This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/b9f-YG3sRgz3Cpq8Tydn4ruqPgI.roa File: b9f-YG3sRgz3Cpq8Tydn4ruqPgI.roa (raw, json) Hash identifier: qVB8vS/+30gYKUJ73KLGwaTJdr2WF4QKkFEP1LjTXyI= Subject key identifier: 6F:D7:FE:60:6D:EC:46:0C:F7:0A:9A:BC:4F:27:67:E2:BB:AA:3E:02 Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7 Certificate serial: 019B7B35DDD526B68D72717AC61DFB0B8E04 Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/b9f-YG3sRgz3Cpq8Tydn4ruqPgI.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205169 IP address blocks: 185.227.236.0/24 maxlen: 24 185.227.237.0/24 maxlen: 24 185.227.238.0/24 maxlen: 24 185.227.239.0/24 maxlen: 24 2a0c:d600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:dd:d5:26:b6:8d:72:71:7a:c6:1d:fb:0b:8e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fd7fe606dec460cf70a9abc4f2767e2bbaa3e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:96:29:68:37:fb:1a:73:2b:b1:ef:b8:4a: ee:45:88:21:97:e9:1c:c5:e1:7d:6a:a4:ab:1c:b4: b3:1f:4c:f8:bd:cf:b1:fa:43:0c:78:cf:c1:a3:d1: 55:a6:9b:33:76:33:d7:ea:fc:c1:55:3b:08:ac:96: a9:94:b1:69:45:51:c5:70:6a:aa:0b:86:ab:37:18: 00:09:3a:ac:24:27:7a:01:0b:bd:c1:b8:bc:98:38: ad:37:e6:4c:2c:68:2d:21:fa:e9:c4:a5:cc:4e:5e: 14:f4:e4:a5:3d:2e:ed:95:ac:bd:7b:33:0a:fa:c2: 23:45:af:c3:70:dc:3b:d5:a5:98:17:8c:be:cd:4a: a9:3d:4b:06:c6:c9:62:0c:fb:c0:00:30:b5:69:60: ff:6e:06:96:06:b0:e7:cb:2b:1a:6b:0d:b9:97:e5: 1b:99:8e:c2:5d:c9:a6:cd:b1:8d:c7:3f:a0:b2:a5: bb:7a:38:68:69:e5:f5:24:b7:0a:cc:15:b9:b9:d5: 17:27:a4:1e:eb:cb:93:b3:0f:e3:57:e8:91:dc:70: f9:8d:d9:bf:06:e6:ff:ee:61:63:a6:77:69:c5:5c: 68:95:51:4e:0c:56:91:66:a5:dc:af:00:40:2a:a3: 83:3b:f6:01:3b:21:64:21:b4:a9:86:ae:09:1f:3f: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D7:FE:60:6D:EC:46:0C:F7:0A:9A:BC:4F:27:67:E2:BB:AA:3E:02 X509v3 Authority Key Identifier: keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/b9f-YG3sRgz3Cpq8Tydn4ruqPgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.236.0/22 IPv6: 2a0c:d600::/29 Signature Algorithm: sha256WithRSAEncryption cc:d4:20:d7:c1:30:1a:47:1b:2d:bb:e1:d7:d0:14:6d:81:24: a2:6d:e0:cb:53:55:b7:2e:69:f0:28:49:6d:28:8e:3e:74:56: 34:cc:97:f8:96:56:6b:18:b5:2b:17:f5:61:2e:3f:6e:28:ec: 50:47:ff:80:51:b2:bb:99:46:23:7d:3b:6c:00:fd:47:00:a0: b6:22:d4:5a:3f:f8:d1:48:4e:50:31:73:f4:5d:41:8b:a0:c8: c0:ff:db:9b:22:22:64:c8:ab:67:87:b0:cd:66:49:1f:9b:fc: 7c:c5:30:92:d8:6d:24:21:35:84:00:ce:b4:03:16:a6:77:15: 58:ae:c9:9e:58:5a:a8:ed:8a:fb:58:52:8c:8f:e1:43:8d:04: f0:08:73:6f:b2:03:5a:fc:c1:90:4f:2d:36:93:a1:13:d7:87: fd:17:4a:7e:0a:83:08:36:af:d6:26:f2:81:09:47:16:79:dd: 79:53:6a:6c:38:fd:20:d8:3a:3d:0a:f1:1b:04:f5:d8:0b:ed: b7:35:5d:45:6c:ad:61:e9:a4:59:9b:9d:8e:0f:c8:0d:9c:19: 0f:6c:cf:f0:8b:af:82:06:3a:7a:5f:ad:36:a3:e0:35:9d:c0: 48:23:19:50:af:a0:fb:45:4c:30:62:10:40:b3:fc:fd:98:bb: ca:69:ce:6f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Nd3VJraNcnF6xh37C44EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZmJkOWVkNTA0ZWVmNjU5ZWNmYzkxOWExOTVjZDJhODAz YjYwYTcwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmQ3ZmU2MDZkZWM0NjBjZjcwYTlhYmM0ZjI3NjdlMmJiYWEzZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP+WKWg3+xpzK7HvuEruRYghl+kc xeF9aqSrHLSzH0z4vc+x+kMMeM/Bo9FVppszdjPX6vzBVTsIrJaplLFpRVHFcGqq C4arNxgACTqsJCd6AQu9wbi8mDitN+ZMLGgtIfrpxKXMTl4U9OSlPS7tlay9ezMK +sIjRa/DcNw71aWYF4y+zUqpPUsGxsliDPvAADC1aWD/bgaWBrDnyysaaw25l+Ub mY7CXcmmzbGNxz+gsqW7ejhoaeX1JLcKzBW5udUXJ6Qe68uTsw/jV+iR3HD5jdm/ Bub/7mFjpndpxVxolVFODFaRZqXcrwBAKqODO/YBOyFkIbSphq4JHz9PWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG/X/mBt7EYM9wqavE8nZ+K7qj4CMB8GA1UdIwQY MBaAFNb72e1QTu9lns/JGaGVzSqAO2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMt YWNjY2FlNjkwZTc1LzEvYjlmLVlHM3NSZ3ozQ3BxOFR5ZG40cnVxUGdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMtYWNjY2FlNjkwZTc1 LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuePsMA0E AgACMAcDBQMqDNYAMA0GCSqGSIb3DQEBCwUAA4IBAQDM1CDXwTAaRxstu+HX0BRt gSSibeDLU1W3LmnwKEltKI4+dFY0zJf4llZrGLUrF/VhLj9uKOxQR/+AUbK7mUYj fTtsAP1HAKC2ItRaP/jRSE5QMXP0XUGLoMjA/9ubIiJkyKtnh7DNZkkfm/x8xTCS 2G0kITWEAM60AxamdxVYrsmeWFqo7Yr7WFKMj+FDjQTwCHNvsgNa/MGQTy02k6ET 14f9F0p+CoMINq/WJvKBCUcWed15U2psOP0g2Do9CvEbBPXYC+23NV1FbK1h6aRZ m52OD8gNnBkPbM/wi6+CBjp6X602o+A1ncBIIxlQr6D7RUwwYhBAs/z9mLvKac5v -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:15 2026 by rpki-client