This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/eg9_KvkRhShJPo1DrUbIsZeRsEc.roa File: eg9_KvkRhShJPo1DrUbIsZeRsEc.roa (raw, json) Hash identifier: wS0FlN1tjdBdy7kNo+uXcU3yCVAcVMZGLN/vLUZ5GHc= Subject key identifier: 7A:0F:7F:2A:F9:11:85:28:49:3E:8D:43:AD:46:C8:B1:97:91:B0:47 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B0C91A30D5BB61883AA3D6DA2EC16E9CA Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/eg9_KvkRhShJPo1DrUbIsZeRsEc.roa Signing time: Thu 11 Dec 2025 08:40:29 +0000 ROA not before: Thu 11 Dec 2025 08:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60781 IP address blocks: 81.29.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:91:a3:0d:5b:b6:18:83:aa:3d:6d:a2:ec:16:e9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Dec 11 08:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a0f7f2af9118528493e8d43ad46c8b19791b047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9f:12:3f:7a:f9:30:be:62:f7:f1:57:b2:96: 9b:e7:b5:0a:2f:d2:45:65:42:69:c0:8c:aa:0d:33: dd:ea:56:63:3c:96:a1:84:19:dd:07:75:9d:0b:5b: eb:14:59:81:3a:d7:34:38:48:26:97:c1:98:c7:34: 63:f2:91:e3:fb:12:24:82:56:69:dd:13:7e:61:33: 24:d4:b1:96:c6:f4:d0:f8:f6:42:fb:2e:cc:f0:70: 02:c8:bf:5e:59:c0:fb:7a:37:71:1e:d2:db:86:e3: 1d:8a:d1:15:9b:19:4f:29:de:18:5c:bc:a3:da:3b: 29:41:a8:5f:30:a9:9d:6e:c7:88:c6:f2:78:6a:52: 6f:ff:3d:12:4a:be:21:6e:9f:9f:1f:19:fe:50:f3: ba:79:1b:b8:ab:e9:52:8c:69:b5:d1:c5:08:8d:27: 1d:4d:58:c5:1c:55:9d:44:36:01:bb:46:09:e4:d9: 00:16:9b:e8:5a:80:54:d0:50:9b:e2:a5:11:eb:13: 9d:b4:12:eb:99:53:ef:c4:ed:b9:d0:c4:28:af:ba: c5:32:e2:26:79:bd:ae:62:23:8c:23:09:fc:71:62: f4:77:b1:2d:40:8a:33:e6:03:e2:4b:49:e3:50:5d: fa:19:c3:01:8c:3e:06:ef:80:82:aa:11:0f:84:68: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0F:7F:2A:F9:11:85:28:49:3E:8D:43:AD:46:C8:B1:97:91:B0:47 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/eg9_KvkRhShJPo1DrUbIsZeRsEc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.158.0/24 Signature Algorithm: sha256WithRSAEncryption 43:c2:07:67:71:e6:b8:80:89:80:bb:ea:b9:15:23:a1:1f:1b: 6e:b8:63:61:d9:68:aa:c1:c6:ec:ef:7c:56:9d:63:89:6b:3e: 56:77:0c:fe:75:87:67:2b:a4:eb:52:52:c5:9b:a3:fb:74:47: 1f:3e:d9:49:5f:29:0d:c0:e7:7f:5c:79:1d:85:ea:b0:b7:b1: b4:19:62:4c:ea:f1:e6:08:ee:84:19:5f:79:bc:4c:90:43:72: 73:7e:28:d4:71:f8:0e:49:0d:13:e4:6f:45:96:f3:00:93:b6: 62:df:89:3d:20:f5:d0:38:c5:04:7b:4a:24:d6:73:10:38:fa: 98:c9:53:ab:68:3e:d9:f1:65:0d:ce:ce:08:34:cf:93:13:92: 3e:19:e4:6a:35:90:97:45:c6:78:a4:95:9a:e2:db:66:22:23: 4f:95:a5:98:75:05:cf:0c:9c:2b:af:6d:88:96:59:b0:28:dd: 3d:7c:38:2b:e4:f1:ee:b1:0a:89:bc:19:3d:c5:f7:13:9f:5d: 73:be:39:ba:b6:03:c1:00:87:7a:14:12:4d:a2:07:8a:81:67: 77:6f:7d:a3:ce:54:a7:9a:ec:b1:6d:4f:7b:d2:20:11:a6:dd: 26:dc:87:e1:6f:cc:79:20:37:2d:fa:da:11:cf:b4:13:ea:ed: 35:c0:61:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMkaMNW7YYg6o9baLsFunKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjUxMjExMDg0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTBmN2YyYWY5MTE4NTI4NDkzZThkNDNhZDQ2YzhiMTk3OTFiMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA358SP3r5ML5i9/FXspab57UKL9JF ZUJpwIyqDTPd6lZjPJahhBndB3WdC1vrFFmBOtc0OEgml8GYxzRj8pHj+xIkglZp 3RN+YTMk1LGWxvTQ+PZC+y7M8HACyL9eWcD7ejdxHtLbhuMditEVmxlPKd4YXLyj 2jspQahfMKmdbseIxvJ4alJv/z0SSr4hbp+fHxn+UPO6eRu4q+lSjGm10cUIjScd TVjFHFWdRDYBu0YJ5NkAFpvoWoBU0FCb4qUR6xOdtBLrmVPvxO250MQor7rFMuIm eb2uYiOMIwn8cWL0d7EtQIoz5gPiS0njUF36GcMBjD4G74CCqhEPhGiK7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHoPfyr5EYUoST6NQ61GyLGXkbBHMB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvZWc5X0t2a1JoU2hKUG8xRHJVYklzWmVSc0VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2eMA0G CSqGSIb3DQEBCwUAA4IBAQBDwgdncea4gImAu+q5FSOhHxtuuGNh2Wiqwcbs73xW nWOJaz5Wdwz+dYdnK6TrUlLFm6P7dEcfPtlJXykNwOd/XHkdheqwt7G0GWJM6vHm CO6EGV95vEyQQ3JzfijUcfgOSQ0T5G9FlvMAk7Zi34k9IPXQOMUEe0ok1nMQOPqY yVOraD7Z8WUNzs4INM+TE5I+GeRqNZCXRcZ4pJWa4ttmIiNPlaWYdQXPDJwrr22I llmwKN09fDgr5PHusQqJvBk9xfcTn11zvjm6tgPBAId6FBJNogeKgWd3b32jzlSn muyxbU970iARpt0m3Ifhb8x5IDct+toRz7QT6u01wGH1 -----END CERTIFICATE-----Generated at Fri Dec 19 12:46:32 2025 by rpki-client