This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Pb9fDnNoNAKQFLoKbXlNgy0mbg8.roa File: Pb9fDnNoNAKQFLoKbXlNgy0mbg8.roa (raw, json) Hash identifier: CRoddTCcNDOi2vh1dnB3vosuTrPaDEI2rKHRoIlzwEI= Subject key identifier: 3D:BF:5F:0E:73:68:34:02:90:14:BA:0A:6D:79:4D:83:2D:26:6E:0F Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA779BBC2A35DF9E96BD2E253B37D36 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Pb9fDnNoNAKQFLoKbXlNgy0mbg8.roa Signing time: Fri 02 Jan 2026 12:21:03 +0000 ROA not before: Fri 02 Jan 2026 12:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43793 IP address blocks: 31.47.144.0/20 maxlen: 20 46.183.80.0/21 maxlen: 21 109.205.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:79:bb:c2:a3:5d:f9:e9:6b:d2:e2:53:b3:7d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dbf5f0e736834029014ba0a6d794d832d266e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:27:70:d5:b2:88:3d:18:d0:fb:9f:58:df: 6d:af:93:78:e4:f0:71:40:c3:96:61:6d:cb:8d:72: aa:4c:80:87:18:61:27:ca:45:7b:a4:57:dc:d4:d6: 6a:4e:85:f5:95:29:7f:f2:62:ef:27:15:cf:ee:07: d4:27:f4:58:bc:30:13:67:77:6e:5e:25:48:42:d6: 56:64:8d:17:e6:bf:39:79:f8:37:f7:4d:bd:de:3f: f8:0f:cb:4a:c8:10:d1:d9:9c:d2:cd:3b:bf:85:88: 49:5b:67:71:5d:12:b3:9d:46:4e:01:dc:b5:d7:91: ec:80:33:e0:c5:2d:3e:14:ac:19:7e:6f:1c:f8:dc: 3b:a1:d6:44:88:7c:f1:1d:87:23:fb:50:a2:bd:51: ca:29:5a:a8:81:15:f4:8f:0d:38:fb:ac:0e:2c:7e: 8e:c1:46:7b:6b:60:db:bb:7d:dd:9a:6f:7c:dd:6d: f0:94:c7:1b:62:ed:29:b1:b1:4a:3f:fb:c5:22:c5: 64:36:ec:86:95:87:8d:ad:d5:48:1a:a7:fc:e7:e2: 0e:86:7c:70:97:f9:54:78:80:98:ad:6d:f5:b1:b3: 70:ca:7e:60:d5:e3:51:b8:73:52:d8:df:73:e8:f6: 2a:f0:67:ef:81:ff:14:08:82:3c:4f:7d:db:70:9b: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BF:5F:0E:73:68:34:02:90:14:BA:0A:6D:79:4D:83:2D:26:6E:0F X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Pb9fDnNoNAKQFLoKbXlNgy0mbg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.47.144.0/20 46.183.80.0/21 109.205.144.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:23:ee:8f:d4:08:b1:d6:6c:de:c0:fc:d4:ad:26:45:20:71: 38:8e:ca:75:86:91:02:5b:8b:c7:de:3a:8d:d7:68:81:e8:68: e9:c7:a7:9e:59:95:22:ef:1c:d5:a7:bc:fa:d9:b7:14:cb:50: 40:7c:e7:f8:88:8c:12:b0:4b:0e:2c:48:05:63:69:7e:12:09: e3:eb:42:61:3d:43:fa:83:33:fc:13:78:b0:9a:93:95:8c:e0: 3f:d2:14:af:37:68:d0:40:ec:48:9c:1e:c7:5f:5f:f5:03:5d: 2c:7f:2b:50:c8:7f:45:eb:97:91:c6:95:43:7d:8d:5f:e2:0b: 60:f1:2e:86:91:98:f0:e4:92:88:93:54:3b:a3:08:85:d3:b8: 3a:36:ec:1f:37:1e:e7:1b:d6:f7:4c:5d:6e:09:66:d5:65:69: 4f:05:52:f1:07:47:aa:55:d7:68:75:1c:18:17:de:0c:64:e8: d1:66:af:a4:3d:02:06:2a:88:0d:74:be:72:a0:6e:53:32:72: 48:8b:76:eb:8e:a0:f5:3d:2b:d8:d0:9b:44:68:a7:d6:a2:5f: ea:7f:f3:44:eb:d2:c2:51:6c:8d:e0:aa:67:d3:22:91:53:d6: 61:b4:2d:da:2b:33:ed:39:3a:e0:67:75:a9:f0:88:fe:bb:bb: 0b:d2:35:fc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+p3m7wqNd+elr0uJTs302MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGJmNWYwZTczNjgzNDAyOTAxNGJhMGE2ZDc5NGQ4MzJkMjY2ZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzagncNWyiD0Y0PufWN9tr5N45PBx QMOWYW3LjXKqTICHGGEnykV7pFfc1NZqToX1lSl/8mLvJxXP7gfUJ/RYvDATZ3du XiVIQtZWZI0X5r85efg390293j/4D8tKyBDR2ZzSzTu/hYhJW2dxXRKznUZOAdy1 15HsgDPgxS0+FKwZfm8c+Nw7odZEiHzxHYcj+1CivVHKKVqogRX0jw04+6wOLH6O wUZ7a2Dbu33dmm983W3wlMcbYu0psbFKP/vFIsVkNuyGlYeNrdVIGqf85+IOhnxw l/lUeICYrW31sbNwyn5g1eNRuHNS2N9z6PYq8Gfvgf8UCII8T33bcJv0nQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD2/Xw5zaDQCkBS6Cm15TYMtJm4PMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvUGI5ZkRuTm9OQUtRRkxvS2JYbE5neTBtYmc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEHy+QAwQD LrdQAwQDbc2QMA0GCSqGSIb3DQEBCwUAA4IBAQB+I+6P1Aix1mzewPzUrSZFIHE4 jsp1hpECW4vH3jqN12iB6Gjpx6eeWZUi7xzVp7z62bcUy1BAfOf4iIwSsEsOLEgF Y2l+Egnj60JhPUP6gzP8E3iwmpOVjOA/0hSvN2jQQOxInB7HX1/1A10sfytQyH9F 65eRxpVDfY1f4gtg8S6GkZjw5JKIk1Q7owiF07g6NuwfNx7nG9b3TF1uCWbVZWlP BVLxB0eqVddodRwYF94MZOjRZq+kPQIGKogNdL5yoG5TMnJIi3brjqD1PSvY0JtE aKfWol/qf/NE69LCUWyN4Kpn0yKRU9ZhtC3aKzPtOTrgZ3Wp8Ij+u7sL0jX8 -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:50 2026 by rpki-client