This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/ur620Y0Jnk61OHeYYoTBq--EZKE.roa File: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (raw, json) Hash identifier: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE= Subject key identifier: BA:BE:B6:D1:8D:09:9E:4E:B5:38:77:98:62:84:C1:AB:EF:84:64:A1 Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Certificate serial: 019B77C74C95731E78F5F17A921A172E76B7 Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/ur620Y0Jnk61OHeYYoTBq--EZKE.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.9.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4c:95:73:1e:78:f5:f1:7a:92:1a:17:2e:76:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=babeb6d18d099e4eb53877986284c1abef8464a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:36:08:70:c9:d3:a5:e2:fe:d5:20:89:de: 51:06:6e:40:20:55:f0:0a:80:e0:21:db:88:ff:b2: b0:6b:45:42:b6:bf:c1:de:df:d7:36:2e:68:41:9f: bd:08:0b:7a:be:4f:02:a5:6f:31:37:0c:53:a2:19: 8d:9a:28:ff:d3:48:0f:fe:9d:ff:9d:a5:68:23:08: d1:4d:41:6f:aa:a4:9e:fb:ec:b2:88:db:45:43:d4: 31:d1:18:61:3f:a6:22:22:88:54:12:87:ea:21:92: 1e:d5:92:e8:02:06:a2:79:44:7d:5b:7c:64:5c:5d: 52:9d:cd:28:3d:1d:a5:9e:70:fa:f5:f8:04:59:82: 9f:d1:23:ac:03:3e:9e:88:4c:a7:06:59:a7:08:21: 85:c0:ba:1d:f0:66:bd:9b:6f:00:29:21:26:96:8e: d7:60:75:89:dc:31:f0:68:02:6d:05:85:0f:ad:0e: 97:9a:90:d8:ed:f9:31:53:90:e6:ab:87:78:dc:52: 0a:6c:1a:b1:fb:96:ff:d1:0a:96:64:2a:5c:c3:c3: 46:cf:57:19:7a:b8:18:ba:57:69:9b:03:26:e0:c8: a7:25:86:56:d9:1f:46:09:60:57:81:6e:a7:b3:26: 09:59:e6:8f:85:fb:32:3e:76:b0:02:09:27:64:2e: 86:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BE:B6:D1:8D:09:9E:4E:B5:38:77:98:62:84:C1:AB:EF:84:64:A1 X509v3 Authority Key Identifier: keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/ur620Y0Jnk61OHeYYoTBq--EZKE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.1.0/24 Signature Algorithm: sha256WithRSAEncryption 60:c8:9d:1f:7b:cf:4f:e6:1b:ba:cb:f1:15:51:07:35:67:3a: 53:c1:44:c5:6b:7d:73:19:79:c2:5f:38:41:57:75:46:2e:9b: f7:07:ad:59:d1:c0:63:29:56:25:6d:bb:0b:9c:87:98:f8:7e: 1c:57:fb:69:13:e2:0c:93:35:25:be:43:ee:b7:bd:71:d6:c9: e6:f8:d2:06:2a:73:42:0c:4d:e1:0e:61:d4:09:11:fa:1b:95: 35:e1:fc:0f:ea:ab:d7:af:e9:6c:93:88:d9:70:d7:0f:2e:44: 3b:c6:2e:c0:01:97:69:ac:60:4c:92:bc:78:0a:96:89:3a:f4: 17:7f:ee:74:6d:a0:92:c2:41:33:49:50:c3:4e:89:a6:5b:37: 89:c7:2f:3c:7a:a7:c0:dc:8d:08:c4:a3:4e:f5:2f:63:be:fc: 0b:87:7d:85:b3:60:e1:09:19:51:ff:6b:9a:33:9a:de:fa:ea: 45:33:38:6f:c8:b8:8c:eb:fa:1c:aa:73:41:9d:92:2a:50:47: 92:7c:f8:f8:ae:5c:c8:13:4e:0a:31:7f:29:91:3c:27:5d:c5: 37:29:be:03:55:78:07:ff:5b:94:3e:71:c7:3a:ef:8f:c0:8e: 3c:0e:a5:f9:35:2c:9f:51:07:66:28:34:94:66:06:4a:41:ba: 7f:a9:e7:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0yVcx549fF6khoXLna3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0 NDNiZDQwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWJlYjZkMThkMDk5ZTRlYjUzODc3OTg2Mjg0YzFhYmVmODQ2NGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3M2CHDJ06Xi/tUgid5RBm5AIFXw CoDgIduI/7Kwa0VCtr/B3t/XNi5oQZ+9CAt6vk8CpW8xNwxTohmNmij/00gP/p3/ naVoIwjRTUFvqqSe++yyiNtFQ9Qx0RhhP6YiIohUEofqIZIe1ZLoAgaieUR9W3xk XF1Snc0oPR2lnnD69fgEWYKf0SOsAz6eiEynBlmnCCGFwLod8Ga9m28AKSEmlo7X YHWJ3DHwaAJtBYUPrQ6XmpDY7fkxU5Dmq4d43FIKbBqx+5b/0QqWZCpcw8NGz1cZ ergYuldpmwMm4MinJYZW2R9GCWBXgW6nsyYJWeaPhfsyPnawAgknZC6GkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLq+ttGNCZ5OtTh3mGKEwavvhGShMB8GA1UdIwQY MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct Y2RhNWMzNzY2ZjAzLzEvdXI2MjBZMEpuazYxT0hlWVlvVEJxLS1FWktFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQkBMA0G CSqGSIb3DQEBCwUAA4IBAQBgyJ0fe89P5hu6y/EVUQc1ZzpTwUTFa31zGXnCXzhB V3VGLpv3B61Z0cBjKVYlbbsLnIeY+H4cV/tpE+IMkzUlvkPut71x1snm+NIGKnNC DE3hDmHUCRH6G5U14fwP6qvXr+lsk4jZcNcPLkQ7xi7AAZdprGBMkrx4CpaJOvQX f+50baCSwkEzSVDDTommWzeJxy88eqfA3I0IxKNO9S9jvvwLh32Fs2DhCRlR/2ua M5re+upFMzhvyLiM6/ocqnNBnZIqUEeSfPj4rlzIE04KMX8pkTwnXcU3Kb4DVXgH /1uUPnHHOu+PwI48DqX5NSyfUQdmKDSUZgZKQbp/qecx -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:16 2026 by rpki-client