This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/9k_MDSQs7BBKZwPQ5l8KXbKP51c.roa File: 9k_MDSQs7BBKZwPQ5l8KXbKP51c.roa (raw, json) Hash identifier: 4YYsz7HxvO65J1xOpw7vJruRDseol9rdP+KpjvLKx14= Subject key identifier: F6:4F:CC:0D:24:2C:EC:10:4A:67:03:D0:E6:5F:0A:5D:B2:8F:E7:57 Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B28C1D47DA4C6BDBDBEB4918C016AC2B1 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/9k_MDSQs7BBKZwPQ5l8KXbKP51c.roa Signing time: Tue 16 Dec 2025 20:02:30 +0000 ROA not before: Tue 16 Dec 2025 20:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47600 IP address blocks: 80.91.89.0/24 maxlen: 24 80.245.58.0/23 maxlen: 24 82.138.86.0/24 maxlen: 24 217.71.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c1:d4:7d:a4:c6:bd:bd:be:b4:91:8c:01:6a:c2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Dec 16 20:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f64fcc0d242cec104a6703d0e65f0a5db28fe757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6c:07:c5:77:6a:06:4a:2e:11:a2:5f:82:8d: 87:a5:16:54:d3:36:b3:88:40:c0:9e:bd:e1:61:9f: f1:4d:3c:38:fc:87:11:61:17:10:2d:19:05:dc:4d: 40:ea:34:6b:4a:9b:e7:fb:58:e0:b6:78:6c:06:62: 85:77:2c:b7:1b:38:46:ed:78:e0:bb:9f:1d:b8:d9: d9:0e:a9:92:65:e3:37:c7:00:62:5e:bb:a0:d0:71: cd:49:0c:8a:13:8c:62:78:bc:0f:91:42:79:e4:d7: fc:f1:e2:bd:c0:33:ef:09:92:93:44:83:33:56:a4: 3a:90:d1:3f:8a:10:0e:25:02:2e:5b:3e:7c:07:1e: 48:98:2e:22:92:42:99:16:46:0b:95:4a:e0:aa:7f: 8d:ff:97:53:35:63:86:be:d2:fb:2e:30:ce:09:ee: 45:0d:ce:16:5d:b6:50:e7:c5:dc:96:a1:fa:4c:5c: 0b:1f:3b:c2:02:33:10:24:4f:20:0f:27:65:44:d0: 4d:75:fb:27:de:c1:31:7b:d6:c6:a2:32:d8:66:a0: ea:4a:e5:6a:1c:31:f7:f7:31:a0:98:4e:2a:f1:ec: ea:b1:7d:b2:18:81:51:38:50:78:35:7f:04:b0:73: 4a:cf:e4:3a:3e:75:92:4f:8b:17:d5:bb:d9:88:51: f7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4F:CC:0D:24:2C:EC:10:4A:67:03:D0:E6:5F:0A:5D:B2:8F:E7:57 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/9k_MDSQs7BBKZwPQ5l8KXbKP51c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.89.0/24 80.245.58.0/23 82.138.86.0/24 217.71.114.0/24 Signature Algorithm: sha256WithRSAEncryption 91:d9:25:46:d9:0d:02:57:de:30:5e:fc:d5:42:0d:50:d5:f1: 96:59:7a:f5:26:5f:64:ba:6f:a5:e6:98:e9:d0:1f:6e:3d:a7: 76:be:76:4e:34:95:11:2f:9c:d7:8d:3b:5d:93:cc:72:8e:15: 58:f4:8d:09:e3:19:3f:8d:3d:40:0b:03:9f:a0:ef:7e:7d:bb: 43:9b:0d:52:df:dc:da:cd:5c:46:13:c3:e1:75:29:fb:bc:61: a9:46:10:b7:32:64:fa:11:ad:bb:84:fe:97:66:e6:3d:33:84: 44:7f:c8:ab:52:03:dd:a7:84:69:b9:9d:78:89:fc:91:f5:9f: 97:69:c4:66:23:e8:b1:19:7e:d8:0c:84:83:b7:b2:e0:a0:b0: 88:67:b7:ef:a7:b3:09:11:6b:40:4e:71:74:a9:81:69:97:11: 4d:10:a0:dc:e0:6b:87:2e:4a:4d:68:d9:49:e1:e9:69:2e:18: eb:05:8d:63:03:28:00:e6:65:3b:03:c8:7c:24:10:b9:aa:20: 7c:3c:6a:49:79:a1:8a:37:75:0b:41:28:13:45:3d:7c:90:ac: 72:b7:d2:a9:d7:2e:cb:ca:fc:09:67:e7:a5:45:23:78:b1:37: 54:b7:d0:55:1f:4a:b6:06:0a:c3:82:49:90:4f:2e:96:58:17: 06:00:6b:1f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsowdR9pMa9vb60kYwBasKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjUxMjE2MjAwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjRmY2MwZDI0MmNlYzEwNGE2NzAzZDBlNjVmMGE1ZGIyOGZlNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGwHxXdqBkouEaJfgo2HpRZU0zaz iEDAnr3hYZ/xTTw4/IcRYRcQLRkF3E1A6jRrSpvn+1jgtnhsBmKFdyy3GzhG7Xjg u58duNnZDqmSZeM3xwBiXrug0HHNSQyKE4xieLwPkUJ55Nf88eK9wDPvCZKTRIMz VqQ6kNE/ihAOJQIuWz58Bx5ImC4ikkKZFkYLlUrgqn+N/5dTNWOGvtL7LjDOCe5F Dc4WXbZQ58XclqH6TFwLHzvCAjMQJE8gDydlRNBNdfsn3sExe9bGojLYZqDqSuVq HDH39zGgmE4q8ezqsX2yGIFROFB4NX8EsHNKz+Q6PnWST4sX1bvZiFH3xwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPZPzA0kLOwQSmcD0OZfCl2yj+dXMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvOWtfTURTUXM3QkJLWndQUTVsOEtYYktQNTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUFtZAwQB UPU6AwQAUopWAwQA2UdyMA0GCSqGSIb3DQEBCwUAA4IBAQCR2SVG2Q0CV94wXvzV Qg1Q1fGWWXr1Jl9kum+l5pjp0B9uPad2vnZONJURL5zXjTtdk8xyjhVY9I0J4xk/ jT1ACwOfoO9+fbtDmw1S39zazVxGE8PhdSn7vGGpRhC3MmT6Ea27hP6XZuY9M4RE f8irUgPdp4RpuZ14ifyR9Z+XacRmI+ixGX7YDISDt7LgoLCIZ7fvp7MJEWtATnF0 qYFplxFNEKDc4GuHLkpNaNlJ4elpLhjrBY1jAygA5mU7A8h8JBC5qiB8PGpJeaGK N3ULQSgTRT18kKxyt9Kp1y7LyvwJZ+elRSN4sTdUt9BVH0q2BgrDgkmQTy6WWBcG AGsf -----END CERTIFICATE-----Generated at Wed Dec 17 19:51:36 2025 by rpki-client