This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa File: 9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa (raw, json) Hash identifier: SrfNBs8fLNs8CyzsQB76S5MYdUrN0e+cR0WQ3SPKGe4= Subject key identifier: F5:FF:BC:9A:E4:A3:D2:53:E9:AA:FD:82:FA:E2:53:F1:14:A0:E1:69 Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Certificate serial: 019B77C6E29B99A0200E14238799525E4368 Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.226.0/23 maxlen: 23 2001:67c:29f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e2:9b:99:a0:20:0e:14:23:87:99:52:5e:43:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5ffbc9ae4a3d253e9aafd82fae253f114a0e169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:59:11:63:8a:2d:fa:9e:32:06:fe:74:32: fd:a8:fb:e4:44:1b:2b:53:1a:de:04:39:3b:1d:76: 39:88:a8:fd:29:a6:27:1b:7e:ce:6c:5b:a4:4c:d8: ec:97:e1:3d:2e:60:ea:34:df:1a:2e:1f:10:b0:33: 7a:e6:3c:e5:56:b6:77:12:c7:9f:d9:48:48:aa:03: ef:cb:82:9a:d5:94:41:6c:af:0c:b1:7b:2f:12:bd: 51:ca:c6:c1:59:3f:eb:f7:76:a2:b0:b5:6c:ed:82: 27:e1:3b:ea:16:7a:79:1e:6e:b5:d0:0d:74:0c:8a: f5:04:c3:6f:45:a8:eb:6c:13:7c:f0:cf:6a:f8:f3: 16:34:8e:25:f5:a7:54:72:af:c0:35:0a:54:36:85: 8d:9e:73:a8:48:07:4c:1d:03:64:6d:6e:bf:7f:37: 7f:d3:c0:d6:0e:b7:55:75:aa:14:b2:17:10:66:fd: 06:85:82:c2:be:a1:8d:77:5c:b3:45:89:ef:74:2f: a4:b1:f7:04:98:8e:21:d6:73:29:81:47:98:d6:b2: 73:97:1b:13:c5:04:83:4c:78:03:82:60:8e:8c:90: 32:df:4d:b0:16:7b:02:7d:1b:0c:55:d6:2f:fa:8c: 54:22:75:38:73:1f:d9:f9:ff:e9:d0:53:fd:3a:27: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FF:BC:9A:E4:A3:D2:53:E9:AA:FD:82:FA:E2:53:F1:14:A0:E1:69 X509v3 Authority Key Identifier: keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/9f-8muSj0lPpqv2C-uJT8RSg4Wk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.226.0/23 IPv6: 2001:67c:29f0::/48 Signature Algorithm: sha256WithRSAEncryption 1e:40:2e:cb:7c:b4:16:c4:0b:57:85:76:6e:20:8c:ff:83:7a: a4:3d:a3:ac:2c:b5:19:e3:ff:94:cb:62:8c:bf:95:9a:61:ff: 72:f9:1a:16:1d:b4:8b:f2:7e:06:d0:32:2e:0d:95:62:1a:4d: 1b:6d:18:92:08:60:c8:23:2a:0c:53:9f:74:07:1d:27:c9:b7: 62:6c:f8:50:a1:d0:a3:70:12:19:67:90:75:3f:e7:ca:99:e6: 19:a5:9f:c9:2b:43:77:40:07:be:2e:1a:aa:e4:99:2b:a7:9c: 72:1a:be:a2:ab:a7:4b:39:91:6a:5d:04:fd:b5:f4:5e:7f:c9: ab:bf:7d:34:52:19:36:22:c6:7f:e7:ed:3a:5c:10:0a:0e:a8: 2f:ba:d6:5a:1e:8a:b2:32:e4:41:68:4a:5d:81:a9:6c:3b:ff: 33:bc:68:6a:4c:11:4b:50:16:eb:89:90:b1:a8:e3:f7:cd:51: 53:31:5e:ca:c2:63:2f:35:28:a1:ee:d5:da:f1:79:23:fe:b5: c7:a3:d4:30:03:e4:e9:54:93:1e:b5:c2:ec:4c:c5:2c:5d:f0: 48:25:c8:a5:05:59:18:03:24:b7:e9:6e:17:53:8d:19:42:c9: b6:39:a0:03:4f:e1:0c:d2:d4:e1:3d:87:7c:f9:58:41:9f:a5: 9b:6b:b1:a7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xuKbmaAgDhQjh5lSXkNoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzN2Y5YmY4NGI2OWEwOTA0MjQzMmRhZTgzNzdlZTBhYzhm ZjFjNjEwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWZmYmM5YWU0YTNkMjUzZTlhYWZkODJmYWUyNTNmMTE0YTBlMTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs9ZEWOKLfqeMgb+dDL9qPvkRBsr UxreBDk7HXY5iKj9KaYnG37ObFukTNjsl+E9LmDqNN8aLh8QsDN65jzlVrZ3Esef 2UhIqgPvy4Ka1ZRBbK8MsXsvEr1RysbBWT/r93aisLVs7YIn4TvqFnp5Hm610A10 DIr1BMNvRajrbBN88M9q+PMWNI4l9adUcq/ANQpUNoWNnnOoSAdMHQNkbW6/fzd/ 08DWDrdVdaoUshcQZv0GhYLCvqGNd1yzRYnvdC+ksfcEmI4h1nMpgUeY1rJzlxsT xQSDTHgDgmCOjJAy302wFnsCfRsMVdYv+oxUInU4cx/Z+f/p0FP9OidbrwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPX/vJrko9JT6ar9gvriU/EUoOFpMB8GA1UdIwQY MBaAFFN/m/hLaaCQQkMtroN37grI/xxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUt ODkyZWM2ZmY0NzcxLzEvOWYtOG11U2owbFBwcXYyQy11SlQ4UlNnNFdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUtODkyZWM2ZmY0Nzcx LzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuQHiMA8E AgACMAkDBwAgAQZ8KfAwDQYJKoZIhvcNAQELBQADggEBAB5ALst8tBbEC1eFdm4g jP+DeqQ9o6wstRnj/5TLYoy/lZph/3L5GhYdtIvyfgbQMi4NlWIaTRttGJIIYMgj KgxTn3QHHSfJt2Js+FCh0KNwEhlnkHU/58qZ5hmln8krQ3dAB74uGqrkmSunnHIa vqKrp0s5kWpdBP219F5/yau/fTRSGTYixn/n7TpcEAoOqC+61loeirIy5EFoSl2B qWw7/zO8aGpMEUtQFuuJkLGo4/fNUVMxXsrCYy81KKHu1drxeSP+tcej1DAD5OlU kx61wuxMxSxd8EglyKUFWRgDJLfpbhdTjRlCybY5oANP4QzS1OE9h3z5WEGfpZtr sac= -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:06 2026 by rpki-client