This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa File: t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa (raw, json) Hash identifier: dvgQDwtsUk39Ao+BrG34yvxtiJYryUNCUxCkBcW8cSE= Subject key identifier: B7:D1:BF:D4:B6:6D:2B:69:9A:6D:9A:A3:97:75:E3:90:0B:E9:32:44 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC4536E6D19E1C8EEA05077242BD04 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa Signing time: Thu 01 Jan 2026 14:18:05 +0000 ROA not before: Thu 01 Jan 2026 14:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58000 IP address blocks: 91.237.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:45:36:e6:d1:9e:1c:8e:ea:05:07:72:42:bd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7d1bfd4b66d2b699a6d9aa39775e3900be93244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:e3:5b:08:32:d1:6c:08:54:c8:09:d3:71: 5e:b9:0e:df:f2:69:3c:f4:77:aa:f5:0a:c4:69:b0: af:a1:1f:bb:9b:00:23:81:d3:31:c0:f6:7d:83:08: b2:c1:88:fb:9f:d7:42:1f:57:35:0b:65:33:5c:83: ba:ed:ed:5e:2f:4a:b4:74:d3:f7:f9:2f:4a:d4:2d: 49:36:df:6a:54:5a:dc:14:10:bf:29:14:ff:33:a4: dc:82:e1:2a:3c:8f:01:8b:51:6a:32:36:24:73:15: 7d:33:66:d9:af:1e:a8:7a:e1:0e:d9:2d:52:50:90: 99:88:c1:26:3b:85:43:bc:b6:32:f7:a9:8a:c2:b7: 48:3c:5e:88:df:7b:a3:8b:4d:89:0a:20:a8:66:ad: 5e:46:85:f5:3e:8d:7d:1d:7f:48:1a:5c:68:d4:a0: 3e:6d:ce:5c:ef:3f:dd:3f:12:9e:1f:c3:b9:7a:8c: 34:06:14:28:29:62:7c:b1:4e:d3:6d:20:0e:a7:44: c3:bf:f5:64:e2:2a:69:a4:b8:b8:4a:98:e5:53:a5: a7:5d:d6:b7:6c:b2:0b:93:15:8d:c5:36:ba:e2:21: 67:f0:6d:cf:86:ee:ac:cd:7b:44:ed:4c:a2:dd:f2: 6c:b7:3e:16:e8:c9:f3:de:50:7f:d4:5b:44:5f:43: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D1:BF:D4:B6:6D:2B:69:9A:6D:9A:A3:97:75:E3:90:0B:E9:32:44 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/t9G_1LZtK2mabZqjl3XjkAvpMkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.182.0/23 Signature Algorithm: sha256WithRSAEncryption 17:36:1d:20:a9:01:01:fe:22:60:47:e8:64:f3:3f:7e:29:58: 79:d9:58:76:df:35:d5:af:ec:47:33:75:3a:5e:7c:43:96:9b: 5a:8e:79:4b:fe:ad:b2:c5:3e:33:46:98:89:5b:3d:5a:2f:ba: b5:97:36:25:bc:2c:ea:a7:59:21:80:78:ca:ba:11:44:c6:5f: a7:f7:6b:5f:59:7c:5e:b4:78:4c:42:fe:a1:88:f8:d3:47:fa: 30:d6:08:b5:de:b2:65:8a:58:f1:0c:23:e2:65:e2:4f:8a:f0: 34:b2:7b:99:10:10:b6:69:5c:9e:09:ba:e6:c4:22:18:52:40: a3:ba:a8:00:3b:6f:76:e1:4e:9d:7a:89:e7:49:18:c8:91:e0: d1:74:ee:88:fb:89:0c:e0:84:a9:d8:a9:bc:f2:8b:2a:c8:0b: 74:af:eb:9c:6b:aa:0c:ee:51:c7:10:8e:c8:c6:00:92:6a:b4: bd:73:f8:72:78:da:13:fa:e6:ad:65:88:75:35:bd:7b:87:62: f0:30:3c:89:bf:e8:d2:0b:19:9d:82:fb:d7:55:13:72:1c:94: 67:00:5a:00:ab:10:19:36:e3:0a:d2:cc:e1:43:f3:23:3b:1d: 5c:74:df:25:35:bc:ef:db:3d:94:e3:b1:63:01:8e:09:bc:71: 48:1a:9c:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57EU25tGeHI7qBQdyQr0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2QxYmZkNGI2NmQyYjY5OWE2ZDlhYTM5Nzc1ZTM5MDBiZTkzMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsHjWwgy0WwIVMgJ03FeuQ7f8mk8 9Heq9QrEabCvoR+7mwAjgdMxwPZ9gwiywYj7n9dCH1c1C2UzXIO67e1eL0q0dNP3 +S9K1C1JNt9qVFrcFBC/KRT/M6TcguEqPI8Bi1FqMjYkcxV9M2bZrx6oeuEO2S1S UJCZiMEmO4VDvLYy96mKwrdIPF6I33uji02JCiCoZq1eRoX1Po19HX9IGlxo1KA+ bc5c7z/dPxKeH8O5eow0BhQoKWJ8sU7TbSAOp0TDv/Vk4ipppLi4SpjlU6WnXda3 bLILkxWNxTa64iFn8G3Phu6szXtE7Uyi3fJstz4W6Mnz3lB/1FtEX0MBJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfRv9S2bStpmm2ao5d145AL6TJEMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvdDlHXzFMWnRLMm1hYlpxamwzWGprQXZwTWtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+22MA0G CSqGSIb3DQEBCwUAA4IBAQAXNh0gqQEB/iJgR+hk8z9+KVh52Vh23zXVr+xHM3U6 XnxDlptajnlL/q2yxT4zRpiJWz1aL7q1lzYlvCzqp1khgHjKuhFExl+n92tfWXxe tHhMQv6hiPjTR/ow1gi13rJliljxDCPiZeJPivA0snuZEBC2aVyeCbrmxCIYUkCj uqgAO2924U6deonnSRjIkeDRdO6I+4kM4ISp2Km88osqyAt0r+uca6oM7lHHEI7I xgCSarS9c/hyeNoT+uatZYh1Nb17h2LwMDyJv+jSCxmdgvvXVRNyHJRnAFoAqxAZ NuMK0szhQ/MjOx1cdN8lNbzv2z2U47FjAY4JvHFIGpwj -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:35 2026 by rpki-client