This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/gIP9USWnnclcg29VZ6IPiCLAwfs.roa File: gIP9USWnnclcg29VZ6IPiCLAwfs.roa (raw, json) Hash identifier: 5kwZkbeysJwaJZe9nLV8atLbSq1wE0MO56m8K6TUyD0= Subject key identifier: 80:83:FD:51:25:A7:9D:C9:5C:83:6F:55:67:A2:0F:88:22:C0:C1:FB Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019BB2D88AFBF343F0082FEEBC9BBA760AF0 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/gIP9USWnnclcg29VZ6IPiCLAwfs.roa Signing time: Mon 12 Jan 2026 15:34:54 +0000 ROA not before: Mon 12 Jan 2026 15:34:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211009 IP address blocks: 2a09:9300::/29 maxlen: 29 2a09:ba40::/29 maxlen: 29 2a0b:9480::/29 maxlen: 29 2a12:46c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:d8:8a:fb:f3:43:f0:08:2f:ee:bc:9b:ba:76:0a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 12 15:34:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8083fd5125a79dc95c836f5567a20f8822c0c1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d3:94:a3:0f:47:7f:c9:a2:b3:93:43:be:5a: 5d:20:ba:91:b4:42:ee:fc:2d:3b:33:91:33:a4:d9: 3b:be:b6:64:eb:d6:86:29:ea:da:ee:c6:98:53:ac: 23:dc:32:0a:66:5a:d9:b1:00:67:b3:85:66:e0:f8: 02:7c:91:f7:31:fd:66:c8:96:61:27:bd:78:61:60: 17:55:02:0a:b1:e2:1d:b5:b7:3d:c7:66:20:ae:d7: 36:07:e9:c4:fe:e2:ab:19:83:e6:a9:ea:36:c7:17: 25:2c:1c:86:dc:3f:f7:02:35:60:5c:21:a0:78:f2: 5b:67:eb:c1:53:ec:49:fe:fa:0b:fe:23:fe:d6:47: e3:a5:f5:88:43:c1:df:b2:c2:67:14:ce:e1:40:74: 14:18:ba:15:cd:61:a5:d4:3e:b0:2f:22:21:80:47: 48:28:20:f2:f9:14:2d:af:83:18:78:95:be:e6:f6: 93:d9:e9:a4:e4:c1:8e:89:9f:ef:96:13:2b:14:3c: 6f:7e:a8:8a:88:6c:cc:20:dc:a2:9c:66:04:87:5e: 3c:d1:97:0b:9a:83:1f:f1:ea:fa:2b:a2:37:b4:aa: 1b:9b:b8:ac:9f:04:bb:57:ab:c9:76:cb:b8:91:e8: 27:cd:2a:ad:53:05:bc:8b:a9:3f:43:ea:09:54:e0: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:83:FD:51:25:A7:9D:C9:5C:83:6F:55:67:A2:0F:88:22:C0:C1:FB X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/gIP9USWnnclcg29VZ6IPiCLAwfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:9300::/29 2a09:ba40::/29 2a0b:9480::/29 2a12:46c0::/29 Signature Algorithm: sha256WithRSAEncryption 82:fe:32:93:95:e4:ef:38:5e:ba:7a:0a:56:68:27:5a:7f:74: 77:32:55:04:e9:bf:d5:19:95:ad:f4:7b:68:66:3f:39:ae:e9: 57:92:29:56:62:80:e9:aa:67:f9:ef:e6:24:7d:1f:a4:6c:83: 41:a5:04:e7:dd:b4:4c:aa:1c:9d:c7:62:b9:06:bd:21:53:f5: 9e:75:3a:be:0e:0c:26:9d:25:00:eb:d7:7c:5e:12:e8:6d:f7: 9c:22:c7:d1:b6:97:db:31:ee:dd:58:e0:9b:10:d2:3f:0b:17: 1c:4d:d5:04:be:96:b7:80:ab:06:4a:19:60:da:68:ea:0a:58: 41:6f:de:38:07:f3:36:b5:2e:a0:e0:c1:3a:8e:d1:4c:5d:ed: ac:fc:d3:89:46:06:c9:1d:70:2b:3f:6f:6d:4e:ce:ec:7f:d1: 94:81:eb:60:1a:ff:0a:23:c4:a4:ab:81:c5:28:80:cc:79:c6: 7d:cd:16:88:7a:27:01:9c:56:a1:98:93:c9:e5:ed:0a:99:81: 6d:a0:69:b1:57:18:a7:10:c2:91:fc:30:f1:de:51:f8:81:64: 93:90:13:92:98:17:47:93:91:e0:ec:39:fb:41:1d:3e:c6:7c: bc:bf:cf:80:cc:f6:cd:07:79:66:45:f4:2e:2c:ad:92:fe:e9: 46:ec:c8:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZuy2Ir780PwCC/uvJu6dgrwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTEyMTUzNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDgzZmQ1MTI1YTc5ZGM5NWM4MzZmNTU2N2EyMGY4ODIyYzBjMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudOUow9Hf8mis5NDvlpdILqRtELu /C07M5EzpNk7vrZk69aGKera7saYU6wj3DIKZlrZsQBns4Vm4PgCfJH3Mf1myJZh J714YWAXVQIKseIdtbc9x2Ygrtc2B+nE/uKrGYPmqeo2xxclLByG3D/3AjVgXCGg ePJbZ+vBU+xJ/voL/iP+1kfjpfWIQ8HfssJnFM7hQHQUGLoVzWGl1D6wLyIhgEdI KCDy+RQtr4MYeJW+5vaT2emk5MGOiZ/vlhMrFDxvfqiKiGzMINyinGYEh1480ZcL moMf8er6K6I3tKobm7isnwS7V6vJdsu4kegnzSqtUwW8i6k/Q+oJVOAZLQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFICD/VElp53JXINvVWeiD4giwMH7MB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvZ0lQOVVTV25uY2xjZzI5Vlo2SVBpQ0xBd2ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKgmTAAMF AyoJukADBQMqC5SAAwUDKhJGwDANBgkqhkiG9w0BAQsFAAOCAQEAgv4yk5Xk7zhe unoKVmgnWn90dzJVBOm/1RmVrfR7aGY/Oa7pV5IpVmKA6apn+e/mJH0fpGyDQaUE 5920TKocncdiuQa9IVP1nnU6vg4MJp0lAOvXfF4S6G33nCLH0baX2zHu3VjgmxDS PwsXHE3VBL6Wt4CrBkoZYNpo6gpYQW/eOAfzNrUuoODBOo7RTF3trPzTiUYGyR1w Kz9vbU7O7H/RlIHrYBr/CiPEpKuBxSiAzHnGfc0WiHonAZxWoZiTyeXtCpmBbaBp sVcYpxDCkfww8d5R+IFkk5ATkpgXR5OR4Ow5+0EdPsZ8vL/PgMz2zQd5ZkX0Liyt kv7pRuzIiQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:29 2026 by rpki-client