This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa File: 9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa (raw, json) Hash identifier: GdwVnVj0Er6zQr8pOtzRgza7jVJzxa5V5nFDEZ8imc8= Subject key identifier: F4:E3:62:E1:CF:BB:5C:5E:95:9F:6C:E0:75:8C:0A:00:4D:2E:A4:61 Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB3D976061DDAE251A02AAA86A595F Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa Signing time: Fri 02 Jan 2026 08:20:30 +0000 ROA not before: Fri 02 Jan 2026 08:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41745 IP address blocks: 185.65.202.0/24 maxlen: 24 185.120.59.0/24 maxlen: 24 185.255.178.0/24 maxlen: 24 185.255.179.0/24 maxlen: 24 212.22.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 06:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3d:97:60:61:dd:ae:25:1a:02:aa:a8:6a:59:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4e362e1cfbb5c5e959f6ce0758c0a004d2ea461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f3:18:f8:cc:19:16:18:e4:4b:7b:ed:e3:70: 70:74:98:29:ea:68:9e:0b:2e:2a:1c:af:a3:d9:9f: 8b:05:c3:99:73:20:d8:07:57:66:55:f9:a8:cf:db: 2a:b9:8f:1b:4a:e3:e2:da:76:cd:53:73:31:43:74: 1a:1a:60:b8:b3:f2:e5:a7:29:93:42:ef:03:77:59: ef:af:11:03:ad:e3:9b:87:e0:c3:c6:ba:dd:3f:d2: 8c:32:f0:ea:07:67:73:46:31:49:a7:3d:68:e6:85: e7:d7:04:16:00:84:68:0a:7c:3d:a5:f1:42:9a:53: 94:23:25:b1:1f:4b:5b:a6:8b:d0:1c:eb:75:65:37: 59:95:6d:d3:33:3f:5d:16:a9:02:9a:b4:f4:9f:5c: 6e:99:88:fe:ec:99:39:87:33:41:c1:d5:7c:29:6c: 17:30:e9:69:1a:f0:44:f8:15:75:c8:de:5b:51:cc: e0:57:9a:9e:17:4c:a5:26:3b:af:1c:54:ed:e6:c9: 7a:47:60:bd:8b:f4:a0:75:eb:2a:5a:89:7f:18:c8: 48:ed:c1:94:40:0c:bd:51:b2:3d:94:08:e0:b6:c4: db:11:ec:90:2a:73:6b:21:2a:88:f0:12:55:b4:01: 67:a2:22:0c:e6:0f:cf:31:d4:6b:da:c5:b6:51:bc: 36:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E3:62:E1:CF:BB:5C:5E:95:9F:6C:E0:75:8C:0A:00:4D:2E:A4:61 X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/9ONi4c-7XF6Vn2zgdYwKAE0upGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.202.0/24 185.120.59.0/24 185.255.178.0/23 212.22.74.0/24 Signature Algorithm: sha256WithRSAEncryption c1:d8:ce:de:73:d9:c3:39:4a:ff:5d:89:ab:f2:45:86:9f:60: 89:b3:e1:76:8f:a5:69:70:29:ab:a5:6f:bf:45:09:39:62:73: d2:1e:88:6e:70:b9:89:4e:5c:17:05:25:4b:8b:62:0a:37:80: 50:f4:dc:31:93:ee:85:29:28:ac:26:ee:ae:75:a9:a6:32:71: 69:a9:6c:8a:a1:6c:78:89:33:18:84:03:29:2c:3e:49:a4:56: da:86:4e:62:81:b9:88:fc:c1:2f:ba:10:af:e5:cc:d3:5e:b0: 63:9f:11:b3:9f:cd:d2:a4:0f:e4:f5:9a:b8:00:66:2d:ae:24: 79:03:a6:27:f1:86:3d:e4:52:89:ea:57:77:76:d3:94:fb:fc: 04:85:b1:f3:4a:63:0c:4b:34:e8:c9:71:10:75:e3:57:b2:83: b9:13:33:41:bc:b0:7c:c3:db:cf:f9:0d:61:df:20:cf:7d:e2: 77:45:58:3e:24:0b:9f:51:46:59:41:85:02:ef:56:47:56:14: fb:08:be:ca:17:d8:5d:88:e3:81:fe:85:5c:9a:6b:02:c3:ce: aa:15:63:d8:9d:a3:80:b2:33:6b:19:5d:d5:0e:5d:88:b8:75: 2a:e5:9a:40:de:dc:41:17:87:e9:6e:8e:7c:0f:6f:b4:40:5f: a2:d8:a3:1c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yz2XYGHdriUaAqqoallfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGUzNjJlMWNmYmI1YzVlOTU5ZjZjZTA3NThjMGEwMDRkMmVhNDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPMY+MwZFhjkS3vt43BwdJgp6mie Cy4qHK+j2Z+LBcOZcyDYB1dmVfmoz9squY8bSuPi2nbNU3MxQ3QaGmC4s/LlpymT Qu8Dd1nvrxEDreObh+DDxrrdP9KMMvDqB2dzRjFJpz1o5oXn1wQWAIRoCnw9pfFC mlOUIyWxH0tbpovQHOt1ZTdZlW3TMz9dFqkCmrT0n1xumYj+7Jk5hzNBwdV8KWwX MOlpGvBE+BV1yN5bUczgV5qeF0ylJjuvHFTt5sl6R2C9i/SgdesqWol/GMhI7cGU QAy9UbI9lAjgtsTbEeyQKnNrISqI8BJVtAFnoiIM5g/PMdRr2sW2Ubw2OwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPTjYuHPu1xelZ9s4HWMCgBNLqRhMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvOU9OaTRjLTdYRjZWbjJ6Z2RZd0tBRTB1cEdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuUHKAwQA uXg7AwQBuf+yAwQA1BZKMA0GCSqGSIb3DQEBCwUAA4IBAQDB2M7ec9nDOUr/XYmr 8kWGn2CJs+F2j6VpcCmrpW+/RQk5YnPSHohucLmJTlwXBSVLi2IKN4BQ9Nwxk+6F KSisJu6udammMnFpqWyKoWx4iTMYhAMpLD5JpFbahk5igbmI/MEvuhCv5czTXrBj nxGzn83SpA/k9Zq4AGYtriR5A6Yn8YY95FKJ6ld3dtOU+/wEhbHzSmMMSzToyXEQ deNXsoO5EzNBvLB8w9vP+Q1h3yDPfeJ3RVg+JAufUUZZQYUC71ZHVhT7CL7KF9hd iOOB/oVcmmsCw86qFWPYnaOAsjNrGV3VDl2IuHUq5ZpA3txBF4fpbo58D2+0QF+i 2KMc -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:57 2026 by rpki-client