This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RRorQ9LrL90LJD-qxhgouBZISTA.roa File: RRorQ9LrL90LJD-qxhgouBZISTA.roa (raw, json) Hash identifier: ZOwTGxWWye42TKkBVF5uqAH5yp4Zvmpp9mHfnA7T+nM= Subject key identifier: 45:1A:2B:43:D2:EB:2F:DD:0B:24:3F:AA:C6:18:28:B8:16:48:49:30 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15E849D2A71FE96A5F548FEF408049 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RRorQ9LrL90LJD-qxhgouBZISTA.roa Signing time: Fri 02 Jan 2026 14:21:40 +0000 ROA not before: Fri 02 Jan 2026 14:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61959 IP address blocks: 185.43.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e8:49:d2:a7:1f:e9:6a:5f:54:8f:ef:40:80:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=451a2b43d2eb2fdd0b243faac61828b816484930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:c4:de:4c:fb:bb:36:c0:20:74:4d:7e:58: 7c:e7:bf:df:c6:bc:6b:a8:b1:2f:79:02:c3:ef:00: 44:50:e3:3e:a2:4c:e5:05:1e:44:b5:55:04:ae:3d: 77:4d:33:87:ee:ec:af:5b:81:04:8f:39:19:49:ab: 4f:10:f3:9f:63:41:2d:cb:0b:74:7b:43:bd:bc:f3: c1:34:bf:85:34:e3:26:38:e8:35:e8:8e:b5:f2:a8: 94:1c:25:21:c3:5c:76:0f:76:c9:43:e8:e6:c9:6e: ca:48:09:9b:4a:30:e5:cb:94:8b:78:59:ca:46:31: 6d:f5:66:34:77:67:d6:02:75:1e:c7:dc:d8:93:64: 6b:44:d5:37:30:18:5d:8b:28:28:86:90:d2:f2:1d: 5b:bd:5e:0e:00:27:c2:81:aa:8f:3a:0f:28:b5:43: 35:ea:b1:28:90:09:2a:70:de:eb:60:95:df:cd:5a: b8:86:e7:6d:e9:62:c9:ca:eb:7e:b3:dc:d5:c8:61: b0:ff:ec:0c:ad:ce:60:b3:38:8c:4f:90:62:bf:e2: c7:85:2d:5b:6f:a5:77:25:1c:ad:d6:18:83:62:ee: 78:67:68:47:e2:44:40:62:2f:00:cb:22:37:b0:a7: 13:43:d9:c9:2c:87:79:67:f4:75:7b:5e:8a:86:64: 5b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1A:2B:43:D2:EB:2F:DD:0B:24:3F:AA:C6:18:28:B8:16:48:49:30 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/RRorQ9LrL90LJD-qxhgouBZISTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.43.250.0/24 Signature Algorithm: sha256WithRSAEncryption 64:4d:74:37:a0:55:fc:83:92:44:23:d7:33:d7:4b:b3:fa:6b: e2:cb:a8:a4:d1:56:1e:69:7a:c1:a6:57:c9:8a:d4:72:cf:78: ed:cd:fb:b4:e5:0b:6d:0b:ac:b9:1d:bf:9c:6a:8c:f4:40:2f: c5:f9:e6:67:34:ff:57:6b:7f:8e:d5:2e:d4:85:b5:a8:ce:dc: 6f:0a:43:45:4a:f7:46:07:24:0b:c9:09:22:61:22:79:56:11: 93:8b:79:41:53:54:50:2d:cb:e1:39:cb:18:ef:e6:6d:6d:88: 1e:ab:d4:4f:75:ef:56:8b:4d:b3:d4:67:1e:b9:0e:c1:22:fd: 5a:e4:01:7b:d0:f8:f4:8f:29:a7:93:54:c7:5a:05:58:31:cd: 53:99:00:46:39:fd:b3:6b:b0:85:a8:44:7a:4f:cb:fc:22:12: 29:ab:a6:0a:4a:5f:09:41:0e:85:e3:47:d7:5a:b6:e5:b3:c7: f9:d6:c1:8f:73:3f:10:bf:fb:c4:cf:89:b0:2e:ae:a8:98:3e: ae:ce:c5:bf:0f:0d:b9:60:d0:28:6e:47:ca:fd:23:c3:87:55: d7:11:a0:f3:5c:33:c7:97:ca:22:84:97:d6:d8:1f:49:46:e5: b0:f2:c8:96:86:ae:cc:c1:9b:14:cc:92:e4:bb:28:a4:95:4a: b9:59:6f:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FehJ0qcf6WpfVI/vQIBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTFhMmI0M2QyZWIyZmRkMGIyNDNmYWFjNjE4MjhiODE2NDg0OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWDE3kz7uzbAIHRNflh857/fxrxr qLEveQLD7wBEUOM+okzlBR5EtVUErj13TTOH7uyvW4EEjzkZSatPEPOfY0Etywt0 e0O9vPPBNL+FNOMmOOg16I618qiUHCUhw1x2D3bJQ+jmyW7KSAmbSjDly5SLeFnK RjFt9WY0d2fWAnUex9zYk2RrRNU3MBhdiygohpDS8h1bvV4OACfCgaqPOg8otUM1 6rEokAkqcN7rYJXfzVq4hudt6WLJyut+s9zVyGGw/+wMrc5gsziMT5Biv+LHhS1b b6V3JRyt1hiDYu54Z2hH4kRAYi8AyyI3sKcTQ9nJLId5Z/R1e16KhmRboQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUaK0PS6y/dCyQ/qsYYKLgWSEkwMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvUlJvclE5THJMOTBMSkQtcXhoZ291QlpJU1RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSv6MA0G CSqGSIb3DQEBCwUAA4IBAQBkTXQ3oFX8g5JEI9cz10uz+mviy6ik0VYeaXrBplfJ itRyz3jtzfu05QttC6y5Hb+caoz0QC/F+eZnNP9Xa3+O1S7UhbWoztxvCkNFSvdG ByQLyQkiYSJ5VhGTi3lBU1RQLcvhOcsY7+ZtbYgeq9RPde9Wi02z1GceuQ7BIv1a 5AF70Pj0jymnk1THWgVYMc1TmQBGOf2za7CFqER6T8v8IhIpq6YKSl8JQQ6F40fX Wrbls8f51sGPcz8Qv/vEz4mwLq6omD6uzsW/Dw25YNAobkfK/SPDh1XXEaDzXDPH l8oihJfW2B9JRuWw8siWhq7MwZsUzJLkuyiklUq5WW8O -----END CERTIFICATE-----Generated at Tue Jan 6 20:52:11 2026 by rpki-client