This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/hW9sDbRZPXjg4N-5cKHtzMuXpOk.roa File: hW9sDbRZPXjg4N-5cKHtzMuXpOk.roa (raw, json) Hash identifier: x9s4Ba2Dbe9DV3ZvtPtaZKG9KItOC7ypOsJ8cSF3Nho= Subject key identifier: 85:6F:6C:0D:B4:59:3D:78:E0:E0:DF:B9:70:A1:ED:CC:CB:97:A4:E9 Certificate issuer: /CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485 Certificate serial: 019B797F16B88007643FD68BC835C68E9674 Authority key identifier: D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/hW9sDbRZPXjg4N-5cKHtzMuXpOk.roa Signing time: Thu 01 Jan 2026 12:18:50 +0000 ROA not before: Thu 01 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64457 IP address blocks: 185.224.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.mft rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 12:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:16:b8:80:07:64:3f:d6:8b:c8:35:c6:8e:96:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8012faf98275ae4f3f8d87f084ee4ff8420c485 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=856f6c0db4593d78e0e0dfb970a1edcccb97a4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e8:fe:9d:e1:82:b3:3a:99:8b:0d:1b:6c:04: 66:4d:88:da:d7:9c:d1:50:f3:e2:66:56:1c:49:7e: b9:10:a0:0c:db:b5:47:6a:54:08:1e:75:9c:0a:f5: c6:7a:e0:7d:31:28:9c:8f:cd:38:6a:be:7a:e9:71: 03:09:82:28:26:15:4f:d0:5e:cd:df:e2:a5:fe:91: a2:e0:4d:3e:e7:fe:f7:fa:07:27:d3:0b:48:98:79: 40:f0:3b:50:45:ac:94:9d:f3:fd:18:d0:7d:4c:a1: 26:96:30:11:68:4d:f6:06:e5:8c:6e:65:94:df:4b: 50:ae:e7:9a:c8:21:ea:43:67:f7:9e:52:0e:d9:3a: c7:87:a7:7a:02:cd:4c:cb:72:94:65:9c:56:d3:7b: b2:bd:f6:30:01:9e:06:ce:ff:10:64:35:2d:63:55: 70:2e:5f:c2:21:e6:99:95:74:90:66:48:ee:06:dd: 41:00:17:ac:de:ae:1a:d5:57:a9:b6:20:c7:60:39: 45:9f:e7:5d:a3:c7:37:e1:d5:62:87:ef:a3:fb:7e: 50:f7:18:f1:6d:05:d7:49:22:39:92:57:ee:9e:0c: 96:65:c3:dd:20:2f:c9:d8:dd:49:e3:f0:57:41:be: be:f6:1e:73:61:a8:5b:25:d3:96:fc:8d:b7:19:23: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6F:6C:0D:B4:59:3D:78:E0:E0:DF:B9:70:A1:ED:CC:CB:97:A4:E9 X509v3 Authority Key Identifier: keyid:D8:01:2F:AF:98:27:5A:E4:F3:F8:D8:7F:08:4E:E4:FF:84:20:C4:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/hW9sDbRZPXjg4N-5cKHtzMuXpOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f67aa8-51c2-43b2-b022-6d560debf7b3/1/2AEvr5gnWuTz-Nh_CE7k_4QgxIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.3.0/24 Signature Algorithm: sha256WithRSAEncryption 67:e3:07:51:b6:f1:32:2d:5a:64:6c:76:be:41:18:7c:cb:60: 01:35:1c:3a:81:ce:b9:73:07:73:9f:d5:2c:bc:b8:68:67:11: 1c:a4:4f:b4:5a:7b:09:a5:64:90:33:bf:a2:db:e9:e3:7c:9a: 52:c2:98:d0:90:83:ff:7c:12:2f:b0:69:9b:48:c5:87:a0:36: 82:f0:52:ef:c0:1b:b7:cf:1d:d0:a9:a8:a5:77:68:a2:11:0d: c3:49:7e:65:7c:3f:e7:ea:f0:b1:d0:15:49:9b:2a:39:32:ee: 54:f6:d2:d8:5d:ab:03:59:54:60:7a:e9:18:49:16:4a:78:76: 9c:67:b0:16:67:46:26:83:0c:ae:a3:fe:68:3c:52:13:f1:25: 3c:b7:c9:2b:8b:1b:96:14:32:cd:e9:95:fa:ee:5a:b5:3c:b0: 78:f2:69:90:34:7a:e7:c9:6d:b8:ad:51:69:83:2d:e0:73:92: 53:de:05:37:e6:26:0d:f9:db:e2:af:07:e6:f9:88:4c:f2:1e: 92:56:d4:9d:a6:b5:85:bf:36:a6:c1:17:75:f6:3a:3f:77:0c: 3b:73:a5:1d:ab:fb:08:a6:06:24:9d:8a:22:f9:67:50:7d:28: 53:ee:c5:5b:0f:ab:b7:a3:aa:80:41:14:fa:57:cd:91:dc:74: b1:c9:0c:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fxa4gAdkP9aLyDXGjpZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MDEyZmFmOTgyNzVhZTRmM2Y4ZDg3ZjA4NGVlNGZmODQy MGM0ODUwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTZmNmMwZGI0NTkzZDc4ZTBlMGRmYjk3MGExZWRjY2NiOTdhNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruj+neGCszqZiw0bbARmTYja15zR UPPiZlYcSX65EKAM27VHalQIHnWcCvXGeuB9MSicj804ar566XEDCYIoJhVP0F7N 3+Kl/pGi4E0+5/73+gcn0wtImHlA8DtQRayUnfP9GNB9TKEmljARaE32BuWMbmWU 30tQrueayCHqQ2f3nlIO2TrHh6d6As1My3KUZZxW03uyvfYwAZ4Gzv8QZDUtY1Vw Ll/CIeaZlXSQZkjuBt1BABes3q4a1VeptiDHYDlFn+ddo8c34dVih++j+35Q9xjx bQXXSSI5klfungyWZcPdIC/J2N1J4/BXQb6+9h5zYahbJdOW/I23GSMyMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIVvbA20WT144ODfuXCh7czLl6TpMB8GA1UdIwQY MBaAFNgBL6+YJ1rk8/jYfwhO5P+EIMSFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjIt NmQ1NjBkZWJmN2IzLzEvaFc5c0RiUlpQWGpnNE4tNWNLSHR6TXVYcE9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9mNjdhYTgtNTFjMi00M2IyLWIwMjItNmQ1NjBkZWJmN2Iz LzEvMkFFdnI1Z25XdVR6LU5oX0NFN2tfNFFneElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueADMA0G CSqGSIb3DQEBCwUAA4IBAQBn4wdRtvEyLVpkbHa+QRh8y2ABNRw6gc65cwdzn9Us vLhoZxEcpE+0WnsJpWSQM7+i2+njfJpSwpjQkIP/fBIvsGmbSMWHoDaC8FLvwBu3 zx3Qqaild2iiEQ3DSX5lfD/n6vCx0BVJmyo5Mu5U9tLYXasDWVRgeukYSRZKeHac Z7AWZ0Ymgwyuo/5oPFIT8SU8t8krixuWFDLN6ZX67lq1PLB48mmQNHrnyW24rVFp gy3gc5JT3gU35iYN+dvirwfm+YhM8h6SVtSdprWFvzamwRd19jo/dww7c6Udq/sI pgYknYoi+WdQfShT7sVbD6u3o6qAQRT6V82R3HSxyQxc -----END CERTIFICATE-----Generated at Thu Jan 1 20:38:34 2026 by rpki-client