9Da1G8YJ8NYQdVuZcssGdIcSQ.roa (raw, json) Hash identifier: FG3nlGn4KT8ZKEdCyWE6nrHnRcSjZ6JVs88QiZJqA1U= Subject key identifier: FE:7F:43:6B:51:BC:60:9F:0D:61:07:55:B9:97:2C:B0:67:48:71:24 Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019BEFB0F57F0AF5F62D1C24A234C7ED45E7 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/_n9Da1G8YJ8NYQdVuZcssGdIcSQ.roa Signing time: Sat 24 Jan 2026 11:08:30 +0000 ROA not before: Sat 24 Jan 2026 11:08:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209183 IP address blocks: 72.56.47.0/24 maxlen: 24 72.56.48.0/24 maxlen: 24 72.56.49.0/24 maxlen: 24 72.56.50.0/24 maxlen: 24 72.56.51.0/24 maxlen: 24 72.56.59.0/24 maxlen: 24 72.56.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:b0:f5:7f:0a:f5:f6:2d:1c:24:a2:34:c7:ed:45:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jan 24 11:08:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe7f436b51bc609f0d610755b9972cb067487124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5a:f5:e8:71:87:d1:0c:c9:dd:3c:27:52:f3: e8:f9:07:59:52:42:f7:07:f0:01:b6:f1:22:25:1f: 6d:e1:fa:26:0f:3b:ab:69:5f:3b:bc:45:48:69:8f: 28:9d:df:3a:70:43:5b:3e:8d:0c:5e:fc:fd:bb:41: 02:bd:16:6d:3d:93:6a:c4:71:ba:b5:81:5d:8b:02: 38:01:18:12:3e:2e:ed:ae:21:51:6d:22:60:e0:89: 08:4a:d9:04:b5:40:b7:d8:24:f7:02:93:e9:4e:9b: c4:4c:94:70:ec:56:d8:52:4b:c4:1e:76:3e:21:0d: 20:67:d5:ed:da:b3:93:91:58:57:22:a4:e7:eb:18: ef:be:33:4b:e0:87:2d:28:39:9e:1b:30:f0:c8:f1: 83:2b:57:b9:84:a6:f5:16:be:4a:53:16:27:8a:b5: a6:a8:9f:51:f9:55:fa:b3:9e:f2:41:1f:a0:5a:00: 34:55:fb:7b:5f:f0:e7:7c:8f:37:35:a1:30:23:3c: 9e:95:b8:2a:3b:fa:47:6a:d1:71:e2:94:b9:7f:44: 31:71:38:c9:6c:de:3b:6d:e9:26:9a:6b:16:40:5c: b5:a6:9c:bb:9e:63:d6:03:cf:f0:25:33:9e:54:fd: 76:f5:92:3c:28:b8:84:93:b1:dd:3d:a7:01:cc:aa: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7F:43:6B:51:BC:60:9F:0D:61:07:55:B9:97:2C:B0:67:48:71:24 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/_n9Da1G8YJ8NYQdVuZcssGdIcSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 72.56.47.0-72.56.51.255 72.56.59.0-72.56.60.255 Signature Algorithm: sha256WithRSAEncryption 4d:1f:54:46:0d:a8:d2:2b:84:54:cf:8f:fd:1e:7c:be:a8:d1: 4d:89:4a:2e:6d:c7:79:6e:48:ba:bf:34:ad:55:89:e8:7e:1b: e3:31:25:b8:a0:e9:60:e3:50:63:47:28:62:07:27:5f:3f:70: 17:6d:a5:da:00:8f:71:6f:52:d9:c8:93:c5:b9:f7:17:3e:36: 5f:dd:71:43:bd:ed:60:e7:fb:c3:77:ab:16:a4:ad:51:ec:2d: f6:a3:48:55:0e:af:f5:0a:b3:7e:e4:e0:85:ef:3d:be:53:28: 23:fe:23:f3:46:e0:2e:92:1c:19:f9:f0:a4:a4:62:7e:70:e3: 34:31:48:ee:34:b2:b8:9b:2f:92:23:26:32:bb:3e:27:a0:0b: f8:d8:e7:ca:18:08:4e:13:ca:ac:eb:e7:92:bf:82:7a:a3:8d: 5d:88:80:c0:21:a0:a4:2d:f4:c1:2f:f9:28:d8:33:e8:13:be: f6:29:f4:a8:69:e4:8e:66:fd:8f:52:cc:03:fb:a4:8d:68:75: 83:60:2c:90:51:46:ac:2f:f0:b4:f3:3e:d9:67:13:c4:e4:0b: 11:a2:0a:a6:28:91:30:c3:d7:db:89:b7:39:80:51:14:2e:c6: 9a:8e:44:1b:b9:12:1e:d0:c4:11:6c:00:f8:b6:05:ec:69:86: d3:60:f2:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZvvsPV/CvX2LRwkojTH7UXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwMTI0MTEwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTdmNDM2YjUxYmM2MDlmMGQ2MTA3NTViOTk3MmNiMDY3NDg3MTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Fr16HGH0QzJ3TwnUvPo+QdZUkL3 B/ABtvEiJR9t4fomDzuraV87vEVIaY8ond86cENbPo0MXvz9u0ECvRZtPZNqxHG6 tYFdiwI4ARgSPi7triFRbSJg4IkIStkEtUC32CT3ApPpTpvETJRw7FbYUkvEHnY+ IQ0gZ9Xt2rOTkVhXIqTn6xjvvjNL4IctKDmeGzDwyPGDK1e5hKb1Fr5KUxYnirWm qJ9R+VX6s57yQR+gWgA0Vft7X/DnfI83NaEwIzyelbgqO/pHatFx4pS5f0QxcTjJ bN47bekmmmsWQFy1ppy7nmPWA8/wJTOeVP129ZI8KLiEk7HdPacBzKo3bQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFP5/Q2tRvGCfDWEHVbmXLLBnSHEkMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvX245RGExRzhZSjhOWVFkVnVaY3NzR2RJY1NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABIOC8D BAJIODAwDAMEAEg4OwMEAEg4PDANBgkqhkiG9w0BAQsFAAOCAQEATR9URg2o0iuE VM+P/R58vqjRTYlKLm3HeW5Iur80rVWJ6H4b4zEluKDpYONQY0coYgcnXz9wF22l 2gCPcW9S2ciTxbn3Fz42X91xQ73tYOf7w3erFqStUewt9qNIVQ6v9QqzfuTghe89 vlMoI/4j80bgLpIcGfnwpKRifnDjNDFI7jSyuJsvkiMmMrs+J6AL+NjnyhgIThPK rOvnkr+CeqONXYiAwCGgpC30wS/5KNgz6BO+9in0qGnkjmb9j1LMA/ukjWh1g2As kFFGrC/wtPM+2WcTxOQLEaIKpiiRMMPX24m3OYBRFC7Gmo5EG7kSHtDEEWwA+LYF 7GmG02Dywg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:23:41 2026 by rpki-client