This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/R9nSr9yzzSC-FRYuIEsQQoqc2S8.roa File: R9nSr9yzzSC-FRYuIEsQQoqc2S8.roa (raw, json) Hash identifier: FpNxnsyp7KENTPtJg+rBaX3TA+eZvHvTwoi28ut+Ras= Subject key identifier: 47:D9:D2:AF:DC:B3:CD:20:BE:15:16:2E:20:4B:10:42:8A:9C:D9:2F Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87 Certificate serial: 019B7F80F5990E226CA75C99870A2FCFF0A9 Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/R9nSr9yzzSC-FRYuIEsQQoqc2S8.roa Signing time: Fri 02 Jan 2026 16:18:36 +0000 ROA not before: Fri 02 Jan 2026 16:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199811 IP address blocks: 185.210.64.0/22 maxlen: 22 2a0b:55c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:f5:99:0e:22:6c:a7:5c:99:87:0a:2f:cf:f0:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87 Validity Not Before: Jan 2 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47d9d2afdcb3cd20be15162e204b10428a9cd92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:01:4e:41:14:7e:dd:dd:68:2f:51:f0:c0:17: 8a:8b:6a:dd:2d:1b:f4:36:1b:58:cd:53:31:ec:c1: cb:6f:a8:db:c5:31:29:7b:b9:8d:d3:56:b6:d0:61: bc:f2:07:75:51:67:06:66:b4:2c:37:41:12:7e:a4: 68:09:c7:5c:0d:2e:3e:46:fc:69:8b:1f:f1:85:f9: 53:9c:85:87:e7:a7:59:9b:b8:f6:93:08:7a:d1:0d: 3d:62:57:ed:ae:19:23:25:a3:25:d6:d9:6a:60:ff: 5b:43:c4:3f:29:3b:18:b7:df:9b:67:80:64:ea:d0: d6:1b:ac:8a:9b:31:5d:fa:59:45:a2:78:7e:d0:99: 25:24:f2:fe:a1:81:d7:28:b6:d3:34:f1:f6:30:62: 3c:6b:f1:71:88:f6:a6:87:13:f7:a5:d2:1a:8c:80: e5:ae:6b:72:5d:31:a3:ab:71:2d:b1:5d:5a:a9:af: b1:29:ab:58:f4:90:86:8f:1a:42:5c:cf:45:60:dc: 42:c0:eb:8b:10:6b:aa:bc:43:15:4a:d7:58:cc:87: 73:0e:a4:74:22:a0:0a:29:6d:32:14:e0:c1:f9:a9: 9a:40:c7:70:2d:1a:21:90:58:b8:71:41:08:8b:9b: 8f:46:c1:d0:78:d5:7b:a9:aa:a9:da:10:0b:17:27: 96:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:D2:AF:DC:B3:CD:20:BE:15:16:2E:20:4B:10:42:8A:9C:D9:2F X509v3 Authority Key Identifier: keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/R9nSr9yzzSC-FRYuIEsQQoqc2S8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.210.64.0/22 IPv6: 2a0b:55c0::/29 Signature Algorithm: sha256WithRSAEncryption 52:c1:41:18:5d:c4:29:e8:57:1d:4b:3c:6b:75:d4:72:cc:78: fd:f8:9d:bb:a0:34:0d:d1:99:00:54:2f:0e:ab:c4:d2:e2:38: 1b:14:65:69:d0:fc:f3:68:2a:59:ef:ea:c4:c2:c8:3a:6d:17: 61:cb:f2:a2:e8:79:81:82:30:84:21:34:37:68:43:0a:85:d5: 64:08:1e:fa:19:96:da:4b:46:5e:36:2b:e5:40:13:0a:e4:31: 78:18:d4:87:e3:7f:0e:05:eb:dd:93:31:99:9a:6d:de:5f:35: bb:5e:52:59:ca:20:8f:de:15:bd:98:ed:28:a2:2d:f0:1d:01: fd:d7:5f:0c:97:e7:bb:8a:49:96:17:27:49:27:9f:43:e7:91: 36:bb:68:49:08:44:21:29:90:97:ee:8b:19:26:7f:bc:fb:c1: d5:bb:ee:29:04:f7:d5:43:46:d6:8c:c3:43:5e:28:31:a5:47: fd:87:36:4f:25:67:50:8c:a3:d1:c7:28:70:7b:5a:98:be:b2: e5:08:79:b2:f7:87:96:d0:e5:47:51:58:dd:d3:44:3b:91:45: d3:f2:f8:72:18:0b:ab:4b:75:88:5f:d2:a4:38:ee:87:85:4a: db:68:36:f2:d4:31:a9:6f:36:82:cc:8c:a5:10:38:0c:f2:f9: 55:0f:d3:38 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gPWZDiJsp1yZhwovz/CpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwN2M3MDgzNDYwZTFhNGM3MmM0YmM0Mjc2MzEzZDNhODU5 NDRhODcwHhcNMjYwMTAyMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2Q5ZDJhZmRjYjNjZDIwYmUxNTE2MmUyMDRiMTA0MjhhOWNkOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgFOQRR+3d1oL1HwwBeKi2rdLRv0 NhtYzVMx7MHLb6jbxTEpe7mN01a20GG88gd1UWcGZrQsN0ESfqRoCcdcDS4+Rvxp ix/xhflTnIWH56dZm7j2kwh60Q09YlftrhkjJaMl1tlqYP9bQ8Q/KTsYt9+bZ4Bk 6tDWG6yKmzFd+llFonh+0JklJPL+oYHXKLbTNPH2MGI8a/FxiPamhxP3pdIajIDl rmtyXTGjq3EtsV1aqa+xKatY9JCGjxpCXM9FYNxCwOuLEGuqvEMVStdYzIdzDqR0 IqAKKW0yFODB+amaQMdwLRohkFi4cUEIi5uPRsHQeNV7qaqp2hALFyeWkwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEfZ0q/cs80gvhUWLiBLEEKKnNkvMB8GA1UdIwQY MBaAFEB8cINGDhpMcsS8QnYxPTqFlEqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi84YTc1NjktZWQ3NC00YTkyLTg2Mjct OTg1ZWQxNWM5YWViLzEvUjluU3I5eXp6U0MtRlJZdUlFc1FRb3FjMlM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi84YTc1NjktZWQ3NC00YTkyLTg2MjctOTg1ZWQxNWM5YWVi LzEvUUh4d2cwWU9Ha3h5eEx4Q2RqRTlPb1dVU29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudJAMA0E AgACMAcDBQMqC1XAMA0GCSqGSIb3DQEBCwUAA4IBAQBSwUEYXcQp6FcdSzxrddRy zHj9+J27oDQN0ZkAVC8Oq8TS4jgbFGVp0PzzaCpZ7+rEwsg6bRdhy/Ki6HmBgjCE ITQ3aEMKhdVkCB76GZbaS0ZeNivlQBMK5DF4GNSH438OBevdkzGZmm3eXzW7XlJZ yiCP3hW9mO0ooi3wHQH9118Ml+e7ikmWFydJJ59D55E2u2hJCEQhKZCX7osZJn+8 +8HVu+4pBPfVQ0bWjMNDXigxpUf9hzZPJWdQjKPRxyhwe1qYvrLlCHmy94eW0OVH UVjd00Q7kUXT8vhyGAurS3WIX9KkOO6HhUrbaDby1DGpbzaCzIylEDgM8vlVD9M4 -----END CERTIFICATE-----Generated at Mon Jan 26 23:43:24 2026 by rpki-client