This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/m9EXLhYWcdpBDX-fRVjeJwFcks4.roa File: m9EXLhYWcdpBDX-fRVjeJwFcks4.roa (raw, json) Hash identifier: hO49V1SsoRH71HYWYcEzmHsz7GxUTsYMMr0hhLYqiYo= Subject key identifier: 9B:D1:17:2E:16:16:71:DA:41:0D:7F:9F:45:58:DE:27:01:5C:92:CE Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012 Certificate serial: 019B7F139B06A27CEA1EE747314AF609D17C Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/m9EXLhYWcdpBDX-fRVjeJwFcks4.roa Signing time: Fri 02 Jan 2026 14:19:09 +0000 ROA not before: Fri 02 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206502 IP address blocks: 78.108.212.0/23 maxlen: 23 78.108.212.0/24 maxlen: 24 2a0d:11c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9b:06:a2:7c:ea:1e:e7:47:31:4a:f6:09:d1:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012 Validity Not Before: Jan 2 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bd1172e161671da410d7f9f4558de27015c92ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:dd:44:77:58:35:e8:a5:b6:c0:9a:3d:f6: ed:a8:a5:8e:eb:59:d7:44:7f:5f:ed:cd:e9:99:69: 3e:76:ef:d5:c5:ba:4d:6f:c8:d4:7e:61:59:6f:d7: c6:43:50:a5:71:a7:4c:cb:60:46:e4:87:fa:bf:35: ff:11:37:45:01:47:a9:2b:5f:66:0c:90:66:fa:e4: 37:dc:ac:92:6b:f8:b2:95:a4:6f:c7:ad:d8:44:66: 71:77:d6:ab:4b:90:e1:5d:be:dd:43:2b:a8:6b:a2: 11:0f:ba:ed:6c:ff:05:5e:89:f3:4f:98:6d:3c:dc: 28:b9:9f:70:91:1c:ed:4f:ed:f3:c2:f1:c4:21:1c: ef:84:5e:03:a7:ce:d7:2d:c1:86:c4:3e:cc:f4:0e: f2:72:02:8b:56:ef:5f:f9:9e:7f:8e:e2:ef:d5:a2: d3:96:a2:e4:ba:f3:65:35:42:05:ac:f2:54:9f:c4: a1:25:2b:d7:81:bd:24:99:ce:08:0c:a5:96:d0:d6: 57:ea:23:1f:cc:4b:39:56:32:81:10:3f:b5:40:b0: 84:26:75:fb:d1:16:cc:9d:02:27:a3:e4:fd:a3:87: 03:26:5b:1f:11:35:fb:35:31:e3:a9:40:87:48:aa: d0:f4:32:7f:af:30:1e:d2:02:27:71:3a:73:39:a2: db:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D1:17:2E:16:16:71:DA:41:0D:7F:9F:45:58:DE:27:01:5C:92:CE X509v3 Authority Key Identifier: keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/m9EXLhYWcdpBDX-fRVjeJwFcks4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.212.0/23 IPv6: 2a0d:11c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 28:b0:6f:6a:56:ef:c5:49:b0:50:e3:6e:1b:d2:4f:69:76:f7: bd:31:5f:d9:7d:24:0f:2e:45:9a:f0:06:a5:4a:39:3a:32:e4: 7a:e1:3a:63:e7:ae:65:4c:76:3e:fd:23:6b:61:a1:e3:2c:75: 86:8a:48:08:3d:e9:d3:7c:68:7c:59:68:c2:1f:fd:9d:50:78: 57:82:52:cd:c1:99:d6:00:f4:54:aa:02:07:0c:d1:d6:22:ea: 80:e4:bd:02:eb:83:ba:ba:b2:8e:b5:99:d1:26:dd:1b:af:13: a5:0f:71:4d:6d:1e:d9:10:4a:b1:79:50:0a:2e:58:9a:81:4b: ea:07:81:86:01:18:e3:0a:4b:66:b1:59:c3:d7:ad:57:8b:a1: 25:73:8e:2d:fe:eb:7c:46:71:8f:34:df:0a:e5:f1:d5:19:68: e6:be:b1:8c:4c:e3:cd:64:08:30:06:d1:5b:23:78:bd:09:dc: 43:e8:ee:89:e3:b6:a9:fd:84:02:28:de:57:76:21:aa:2a:bc: ab:11:01:43:04:87:78:dd:70:1a:e6:ef:9d:56:1d:e2:79:38: b5:34:9d:2d:e6:7e:1c:23:f4:0a:bd:16:3d:3e:99:4f:6a:0e: 7d:15:5f:62:90:c0:25:5d:d6:f7:8c:4c:01:a0:da:6d:d4:4c: 3a:78:4c:3e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/E5sGonzqHudHMUr2CdF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGQ4MWYzZTBmMmQxOGYzYjU5MGRjYzUzNmQ1ZTk0Y2Zl MDcwMTIwHhcNMjYwMTAyMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmQxMTcyZTE2MTY3MWRhNDEwZDdmOWY0NTU4ZGUyNzAxNWM5MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcHdRHdYNeiltsCaPfbtqKWO61nX RH9f7c3pmWk+du/VxbpNb8jUfmFZb9fGQ1ClcadMy2BG5If6vzX/ETdFAUepK19m DJBm+uQ33KySa/iylaRvx63YRGZxd9arS5DhXb7dQyuoa6IRD7rtbP8FXonzT5ht PNwouZ9wkRztT+3zwvHEIRzvhF4Dp87XLcGGxD7M9A7ycgKLVu9f+Z5/juLv1aLT lqLkuvNlNUIFrPJUn8ShJSvXgb0kmc4IDKWW0NZX6iMfzEs5VjKBED+1QLCEJnX7 0RbMnQIno+T9o4cDJlsfETX7NTHjqUCHSKrQ9DJ/rzAe0gIncTpzOaLbAQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJvRFy4WFnHaQQ1/n0VY3icBXJLOMB8GA1UdIwQY MBaAFIsNgfPg8tGPO1kNzFNtXpTP4HASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMt ZjY1NDFmNzc4NTg1LzEvbTlFWExoWVdjZHBCRFgtZlJWamVKd0Zja3M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMtZjY1NDFmNzc4NTg1 LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBTmzUMA8E AgACMAkDBwAqDRHAAAEwDQYJKoZIhvcNAQELBQADggEBACiwb2pW78VJsFDjbhvS T2l2970xX9l9JA8uRZrwBqVKOToy5HrhOmPnrmVMdj79I2thoeMsdYaKSAg96dN8 aHxZaMIf/Z1QeFeCUs3BmdYA9FSqAgcM0dYi6oDkvQLrg7q6so61mdEm3RuvE6UP cU1tHtkQSrF5UAouWJqBS+oHgYYBGOMKS2axWcPXrVeLoSVzji3+63xGcY803wrl 8dUZaOa+sYxM481kCDAG0VsjeL0J3EPo7onjtqn9hAIo3ld2IaoqvKsRAUMEh3jd cBrm751WHeJ5OLU0nS3mfhwj9Aq9Fj0+mU9qDn0VX2KQwCVd1veMTAGg2m3UTDp4 TD4= -----END CERTIFICATE-----Generated at Sat Jan 3 06:28:21 2026 by rpki-client