This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/9AVYlnVDy_5NTBGvlnnPZPWKT8U.roa File: 9AVYlnVDy_5NTBGvlnnPZPWKT8U.roa (raw, json) Hash identifier: N+NhjHfDEfFXjTSJhobVC2Q1bhjazURhKTdBJKZj/zM= Subject key identifier: F4:05:58:96:75:43:CB:FE:4D:4C:11:AF:96:79:CF:64:F5:8A:4F:C5 Certificate issuer: /CN=aa222f5673b828a7ae52f99ba0c62acd70974a38 Certificate serial: 019B797EAE3DE74B9F8BDF705D27D137AFFC Authority key identifier: AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/9AVYlnVDy_5NTBGvlnnPZPWKT8U.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204923 IP address blocks: 5.61.0.0/21 maxlen: 21 80.208.248.0/22 maxlen: 22 185.60.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ae:3d:e7:4b:9f:8b:df:70:5d:27:d1:37:af:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa222f5673b828a7ae52f99ba0c62acd70974a38 Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f40558967543cbfe4d4c11af9679cf64f58a4fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:01:51:80:e3:eb:9e:ac:af:08:48:75:1c:ac: be:6a:0c:e5:cb:3d:19:cb:c9:8a:4e:02:57:db:5e: 74:7f:db:60:e8:02:ad:bc:a6:76:e9:99:e5:c4:e3: 61:cf:87:5e:dc:c0:3d:a8:9b:73:75:86:54:3f:ec: dd:13:a8:ff:61:31:5a:68:3a:9d:3b:81:d7:8b:4d: f6:1e:c1:66:a5:2a:b1:74:e6:59:dc:2a:2d:78:81: 46:ad:0b:9d:a5:d4:4a:91:65:f8:09:4c:cc:6a:bf: 2c:7d:6f:94:46:6a:98:07:82:49:f5:3c:21:67:86: 85:35:b8:fa:ff:7a:53:56:49:75:6b:7d:58:0c:a4: 99:55:6f:a3:32:78:0c:58:0f:d6:b6:ad:b8:ab:5b: 7e:d7:6f:52:2c:d4:be:11:83:88:9c:45:ce:18:c0: 2c:da:99:13:06:93:0f:a7:75:c3:0a:be:56:b1:e1: 07:f9:a4:b1:95:75:87:75:bb:06:77:b1:45:b3:0e: f3:4c:88:22:d7:f2:d4:03:d2:3f:c5:02:12:1a:b7: 38:85:3b:1f:b2:67:49:14:07:d0:e0:cc:d3:dd:df: b1:66:00:cd:a4:fe:a0:e9:09:b0:c2:1d:89:63:c4: bb:60:0b:c1:d8:5a:9c:04:43:d8:e1:bc:0c:6f:bf: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:05:58:96:75:43:CB:FE:4D:4C:11:AF:96:79:CF:64:F5:8A:4F:C5 X509v3 Authority Key Identifier: keyid:AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/9AVYlnVDy_5NTBGvlnnPZPWKT8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.0.0/21 80.208.248.0/22 185.60.240.0/22 Signature Algorithm: sha256WithRSAEncryption 33:09:73:01:6a:0a:50:42:10:5b:f3:a3:ac:c5:bf:4f:53:d6: 32:98:05:b2:f7:2f:80:ee:f9:94:a4:55:7d:7c:ae:24:ef:d5: e7:9f:30:05:3d:ad:97:5b:d0:5d:40:4c:a6:ae:03:0c:ab:e6: 8b:54:99:79:5f:45:d6:07:d0:30:0c:60:7c:21:62:45:89:b3: 37:9c:c9:ee:37:c2:81:7e:e3:ce:66:92:e3:a8:a2:43:dd:8f: ae:bd:01:10:98:0b:2b:9d:00:a0:01:2e:b6:65:cb:1f:bb:13: a2:b6:79:26:ac:68:37:6b:65:7e:ae:4e:63:a1:4f:bb:71:6f: 38:4c:1e:99:2b:58:20:3f:b3:16:c1:08:ab:a2:a2:3e:d5:25: 16:ad:5f:a4:b7:3a:85:95:c6:6f:a8:bf:ed:93:7e:9f:d0:1a: 67:fe:eb:ff:2f:06:8b:21:d7:ea:88:ea:d2:72:26:58:84:50: 85:2a:ca:45:0b:c6:5e:ec:3d:72:02:c6:b2:03:b3:bd:5a:59: ca:55:49:9f:bb:33:6b:a4:33:20:cd:4f:88:44:3b:05:6c:50: a6:8c:c3:ba:da:31:a8:2c:7b:84:2b:13:bd:32:c5:98:b3:10: 77:50:4e:0a:90:a7:5b:2c:69:22:30:42:f1:09:e2:e4:f8:a0: b0:a8:5e:55 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fq4950ufi99wXSfRN6/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhMjIyZjU2NzNiODI4YTdhZTUyZjk5YmEwYzYyYWNkNzA5 NzRhMzgwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDA1NTg5Njc1NDNjYmZlNGQ0YzExYWY5Njc5Y2Y2NGY1OGE0ZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwFRgOPrnqyvCEh1HKy+agzlyz0Z y8mKTgJX2150f9tg6AKtvKZ26ZnlxONhz4de3MA9qJtzdYZUP+zdE6j/YTFaaDqd O4HXi032HsFmpSqxdOZZ3CoteIFGrQudpdRKkWX4CUzMar8sfW+URmqYB4JJ9Twh Z4aFNbj6/3pTVkl1a31YDKSZVW+jMngMWA/Wtq24q1t+129SLNS+EYOInEXOGMAs 2pkTBpMPp3XDCr5WseEH+aSxlXWHdbsGd7FFsw7zTIgi1/LUA9I/xQISGrc4hTsf smdJFAfQ4MzT3d+xZgDNpP6g6Qmwwh2JY8S7YAvB2FqcBEPY4bwMb78WwQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPQFWJZ1Q8v+TUwRr5Z5z2T1ik/FMB8GA1UdIwQY MBaAFKoiL1ZzuCinrlL5m6DGKs1wl0o4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWlJdlZuTzRLS2V1VXZtYm9NWXF6WENYU2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTQ2MzYtYzk5OC00MDlhLTg5YmIt MmI3YjgyN2U3MThjLzEvOUFWWWxuVkR5XzVOVEJHdmxublBaUFdLVDhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lNTQ2MzYtYzk5OC00MDlhLTg5YmItMmI3YjgyN2U3MThj LzEvcWlJdlZuTzRLS2V1VXZtYm9NWXF6WENYU2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDBT0AAwQC UND4AwQCuTzwMA0GCSqGSIb3DQEBCwUAA4IBAQAzCXMBagpQQhBb86Osxb9PU9Yy mAWy9y+A7vmUpFV9fK4k79XnnzAFPa2XW9BdQEymrgMMq+aLVJl5X0XWB9AwDGB8 IWJFibM3nMnuN8KBfuPOZpLjqKJD3Y+uvQEQmAsrnQCgAS62ZcsfuxOitnkmrGg3 a2V+rk5joU+7cW84TB6ZK1ggP7MWwQiroqI+1SUWrV+ktzqFlcZvqL/tk36f0Bpn /uv/LwaLIdfqiOrSciZYhFCFKspFC8Ze7D1yAsayA7O9WlnKVUmfuzNrpDMgzU+I RDsFbFCmjMO62jGoLHuEKxO9MsWYsxB3UE4KkKdbLGkiMELxCeLk+KCwqF5V -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:36 2026 by rpki-client