This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa File: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (raw, json) Hash identifier: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A= Subject key identifier: F4:DB:7B:25:97:6E:D7:A1:8A:17:F1:BC:88:7C:88:DF:F4:61:E3:09 Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4 Certificate serial: 019B79ECA9227CDA3846A77C815518949843 Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa Signing time: Thu 01 Jan 2026 14:18:31 +0000 ROA not before: Thu 01 Jan 2026 14:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204970 IP address blocks: 185.231.104.0/22 maxlen: 24 185.231.104.0/23 maxlen: 23 185.231.106.0/23 maxlen: 23 2a0c:5b00::/29 maxlen: 29 2a0c:5b00::/30 maxlen: 30 2a0c:5b04::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a9:22:7c:da:38:46:a7:7c:81:55:18:94:98:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4 Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4db7b25976ed7a18a17f1bc887c88dff461e309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8e:44:15:b1:8a:2f:63:ea:f2:66:a6:34:54: 47:84:a2:0d:fe:cd:a1:a4:a4:28:9b:cd:1c:f9:3b: 47:83:f1:3f:7f:2a:63:c4:cf:13:86:25:f6:6e:07: 45:07:df:9f:7d:1f:10:2f:87:da:56:47:01:62:e9: 1b:0a:68:33:0e:79:e6:7d:79:19:9d:09:53:d5:39: ea:9e:bf:cd:1c:87:02:58:17:38:35:43:2d:10:60: 73:b5:ec:2f:13:66:28:3e:8c:e4:2a:a7:04:cf:55: 21:09:92:74:78:f4:fb:f9:13:3e:4b:3c:28:9c:c3: 68:b9:48:be:12:0c:21:67:b3:5c:8b:c5:f9:5c:98: 6d:9f:67:fe:24:91:81:1f:15:ad:67:bd:af:d6:7f: 08:c2:b8:65:77:0c:74:cc:23:3d:c9:56:88:da:05: 9e:b3:0b:bf:fa:90:4d:c0:b5:3c:34:c0:07:a1:ce: df:e4:12:44:ee:61:ad:a6:60:24:da:3a:d8:1e:51: 27:b1:1c:2e:cf:c6:16:aa:ab:38:e1:7e:a3:9c:83: 8c:d9:c2:59:e1:f1:24:98:58:51:80:00:4a:d5:ae: 25:65:8a:6f:95:85:19:ee:2d:dd:4b:bc:a9:4c:e9: 26:5e:57:9b:e3:28:b2:61:3b:60:74:1d:57:14:b7: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DB:7B:25:97:6E:D7:A1:8A:17:F1:BC:88:7C:88:DF:F4:61:E3:09 X509v3 Authority Key Identifier: keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.104.0/22 IPv6: 2a0c:5b00::/29 Signature Algorithm: sha256WithRSAEncryption 03:39:cb:0d:62:e0:f9:ad:f6:ea:a0:7b:8c:32:e9:b3:fe:21: 55:94:cf:46:8a:de:8f:9f:9a:0e:56:9b:39:5a:4d:82:2f:bd: aa:20:46:32:1b:47:54:b0:dc:a3:62:78:76:c9:05:91:3a:e4: 52:07:1f:ee:bf:5c:8a:01:4e:ad:5d:7b:a4:2a:77:6e:15:03: 03:18:cb:d5:15:96:39:3f:07:a2:c2:d0:bd:05:5c:13:d1:d7: 58:eb:56:3c:29:b0:77:15:e1:f4:3d:e9:c9:da:6a:30:1d:d8: b3:8a:c1:6f:a4:e3:10:14:b2:15:9d:4d:e6:d9:c8:44:64:32: ae:4f:dc:0e:d2:03:b4:f3:4f:e9:79:67:a9:02:68:dd:cf:c6: 4a:4d:05:62:d9:c4:8e:a6:6f:21:33:6e:d2:c2:da:cb:df:3d: 20:c4:1c:a8:3c:42:05:2a:90:80:df:3d:97:e8:76:a2:0e:22: d4:48:0a:7c:87:84:5d:1b:01:55:43:9b:d0:c5:d8:c7:b0:53: 0c:df:df:05:bd:62:af:28:4d:01:1c:a4:8f:d5:fc:24:69:68: dc:b9:24:1b:f9:6b:53:5f:46:5c:ff:a5:8a:38:3b:f0:8a:c1: bb:43:73:ee:33:06:7a:2e:82:f7:94:90:f4:a9:46:3b:7c:5e: 75:06:38:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57KkifNo4Rqd8gVUYlJhDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNzNiMDU2ZjhkMGZhOTk2ZDY4MzNjMzBiMWZkNzhlN2Q5 NzlhYzQwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGRiN2IyNTk3NmVkN2ExOGExN2YxYmM4ODdjODhkZmY0NjFlMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho5EFbGKL2Pq8mamNFRHhKIN/s2h pKQom80c+TtHg/E/fypjxM8ThiX2bgdFB9+ffR8QL4faVkcBYukbCmgzDnnmfXkZ nQlT1Tnqnr/NHIcCWBc4NUMtEGBztewvE2YoPozkKqcEz1UhCZJ0ePT7+RM+Szwo nMNouUi+EgwhZ7Nci8X5XJhtn2f+JJGBHxWtZ72v1n8Iwrhldwx0zCM9yVaI2gWe swu/+pBNwLU8NMAHoc7f5BJE7mGtpmAk2jrYHlEnsRwuz8YWqqs44X6jnIOM2cJZ 4fEkmFhRgABK1a4lZYpvlYUZ7i3dS7ypTOkmXleb4yiyYTtgdB1XFLcAdQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPTbeyWXbtehihfxvIh8iN/0YeMJMB8GA1UdIwQY MBaAFE9zsFb40PqZbWgzwwsf1459l5rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYWNiOGYtMjIyZi00NDczLTkyMDUt MTM5MGEyZDk5ZTBiLzEvOU50N0paZHUxNkdLRl9HOGlIeUkzX1JoNHdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yYWNiOGYtMjIyZi00NDczLTkyMDUtMTM5MGEyZDk5ZTBi LzEvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuedoMA0E AgACMAcDBQMqDFsAMA0GCSqGSIb3DQEBCwUAA4IBAQADOcsNYuD5rfbqoHuMMumz /iFVlM9Git6Pn5oOVps5Wk2CL72qIEYyG0dUsNyjYnh2yQWROuRSBx/uv1yKAU6t XXukKnduFQMDGMvVFZY5PweiwtC9BVwT0ddY61Y8KbB3FeH0PenJ2mowHdizisFv pOMQFLIVnU3m2chEZDKuT9wO0gO080/peWepAmjdz8ZKTQVi2cSOpm8hM27SwtrL 3z0gxByoPEIFKpCA3z2X6HaiDiLUSAp8h4RdGwFVQ5vQxdjHsFMM398FvWKvKE0B HKSP1fwkaWjcuSQb+WtTX0Zc/6WKODvwisG7Q3PuMwZ6LoL3lJD0qUY7fF51BjgV -----END CERTIFICATE-----Generated at Mon Jan 26 20:42:25 2026 by rpki-client