This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/9EpR1rVG3gEeM2Zf3h6LYTYg6to.roa File: 9EpR1rVG3gEeM2Zf3h6LYTYg6to.roa (raw, json) Hash identifier: wvqQYfkHSg0wNakBID4mOIFuwCO/PvWGLwmiV7KYGx8= Subject key identifier: F4:4A:51:D6:B5:46:DE:01:1E:33:66:5F:DE:1E:8B:61:36:20:EA:DA Certificate issuer: /CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08 Certificate serial: 019AF3C733EF55C2E86D150F9D04DA36AB1F Authority key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/9EpR1rVG3gEeM2Zf3h6LYTYg6to.roa Signing time: Sat 06 Dec 2025 13:08:29 +0000 ROA not before: Sat 06 Dec 2025 13:08:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39571 IP address blocks: 89.235.64.0/22 maxlen: 22 89.235.64.0/24 maxlen: 24 89.235.65.0/24 maxlen: 24 89.235.66.0/24 maxlen: 24 89.235.67.0/24 maxlen: 24 185.135.28.0/22 maxlen: 22 185.135.28.0/24 maxlen: 24 185.135.29.0/24 maxlen: 24 185.135.30.0/24 maxlen: 24 185.135.31.0/24 maxlen: 24 2a06:f100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c7:33:ef:55:c2:e8:6d:15:0f:9d:04:da:36:ab:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08 Validity Not Before: Dec 6 13:08:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f44a51d6b546de011e33665fde1e8b613620eada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:3f:a6:7a:8d:6f:b2:76:3f:c2:37:92:be: f4:6f:69:58:49:f4:c8:b0:78:a7:83:ce:bd:ff:1b: 16:62:53:75:9a:a7:06:d7:b8:3f:93:88:fb:d2:b4: f0:97:f0:d3:56:8c:00:86:b2:f2:b8:b6:f6:78:82: ea:0d:40:b0:b6:8d:a9:8c:ac:80:38:91:b8:76:de: 23:9b:ea:48:6f:5c:09:62:5e:7c:f1:04:37:34:9f: c9:16:7f:3e:dd:70:ac:a6:66:0b:8e:06:bc:3f:78: 23:8b:90:b2:3a:44:99:cd:65:e1:6f:c5:59:6d:64: 11:61:1a:31:3f:67:60:b0:25:8d:c8:54:6f:64:47: b2:83:76:7b:7d:6a:0e:1d:1b:c6:a6:81:bc:f6:80: 94:40:a7:3a:5a:ba:b2:0f:8c:e7:09:72:28:1e:4c: 43:d2:98:96:42:0b:9f:c7:3b:92:35:0e:46:fc:b6: 14:04:67:1b:db:51:7a:97:73:22:cd:6c:4f:39:9d: 94:3c:46:62:09:2c:ac:90:9c:98:e0:3c:74:1a:b2: f9:e2:19:9b:57:93:65:a0:2c:e3:fb:55:66:ef:d0: de:f6:3f:72:70:41:61:87:dd:ea:71:99:fc:c3:cb: ac:b9:c4:93:35:ff:de:fa:2e:b0:bd:83:0b:76:38: 48:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4A:51:D6:B5:46:DE:01:1E:33:66:5F:DE:1E:8B:61:36:20:EA:DA X509v3 Authority Key Identifier: keyid:BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/9EpR1rVG3gEeM2Zf3h6LYTYg6to.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.235.64.0/22 185.135.28.0/22 IPv6: 2a06:f100::/29 Signature Algorithm: sha256WithRSAEncryption 6f:fa:65:98:a8:57:17:ff:1c:97:84:d1:1a:2d:d4:18:aa:18: 9b:4d:df:37:c2:f0:4e:f9:a3:86:61:7f:91:af:66:e9:f5:f1: f9:68:4e:70:10:d5:24:de:a3:fd:7e:ca:75:17:ce:6f:08:f0: ca:1a:03:f2:f3:eb:30:2c:5a:6f:54:4e:4c:be:f7:25:91:2e: 61:ac:79:7b:14:f6:1c:52:db:73:f8:b0:5e:12:3f:02:b1:11: 7e:33:09:94:45:f1:2f:81:00:e6:08:3f:a5:b0:0c:cf:58:be: 41:10:21:4c:6d:93:d8:a4:19:98:2b:6e:e7:d5:2a:64:7c:d9: f9:5a:18:d7:38:ae:38:e2:ac:da:3a:7e:9c:f3:af:96:6d:9c: 5e:5a:0d:32:42:86:9a:ab:0d:50:84:78:e1:c3:70:a9:b3:e4: 39:33:60:41:38:59:d6:4a:65:e2:3f:3a:91:69:96:04:33:7d: ec:44:c1:a3:a5:9b:1e:43:85:31:f8:1d:89:08:39:3a:2c:b4: 19:4e:87:00:c8:2c:e2:b3:4f:97:ce:80:f1:fe:47:19:6b:8c: 4b:97:12:c2:27:e9:8c:1c:fc:30:ee:33:c5:8c:1c:81:6a:51: 5b:3b:ea:f9:a7:82:88:4e:5f:1d:e8:6a:93:8f:58:16:b3:d7: 1e:ad:3e:fc -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZrzxzPvVcLobRUPnQTaNqsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWYxNTliYWI4MzY2MWZkOTNlYWQ0MzBjM2JkYjFlYWE3 ZWFmMDgwHhcNMjUxMjA2MTMwODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDRhNTFkNmI1NDZkZTAxMWUzMzY2NWZkZTFlOGI2MTM2MjBlYWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsng/pnqNb7J2P8I3kr70b2lYSfTI sHing869/xsWYlN1mqcG17g/k4j70rTwl/DTVowAhrLyuLb2eILqDUCwto2pjKyA OJG4dt4jm+pIb1wJYl588QQ3NJ/JFn8+3XCspmYLjga8P3gji5CyOkSZzWXhb8VZ bWQRYRoxP2dgsCWNyFRvZEeyg3Z7fWoOHRvGpoG89oCUQKc6WrqyD4znCXIoHkxD 0piWQgufxzuSNQ5G/LYUBGcb21F6l3MizWxPOZ2UPEZiCSyskJyY4Dx0GrL54hmb V5NloCzj+1Vm79De9j9ycEFhh93qcZn8w8usucSTNf/e+i6wvYMLdjhIKQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPRKUda1Rt4BHjNmX94ei2E2IOraMB8GA1UdIwQY MBaAFL6fFZurg2Yf2T6tQww72x6qfq8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnA4Vm02dURaaF9aUHExREREdmJIcXAtcndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hNDgxZmEtMmQwZC00ZThlLWIyZDMt MjhkODI0OGI1YjYxLzEvOUVwUjFyVkczZ0VlTTJaZjNoNkxZVFlnNnRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hNDgxZmEtMmQwZC00ZThlLWIyZDMtMjhkODI0OGI1YjYx LzEvdnA4Vm02dURaaF9aUHExREREdmJIcXAtcndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCWetAAwQC uYccMA0EAgACMAcDBQMqBvEAMA0GCSqGSIb3DQEBCwUAA4IBAQBv+mWYqFcX/xyX hNEaLdQYqhibTd83wvBO+aOGYX+Rr2bp9fH5aE5wENUk3qP9fsp1F85vCPDKGgPy 8+swLFpvVE5MvvclkS5hrHl7FPYcUttz+LBeEj8CsRF+MwmURfEvgQDmCD+lsAzP WL5BECFMbZPYpBmYK27n1SpkfNn5WhjXOK444qzaOn6c86+WbZxeWg0yQoaaqw1Q hHjhw3Cps+Q5M2BBOFnWSmXiPzqRaZYEM33sRMGjpZseQ4Ux+B2JCDk6LLQZTocA yCzis0+XzoDx/kcZa4xLlxLCJ+mMHPww7jPFjByBalFbO+r5p4KITl8d6GqTj1gW s9cerT78 -----END CERTIFICATE-----Generated at Sat Dec 6 21:52:03 2025 by rpki-client