This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/G55yZYiuVYeJRmcFMnEODXZ1HEE.roa File: G55yZYiuVYeJRmcFMnEODXZ1HEE.roa (raw, json) Hash identifier: 9PE9kx4LunMvlElwlTx9oCQOua2rAPc/W+sL1ybbB1w= Subject key identifier: 1B:9E:72:65:88:AE:55:87:89:46:67:05:32:71:0E:0D:76:75:1C:41 Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Certificate serial: 019B7E3938294A250E9515C69CA499CDD5CC Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/G55yZYiuVYeJRmcFMnEODXZ1HEE.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64414 IP address blocks: 185.166.112.0/24 maxlen: 24 185.166.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:38:29:4a:25:0e:95:15:c6:9c:a4:99:cd:d5:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b9e726588ae55878946670532710e0d76751c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:4d:31:22:ec:7f:c4:18:c3:c6:3a:19:e5: 00:84:d6:c9:28:1a:d1:56:cb:f5:3a:fb:48:b1:51: 53:c2:72:cc:50:84:52:f3:28:8d:e4:6a:48:c2:7a: 8f:93:83:08:9d:69:4a:94:b0:b7:38:67:e1:ee:c9: 30:4d:cd:22:5e:6a:e0:63:6a:9a:f4:01:cd:b1:54: 45:5d:3e:c4:c7:8e:69:8b:9c:b2:59:6a:3e:be:b6: a2:1f:31:77:a1:8d:d6:3b:88:a7:a2:80:48:70:2c: d0:cd:f7:3d:91:f8:3a:22:74:4b:bf:0a:de:95:33: 58:c7:f4:0c:cf:b7:76:aa:d2:0a:fe:06:6b:7f:f6: 70:49:cd:a0:b4:fe:a1:a6:04:3b:5e:61:d4:e9:71: 6d:1e:30:f7:cc:49:b9:1a:da:94:6a:a3:69:5b:97: 29:cf:43:22:1c:d3:23:87:37:bb:92:7f:37:fc:52: 24:30:d0:90:93:94:3e:0e:21:46:82:bf:19:e0:44: 3c:08:23:19:a4:4f:06:92:9e:53:0f:0f:d1:ca:e9: b3:6e:03:53:f6:b4:41:0d:16:d6:d6:47:6d:a3:df: d7:53:ba:f6:38:66:8a:da:50:d8:ce:2e:36:f8:ae: a6:f2:63:21:3c:d4:59:13:6c:d3:fd:bc:ce:04:ff: fc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9E:72:65:88:AE:55:87:89:46:67:05:32:71:0E:0D:76:75:1C:41 X509v3 Authority Key Identifier: keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/G55yZYiuVYeJRmcFMnEODXZ1HEE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.112.0/24 185.166.114.0/24 Signature Algorithm: sha256WithRSAEncryption a2:b4:15:33:e9:fa:0c:4a:e0:72:78:59:64:25:31:b5:68:36: 3d:03:71:ef:95:1c:5e:79:46:dd:22:92:cf:92:e7:2d:6e:76: 27:4f:53:e7:24:f1:e1:d4:9c:5a:36:74:48:ca:ae:e1:89:d8: a3:bd:22:73:ba:5d:eb:dc:0d:8b:07:77:bf:50:1a:31:9a:ed: 10:54:d6:71:13:b6:f8:7b:43:d1:4f:38:c6:d3:b9:4a:21:12: 47:10:a7:b3:dd:99:a7:6c:b2:d7:28:dd:d4:bd:36:62:17:79: 94:2c:4c:70:25:b1:9c:7c:72:dc:8a:13:06:f5:04:c5:a6:32: cb:9a:e8:34:ed:10:af:7f:2e:f7:12:f7:f1:34:9c:69:79:70: 52:56:db:9a:3d:6c:25:ec:20:7c:3f:24:ba:27:c6:91:ac:1b: 11:38:f2:9c:6c:4f:b7:95:01:85:28:35:9a:9c:81:b5:16:71: 42:77:ff:7f:66:7c:dc:e5:45:fd:9e:ab:38:62:ca:c3:f2:85: bf:65:f8:7a:3a:49:b2:16:46:80:7f:1c:45:29:f0:07:24:ae: 7b:19:74:c5:f2:e4:b6:b5:1f:de:fd:b6:81:b3:48:b0:65:35: 8f:f5:d0:3b:b1:df:c8:c3:cf:d5:a9:14:cf:70:fb:b1:82:e9: d0:59:03:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OTgpSiUOlRXGnKSZzdXMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjgxOTg5YzNiNmU1OGZkYzk1MzRlZTdlYjNlMjYwZDFk ODc3NDkwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjllNzI2NTg4YWU1NTg3ODk0NjY3MDUzMjcxMGUwZDc2NzUxYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6hNMSLsf8QYw8Y6GeUAhNbJKBrR Vsv1OvtIsVFTwnLMUIRS8yiN5GpIwnqPk4MInWlKlLC3OGfh7skwTc0iXmrgY2qa 9AHNsVRFXT7Ex45pi5yyWWo+vraiHzF3oY3WO4inooBIcCzQzfc9kfg6InRLvwre lTNYx/QMz7d2qtIK/gZrf/ZwSc2gtP6hpgQ7XmHU6XFtHjD3zEm5GtqUaqNpW5cp z0MiHNMjhze7kn83/FIkMNCQk5Q+DiFGgr8Z4EQ8CCMZpE8Gkp5TDw/RyumzbgNT 9rRBDRbW1kdto9/XU7r2OGaK2lDYzi42+K6m8mMhPNRZE2zT/bzOBP/8IwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBuecmWIrlWHiUZnBTJxDg12dRxBMB8GA1UdIwQY MBaAFI0oGYnDtuWP3JU07n6z4mDR2HdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEt YmNhODBlNDdjNTczLzEvRzU1eVpZaXVWWWVKUm1jRk1uRU9EWFoxSEVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEtYmNhODBlNDdjNTcz LzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuaZwAwQA uaZyMA0GCSqGSIb3DQEBCwUAA4IBAQCitBUz6foMSuByeFlkJTG1aDY9A3HvlRxe eUbdIpLPkuctbnYnT1PnJPHh1JxaNnRIyq7hidijvSJzul3r3A2LB3e/UBoxmu0Q VNZxE7b4e0PRTzjG07lKIRJHEKez3ZmnbLLXKN3UvTZiF3mULExwJbGcfHLcihMG 9QTFpjLLmug07RCvfy73EvfxNJxpeXBSVtuaPWwl7CB8PyS6J8aRrBsROPKcbE+3 lQGFKDWanIG1FnFCd/9/Znzc5UX9nqs4YsrD8oW/Zfh6OkmyFkaAfxxFKfAHJK57 GXTF8uS2tR/e/baBs0iwZTWP9dA7sd/Iw8/VqRTPcPuxgunQWQMl -----END CERTIFICATE-----Generated at Tue Jan 27 02:31:05 2026 by rpki-client