This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/9tcqRBW5dWCPlBmOmJEm6c--iDU.roa File: 9tcqRBW5dWCPlBmOmJEm6c--iDU.roa (raw, json) Hash identifier: u8oO/RgVRYujIoxnuHbXuI4mqtgSWQD8/zpjHQZYwcI= Subject key identifier: F6:D7:2A:44:15:B9:75:60:8F:94:19:8E:98:91:26:E9:CF:BE:88:35 Certificate issuer: /CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd Certificate serial: 019B7EA6B0E30F1547E9A5730BD709B01395 Authority key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/9tcqRBW5dWCPlBmOmJEm6c--iDU.roa Signing time: Fri 02 Jan 2026 12:20:12 +0000 ROA not before: Fri 02 Jan 2026 12:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209936 IP address blocks: 185.242.164.0/22 maxlen: 23 185.242.164.0/23 maxlen: 23 2a0c:e780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:b0:e3:0f:15:47:e9:a5:73:0b:d7:09:b0:13:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd Validity Not Before: Jan 2 12:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6d72a4415b975608f94198e989126e9cfbe8835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9e:9a:34:de:ce:af:ce:1e:a6:b5:26:e7:d3: d9:c8:8e:a3:5f:7a:e8:12:d3:1a:73:01:2f:5a:6f: 6b:7a:02:cb:4a:78:37:8a:80:fe:1a:0b:0c:27:65: ba:ec:4f:c2:15:eb:09:bc:59:44:fc:61:53:1c:48: 0d:90:42:ea:60:c0:1e:7f:b9:3b:d6:da:58:33:63: 5a:eb:47:2f:aa:3d:11:0f:fd:33:e5:32:b2:ea:ad: 36:0f:21:a5:d5:4d:10:37:63:1d:b6:01:02:5b:92: ab:02:95:07:66:d9:89:c8:53:ee:51:b4:62:b8:77: 9a:22:14:38:4c:57:f4:5f:1e:c3:2a:0b:af:e2:4c: 16:f5:6f:fe:2b:9e:ed:5a:6e:31:6a:1a:eb:a6:43: b2:d9:71:fa:7a:d8:3f:1d:a7:98:d8:d9:2a:42:27: ca:4d:28:4d:94:92:43:8e:97:ef:e4:dd:e5:a3:d1: 13:df:20:5f:f2:54:15:ca:ea:e0:2e:3e:3b:ac:c0: 0c:6a:10:ca:ba:65:93:95:0d:13:46:c4:25:86:bc: 94:fb:e9:3a:51:29:97:87:2e:84:01:f4:93:8c:8f: a4:00:df:f6:65:51:70:77:04:9e:78:df:f2:55:11: fd:b1:74:ab:9f:fb:b4:f5:92:ca:37:bc:1d:f1:00: 52:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D7:2A:44:15:B9:75:60:8F:94:19:8E:98:91:26:E9:CF:BE:88:35 X509v3 Authority Key Identifier: keyid:8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/9tcqRBW5dWCPlBmOmJEm6c--iDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.164.0/22 IPv6: 2a0c:e780::/29 Signature Algorithm: sha256WithRSAEncryption 9b:fb:03:ba:84:38:40:03:f9:7f:e6:a9:76:68:33:42:9e:7e: 2c:02:a2:d9:49:8d:86:5f:ab:b1:4c:6d:f7:ae:c3:f7:4d:ab: 0c:99:93:30:85:15:26:38:8e:34:d5:d5:01:02:0f:4c:74:35: 6c:ae:11:1e:aa:9b:82:02:54:86:2c:8e:51:e9:02:64:df:31: ed:a7:fd:d1:8d:46:bc:be:a2:ad:d1:eb:5f:5a:5f:b7:31:65: 2e:54:06:8e:5e:df:63:87:5e:04:1b:3e:70:28:c4:ab:9d:2c: a8:cd:05:5f:3d:e8:ed:dc:fa:31:76:5b:b3:96:aa:02:58:9f: e0:00:6c:07:28:88:ef:4e:b5:29:f9:12:4f:37:78:b5:6a:4b: 01:a2:92:f9:fb:e3:90:c9:8a:4d:98:ca:57:78:98:22:95:d4: a6:7a:d7:81:ad:74:ec:e7:0a:36:7a:07:e6:63:27:0d:41:04: 07:2c:6e:1a:fe:70:e5:cb:26:52:7d:78:0e:72:a0:2c:6f:3f: 90:03:31:1c:c5:b4:83:c3:c5:4f:b6:ae:ea:85:90:37:e1:b1: fe:a6:25:b2:9e:84:82:d3:37:84:01:34:99:37:0f:13:ef:eb: 1c:4f:af:92:71:ea:b5:f7:82:f2:0a:5b:6c:fa:6a:a5:3c:d0: c9:37:c4:2a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+prDjDxVH6aVzC9cJsBOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhY2RkZDVjMzBkNTgwZWIwZmVlY2EyYTE2Y2Y1YzVhOGIy NTY4ZmQwHhcNMjYwMTAyMTIyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmQ3MmE0NDE1Yjk3NTYwOGY5NDE5OGU5ODkxMjZlOWNmYmU4ODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ6aNN7Or84eprUm59PZyI6jX3ro EtMacwEvWm9regLLSng3ioD+GgsMJ2W67E/CFesJvFlE/GFTHEgNkELqYMAef7k7 1tpYM2Na60cvqj0RD/0z5TKy6q02DyGl1U0QN2MdtgECW5KrApUHZtmJyFPuUbRi uHeaIhQ4TFf0Xx7DKguv4kwW9W/+K57tWm4xahrrpkOy2XH6etg/HaeY2NkqQifK TShNlJJDjpfv5N3lo9ET3yBf8lQVyurgLj47rMAMahDKumWTlQ0TRsQlhryU++k6 USmXhy6EAfSTjI+kAN/2ZVFwdwSeeN/yVRH9sXSrn/u09ZLKN7wd8QBSLwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPbXKkQVuXVgj5QZjpiRJunPvog1MB8GA1UdIwQY MBaAFIrN3Vww1YDrD+7KKhbPXFqLJWj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXMzZFhERFZnT3NQN3NvcUZzOWNXb3NsYVAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yNWFjYTctN2UyOC00ODdjLTg2ZDIt MTdiMWM3Mzc5MzAwLzEvOXRjcVJCVzVkV0NQbEJtT21KRW02Yy0taURVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8yNWFjYTctN2UyOC00ODdjLTg2ZDItMTdiMWM3Mzc5MzAw LzEvaXMzZFhERFZnT3NQN3NvcUZzOWNXb3NsYVAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufKkMA0E AgACMAcDBQMqDOeAMA0GCSqGSIb3DQEBCwUAA4IBAQCb+wO6hDhAA/l/5ql2aDNC nn4sAqLZSY2GX6uxTG33rsP3TasMmZMwhRUmOI401dUBAg9MdDVsrhEeqpuCAlSG LI5R6QJk3zHtp/3RjUa8vqKt0etfWl+3MWUuVAaOXt9jh14EGz5wKMSrnSyozQVf Pejt3PoxdluzlqoCWJ/gAGwHKIjvTrUp+RJPN3i1aksBopL5++OQyYpNmMpXeJgi ldSmeteBrXTs5wo2egfmYycNQQQHLG4a/nDlyyZSfXgOcqAsbz+QAzEcxbSDw8VP tq7qhZA34bH+piWynoSC0zeEATSZNw8T7+scT6+Sceq194LyClts+mqlPNDJN8Qq -----END CERTIFICATE-----Generated at Tue Feb 10 01:23:52 2026 by rpki-client