This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/9twuQnOJskBwmGMFoupLSFf36QU.roa File: 9twuQnOJskBwmGMFoupLSFf36QU.roa (raw, json) Hash identifier: RCDNAXL5qdPSc9rP9ORi3f5ylPM5vMAj2oc0ZzFFmFU= Subject key identifier: F6:DC:2E:42:73:89:B2:40:70:98:63:05:A2:EA:4B:48:57:F7:E9:05 Certificate issuer: /CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Certificate serial: 019B76EB1D1B0025A11D40B9C7B0B19A0650 Authority key identifier: A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/9twuQnOJskBwmGMFoupLSFf36QU.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 185.69.116.0/24 maxlen: 24 185.69.118.0/24 maxlen: 24 194.35.1.0/24 maxlen: 24 194.35.5.0/24 maxlen: 24 194.35.8.0/24 maxlen: 24 194.35.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.mft rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1d:1b:00:25:a1:1d:40:b9:c7:b0:b1:9a:06:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a65046d85ecf201fbef51e8bea1c4ed33f95b268 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6dc2e427389b24070986305a2ea4b4857f7e905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ea:2d:92:06:82:f5:98:d3:08:fd:15:bc:22: 1a:db:78:ba:94:0c:aa:07:7f:af:52:74:1d:13:4b: 49:8c:9f:73:ef:e9:f9:5a:62:c6:0c:ec:34:dc:c5: 91:6d:dc:e5:e5:df:1c:6b:40:51:0a:f0:51:53:dc: 91:9a:77:4d:ad:bc:2d:b5:9f:3e:65:05:02:52:92: 12:50:78:1b:2c:8d:5d:1a:f5:2a:ce:83:e4:96:1e: 79:cb:b5:fb:2d:38:b7:a4:7a:c6:70:a7:87:09:e5: ac:cd:4f:58:75:f2:0a:23:9c:92:47:b0:ac:a2:51: bd:de:66:20:9d:3d:0b:9b:8d:a9:5d:cd:40:a5:ea: 92:28:4c:98:7d:f8:06:a3:e0:c9:33:c9:ca:a8:f9: b2:3e:04:e0:6b:e3:cc:37:19:1b:4a:45:24:1c:86: 54:10:a3:3c:21:e9:a1:0f:f8:a6:32:85:e6:99:33: e7:ab:03:22:54:1a:0b:12:27:8d:2f:74:48:de:72: 3a:2a:bf:21:8f:95:9a:7f:d4:2e:67:1e:c1:b9:67: 69:a8:cf:04:62:1b:1b:42:59:31:19:2c:64:55:53: cb:da:54:95:6c:97:da:42:aa:94:d3:05:9d:61:24: ab:fb:80:26:89:62:9c:da:d7:f9:a7:8e:47:29:2f: 03:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DC:2E:42:73:89:B2:40:70:98:63:05:A2:EA:4B:48:57:F7:E9:05 X509v3 Authority Key Identifier: keyid:A6:50:46:D8:5E:CF:20:1F:BE:F5:1E:8B:EA:1C:4E:D3:3F:95:B2:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plBG2F7PIB--9R6L6hxO0z-Vsmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/9twuQnOJskBwmGMFoupLSFf36QU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3bd7c1-81fa-4553-8505-bccd32af97fe/1/plBG2F7PIB--9R6L6hxO0z-Vsmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.116.0/24 185.69.118.0/24 194.35.1.0/24 194.35.5.0/24 194.35.8.0/23 Signature Algorithm: sha256WithRSAEncryption 68:e8:40:11:86:3a:c5:15:ab:0c:d5:3a:6b:c4:5f:cb:3d:ce: b8:ee:72:aa:1d:6c:3a:0b:9a:0b:21:fc:ed:89:29:b8:9e:1b: 3b:d1:5a:da:85:99:fa:9a:a4:f6:7c:9c:d9:e2:2d:8f:4a:01: 92:84:7f:a5:5c:88:0a:bd:a0:85:8c:0a:bf:2c:2d:66:9e:89: ff:ec:9d:70:43:20:d2:70:40:06:d0:1b:4f:67:78:99:6f:d7: 52:8c:07:8f:ec:c5:c7:d8:3d:74:0a:27:bd:b8:d6:be:74:0c: da:14:48:2d:38:3c:49:02:b0:77:f1:23:c6:e4:eb:0f:57:6a: 75:22:27:c2:85:4b:9d:ab:9c:2d:1a:59:9a:31:dd:a3:fc:52: 2c:6f:5d:8c:19:51:fb:ff:f7:d9:df:38:d5:ce:2d:20:b4:82: 5f:5d:83:18:25:7a:5b:c7:b4:d7:cb:73:4b:15:74:a9:b6:a5: ad:a5:ab:a2:93:3c:33:53:1e:60:ea:a4:e0:c7:ff:1a:36:45: d3:eb:76:16:26:01:d6:be:d2:90:91:39:df:66:03:78:98:ca: f0:73:1c:97:c5:3a:91:06:9b:42:6b:4b:d8:ac:72:db:e5:ca: 44:f5:8b:4e:0d:70:0f:e7:0f:a3:8a:b1:25:f8:70:c1:ca:39: 25:6e:9f:d3 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt26x0bACWhHUC5x7CxmgZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NTA0NmQ4NWVjZjIwMWZiZWY1MWU4YmVhMWM0ZWQzM2Y5 NWIyNjgwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmRjMmU0MjczODliMjQwNzA5ODYzMDVhMmVhNGI0ODU3ZjdlOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOotkgaC9ZjTCP0VvCIa23i6lAyq B3+vUnQdE0tJjJ9z7+n5WmLGDOw03MWRbdzl5d8ca0BRCvBRU9yRmndNrbwttZ8+ ZQUCUpISUHgbLI1dGvUqzoPklh55y7X7LTi3pHrGcKeHCeWszU9YdfIKI5ySR7Cs olG93mYgnT0Lm42pXc1ApeqSKEyYffgGo+DJM8nKqPmyPgTga+PMNxkbSkUkHIZU EKM8IemhD/imMoXmmTPnqwMiVBoLEieNL3RI3nI6Kr8hj5Waf9QuZx7BuWdpqM8E YhsbQlkxGSxkVVPL2lSVbJfaQqqU0wWdYSSr+4AmiWKc2tf5p45HKS8DPwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPbcLkJzibJAcJhjBaLqS0hX9+kFMB8GA1UdIwQY MBaAFKZQRthezyAfvvUei+ocTtM/lbJoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUt YmNjZDMyYWY5N2ZlLzEvOXR3dVFuT0pza0J3bUdNRm91cExTRmYzNlFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYmQ3YzEtODFmYS00NTUzLTg1MDUtYmNjZDMyYWY5N2Zl LzEvcGxCRzJGN1BJQi0tOVI2TDZoeE8wei1Wc21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAuUV0AwQA uUV2AwQAwiMBAwQAwiMFAwQBwiMIMA0GCSqGSIb3DQEBCwUAA4IBAQBo6EARhjrF FasM1TprxF/LPc647nKqHWw6C5oLIfztiSm4nhs70VrahZn6mqT2fJzZ4i2PSgGS hH+lXIgKvaCFjAq/LC1mnon/7J1wQyDScEAG0BtPZ3iZb9dSjAeP7MXH2D10Cie9 uNa+dAzaFEgtODxJArB38SPG5OsPV2p1IifChUudq5wtGlmaMd2j/FIsb12MGVH7 //fZ3zjVzi0gtIJfXYMYJXpbx7TXy3NLFXSptqWtpauikzwzUx5g6qTgx/8aNkXT 63YWJgHWvtKQkTnfZgN4mMrwcxyXxTqRBptCa0vYrHLb5cpE9YtODXAP5w+jirEl +HDByjklbp/T -----END CERTIFICATE-----Generated at Tue Jan 20 07:56:30 2026 by rpki-client