This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa File: 9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa (raw, json) Hash identifier: tmNVZ8FS/BqbujEOEGH/IyBGDDmBs9A8TZDITWSm8kc= Subject key identifier: F4:A9:83:D9:05:82:58:19:67:C1:01:A5:A4:46:C8:A0:FE:15:DA:5F Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019B7EA54862D69333D59E6D05122D9308FC Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa Signing time: Fri 02 Jan 2026 12:18:39 +0000 ROA not before: Fri 02 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272073 IP address blocks: 45.153.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:48:62:d6:93:33:d5:9e:6d:05:12:2d:93:08:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jan 2 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4a983d90582581967c101a5a446c8a0fe15da5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:9d:fd:9d:5d:f3:6d:af:e6:10:1a:48:b7: 89:18:7f:db:15:a7:d6:72:26:fb:15:ae:cb:0b:de: f1:b0:6c:e1:b7:86:40:6c:da:a3:cc:4f:51:ea:9c: a2:29:7e:04:56:80:43:8b:02:71:6a:6a:a7:38:84: 4c:46:6e:84:09:a5:db:f9:40:b3:2e:89:d5:64:1b: 8a:f7:6b:f8:12:10:a7:09:c4:52:52:49:b3:69:0c: 7a:f1:60:34:bc:1b:2b:52:e5:de:f2:7a:a8:05:da: c9:94:51:9e:1f:a7:10:1c:c7:88:a7:e8:60:23:8d: 39:cc:fd:0c:c5:85:83:b9:07:75:3f:51:4d:9a:f8: 0e:99:60:26:9c:e3:4d:a1:91:62:68:1d:57:5c:54: 0a:3c:fd:cf:f9:c0:ee:c3:ff:b3:98:e0:fb:56:9c: b7:e0:79:ad:6f:71:bd:61:50:94:4a:ca:81:13:70: ed:08:f3:f4:d1:e8:3a:3c:d4:d9:86:0c:3b:c9:52: 14:62:98:03:04:06:2c:0f:1f:30:b3:fb:76:e4:16: 05:31:27:12:5f:81:f3:07:1e:89:2d:6f:f7:d9:f3: 77:40:76:95:17:86:4d:81:f7:19:a3:fd:10:96:64: e4:4f:ef:88:bc:0f:28:a2:e7:69:f7:66:57:f8:4f: 7e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A9:83:D9:05:82:58:19:67:C1:01:A5:A4:46:C8:A0:FE:15:DA:5F X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.153.165.0/24 Signature Algorithm: sha256WithRSAEncryption 01:9d:5d:18:91:aa:f9:f8:cf:8f:35:43:4f:14:8e:6e:25:69: 49:79:37:8b:1e:89:41:74:96:bf:f5:21:e3:b8:b7:8d:5f:35: 0e:53:7d:28:eb:b7:f6:aa:09:c6:d6:83:f8:74:43:3b:88:e9: ef:a3:42:94:9f:e1:54:03:44:c3:c2:1f:07:16:e0:f6:85:ef: 0c:10:cb:1c:aa:4d:fa:a9:75:b1:ad:8c:9e:2b:ca:65:d2:b0: 51:fa:3e:5b:83:0f:db:93:c4:85:92:5c:78:ca:5c:89:b0:1b: 1e:4f:0c:d0:fd:aa:e8:ec:02:98:7a:ba:3f:c5:40:ed:90:01: 30:22:dc:27:81:81:28:a1:89:7d:f5:b7:4f:d3:53:d0:f4:45: 4a:d1:d2:ee:4d:7e:68:23:a4:5c:21:d7:79:16:b6:4f:2b:76: 0f:12:9b:c3:c2:f2:b8:09:ab:3d:fa:4e:5c:4a:95:68:bf:3c: 9c:6c:5b:0e:e9:1a:80:83:c7:ca:9a:18:3f:dd:f3:8c:8c:e6: 19:63:bf:70:a9:f2:7c:29:02:35:27:c7:a5:7c:4d:6e:3d:13: 8b:6b:e5:c5:bd:07:e4:8d:53:dc:d7:34:a7:ef:32:cb:9e:9a: 89:b0:02:bb:a0:c2:e0:22:92:a0:bf:4b:11:35:34:7f:8c:1f: 00:6d:a3:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pUhi1pMz1Z5tBRItkwj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMTAyMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGE5ODNkOTA1ODI1ODE5NjdjMTAxYTVhNDQ2YzhhMGZlMTVkYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtCd/Z1d822v5hAaSLeJGH/bFafW cib7Fa7LC97xsGzht4ZAbNqjzE9R6pyiKX4EVoBDiwJxamqnOIRMRm6ECaXb+UCz LonVZBuK92v4EhCnCcRSUkmzaQx68WA0vBsrUuXe8nqoBdrJlFGeH6cQHMeIp+hg I405zP0MxYWDuQd1P1FNmvgOmWAmnONNoZFiaB1XXFQKPP3P+cDuw/+zmOD7Vpy3 4Hmtb3G9YVCUSsqBE3DtCPP00eg6PNTZhgw7yVIUYpgDBAYsDx8ws/t25BYFMScS X4HzBx6JLW/32fN3QHaVF4ZNgfcZo/0QlmTkT++IvA8ooudp92ZX+E9+2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPSpg9kFglgZZ8EBpaRGyKD+FdpfMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvOUttRDJRV0NXQmxud1FHbHBFYklvUDRWMmw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZmlMA0G CSqGSIb3DQEBCwUAA4IBAQABnV0Ykar5+M+PNUNPFI5uJWlJeTeLHolBdJa/9SHj uLeNXzUOU30o67f2qgnG1oP4dEM7iOnvo0KUn+FUA0TDwh8HFuD2he8MEMscqk36 qXWxrYyeK8pl0rBR+j5bgw/bk8SFklx4ylyJsBseTwzQ/aro7AKYero/xUDtkAEw ItwngYEooYl99bdP01PQ9EVK0dLuTX5oI6RcIdd5FrZPK3YPEpvDwvK4Cas9+k5c SpVovzycbFsO6RqAg8fKmhg/3fOMjOYZY79wqfJ8KQI1J8elfE1uPROLa+XFvQfk jVPc1zSn7zLLnpqJsAK7oMLgIpKgv0sRNTR/jB8AbaO2 -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:35 2026 by rpki-client