This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/K9JMzJU8aNhj14_fQJOP-TsYBqU.roa File: K9JMzJU8aNhj14_fQJOP-TsYBqU.roa (raw, json) Hash identifier: s2b9JQyi4hJ1Qr14gj4A65TJVZOQ5DwKQiFv3Sn8ZU8= Subject key identifier: 2B:D2:4C:CC:95:3C:68:D8:63:D7:8F:DF:40:93:8F:F9:3B:18:06:A5 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA78B4EE6C59A870382FA57D1914F74 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/K9JMzJU8aNhj14_fQJOP-TsYBqU.roa Signing time: Fri 02 Jan 2026 12:21:08 +0000 ROA not before: Fri 02 Jan 2026 12:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215983 IP address blocks: 90.188.19.0/24 maxlen: 24 178.34.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:8b:4e:e6:c5:9a:87:03:82:fa:57:d1:91:4f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bd24ccc953c68d863d78fdf40938ff93b1806a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:d8:b2:49:22:fd:ee:c0:17:fd:f4:36:0d: 3c:59:73:fa:54:e0:1f:30:0e:a3:cf:3a:ae:3e:43: 28:c8:a3:5f:1e:2d:83:fb:1a:29:89:d6:be:1b:f7: 87:ce:f4:04:00:34:c6:df:a9:3c:fe:cc:df:f9:2d: 64:48:15:c2:39:90:75:15:6c:e6:d8:87:84:97:30: 56:5c:1f:0c:6d:f1:ad:b6:c5:de:ed:db:4e:a3:96: 25:34:52:e1:69:be:f3:34:df:dd:fb:3f:bc:65:4d: a1:0b:b3:c1:0c:c4:fe:68:25:b2:1e:2f:50:83:96: fd:91:07:f6:63:4e:2a:0d:a5:f9:35:97:5d:ef:29: 9b:e4:ca:c4:91:10:5c:4f:f0:54:a7:5c:48:36:79: 91:1a:0d:82:38:d7:25:18:40:cd:f8:6a:e7:6b:3b: 10:65:88:0a:00:6b:9e:0c:e8:46:1e:f9:3e:09:1f: 92:f5:3a:65:94:65:c7:d4:88:c9:2b:20:84:aa:e4: 79:a6:7d:08:4a:97:32:ec:1e:ba:e7:cd:6e:42:01: 2b:6e:30:b8:a7:4c:d3:65:2a:4e:a7:5a:48:1e:42: 75:d3:9d:27:6c:b9:d1:a2:34:09:50:28:6b:6c:75: 90:f0:f8:83:c3:fb:4d:16:15:01:56:95:8f:56:88: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D2:4C:CC:95:3C:68:D8:63:D7:8F:DF:40:93:8F:F9:3B:18:06:A5 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/K9JMzJU8aNhj14_fQJOP-TsYBqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.188.19.0/24 178.34.79.0/24 Signature Algorithm: sha256WithRSAEncryption 81:52:8a:d8:05:bb:59:98:3f:74:37:b4:e1:2b:11:47:b4:29: 95:14:aa:cf:96:8a:dd:50:d1:07:d3:f3:25:39:5d:54:31:ec: e6:46:c7:f5:f3:f6:46:57:98:2f:5e:c5:3d:04:05:18:0a:0e: 90:f7:44:ff:1d:a6:66:4e:92:b2:0a:5f:e1:6e:e9:b4:34:e3: 3e:27:01:94:77:4c:85:2b:da:00:af:85:64:66:32:84:d7:81: a3:b4:cc:f1:26:83:62:b7:dc:83:a7:9c:3c:d5:34:8a:11:a8: 58:c8:75:1a:58:f0:25:36:87:7d:1d:cb:3d:e7:96:b5:b8:d0: f2:23:7f:ab:73:59:38:6d:27:43:f9:d2:79:1c:62:64:35:79: aa:bf:73:73:37:bd:21:1a:a9:57:bf:8f:ce:16:24:77:25:c9: 40:01:e9:1a:7a:c7:2e:63:c4:5f:26:50:76:18:53:7d:4b:e1: 30:0d:c8:16:db:10:2c:5d:ab:38:ac:38:d2:38:61:09:1e:05: 27:cf:38:02:75:d4:37:5f:c1:07:28:7c:00:2d:77:8d:aa:11: 9e:24:e2:3e:2a:34:0b:42:bc:9d:4e:c5:83:71:32:13:42:c4: 7f:33:a7:74:2f:31:e5:4e:d6:6c:70:01:04:b5:ce:ae:99:64: e3:ac:9c:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p4tO5sWahwOC+lfRkU90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmQyNGNjYzk1M2M2OGQ4NjNkNzhmZGY0MDkzOGZmOTNiMTgwNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/vYskki/e7AF/30Ng08WXP6VOAf MA6jzzquPkMoyKNfHi2D+xopida+G/eHzvQEADTG36k8/szf+S1kSBXCOZB1FWzm 2IeElzBWXB8MbfGttsXe7dtOo5YlNFLhab7zNN/d+z+8ZU2hC7PBDMT+aCWyHi9Q g5b9kQf2Y04qDaX5NZdd7ymb5MrEkRBcT/BUp1xINnmRGg2CONclGEDN+GrnazsQ ZYgKAGueDOhGHvk+CR+S9TpllGXH1IjJKyCEquR5pn0ISpcy7B66581uQgErbjC4 p0zTZSpOp1pIHkJ1050nbLnRojQJUChrbHWQ8PiDw/tNFhUBVpWPVoicuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCvSTMyVPGjYY9eP30CTj/k7GAalMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvSzlKTXpKVThhTmhqMTRfZlFKT1AtVHNZQnFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWrwTAwQA siJPMA0GCSqGSIb3DQEBCwUAA4IBAQCBUorYBbtZmD90N7ThKxFHtCmVFKrPlord UNEH0/MlOV1UMezmRsf18/ZGV5gvXsU9BAUYCg6Q90T/HaZmTpKyCl/hbum0NOM+ JwGUd0yFK9oAr4VkZjKE14GjtMzxJoNit9yDp5w81TSKEahYyHUaWPAlNod9Hcs9 55a1uNDyI3+rc1k4bSdD+dJ5HGJkNXmqv3NzN70hGqlXv4/OFiR3JclAAekaescu Y8RfJlB2GFN9S+EwDcgW2xAsXas4rDjSOGEJHgUnzzgCddQ3X8EHKHwALXeNqhGe JOI+KjQLQrydTsWDcTITQsR/M6d0LzHlTtZscAEEtc6umWTjrJxa -----END CERTIFICATE-----Generated at Mon Jan 26 01:41:44 2026 by rpki-client