This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/9hmyc7CHoVirMOZNEd9K7tYFYLM.roa File: 9hmyc7CHoVirMOZNEd9K7tYFYLM.roa (raw, json) Hash identifier: W9t2ncBE5dKOSwgrchzHeuwxwCQgEv7UeDz8B25sDI0= Subject key identifier: F6:19:B2:73:B0:87:A1:58:AB:30:E6:4D:11:DF:4A:EE:D6:05:60:B3 Certificate issuer: /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Certificate serial: 019B76EADFC214749B92558BD5E00B717AC7 Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/9hmyc7CHoVirMOZNEd9K7tYFYLM.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43366 IP address blocks: 185.45.148.0/24 maxlen: 24 193.189.89.0/24 maxlen: 24 2a13:bdc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:df:c2:14:74:9b:92:55:8b:d5:e0:0b:71:7a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f619b273b087a158ab30e64d11df4aeed60560b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:af:3c:06:ff:19:82:5b:05:b8:56:14:3f: 8e:1c:af:6f:2a:60:b9:d2:a8:07:d0:0e:2e:0a:04: ed:bf:48:bc:e7:93:53:a8:53:7b:66:f0:17:a5:8d: 7e:7a:48:55:ce:bd:58:bf:67:8d:61:bd:e3:2f:44: bf:ae:f7:db:08:bd:df:a9:f2:9a:a8:b0:14:74:4a: 54:e2:44:ec:df:fd:a6:5a:96:98:e0:0a:b4:25:6f: de:8b:b1:cb:c1:2b:5c:e3:77:76:32:0c:7c:c1:b8: f7:43:43:e3:59:4e:af:de:db:cb:ec:25:5b:2c:c1: 35:89:d2:27:50:b6:62:dc:86:ee:91:b9:e7:ae:e1: de:7e:fd:e6:f4:ba:61:22:ed:f3:de:42:c2:5b:cb: 38:b4:aa:ec:44:27:56:8f:bf:fa:f2:61:67:f4:7d: 19:76:b4:f6:53:a5:04:e0:eb:a3:5e:cb:8b:9e:6f: 88:fb:3f:5c:ef:1b:44:5a:5d:ed:0c:a8:c6:83:0b: a3:71:ce:d7:d9:4b:51:a6:48:a4:06:6e:82:c6:67: d6:a5:ab:8b:10:e6:7d:32:91:dd:d0:12:38:0e:13: 36:66:ca:a4:ed:96:e4:88:3a:c4:3c:6c:63:79:13: f9:04:a2:64:96:a0:7c:f6:02:f1:94:06:de:96:c3: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:B2:73:B0:87:A1:58:AB:30:E6:4D:11:DF:4A:EE:D6:05:60:B3 X509v3 Authority Key Identifier: keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/9hmyc7CHoVirMOZNEd9K7tYFYLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.148.0/24 193.189.89.0/24 IPv6: 2a13:bdc0::/29 Signature Algorithm: sha256WithRSAEncryption 78:23:80:b5:55:52:48:53:bd:6f:96:fe:72:68:c1:a8:e2:03: ea:1d:92:46:04:14:8c:8c:e1:11:b3:36:7d:7d:a3:2c:d5:13: 46:a4:c7:50:59:64:9d:ef:2e:7f:a4:05:66:b6:bd:ab:eb:e9: 1f:06:c7:39:ee:17:b6:a5:2a:15:e2:94:3c:9c:53:ae:b5:f0: d6:57:c2:36:5d:d8:1e:90:cd:7f:d7:2e:27:e6:c9:01:4c:7c: fe:f3:27:49:0b:32:4f:90:2f:0a:c8:1a:e2:c1:e9:cc:44:70: f7:a5:50:b8:7c:c0:a0:49:c1:39:ff:0f:63:2e:38:c7:c3:56: 4c:62:e9:f3:19:80:86:d6:9b:ea:8c:71:1b:01:97:85:46:0f: d1:6b:91:71:14:2b:d0:46:9d:cf:17:90:ce:5b:76:1b:37:d2: e0:82:44:de:1c:b9:d4:b0:cc:31:05:02:df:04:d9:da:38:87: dd:82:a5:eb:77:64:fd:5e:ad:e5:2e:29:4f:08:a2:d0:36:85: 47:c3:b1:0f:29:83:a3:ba:26:df:26:e6:2a:9b:7f:6b:61:95: a5:d6:2d:01:66:1b:7e:ee:19:22:11:aa:00:3f:40:e0:e3:77: b5:aa:00:1c:7a:da:c6:69:16:7c:56:06:db:44:67:89:8e:e6: d2:b1:ff:fe -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26t/CFHSbklWL1eALcXrHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzgwMTU3YjU2NDI2Y2UzYTVmNDNjODlmZWIxZDQzN2M3 N2NiY2UwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjE5YjI3M2IwODdhMTU4YWIzMGU2NGQxMWRmNGFlZWQ2MDU2MGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/GvPAb/GYJbBbhWFD+OHK9vKmC5 0qgH0A4uCgTtv0i855NTqFN7ZvAXpY1+ekhVzr1Yv2eNYb3jL0S/rvfbCL3fqfKa qLAUdEpU4kTs3/2mWpaY4Aq0JW/ei7HLwStc43d2Mgx8wbj3Q0PjWU6v3tvL7CVb LME1idInULZi3IbukbnnruHefv3m9LphIu3z3kLCW8s4tKrsRCdWj7/68mFn9H0Z drT2U6UE4OujXsuLnm+I+z9c7xtEWl3tDKjGgwujcc7X2UtRpkikBm6CxmfWpauL EOZ9MpHd0BI4DhM2Zsqk7ZbkiDrEPGxjeRP5BKJklqB89gLxlAbelsPZqQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPYZsnOwh6FYqzDmTRHfSu7WBWCzMB8GA1UdIwQY MBaAFAPIAVe1ZCbOOl9DyJ/rHUN8d8vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEt ZjAxNGY4MTc3OTZhLzEvOWhteWM3Q0hvVmlyTU9aTkVkOUs3dFlGWUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEtZjAxNGY4MTc3OTZh LzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuS2UAwQA wb1ZMA0EAgACMAcDBQMqE73AMA0GCSqGSIb3DQEBCwUAA4IBAQB4I4C1VVJIU71v lv5yaMGo4gPqHZJGBBSMjOERszZ9faMs1RNGpMdQWWSd7y5/pAVmtr2r6+kfBsc5 7he2pSoV4pQ8nFOutfDWV8I2XdgekM1/1y4n5skBTHz+8ydJCzJPkC8KyBriwenM RHD3pVC4fMCgScE5/w9jLjjHw1ZMYunzGYCG1pvqjHEbAZeFRg/Ra5FxFCvQRp3P F5DOW3YbN9LggkTeHLnUsMwxBQLfBNnaOIfdgqXrd2T9Xq3lLilPCKLQNoVHw7EP KYOjuibfJuYqm39rYZWl1i0BZht+7hkiEaoAP0Dg43e1qgAcetrGaRZ8VgbbRGeJ jubSsf/+ -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:00 2026 by rpki-client