This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/9c-m-5gDOVRZ8QSpSw6icI8fIs8.roa File: 9c-m-5gDOVRZ8QSpSw6icI8fIs8.roa (raw, json) Hash identifier: C9ky+sPjX4NTJao92KN8OkbLj+lrTOR9umAOukDAF/M= Subject key identifier: F5:CF:A6:FB:98:03:39:54:59:F1:04:A9:4B:0E:A2:70:8F:1F:22:CF Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019B236E9A1E9AC9056D67D2D6BD072F6F27 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/9c-m-5gDOVRZ8QSpSw6icI8fIs8.roa Signing time: Mon 15 Dec 2025 19:13:29 +0000 ROA not before: Mon 15 Dec 2025 19:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215540 IP address blocks: 45.141.234.0/24 maxlen: 24 78.159.131.0/24 maxlen: 24 93.152.207.0/24 maxlen: 24 93.152.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:6e:9a:1e:9a:c9:05:6d:67:d2:d6:bd:07:2f:6f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Dec 15 19:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f5cfa6fb9803395459f104a94b0ea2708f1f22cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:8d:59:3f:8e:04:e5:ec:8e:49:01:9a:fe:95: de:01:da:25:60:5d:f8:0d:31:d4:9b:e0:9e:71:02: 2b:0f:db:3f:1b:88:8d:a9:45:4f:ab:05:87:e9:6f: f0:98:bc:d8:13:1b:68:f2:97:a5:60:9a:3b:e7:0c: 07:45:3a:2b:d8:34:f6:48:1b:79:69:b9:d0:6a:7d: 98:09:f7:58:56:f0:00:92:09:70:3b:b4:ee:1e:58: c7:f2:6b:b7:90:6e:67:14:96:6d:e2:56:96:50:05: 9e:c8:e8:2c:90:4a:66:1d:4c:7f:ed:bc:04:b0:4d: 00:ec:da:91:3a:72:b7:01:dc:ff:db:a4:fe:3c:81: 64:da:eb:d3:05:eb:56:bb:ac:f9:bd:17:ed:64:40: 79:cc:3c:38:a6:59:58:ff:77:c4:dd:17:22:d5:30: 99:d0:df:3d:ae:8b:a2:88:19:78:ea:3b:4c:42:06: 9f:46:ba:ef:14:68:62:fb:f9:6e:63:99:fe:84:12: 59:e6:65:e2:aa:eb:9c:ad:a2:1c:46:9c:c3:32:cb: 05:6e:1c:37:04:d4:a8:21:c6:b7:b4:21:a9:19:b8: 4b:46:8b:fc:eb:0c:87:2b:ab:20:34:06:ab:ab:ab: a7:36:5a:0a:0a:4f:fe:61:53:0a:80:40:2c:bf:6a: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CF:A6:FB:98:03:39:54:59:F1:04:A9:4B:0E:A2:70:8F:1F:22:CF X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/9c-m-5gDOVRZ8QSpSw6icI8fIs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.234.0/24 78.159.131.0/24 93.152.207.0/24 93.152.217.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:1a:91:4f:6a:40:5a:1f:15:a5:b9:18:17:fb:4d:95:a5:0d: 56:c1:6e:83:67:8c:0e:9e:4c:49:ca:25:56:dc:8d:20:0c:f9: b7:e8:a8:8d:02:49:71:4a:1d:84:8e:7e:27:4a:53:f1:59:20: 9a:11:20:63:80:08:1b:f0:0e:1a:3f:dc:b5:57:b2:e9:5a:83: c9:1f:33:d8:41:cc:fa:ea:cd:cb:91:f8:79:01:6b:57:84:d4: 7f:4a:3f:ca:da:15:3f:84:29:3e:f3:fc:b1:d6:43:7c:3f:27: 87:38:1e:b1:75:01:0e:85:d7:12:86:02:33:4f:d5:a2:7a:3e: 3c:b0:58:7b:da:49:78:92:e8:e2:90:6d:02:b7:9d:78:73:6b: 17:ba:9d:c8:68:0f:33:ff:59:2e:81:a1:96:8f:fb:ba:45:dc: 59:05:81:20:d1:86:dd:70:e3:30:98:d3:39:4a:79:43:16:81: bd:3a:da:5b:ce:88:cc:b5:e9:b6:e3:a1:4d:3a:5b:55:d3:76: 87:85:6b:9d:9f:e9:5c:15:ac:4b:24:c5:ee:0a:dc:ff:76:8b: d6:fa:c9:14:7a:c1:44:18:2e:97:da:a1:02:da:50:cf:87:2c: 2f:48:42:1c:11:95:ca:c1:ad:75:33:d9:48:c1:9c:06:88:f8: 66:a1:fd:6f -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsjbpoemskFbWfS1r0HL28nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjUxMjE1MTkxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWNmYTZmYjk4MDMzOTU0NTlmMTA0YTk0YjBlYTI3MDhmMWYyMmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA941ZP44E5eyOSQGa/pXeAdolYF34 DTHUm+CecQIrD9s/G4iNqUVPqwWH6W/wmLzYExto8pelYJo75wwHRTor2DT2SBt5 abnQan2YCfdYVvAAkglwO7TuHljH8mu3kG5nFJZt4laWUAWeyOgskEpmHUx/7bwE sE0A7NqROnK3Adz/26T+PIFk2uvTBetWu6z5vRftZEB5zDw4pllY/3fE3Rci1TCZ 0N89rouiiBl46jtMQgafRrrvFGhi+/luY5n+hBJZ5mXiquucraIcRpzDMssFbhw3 BNSoIca3tCGpGbhLRov86wyHK6sgNAarq6unNloKCk/+YVMKgEAsv2q2dQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPXPpvuYAzlUWfEEqUsOonCPHyLPMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvOWMtbS01Z0RPVlJaOFFTcFN3NmljSThmSXM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALY3qAwQA Tp+DAwQAXZjPAwQAXZjZMA0GCSqGSIb3DQEBCwUAA4IBAQBOGpFPakBaHxWluRgX +02VpQ1WwW6DZ4wOnkxJyiVW3I0gDPm36KiNAklxSh2Ejn4nSlPxWSCaESBjgAgb 8A4aP9y1V7LpWoPJHzPYQcz66s3Lkfh5AWtXhNR/Sj/K2hU/hCk+8/yx1kN8PyeH OB6xdQEOhdcShgIzT9Wiej48sFh72kl4kujikG0Ct514c2sXup3IaA8z/1kugaGW j/u6RdxZBYEg0YbdcOMwmNM5SnlDFoG9OtpbzojMtem246FNOltV03aHhWudn+lc FaxLJMXuCtz/dovW+skUesFEGC6X2qEC2lDPhywvSEIcEZXKwa11M9lIwZwGiPhm of1v -----END CERTIFICATE-----Generated at Wed Dec 17 11:16:32 2025 by rpki-client