This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/9rQtcYniJqaTmpf5xB6cfsXG52I.roa File: 9rQtcYniJqaTmpf5xB6cfsXG52I.roa (raw, json) Hash identifier: du7a+9+coel4o3rj5T2HDR19krlEKiSzpeQoq4pnzXA= Subject key identifier: F6:B4:2D:71:89:E2:26:A6:93:9A:97:F9:C4:1E:9C:7E:C5:C6:E7:62 Certificate issuer: /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117 Certificate serial: 019B7758841A048DE54E61BFF29DE7D42500 Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/9rQtcYniJqaTmpf5xB6cfsXG52I.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207519 IP address blocks: 185.99.221.0/24 maxlen: 24 185.99.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:84:1a:04:8d:e5:4e:61:bf:f2:9d:e7:d4:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6b42d7189e226a6939a97f9c41e9c7ec5c6e762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:b4:29:98:77:93:36:81:30:97:5a:4a:94: 4d:d8:c3:c4:b1:23:59:e7:ad:41:68:6b:c3:92:2d: ed:fc:44:4d:d0:4d:09:1b:c1:b5:e2:69:4c:88:8e: 55:c6:6d:93:8b:07:cd:61:bc:cb:0c:47:04:7f:9b: f2:77:11:13:bc:35:4a:6d:4c:0d:a8:f7:af:9e:a1: f9:09:a3:36:a3:9a:b9:ee:91:01:a8:7c:87:21:15: cf:d8:76:26:2a:cf:ce:b5:43:37:2f:0c:11:63:6e: af:ce:97:0c:5a:98:6d:f1:07:d7:db:4d:21:c6:63: c0:6d:61:61:ed:15:cc:23:57:ea:80:ad:1b:b5:ac: f2:66:13:50:02:f8:6c:5e:42:15:9f:47:78:e0:af: 2e:03:96:a7:59:74:8c:f0:3b:e9:ac:a7:50:0f:a8: d5:33:3f:ce:7b:a8:22:56:97:62:a1:de:38:64:9e: aa:63:9f:13:d3:ff:bc:d6:93:eb:49:f0:a4:81:68: 76:c0:27:7a:11:0b:2c:c3:d1:b0:26:fa:ad:3c:cb: f6:a1:cb:4e:ca:0f:fa:29:7a:2f:57:8e:91:0e:2d: 9a:6d:16:b9:02:5c:9c:6b:86:ea:c6:26:5e:62:2e: 67:7d:97:4b:bf:99:7e:c6:2f:85:c1:23:f3:60:a4: 77:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B4:2D:71:89:E2:26:A6:93:9A:97:F9:C4:1E:9C:7E:C5:C6:E7:62 X509v3 Authority Key Identifier: keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/9rQtcYniJqaTmpf5xB6cfsXG52I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.221.0-185.99.222.255 Signature Algorithm: sha256WithRSAEncryption 51:fd:da:93:65:ee:98:3a:61:44:53:01:f8:11:e8:6a:82:9c: 07:6d:f9:1c:92:c3:05:06:46:55:62:35:77:b9:2b:64:6a:91: 9b:ec:60:50:ec:b7:db:60:3b:9a:d1:ec:0e:c0:5b:c2:f6:89: e9:7c:84:ff:15:d2:fb:f7:77:86:a8:02:50:0f:8e:9c:cf:60: 6c:c4:90:f1:58:78:bb:2c:b0:c1:a1:59:62:fc:c2:1a:d6:b5: 17:b8:2f:d7:ea:c3:b7:6e:84:d8:4b:a9:30:5e:f0:63:d3:43: c5:eb:db:61:b9:c1:16:39:08:b9:46:f5:9d:37:e2:57:0a:96: 2a:b4:08:df:ea:c7:44:5e:c7:28:dd:43:ee:49:16:d3:59:d9: c2:73:56:da:a7:94:2a:09:c8:93:8c:bb:ce:c9:30:47:92:dd: c3:b8:c1:ea:2f:c5:a0:09:ba:a1:a0:49:c1:64:cb:d0:46:b0: 67:9c:b8:fa:cd:4c:41:bc:53:d5:d3:f3:51:8b:72:58:99:3f: d8:2b:50:a3:05:49:1b:f8:8b:01:7a:d3:63:d9:aa:cc:dd:65: d6:c8:1c:bd:d2:75:f9:0c:c6:95:34:95:25:8d:ac:9c:82:af: 00:41:17:bb:7f:a6:74:e6:99:0c:45:7d:c3:fd:9a:67:aa:de: 1e:7b:d3:58 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WIQaBI3lTmG/8p3n1CUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZmFjMzk2N2VhOTg1OTIyN2Q5ZjdiZTc0NGUyYTZlYTQ4 NmUxMTcwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmI0MmQ3MTg5ZTIyNmE2OTM5YTk3ZjljNDFlOWM3ZWM1YzZlNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuO0KZh3kzaBMJdaSpRN2MPEsSNZ 561BaGvDki3t/ERN0E0JG8G14mlMiI5Vxm2TiwfNYbzLDEcEf5vydxETvDVKbUwN qPevnqH5CaM2o5q57pEBqHyHIRXP2HYmKs/OtUM3LwwRY26vzpcMWpht8QfX200h xmPAbWFh7RXMI1fqgK0btazyZhNQAvhsXkIVn0d44K8uA5anWXSM8DvprKdQD6jV Mz/Oe6giVpdiod44ZJ6qY58T0/+81pPrSfCkgWh2wCd6EQssw9GwJvqtPMv2octO yg/6KXovV46RDi2abRa5Alyca4bqxiZeYi5nfZdLv5l+xi+FwSPzYKR31wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPa0LXGJ4iamk5qX+cQenH7FxudiMB8GA1UdIwQY MBaAFNb6w5Z+qYWSJ9n3vnROKm6khuEXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZyRGxuNnBoWkluMmZlLWRFNHFicVNHNFJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xNmZiODQtZmEyOS00MWIyLThkYmIt NTlkZWNkOGQ1YTBjLzEvOXJRdGNZbmlKcWFUbXBmNXhCNmNmc1hHNTJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8xNmZiODQtZmEyOS00MWIyLThkYmItNTlkZWNkOGQ1YTBj LzEvMXZyRGxuNnBoWkluMmZlLWRFNHFicVNHNFJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5Y90D BAC5Y94wDQYJKoZIhvcNAQELBQADggEBAFH92pNl7pg6YURTAfgR6GqCnAdt+RyS wwUGRlViNXe5K2RqkZvsYFDst9tgO5rR7A7AW8L2iel8hP8V0vv3d4aoAlAPjpzP YGzEkPFYeLsssMGhWWL8whrWtRe4L9fqw7duhNhLqTBe8GPTQ8Xr22G5wRY5CLlG 9Z034lcKliq0CN/qx0RexyjdQ+5JFtNZ2cJzVtqnlCoJyJOMu87JMEeS3cO4weov xaAJuqGgScFky9BGsGecuPrNTEG8U9XT81GLcliZP9grUKMFSRv4iwF602PZqszd ZdbIHL3SdfkMxpU0lSWNrJyCrwBBF7t/pnTmmQxFfcP9mmeq3h5701g= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:34 2026 by rpki-client