This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/t9K07-YfC37xfsi0CJIfCJMmpKE.roa File: t9K07-YfC37xfsi0CJIfCJMmpKE.roa (raw, json) Hash identifier: PQbYcAqj6BprPtKQ6O22/5nEOF93VrxV7IFUUnr7fGM= Subject key identifier: B7:D2:B4:EF:E6:1F:0B:7E:F1:7E:C8:B4:08:92:1F:08:93:26:A4:A1 Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Certificate serial: 019B7AC7F425AFA47AECC605E0E2A76FCB80 Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/t9K07-YfC37xfsi0CJIfCJMmpKE.roa Signing time: Thu 01 Jan 2026 18:18:02 +0000 ROA not before: Thu 01 Jan 2026 18:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205544 IP address blocks: 92.249.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:f4:25:af:a4:7a:ec:c6:05:e0:e2:a7:6f:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd Validity Not Before: Jan 1 18:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7d2b4efe61f0b7ef17ec8b408921f089326a4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:7a:76:f8:22:e5:dc:c1:45:8c:99:83:50: 5e:b9:ab:38:f0:07:48:f3:b7:ad:98:72:db:2c:80: b4:ca:36:64:2a:a4:4b:bc:f4:bb:0a:5c:83:f7:e6: ef:84:a1:a3:a5:f5:9a:d5:98:86:b9:a5:82:d5:7b: be:21:fc:80:7e:a0:b3:15:9f:d0:d1:bb:80:31:d2: 36:66:63:a5:cf:d8:f7:ad:ee:78:da:aa:29:86:13: ae:61:5c:7b:f6:5d:29:ba:10:0d:e7:92:27:4a:10: bb:2f:2f:ed:d0:4e:d5:ba:41:a5:c9:b7:15:32:16: a8:3e:9c:67:bd:c6:0f:85:04:f8:0f:fd:57:66:1e: c5:68:8d:4d:f3:7f:e8:f5:ab:0d:04:cb:db:57:09: 40:5c:87:79:1a:c0:12:09:67:e4:fe:8a:0a:1d:d1: 37:35:33:69:3d:53:c4:f8:34:dd:9d:ee:d5:17:2b: 1b:2e:1b:75:81:0d:a2:76:f1:c6:66:41:0a:3c:ee: 83:13:8f:12:d7:f7:1a:1b:08:ad:4d:04:82:31:10: f8:35:66:96:31:d6:30:5d:f0:46:f0:7e:d0:12:91: ee:c5:8b:24:bf:c0:99:07:62:21:f6:f5:12:00:1a: 11:ac:c3:60:21:27:b9:23:2b:4d:2a:9e:0f:7b:61: b9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D2:B4:EF:E6:1F:0B:7E:F1:7E:C8:B4:08:92:1F:08:93:26:A4:A1 X509v3 Authority Key Identifier: keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/t9K07-YfC37xfsi0CJIfCJMmpKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.249.32.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:0b:e3:36:39:26:79:ed:23:db:62:3e:49:d9:dd:b7:70:f8: 9b:f8:15:0a:0b:cd:87:15:21:d0:31:ce:d9:25:cb:7d:39:ba: a1:9e:aa:90:8e:16:db:df:7d:84:f1:96:2a:4e:80:52:50:cc: 29:ae:20:04:b4:da:5f:a6:a4:80:da:99:05:0e:44:c1:12:57: 13:73:cc:b1:16:0f:70:ea:2a:ab:e4:c3:5b:3c:f8:41:12:f2: 2e:00:e7:39:7d:04:ff:93:9c:c4:53:d9:27:36:30:15:6f:c8: 84:96:ca:bf:17:20:60:7b:66:d1:3b:3b:43:ee:a0:c1:3a:9b: 4d:0e:bc:ab:4c:fd:25:53:db:09:bd:d3:ef:65:11:59:8a:7d: 59:db:6b:99:e7:fc:99:39:81:c7:b7:0a:02:f0:14:fa:da:39: fe:05:b5:95:53:31:e1:f0:ad:58:b5:64:20:a4:a4:ac:b8:9c: 92:4a:ce:c8:2c:ca:5b:c3:a2:56:db:0b:9d:9b:82:94:57:c0: 19:b4:c0:3d:cb:d7:3c:ee:cd:12:e9:0d:51:d6:1b:ec:06:ab: bd:7d:93:4d:2d:fe:7b:b3:68:dd:e0:4e:d4:ea:da:a9:91:e4: 7b:ee:ea:bd:cf:03:c8:87:7c:a6:18:f5:fa:d5:f0:48:b5:51: 38:a6:f6:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x/Qlr6R67MYF4OKnb8uAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy MDU0ZGQwHhcNMjYwMTAxMTgxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2QyYjRlZmU2MWYwYjdlZjE3ZWM4YjQwODkyMWYwODkzMjZhNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC56dvgi5dzBRYyZg1Beuas48AdI 87etmHLbLIC0yjZkKqRLvPS7ClyD9+bvhKGjpfWa1ZiGuaWC1Xu+IfyAfqCzFZ/Q 0buAMdI2ZmOlz9j3re542qophhOuYVx79l0puhAN55InShC7Ly/t0E7VukGlybcV MhaoPpxnvcYPhQT4D/1XZh7FaI1N83/o9asNBMvbVwlAXId5GsASCWfk/ooKHdE3 NTNpPVPE+DTdne7VFysbLht1gQ2idvHGZkEKPO6DE48S1/caGwitTQSCMRD4NWaW MdYwXfBG8H7QEpHuxYskv8CZB2Ih9vUSABoRrMNgISe5IytNKp4Pe2G5EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfStO/mHwt+8X7ItAiSHwiTJqShMB8GA1UdIwQY MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt ZTQ5NWFhYTBjYWMwLzEvdDlLMDctWWZDMzd4ZnNpMENKSWZDSk1tcEtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXPkgMA0G CSqGSIb3DQEBCwUAA4IBAQAtC+M2OSZ57SPbYj5J2d23cPib+BUKC82HFSHQMc7Z Jct9ObqhnqqQjhbb332E8ZYqToBSUMwpriAEtNpfpqSA2pkFDkTBElcTc8yxFg9w 6iqr5MNbPPhBEvIuAOc5fQT/k5zEU9knNjAVb8iElsq/FyBge2bROztD7qDBOptN DryrTP0lU9sJvdPvZRFZin1Z22uZ5/yZOYHHtwoC8BT62jn+BbWVUzHh8K1YtWQg pKSsuJySSs7ILMpbw6JW2wudm4KUV8AZtMA9y9c87s0S6Q1R1hvsBqu9fZNNLf57 s2jd4E7U6tqpkeR77uq9zwPIh3ymGPX61fBItVE4pvbO -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:26 2026 by rpki-client