This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa File: Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa (raw, json) Hash identifier: zRP8z6fqTAhTFBNH4EqdLJ2KR4AhqadHe/YBKRqTMqA= Subject key identifier: 43:D1:F3:8F:AC:58:BD:28:2F:4E:4D:40:80:0F:12:48:59:73:1E:3C Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0 Certificate serial: 019B77C733043A7B71FF2819A3CCF742727D Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206377 IP address blocks: 185.178.180.0/22 maxlen: 22 2a0a:6780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:33:04:3a:7b:71:ff:28:19:a3:cc:f7:42:72:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43d1f38fac58bd282f4e4d40800f124859731e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:5d:e3:fc:12:06:a3:07:d5:5f:24:74:df: 88:a0:6f:a5:ec:a2:3a:c4:51:80:7d:7f:86:4b:d8: 94:b1:e7:3d:1a:fd:f6:1a:50:d7:24:c9:21:a5:2c: 2a:1f:08:b1:5f:38:b1:5e:b9:6d:c8:ca:83:35:cc: be:a3:ec:35:d7:08:45:00:7a:da:ad:5c:95:59:b4: f8:e2:fc:be:61:cb:8d:0e:51:ad:ac:b1:ad:e9:7d: b1:62:38:f1:87:93:ba:16:4d:bb:6e:f4:df:ca:19: 96:d4:17:e1:44:e5:e8:e6:99:74:69:a5:19:c3:a6: d3:7b:cc:10:cb:b8:5b:11:3a:50:85:c6:a1:9f:82: 5e:8b:73:20:a2:26:3d:7b:45:8f:ad:cc:4e:39:74: 97:ea:de:39:9b:46:3f:e2:5e:57:d8:44:b8:c5:f5: 3d:92:15:ec:1d:60:f0:9c:85:0c:aa:df:1e:12:9e: 05:8d:1a:e9:c4:39:af:08:c3:4b:4d:64:13:e3:95: 3c:2f:52:71:6a:25:bd:2e:7c:40:d5:d9:db:96:ce: a3:9a:91:90:ca:76:99:5a:59:8e:58:21:cf:5e:e4: e5:dc:a2:ee:0e:12:4f:e5:4b:e7:f8:a7:31:9f:2f: 0f:1e:13:7a:97:d3:40:76:ce:17:d1:84:0f:b4:bf: c0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D1:F3:8F:AC:58:BD:28:2F:4E:4D:40:80:0F:12:48:59:73:1E:3C X509v3 Authority Key Identifier: keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.178.180.0/22 IPv6: 2a0a:6780::/29 Signature Algorithm: sha256WithRSAEncryption 4f:10:b5:45:26:a1:4c:49:0c:aa:8a:68:72:a6:30:e3:aa:35: 2d:1b:ef:ae:ca:3b:f0:26:73:fd:dc:06:4d:50:b1:e8:ae:9f: 9d:0b:17:db:ee:b0:98:49:e9:d9:0c:72:ae:b2:bb:ad:9f:1c: 2b:68:96:56:2b:82:18:02:75:6f:29:51:e8:eb:2f:2b:d0:c8: b5:4c:33:61:21:9c:a2:aa:6d:6e:cc:5e:62:1e:79:7a:7b:6d: 63:be:20:71:06:57:53:1d:eb:cc:6d:c1:77:2e:9f:50:87:5d: b4:a8:80:e4:b9:e4:ac:ba:42:26:18:ff:a9:2f:aa:a8:dc:29: ff:69:3d:15:38:93:cb:de:13:27:85:38:58:9c:b0:19:34:f0: 1f:6f:7c:ea:54:94:8a:83:0f:56:2b:22:f7:56:5d:fd:02:26: 68:ca:18:a7:2e:7b:b4:74:7f:5d:ac:50:d4:d5:6a:0e:5f:c9: 6d:a8:33:c3:fb:bb:c1:8f:f4:55:46:11:27:42:42:a1:86:db: 46:e3:c8:29:22:88:93:0c:f7:24:24:4c:c8:98:98:0c:bc:3f: 0b:d4:f9:2d:eb:09:e5:59:5d:57:14:20:1e:75:aa:81:b0:a9: 05:f4:a2:3a:e1:2d:45:7c:ae:8c:36:e7:44:27:d4:31:cd:eb: 1a:2a:7d:69 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xzMEOntx/ygZo8z3QnJ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MTY0YTU3NTdmZGQ1NzI1YTYwODQ0ZjJhZTdlZjczYjEw N2E0YzAwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2QxZjM4ZmFjNThiZDI4MmY0ZTRkNDA4MDBmMTI0ODU5NzMxZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Jd4/wSBqMH1V8kdN+IoG+l7KI6 xFGAfX+GS9iUsec9Gv32GlDXJMkhpSwqHwixXzixXrltyMqDNcy+o+w11whFAHra rVyVWbT44vy+YcuNDlGtrLGt6X2xYjjxh5O6Fk27bvTfyhmW1BfhROXo5pl0aaUZ w6bTe8wQy7hbETpQhcahn4Jei3MgoiY9e0WPrcxOOXSX6t45m0Y/4l5X2ES4xfU9 khXsHWDwnIUMqt8eEp4FjRrpxDmvCMNLTWQT45U8L1JxaiW9LnxA1dnbls6jmpGQ ynaZWlmOWCHPXuTl3KLuDhJP5Uvn+Kcxny8PHhN6l9NAds4X0YQPtL/AvwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEPR84+sWL0oL05NQIAPEkhZcx48MB8GA1UdIwQY MBaAFCgWSldX/dVyWmCETyrn73OxB6TAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTUzNWItZTYzMC00NTdmLThhMDEt YWVhZTViYmMzOTIwLzEvUTlIemo2eFl2U2d2VGsxQWdBOFNTRmx6SGp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NTUzNWItZTYzMC00NTdmLThhMDEtYWVhZTViYmMzOTIw LzEvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubK0MA0E AgACMAcDBQMqCmeAMA0GCSqGSIb3DQEBCwUAA4IBAQBPELVFJqFMSQyqimhypjDj qjUtG++uyjvwJnP93AZNULHorp+dCxfb7rCYSenZDHKusrutnxwraJZWK4IYAnVv KVHo6y8r0Mi1TDNhIZyiqm1uzF5iHnl6e21jviBxBldTHevMbcF3Lp9Qh120qIDk ueSsukImGP+pL6qo3Cn/aT0VOJPL3hMnhThYnLAZNPAfb3zqVJSKgw9WKyL3Vl39 AiZoyhinLnu0dH9drFDU1WoOX8ltqDPD+7vBj/RVRhEnQkKhhttG48gpIoiTDPck JEzImJgMvD8L1Pkt6wnlWV1XFCAedaqBsKkF9KI64S1FfK6MNudEJ9QxzesaKn1p -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:30 2026 by rpki-client