This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/9wxon_jSPGs29d0oz5cGIJC4nyg.roa File: 9wxon_jSPGs29d0oz5cGIJC4nyg.roa (raw, json) Hash identifier: Xz4cE3NQ80mMRNxOjLbkBn+IL5J1nET+/jUfxtIVjP8= Subject key identifier: F7:0C:68:9F:F8:D2:3C:6B:36:F5:DD:28:CF:97:06:20:90:B8:9F:28 Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094 Certificate serial: 019B7EA72F9022561FDAD3C88CBC13CBA767 Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/9wxon_jSPGs29d0oz5cGIJC4nyg.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47693 IP address blocks: 185.43.31.0/24 maxlen: 24 2a10:48c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2f:90:22:56:1f:da:d3:c8:8c:bc:13:cb:a7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094 Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f70c689ff8d23c6b36f5dd28cf97062090b89f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:0a:18:b3:40:26:1e:1a:22:ed:14:42:fe: 9e:94:40:70:45:74:07:60:d3:51:6b:ee:46:10:1e: df:69:f0:44:6d:9c:ea:04:27:3c:50:2f:b9:37:dc: b8:d2:ed:09:a5:67:ad:ab:bc:3b:cf:88:45:df:89: e4:b1:4a:e1:1b:bc:4a:71:ff:63:7d:03:1e:ee:08: bb:51:b4:e0:a0:5c:2a:38:2b:3c:7b:2c:a0:52:98: ee:94:a0:b3:aa:89:ac:5f:96:be:68:f8:04:c7:bc: ed:f6:51:8e:92:33:84:b5:09:64:bc:20:5e:d1:52: 4f:49:95:5f:b4:0b:84:7d:3a:e2:3b:5d:5d:41:ac: 00:a7:57:9c:e7:94:91:0b:b5:2a:be:8a:f6:18:7a: 91:e6:ef:d1:f3:d5:e4:44:aa:00:78:f0:09:3a:5f: f1:65:fe:28:2e:33:e0:68:48:76:90:22:9f:e3:24: 69:cf:ef:73:4d:3f:c5:97:55:a8:63:99:a8:05:9d: 50:db:41:a4:7b:76:17:0b:08:86:9b:e9:e9:20:3a: cf:4f:18:e6:e2:8a:99:48:0d:3e:56:32:04:e1:4c: 34:e4:63:30:54:44:52:5a:b4:bf:ac:47:eb:9c:a1: 4f:a2:6a:56:73:d4:ff:7b:dd:4f:9c:5a:67:50:3f: 55:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0C:68:9F:F8:D2:3C:6B:36:F5:DD:28:CF:97:06:20:90:B8:9F:28 X509v3 Authority Key Identifier: keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/9wxon_jSPGs29d0oz5cGIJC4nyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.31.0/24 IPv6: 2a10:48c0::/29 Signature Algorithm: sha256WithRSAEncryption 39:9b:d2:8a:f9:62:5b:01:4b:97:8d:8f:ca:87:ba:0c:a2:e1: 7f:c6:db:e4:dc:12:76:f9:fe:36:29:dc:b1:c3:dc:0f:16:8c: c9:76:f8:ed:2e:03:09:80:df:47:86:18:a2:98:a4:85:05:9e: c3:ea:90:45:f3:19:1a:2d:09:74:4f:01:4a:c4:48:d5:32:cb: 9b:48:20:e4:61:9a:45:64:5a:b0:ae:ac:1a:2d:2d:29:1f:8a: d1:16:ae:8c:82:13:2f:a5:01:78:b7:5b:2e:e9:ba:eb:15:8e: 62:24:2e:50:6e:ee:c7:36:d8:78:3a:f5:f7:11:39:80:9f:82: 64:59:36:06:88:31:65:b2:21:77:97:25:59:04:7d:ac:72:b8: 57:f7:8a:80:2e:1f:bf:9f:c1:f5:8c:90:64:e5:64:27:07:66: 7d:e4:4c:38:d9:b1:a1:23:5c:bd:49:70:57:51:71:ca:75:ad: b9:5c:61:f3:c3:04:13:80:5a:56:89:8d:71:28:a9:59:0d:32: 9f:41:1e:4b:4f:5f:b9:ce:0e:58:6a:f0:3f:8e:0a:ae:e9:13: 08:c0:d3:6c:00:ab:62:41:5d:5d:d3:5e:40:8e:f2:f6:08:89: 50:fe:e4:97:7d:7f:5b:c5:6f:4b:f7:08:ba:4b:ad:1a:cc:29: f6:fb:9f:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+py+QIlYf2tPIjLwTy6dnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTY3OTRiOTFiODE0MDY0MTJhMTM3ODcwYmZkZTNiMTcw ZGUwOTQwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzBjNjg5ZmY4ZDIzYzZiMzZmNWRkMjhjZjk3MDYyMDkwYjg5ZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstwKGLNAJh4aIu0UQv6elEBwRXQH YNNRa+5GEB7fafBEbZzqBCc8UC+5N9y40u0JpWetq7w7z4hF34nksUrhG7xKcf9j fQMe7gi7UbTgoFwqOCs8eyygUpjulKCzqomsX5a+aPgEx7zt9lGOkjOEtQlkvCBe 0VJPSZVftAuEfTriO11dQawAp1ec55SRC7Uqvor2GHqR5u/R89XkRKoAePAJOl/x Zf4oLjPgaEh2kCKf4yRpz+9zTT/Fl1WoY5moBZ1Q20Gke3YXCwiGm+npIDrPTxjm 4oqZSA0+VjIE4Uw05GMwVERSWrS/rEfrnKFPompWc9T/e91PnFpnUD9VGQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPcMaJ/40jxrNvXdKM+XBiCQuJ8oMB8GA1UdIwQY MBaAFOWmeUuRuBQGQSoTeHC/3jsXDeCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjIt NTg3MjEwOWI2N2E4LzEvOXd4b25falNQR3MyOWQwb3o1Y0dJSkM0bnlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jYTM0ZWItOGUyMC00YmYxLWIxYjItNTg3MjEwOWI2N2E4 LzEvNWFaNVM1RzRGQVpCS2hONGNMX2VPeGNONEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuSsfMA0E AgACMAcDBQMqEEjAMA0GCSqGSIb3DQEBCwUAA4IBAQA5m9KK+WJbAUuXjY/Kh7oM ouF/xtvk3BJ2+f42Kdyxw9wPFozJdvjtLgMJgN9HhhiimKSFBZ7D6pBF8xkaLQl0 TwFKxEjVMsubSCDkYZpFZFqwrqwaLS0pH4rRFq6MghMvpQF4t1su6brrFY5iJC5Q bu7HNth4OvX3ETmAn4JkWTYGiDFlsiF3lyVZBH2scrhX94qALh+/n8H1jJBk5WQn B2Z95Ew42bGhI1y9SXBXUXHKda25XGHzwwQTgFpWiY1xKKlZDTKfQR5LT1+5zg5Y avA/jgqu6RMIwNNsAKtiQV1d015AjvL2CIlQ/uSXfX9bxW9L9wi6S60azCn2+58V -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:00 2026 by rpki-client