This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9BAmr2KLx35b8drl5F9gPcYuYdw.roa File: 9BAmr2KLx35b8drl5F9gPcYuYdw.roa (raw, json) Hash identifier: w/pdE/i5r9Y+VqvFxP5eT7qVeUIsrUTXnO2TSv8kGNQ= Subject key identifier: F4:10:26:AF:62:8B:C7:7E:5B:F1:DA:E5:E4:5F:60:3D:C6:2E:61:DC Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019B7C127F73B1F0F57E203538EFA6693DD4 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9BAmr2KLx35b8drl5F9gPcYuYdw.roa Signing time: Fri 02 Jan 2026 00:19:05 +0000 ROA not before: Fri 02 Jan 2026 00:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62380 IP address blocks: 185.232.64.0/24 maxlen: 24 185.232.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7f:73:b1:f0:f5:7e:20:35:38:ef:a6:69:3d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Jan 2 00:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f41026af628bc77e5bf1dae5e45f603dc62e61dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ec:05:0b:2c:05:24:d3:ef:d5:03:b0:5a:25: 2f:81:77:d4:5b:b8:cd:00:09:42:eb:02:fa:a7:f0: 1f:57:53:2f:be:af:16:95:57:9e:f9:63:f6:98:b5: d7:b8:fb:98:14:ea:76:de:2e:b3:5c:d3:d2:c8:f1: f2:5d:e0:ae:f3:04:63:70:33:f9:bf:79:b1:d1:e7: da:2b:fc:44:2c:ca:2e:d4:67:18:78:ff:9c:08:bc: d8:b9:b9:8b:a9:d2:6e:4c:b9:e9:08:f6:40:99:3a: d4:4b:51:3a:45:16:27:b6:a7:8c:ed:07:33:10:42: 3c:fd:95:80:40:f9:d0:11:f2:93:3b:e3:de:5e:59: 27:2f:76:65:e9:1e:c4:d0:9f:32:e6:29:1a:77:ac: 6f:34:92:c3:56:2c:e9:3d:4b:4d:a7:07:58:7d:e3: e5:a5:41:f7:05:b4:e8:f3:9a:5c:fb:8c:7e:4b:ff: e6:17:23:c9:d5:92:d9:65:e7:8e:bb:16:53:53:47: 4f:35:19:9b:70:d2:13:34:0e:a5:31:cc:93:71:20: 23:8b:b5:52:92:23:3e:99:ef:c6:48:07:80:b6:f6: b0:4e:33:9c:8a:2f:40:cd:5a:2f:dc:65:08:91:ba: ae:83:15:00:49:c0:73:4c:61:d6:c7:7f:1c:b3:0c: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:10:26:AF:62:8B:C7:7E:5B:F1:DA:E5:E4:5F:60:3D:C6:2E:61:DC X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/9BAmr2KLx35b8drl5F9gPcYuYdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.64.0/24 185.232.66.0/24 Signature Algorithm: sha256WithRSAEncryption 90:0d:2e:a2:2a:44:ff:18:15:64:b4:b7:33:2d:60:c3:85:9e: 69:66:fd:30:74:25:72:52:24:c8:7e:0f:d2:f2:82:07:7b:ac: d3:a5:a8:ed:5a:29:f8:75:a4:6c:54:1e:d2:71:0f:0c:21:4c: 86:c9:42:7f:90:9e:2e:e5:e5:2a:89:ab:56:cf:43:e1:b3:77: d0:6b:6b:c8:cc:66:cc:6e:36:3c:05:28:10:02:b0:02:30:6e: 27:0f:d6:5d:75:37:8e:8b:d6:de:68:65:1c:08:a9:4c:b2:b0: 6d:bb:b5:c9:e9:30:a1:f3:4f:5f:ae:9c:1f:86:9e:62:ba:60: 63:76:f6:3c:b6:b3:64:af:4a:76:ef:3a:65:7d:3c:ca:95:4f: 9d:01:fb:4f:56:b4:a3:51:6f:29:2a:cd:09:5b:ef:24:f1:e3: c2:68:cc:38:b5:8d:f9:ef:99:66:b3:44:17:25:28:d4:6e:e9: c3:48:34:88:99:a8:ee:ec:32:2c:73:7b:ba:82:98:e5:35:fd: c0:d3:6d:a3:54:84:4f:f5:c6:f7:93:ed:16:7b:b6:e1:a6:52: 52:86:f1:83:90:f9:55:e1:66:57:71:dd:b1:8b:d7:9c:d1:cd: 44:65:05:28:96:12:e2:e7:77:c1:92:e1:2f:83:ad:b2:99:87: 08:3c:84:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8En9zsfD1fiA1OO+maT3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjYwMTAyMDAxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDEwMjZhZjYyOGJjNzdlNWJmMWRhZTVlNDVmNjAzZGM2MmU2MWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxewFCywFJNPv1QOwWiUvgXfUW7jN AAlC6wL6p/AfV1Mvvq8WlVee+WP2mLXXuPuYFOp23i6zXNPSyPHyXeCu8wRjcDP5 v3mx0efaK/xELMou1GcYeP+cCLzYubmLqdJuTLnpCPZAmTrUS1E6RRYntqeM7Qcz EEI8/ZWAQPnQEfKTO+PeXlknL3Zl6R7E0J8y5ikad6xvNJLDVizpPUtNpwdYfePl pUH3BbTo85pc+4x+S//mFyPJ1ZLZZeeOuxZTU0dPNRmbcNITNA6lMcyTcSAji7VS kiM+me/GSAeAtvawTjOcii9AzVov3GUIkbqugxUAScBzTGHWx38cswzDDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPQQJq9ii8d+W/Ha5eRfYD3GLmHcMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvOUJBbXIyS0x4MzViOGRybDVGOWdQY1l1WWR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuehAAwQA uehCMA0GCSqGSIb3DQEBCwUAA4IBAQCQDS6iKkT/GBVktLczLWDDhZ5pZv0wdCVy UiTIfg/S8oIHe6zTpajtWin4daRsVB7ScQ8MIUyGyUJ/kJ4u5eUqiatWz0Phs3fQ a2vIzGbMbjY8BSgQArACMG4nD9ZddTeOi9beaGUcCKlMsrBtu7XJ6TCh809frpwf hp5iumBjdvY8trNkr0p27zplfTzKlU+dAftPVrSjUW8pKs0JW+8k8ePCaMw4tY35 75lms0QXJSjUbunDSDSImaju7DIsc3u6gpjlNf3A022jVIRP9cb3k+0We7bhplJS hvGDkPlV4WZXcd2xi9ec0c1EZQUolhLi53fBkuEvg62ymYcIPITy -----END CERTIFICATE-----Generated at Wed Jan 21 16:12:10 2026 by rpki-client