This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa File: 9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa (raw, json) Hash identifier: X7Shkky0RJhdcOoiXrILcF9xuXABF5OsWRg6QfnnlNg= Subject key identifier: F5:B3:9C:A9:0E:25:D6:6D:C6:FC:DF:67:B8:3B:0F:FA:CC:76:46:64 Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece Certificate serial: 019B76EBA664835120E88BE616A7868288ED Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59989 IP address blocks: 185.97.92.0/22 maxlen: 22 185.97.92.0/24 maxlen: 24 185.97.93.0/24 maxlen: 24 185.97.94.0/24 maxlen: 24 185.97.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a6:64:83:51:20:e8:8b:e6:16:a7:86:82:88:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5b39ca90e25d66dc6fcdf67b83b0ffacc764664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:81:ee:d2:1e:cc:e8:44:73:ca:65:b7:48:70: b7:af:12:12:c5:2f:ca:fc:09:ab:66:4d:69:9a:11: ae:ec:be:57:1e:88:d4:39:38:cb:d9:f5:68:e9:c2: 38:8a:1f:75:ba:35:53:5a:2d:04:4c:3f:a3:c5:33: 2c:09:c5:b9:2b:cb:a6:00:28:1b:40:98:97:99:2b: 12:91:0a:b6:c4:bf:b5:f1:c6:e4:79:77:b8:35:9f: e2:ba:40:6b:4d:93:60:67:45:7b:c7:6c:cf:23:c9: 22:2c:99:e4:3d:71:be:9d:39:bd:97:fd:86:31:af: a2:87:a8:30:88:be:72:a7:a1:30:24:85:a0:41:59: 77:50:28:d1:a5:1a:a4:4f:74:e5:42:9f:d5:2f:4a: b1:71:7c:56:89:99:91:18:80:61:32:1d:cf:ad:dc: ca:72:32:eb:6a:ee:16:6e:b2:7e:1f:f2:5e:ea:23: b0:24:2b:f2:51:d8:b2:38:b2:57:fd:9e:dc:a7:9f: 6a:9e:93:f3:3e:16:9f:16:38:ee:a0:86:9a:0b:b6: c2:47:44:56:b3:88:ef:33:70:f1:b3:08:85:4f:7d: 21:2c:e6:19:e2:e6:d5:18:e4:62:05:44:32:ad:ed: 44:4b:15:6f:30:0e:f5:8a:b7:a0:3e:2e:18:d3:60: 10:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B3:9C:A9:0E:25:D6:6D:C6:FC:DF:67:B8:3B:0F:FA:CC:76:46:64 X509v3 Authority Key Identifier: keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/9bOcqQ4l1m3G_N9nuDsP-sx2RmQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.92.0/22 Signature Algorithm: sha256WithRSAEncryption 62:fd:da:60:a8:0d:4b:f9:86:92:d2:cf:c4:7c:c2:8f:89:76: 54:81:e9:1a:62:86:38:8e:58:f2:e1:bf:eb:49:02:cb:2e:c4: d8:fa:c6:4f:30:42:15:48:b1:91:ed:45:55:ce:b2:10:cf:a0: 35:f1:72:af:92:27:57:03:e8:54:ff:2e:7f:5a:e2:c2:da:01: bc:60:da:8e:4a:da:54:61:e2:9e:79:d9:4b:6c:b6:4a:78:a3: 30:f0:9e:dc:16:da:17:26:9b:19:51:98:0c:0c:cf:f8:70:14: 7b:8a:42:3b:dc:01:37:4c:7d:06:4c:81:a0:22:c3:79:5e:4d: 28:c7:19:f6:e1:d9:cd:a2:f7:84:46:65:75:56:c0:c4:11:cb: e1:38:45:f2:17:85:69:38:8e:8e:b5:eb:0b:95:83:f8:fc:4b: c9:76:6a:06:25:8c:2b:2b:ba:54:27:16:47:e0:fb:16:47:a4: 2a:5c:a2:d5:98:46:82:6c:b0:50:89:f1:7c:42:6b:8f:a8:d5: a6:bf:0b:69:3e:98:f2:36:0f:23:f2:ae:dc:d5:ff:07:11:70: f4:44:4a:88:ba:6d:58:f0:c9:9e:59:e4:fd:4b:76:c5:00:73: 16:d1:ca:87:2a:09:b8:f2:b9:68:86:77:5a:ef:d0:83:a6:55: 6c:76:09:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266Zkg1Eg6IvmFqeGgojtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWI5MzlkN2JjYTEzYjZkOGNjZjRkOGU3ODY3NmYzODA3 YTBlY2UwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWIzOWNhOTBlMjVkNjZkYzZmY2RmNjdiODNiMGZmYWNjNzY0NjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4Hu0h7M6ERzymW3SHC3rxISxS/K /AmrZk1pmhGu7L5XHojUOTjL2fVo6cI4ih91ujVTWi0ETD+jxTMsCcW5K8umACgb QJiXmSsSkQq2xL+18cbkeXe4NZ/iukBrTZNgZ0V7x2zPI8kiLJnkPXG+nTm9l/2G Ma+ih6gwiL5yp6EwJIWgQVl3UCjRpRqkT3TlQp/VL0qxcXxWiZmRGIBhMh3PrdzK cjLrau4WbrJ+H/Je6iOwJCvyUdiyOLJX/Z7cp59qnpPzPhafFjjuoIaaC7bCR0RW s4jvM3DxswiFT30hLOYZ4ubVGORiBUQyre1ESxVvMA71iregPi4Y02AQJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWznKkOJdZtxvzfZ7g7D/rMdkZkMB8GA1UdIwQY MBaAFNubk517yhO22Mz02OeGdvOAeg7OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMt YTY5YzViYzdlZDU3LzEvOWJPY3FRNGwxbTNHX045bnVEc1Atc3gyUm1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS85MzgzMzAtY2NkOC00ZTdhLTgyMWMtYTY5YzViYzdlZDU3 LzEvMjV1VG5YdktFN2JZelBUWTU0WjI4NEI2RHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWFcMA0G CSqGSIb3DQEBCwUAA4IBAQBi/dpgqA1L+YaS0s/EfMKPiXZUgekaYoY4jljy4b/r SQLLLsTY+sZPMEIVSLGR7UVVzrIQz6A18XKvkidXA+hU/y5/WuLC2gG8YNqOStpU YeKeedlLbLZKeKMw8J7cFtoXJpsZUZgMDM/4cBR7ikI73AE3TH0GTIGgIsN5Xk0o xxn24dnNoveERmV1VsDEEcvhOEXyF4VpOI6OtesLlYP4/EvJdmoGJYwrK7pUJxZH 4PsWR6QqXKLVmEaCbLBQifF8QmuPqNWmvwtpPpjyNg8j8q7c1f8HEXD0REqIum1Y 8MmeWeT9S3bFAHMW0cqHKgm48rlohnda79CDplVsdgn6 -----END CERTIFICATE-----Generated at Tue Jan 27 10:18:52 2026 by rpki-client