This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/R9ObVa6lHs_yNBiXEeUkNwPvfjY.roa File: R9ObVa6lHs_yNBiXEeUkNwPvfjY.roa (raw, json) Hash identifier: 1wYwYXDyakrLIYM8b4nBqcfhKSxazLcyqbUdGxKpMqk= Subject key identifier: 47:D3:9B:55:AE:A5:1E:CF:F2:34:18:97:11:E5:24:37:03:EF:7E:36 Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa Certificate serial: 019B7A5B01C344E080C17379086273BAF8D5 Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/R9ObVa6lHs_yNBiXEeUkNwPvfjY.roa Signing time: Thu 01 Jan 2026 16:19:02 +0000 ROA not before: Thu 01 Jan 2026 16:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206009 IP address blocks: 185.184.72.0/22 maxlen: 24 2a0b:2c80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:01:c3:44:e0:80:c1:73:79:08:62:73:ba:f8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa Validity Not Before: Jan 1 16:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47d39b55aea51ecff234189711e5243703ef7e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0a:90:79:bf:1e:08:2e:34:7b:e4:d2:1e:2c: 00:2c:5b:18:3b:f4:56:b9:93:eb:99:5b:d4:b6:33: 38:37:28:93:e7:fe:05:70:a2:5d:19:2e:15:14:dd: 2e:b2:0b:cc:56:ef:24:d2:8d:aa:57:d8:b7:9d:7f: ca:c6:f9:4a:48:57:3e:5f:86:47:17:19:d6:36:00: 04:85:3b:3a:bd:b6:e3:00:82:c2:de:69:09:a3:27: 65:fa:b4:68:d5:4c:85:69:c5:b6:b0:3e:a8:33:4b: 17:e3:f1:fe:03:76:f7:93:13:d5:4b:8f:bf:6f:03: df:aa:6d:83:91:b7:d4:89:88:43:19:79:01:28:0c: 7c:e3:43:7b:a8:f3:6a:95:11:35:63:96:3f:ae:9c: cd:e6:cb:b5:21:b0:0c:6e:62:dd:cd:09:0d:8d:dd: d2:2b:fc:da:f0:e6:e5:5b:5a:cb:3f:7f:6a:94:b5: 21:e9:2a:c4:39:5c:a5:75:23:b9:d7:e5:c4:0b:c8: 80:b0:cd:47:18:c9:c7:6d:51:e6:34:2c:02:68:62: 06:5f:30:02:78:d7:3f:d4:83:e6:15:71:b2:0a:ed: 15:21:4a:ee:d7:b1:a3:18:74:56:20:27:6e:5f:79: 89:f8:6d:41:ee:eb:eb:1e:c2:7d:c3:aa:35:fb:1a: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D3:9B:55:AE:A5:1E:CF:F2:34:18:97:11:E5:24:37:03:EF:7E:36 X509v3 Authority Key Identifier: keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/R9ObVa6lHs_yNBiXEeUkNwPvfjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.72.0/22 IPv6: 2a0b:2c80::/29 Signature Algorithm: sha256WithRSAEncryption 72:9f:d7:b2:31:29:f0:29:06:7d:85:b4:2c:6f:b2:ff:17:75: 7c:bc:a9:f8:f6:f3:72:60:e5:5b:ae:1a:30:07:18:d0:b2:6f: a7:3e:cc:b7:d9:40:0b:75:65:48:49:3f:c3:9d:2d:9f:f1:a3: 1c:4d:35:70:c0:21:a7:85:aa:45:a1:ff:21:db:b9:97:24:a5: 98:cc:a9:fc:58:6e:59:42:d9:d1:e4:31:9c:fc:de:13:0a:b8: 8c:32:4a:99:16:5b:0d:af:ca:55:9b:29:44:f9:22:0b:84:29: 03:47:43:91:8f:fd:db:d7:a4:e1:ed:24:80:7d:99:9d:33:8b: 35:49:29:8b:e2:91:d0:04:84:7a:54:06:35:dd:e8:3c:5a:2e: 2f:ba:8f:76:09:e1:c7:81:44:8d:a8:b6:cf:eb:f9:82:3f:b9: 60:69:69:41:af:34:ae:aa:2c:26:cb:9b:2a:33:97:e4:34:98: 32:5e:79:21:e0:07:a5:9f:7f:7c:65:0c:02:73:fb:c7:71:00: 35:d4:df:9f:50:01:a4:53:bc:15:c0:e2:a7:79:64:c1:6d:0b: 61:a9:24:aa:83:71:6d:0e:3a:5d:c0:05:fb:3f:e5:fc:31:34: 5d:a9:2e:43:17:83:4d:3e:36:1f:77:83:a4:f5:7c:c8:67:31: 8c:13:88:3a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WwHDROCAwXN5CGJzuvjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODViNTUyMWQyMDkwMTg4MjQ3OGYwZjA5NDE5NjJjM2U5 Yzk0ZmEwHhcNMjYwMTAxMTYxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2QzOWI1NWFlYTUxZWNmZjIzNDE4OTcxMWU1MjQzNzAzZWY3ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gqQeb8eCC40e+TSHiwALFsYO/RW uZPrmVvUtjM4NyiT5/4FcKJdGS4VFN0usgvMVu8k0o2qV9i3nX/KxvlKSFc+X4ZH FxnWNgAEhTs6vbbjAILC3mkJoydl+rRo1UyFacW2sD6oM0sX4/H+A3b3kxPVS4+/ bwPfqm2DkbfUiYhDGXkBKAx840N7qPNqlRE1Y5Y/rpzN5su1IbAMbmLdzQkNjd3S K/za8OblW1rLP39qlLUh6SrEOVyldSO51+XEC8iAsM1HGMnHbVHmNCwCaGIGXzAC eNc/1IPmFXGyCu0VIUru17GjGHRWICduX3mJ+G1B7uvrHsJ9w6o1+xqqVwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEfTm1WupR7P8jQYlxHlJDcD7342MB8GA1UdIwQY MBaAFKmFtVIdIJAYgkePDwlBliw+nJT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZmZiM2UtOGE0Yy00MGI3LTg3NmUt NjAwM2Q1YWVlZDFmLzEvUjlPYlZhNmxIc195TkJpWEVlVWtOd1B2ZmpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83ZmZiM2UtOGE0Yy00MGI3LTg3NmUtNjAwM2Q1YWVlZDFm LzEvcVlXMVVoMGdrQmlDUjQ4UENVR1dMRDZjbFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubhIMA0E AgACMAcDBQMqCyyAMA0GCSqGSIb3DQEBCwUAA4IBAQByn9eyMSnwKQZ9hbQsb7L/ F3V8vKn49vNyYOVbrhowBxjQsm+nPsy32UALdWVIST/DnS2f8aMcTTVwwCGnhapF of8h27mXJKWYzKn8WG5ZQtnR5DGc/N4TCriMMkqZFlsNr8pVmylE+SILhCkDR0OR j/3b16Th7SSAfZmdM4s1SSmL4pHQBIR6VAY13eg8Wi4vuo92CeHHgUSNqLbP6/mC P7lgaWlBrzSuqiwmy5sqM5fkNJgyXnkh4Aeln398ZQwCc/vHcQA11N+fUAGkU7wV wOKneWTBbQthqSSqg3FtDjpdwAX7P+X8MTRdqS5DF4NNPjYfd4Ok9XzIZzGME4g6 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:28 2026 by rpki-client