This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/0Id9ZYia89tn9rGbVp1WccKbdLs.roa File: 0Id9ZYia89tn9rGbVp1WccKbdLs.roa (raw, json) Hash identifier: H/d3G1LlSq5Lm4RmW5/Q0ROpxkgSnJpVhWwEfjRrmCE= Subject key identifier: D0:87:7D:65:88:9A:F3:DB:67:F6:B1:9B:56:9D:56:71:C2:9B:74:BB Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce Certificate serial: 019B783542378D7BCE9D9CE1049FFE387D68 Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/0Id9ZYia89tn9rGbVp1WccKbdLs.roa Signing time: Thu 01 Jan 2026 06:18:34 +0000 ROA not before: Thu 01 Jan 2026 06:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31138 IP address blocks: 83.217.0.0/22 maxlen: 22 2a00:d8c0::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.mft rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:42:37:8d:7b:ce:9d:9c:e1:04:9f:fe:38:7d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce Validity Not Before: Jan 1 06:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0877d65889af3db67f6b19b569d5671c29b74bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ff:11:4b:71:c1:7d:be:7a:13:9b:c3:58:f5: 23:9f:c3:e1:35:66:b3:c2:bf:3c:aa:ca:9a:41:ed: 08:f6:64:4c:1f:e7:4d:e7:6f:6e:31:3f:c0:23:f0: 9b:45:7a:e8:89:f8:74:d5:38:d1:60:5c:37:f6:bd: ed:cd:37:fe:94:6e:4f:3e:aa:2b:22:0f:fe:30:a7: 64:c7:16:23:48:70:31:2b:1c:d7:b5:27:fa:04:37: 43:f0:68:2c:10:1d:67:dc:6e:ac:06:68:a0:91:86: df:08:71:83:8a:f8:ee:ed:8f:11:1f:97:86:5f:9a: 7d:0b:63:08:c1:85:ef:50:a0:f3:48:60:df:85:21: 8f:58:1c:8f:b8:c8:b6:b8:87:52:a8:40:50:19:f6: 86:98:a6:8d:8b:23:4e:fe:40:1e:31:8e:c5:c6:f0: 99:b3:27:17:75:43:42:5b:20:de:c4:b6:f1:64:88: 14:50:1f:db:5c:b5:c1:b2:c1:86:8b:d1:0f:43:9a: 26:bc:52:d5:e2:88:f2:6b:6a:53:9e:19:10:9b:4a: 60:38:1c:b7:b9:17:87:1c:af:a3:97:21:bb:cd:79: 21:40:23:99:d7:2e:f6:8e:ad:4d:3a:80:94:2c:27: c1:86:1c:29:c7:c0:39:72:7a:b3:05:d4:e9:51:d1: ba:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:87:7D:65:88:9A:F3:DB:67:F6:B1:9B:56:9D:56:71:C2:9B:74:BB X509v3 Authority Key Identifier: keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/0Id9ZYia89tn9rGbVp1WccKbdLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.217.0.0/22 IPv6: 2a00:d8c0::/48 Signature Algorithm: sha256WithRSAEncryption 09:36:2d:11:5f:71:c5:a3:ba:c5:f9:31:5f:dc:ef:bb:b0:42: ef:84:1d:ab:c2:ec:ef:84:4c:13:d7:ca:9e:e8:66:ae:2e:30: 2c:63:48:2e:b8:2b:40:e7:96:61:ee:27:62:c9:c6:df:43:56: b9:f7:7b:3c:49:21:c8:67:64:f7:60:c6:c7:1d:e2:26:18:1b: f6:d1:f3:c1:7f:a6:62:19:54:38:db:e6:cc:32:be:56:58:2b: a2:ff:f1:03:ec:0d:ff:0d:5f:80:c8:ad:02:2b:f2:15:69:4b: bf:ce:a4:c1:ff:eb:0a:d8:63:3b:a4:d2:d5:98:88:b1:a0:6c: 96:69:04:d7:ab:1a:3e:ef:bf:d7:17:4e:40:2b:79:ed:cf:8d: 8a:f2:81:f1:8e:69:92:37:b7:0a:b7:f9:14:e8:a6:83:8a:46: d5:4d:0c:5a:d7:17:ba:39:35:2d:0d:e6:22:89:7b:1c:bb:2b: a5:89:b9:b5:b7:a1:db:90:0d:ee:31:42:85:bc:d0:6f:68:d2: 7d:e9:b0:33:d5:ce:a5:1b:26:bd:9c:2b:50:bd:0e:8e:7f:30: 47:c4:3f:e6:08:a2:7b:6b:1c:b4:60:b4:75:41:41:94:9d:91: 25:cc:05:81:04:6a:22:b0:f5:cb:c5:ba:94:78:97:2b:f2:de: 8a:08:5f:0f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NUI3jXvOnZzhBJ/+OH1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDBiNjk0YmJhMDk1MzQ0ZTRiZGI5OWY1MWUxZjEwMjNi ZTU3Y2UwHhcNMjYwMTAxMDYxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDg3N2Q2NTg4OWFmM2RiNjdmNmIxOWI1NjlkNTY3MWMyOWI3NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv8RS3HBfb56E5vDWPUjn8PhNWaz wr88qsqaQe0I9mRMH+dN529uMT/AI/CbRXroifh01TjRYFw39r3tzTf+lG5PPqor Ig/+MKdkxxYjSHAxKxzXtSf6BDdD8GgsEB1n3G6sBmigkYbfCHGDivju7Y8RH5eG X5p9C2MIwYXvUKDzSGDfhSGPWByPuMi2uIdSqEBQGfaGmKaNiyNO/kAeMY7FxvCZ sycXdUNCWyDexLbxZIgUUB/bXLXBssGGi9EPQ5omvFLV4ojya2pTnhkQm0pgOBy3 uReHHK+jlyG7zXkhQCOZ1y72jq1NOoCULCfBhhwpx8A5cnqzBdTpUdG63wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNCHfWWImvPbZ/axm1adVnHCm3S7MB8GA1UdIwQY MBaAFClAtpS7oJU0TkvbmfUeHxAjvlfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzIt MjdjMWEzNTk3NmRlLzEvMElkOVpZaWE4OXRuOXJHYlZwMVdjY0tiZExzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi82MTA3ZTQtNDM5My00Y2JlLWE2YzItMjdjMWEzNTk3NmRl LzEvS1VDMmxMdWdsVFJPUzl1WjlSNGZFQ08tVjg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCU9kAMA8E AgACMAkDBwAqANjAAAAwDQYJKoZIhvcNAQELBQADggEBAAk2LRFfccWjusX5MV/c 77uwQu+EHavC7O+ETBPXyp7oZq4uMCxjSC64K0DnlmHuJ2LJxt9DVrn3ezxJIchn ZPdgxscd4iYYG/bR88F/pmIZVDjb5swyvlZYK6L/8QPsDf8NX4DIrQIr8hVpS7/O pMH/6wrYYzuk0tWYiLGgbJZpBNerGj7vv9cXTkAree3PjYrygfGOaZI3twq3+RTo poOKRtVNDFrXF7o5NS0N5iKJexy7K6WJubW3oduQDe4xQoW80G9o0n3psDPVzqUb Jr2cK1C9Do5/MEfEP+YIontrHLRgtHVBQZSdkSXMBYEEaiKw9cvFupR4lyvy3ooI Xw8= -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:03 2026 by rpki-client