This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/9S6E7we8QdLbFFazZaW1yuPktnQ.roa File: 9S6E7we8QdLbFFazZaW1yuPktnQ.roa (raw, json) Hash identifier: KwWpDp5nwmyE+9/eZZD5RzwUpcBwndAOQtX/mc0le/4= Subject key identifier: F5:2E:84:EF:07:BC:41:D2:DB:14:56:B3:65:A5:B5:CA:E3:E4:B6:74 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019B32A282876F88087F5EA22B6FC13061F1 Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/9S6E7we8QdLbFFazZaW1yuPktnQ.roa Signing time: Thu 18 Dec 2025 18:04:29 +0000 ROA not before: Thu 18 Dec 2025 18:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 9.142.0.0/16 maxlen: 24 9.142.64.0/20 maxlen: 20 9.142.79.0/24 maxlen: 24 9.142.95.0/24 maxlen: 24 9.142.128.0/19 maxlen: 19 9.142.160.0/19 maxlen: 19 9.142.224.0/20 maxlen: 20 9.142.239.0/24 maxlen: 24 9.142.255.0/24 maxlen: 24 138.226.32.0/20 maxlen: 20 138.226.80.0/21 maxlen: 21 138.226.120.0/21 maxlen: 21 138.226.128.0/18 maxlen: 18 138.226.200.0/21 maxlen: 21 158.120.49.0/24 maxlen: 24 158.120.51.0/24 maxlen: 24 158.120.53.0/24 maxlen: 24 158.120.55.0/24 maxlen: 24 158.120.57.0/24 maxlen: 24 158.120.59.0/24 maxlen: 24 158.120.61.0/24 maxlen: 24 158.120.63.0/24 maxlen: 24 192.46.184.0/21 maxlen: 21 192.46.184.0/22 maxlen: 22 192.46.188.0/24 maxlen: 24 192.46.200.0/22 maxlen: 22 192.53.64.0/22 maxlen: 22 192.53.68.0/22 maxlen: 22 192.53.136.0/22 maxlen: 22 192.53.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:a2:82:87:6f:88:08:7f:5e:a2:2b:6f:c1:30:61:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Dec 18 18:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f52e84ef07bc41d2db1456b365a5b5cae3e4b674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:21:a0:27:58:ec:c2:f1:ca:1a:56:fb:60:7f: f3:64:a4:dd:ac:79:34:79:64:30:d9:a6:53:df:11: 44:dd:7b:2e:be:c6:ae:1b:e8:eb:b4:58:66:b9:10: fa:44:a7:ce:01:72:29:54:54:38:6f:ca:cb:04:76: 37:be:26:ad:9b:5b:28:26:60:c0:9b:8a:33:1d:ab: 96:64:de:77:9b:b0:e4:2b:98:fa:88:a8:15:ab:db: 90:b2:79:eb:40:f9:28:4a:b1:a8:d1:eb:62:db:86: f3:b9:92:04:16:01:2a:15:d0:9a:98:9d:ad:7c:2c: 17:c6:25:66:d0:4e:34:3a:b2:56:9e:f2:ce:c8:cf: 70:43:9d:ee:a1:44:53:d2:40:01:df:b9:04:cf:8b: df:cf:8b:f3:e3:50:bd:8b:e0:e2:15:22:7a:3e:32: 85:04:c9:eb:54:6c:91:8a:8e:45:07:1d:c2:69:8c: 9b:be:5e:e6:3b:8f:81:eb:e9:5f:14:c3:b2:05:4e: 40:42:c6:46:ed:75:44:02:90:68:fd:53:21:0e:09: d6:19:a5:33:f0:7e:81:46:b8:97:74:12:ec:63:bc: 1c:65:be:79:24:23:2a:71:c8:17:3c:02:24:ad:be: f7:9c:03:76:0c:c1:ab:30:e5:a6:a6:9f:70:96:29: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2E:84:EF:07:BC:41:D2:DB:14:56:B3:65:A5:B5:CA:E3:E4:B6:74 X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/9S6E7we8QdLbFFazZaW1yuPktnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 9.142.0.0/16 138.226.32.0/20 138.226.80.0/21 138.226.120.0-138.226.191.255 138.226.200.0/21 158.120.49.0/24 158.120.51.0/24 158.120.53.0/24 158.120.55.0/24 158.120.57.0/24 158.120.59.0/24 158.120.61.0/24 158.120.63.0/24 192.46.184.0/21 192.46.200.0/22 192.53.64.0/21 192.53.136.0/21 Signature Algorithm: sha256WithRSAEncryption a9:12:e1:c9:b0:87:55:1e:b9:d1:f2:f2:8a:f5:59:b5:bb:6a: a6:0e:6a:87:03:79:f2:4e:b4:07:a2:87:ab:8c:83:3e:3e:d7: 6e:ba:00:0c:e4:b8:f0:46:5e:fb:c8:d7:16:0f:a9:6b:6e:e8: 6e:24:0a:88:1f:13:ec:6a:c1:59:ed:33:20:66:06:de:6e:86: 1a:d7:ba:e1:71:f2:67:db:0c:4d:21:ed:6e:32:a5:8c:64:11: 04:fb:a6:3e:90:1c:3f:9e:6a:dc:6f:f6:9a:39:ef:34:a5:83: cb:b3:28:7b:69:ec:e5:3d:13:cc:4a:0c:bd:ec:bd:2d:d7:4d: a1:3f:b6:cf:50:49:37:8d:70:07:08:1f:2a:f5:3e:d1:03:33: 0d:45:d3:52:34:45:3f:b0:12:a9:07:46:a8:27:e9:f1:d0:ff: 03:c7:97:2a:db:a7:57:a0:cc:ac:70:0e:9d:7d:70:87:04:c9: 3e:82:0b:b2:50:db:f1:70:b1:56:36:3c:d9:36:ee:e1:8b:6e: 09:42:4b:08:70:63:f4:ca:e7:81:35:e3:ce:f1:32:03:f8:d9: 89:55:8c:3d:49:05:40:2a:af:13:09:fa:6d:d3:76:60:87:f1: 87:94:9c:7a:af:6d:bd:3c:f8:f9:28:5c:b3:95:ba:12:c4:12: e5:9d:52:e1 -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgISAZsyooKHb4gIf16iK2/BMGHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjUxMjE4MTgwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTJlODRlZjA3YmM0MWQyZGIxNDU2YjM2NWE1YjVjYWUzZTRiNjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSGgJ1jswvHKGlb7YH/zZKTdrHk0 eWQw2aZT3xFE3XsuvsauG+jrtFhmuRD6RKfOAXIpVFQ4b8rLBHY3viatm1soJmDA m4ozHauWZN53m7DkK5j6iKgVq9uQsnnrQPkoSrGo0eti24bzuZIEFgEqFdCamJ2t fCwXxiVm0E40OrJWnvLOyM9wQ53uoURT0kAB37kEz4vfz4vz41C9i+DiFSJ6PjKF BMnrVGyRio5FBx3CaYybvl7mO4+B6+lfFMOyBU5AQsZG7XVEApBo/VMhDgnWGaUz 8H6BRriXdBLsY7wcZb55JCMqccgXPAIkrb73nAN2DMGrMOWmpp9wlinDiQIDAQAB o4ICcTCCAm0wHQYDVR0OBBYEFPUuhO8HvEHS2xRWs2Wltcrj5LZ0MB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvOVM2RTd3ZThRZExiRkZhelphVzF5dVBrdG5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwcwQCAAEwbQMDAAmOAwQE iuIgAwQDiuJQMAwDBAOK4ngDBAaK4oADBAOK4sgDBACeeDEDBACeeDMDBACeeDUD BACeeDcDBACeeDkDBACeeDsDBACeeD0DBACeeD8DBAPALrgDBALALsgDBAPANUAD BAPANYgwDQYJKoZIhvcNAQELBQADggEBAKkS4cmwh1UeudHy8or1WbW7aqYOaocD efJOtAeih6uMgz4+1266AAzkuPBGXvvI1xYPqWtu6G4kCogfE+xqwVntMyBmBt5u hhrXuuFx8mfbDE0h7W4ypYxkEQT7pj6QHD+eatxv9po57zSlg8uzKHtp7OU9E8xK DL3svS3XTaE/ts9QSTeNcAcIHyr1PtEDMw1F01I0RT+wEqkHRqgn6fHQ/wPHlyrb p1egzKxwDp19cIcEyT6CC7JQ2/FwsVY2PNk27uGLbglCSwhwY/TK54E1487xMgP4 2YlVjD1JBUAqrxMJ+m3TdmCH8YeUnHqvbb08+PkoXLOVuhLEEuWdUuE= -----END CERTIFICATE-----Generated at Fri Dec 19 20:18:47 2025 by rpki-client