This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/9q8SdW4K_Qfg_qhjmay8aSi22H8.roa File: 9q8SdW4K_Qfg_qhjmay8aSi22H8.roa (raw, json) Hash identifier: Ep0bFnw6XVVIIq0VGt/sxRJ3Mflsj+GO7Wgmc5rKidw= Subject key identifier: F6:AF:12:75:6E:0A:FD:07:E0:FE:A8:63:99:AC:BC:69:28:B6:D8:7F Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e Certificate serial: 019B7FF2A25E1E5C173AE4EA605FD63FE378 Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/9q8SdW4K_Qfg_qhjmay8aSi22H8.roa Signing time: Fri 02 Jan 2026 18:22:46 +0000 ROA not before: Fri 02 Jan 2026 18:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198297 IP address blocks: 185.86.132.0/22 maxlen: 22 185.86.132.0/23 maxlen: 23 185.86.132.0/24 maxlen: 24 185.86.132.9/32 maxlen: 32 185.86.133.0/24 maxlen: 24 185.86.134.0/23 maxlen: 23 185.86.134.0/24 maxlen: 24 185.86.135.0/24 maxlen: 24 2a03:7620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a2:5e:1e:5c:17:3a:e4:ea:60:5f:d6:3f:e3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e Validity Not Before: Jan 2 18:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6af12756e0afd07e0fea86399acbc6928b6d87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:12:e0:86:47:67:5b:4f:db:6f:e1:ab:51: 17:39:3b:4c:7e:73:5d:73:8e:14:15:cf:16:d7:2b: 31:6c:cf:f4:fe:13:bb:85:31:35:55:bf:88:63:a6: 70:64:f9:27:f2:06:69:1c:10:64:df:2e:ec:79:da: f8:f0:3b:f8:d5:73:5f:3c:77:f5:8d:66:97:bf:26: e4:4a:2c:32:fb:5d:66:3a:e9:de:a7:d3:1c:12:2c: e2:09:9d:c8:54:fe:9c:f9:49:82:ee:f9:2c:4f:c4: 1b:71:c8:7d:5e:18:62:a3:1e:bf:50:08:de:54:94: 3d:54:27:e9:8e:88:32:36:22:d2:2c:d0:0f:7e:8a: ba:77:ce:bb:2b:56:58:3a:70:98:a1:04:f1:31:6e: 53:d2:a4:2c:f2:d0:b4:11:58:f9:20:b9:7e:82:d4: 58:59:e9:a4:b0:91:bb:89:19:72:48:97:48:24:7d: fd:29:2d:f0:3d:22:a5:d7:85:5f:f6:ae:e0:c6:6e: ed:66:99:d3:6a:16:ea:01:c7:04:f5:45:77:9a:15: 5f:49:97:de:e4:59:67:e8:65:48:2b:84:c8:e4:46: c2:21:95:c9:29:e8:ae:81:32:93:aa:2f:9a:9e:82: 42:49:7c:a3:03:3c:c9:08:a7:1e:35:35:91:76:f7: c7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AF:12:75:6E:0A:FD:07:E0:FE:A8:63:99:AC:BC:69:28:B6:D8:7F X509v3 Authority Key Identifier: keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/9q8SdW4K_Qfg_qhjmay8aSi22H8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.132.0/22 IPv6: 2a03:7620::/32 Signature Algorithm: sha256WithRSAEncryption 4f:23:86:ff:0e:30:b1:04:af:4e:10:50:e0:a7:ac:a5:7a:7b: 95:61:7f:07:8a:6a:24:28:24:a2:7e:95:91:e7:52:8f:ec:38: 62:74:6d:a0:07:0a:b4:50:1a:3c:0d:7c:37:88:22:bf:5e:6b: 83:ff:d9:e4:42:fa:20:07:3b:5e:52:1e:3b:76:ad:15:7d:0c: 6c:6e:29:ae:32:08:6e:e5:88:aa:60:d8:bb:2f:32:ef:42:10: 46:cc:2d:b5:55:89:77:c8:3e:6b:e4:ef:c7:20:89:7f:0c:00: 02:26:24:2a:63:b4:7c:ce:e1:cc:7d:c2:e3:45:22:65:f4:40: 2d:44:c2:c4:01:21:0f:39:cd:25:c8:b9:b4:eb:38:49:04:87: 91:d6:e9:3e:cb:35:83:22:37:85:0a:53:1a:a5:2d:b2:2d:68: 99:bf:06:ee:b9:9d:bd:dc:25:8f:23:91:91:83:d8:b4:89:a2: b4:cd:88:76:77:ee:12:1c:aa:ef:76:42:94:40:45:07:71:c3: 6c:6f:ad:3c:5d:ae:b3:61:20:bc:b5:cd:55:1e:3b:0d:9b:a2: bb:f5:ae:0c:13:91:4b:26:95:de:02:79:11:18:8b:e3:d5:ee: 39:f3:66:27:6e:f3:77:ee:21:a5:19:03:77:d0:5a:e5:99:50: 41:0c:3d:c0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8qJeHlwXOuTqYF/WP+N4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZWI3MDc0MzgxNWZlNDQ1Yzk1OGEzYzUxMTdlZjI3NTNk MzBmN2UwHhcNMjYwMTAyMTgyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmFmMTI3NTZlMGFmZDA3ZTBmZWE4NjM5OWFjYmM2OTI4YjZkODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmgS4IZHZ1tP22/hq1EXOTtMfnNd c44UFc8W1ysxbM/0/hO7hTE1Vb+IY6ZwZPkn8gZpHBBk3y7sedr48Dv41XNfPHf1 jWaXvybkSiwy+11mOunep9McEiziCZ3IVP6c+UmC7vksT8Qbcch9Xhhiox6/UAje VJQ9VCfpjogyNiLSLNAPfoq6d867K1ZYOnCYoQTxMW5T0qQs8tC0EVj5ILl+gtRY WemksJG7iRlySJdIJH39KS3wPSKl14Vf9q7gxm7tZpnTahbqAccE9UV3mhVfSZfe 5Fln6GVIK4TI5EbCIZXJKeiugTKTqi+anoJCSXyjAzzJCKceNTWRdvfH2wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPavEnVuCv0H4P6oY5msvGkotth/MB8GA1UdIwQY MBaAFMPrcHQ4Ff5EXJWKPFEX7ydT0w9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xMzc1NGMtOGJlNy00NjBlLTg1MDct MTM1NzVlZjcyOWYzLzEvOXE4U2RXNEtfUWZnX3Foam1heThhU2kyMkg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xMzc1NGMtOGJlNy00NjBlLTg1MDctMTM1NzVlZjcyOWYz LzEvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVaEMA0E AgACMAcDBQAqA3YgMA0GCSqGSIb3DQEBCwUAA4IBAQBPI4b/DjCxBK9OEFDgp6yl enuVYX8HimokKCSifpWR51KP7DhidG2gBwq0UBo8DXw3iCK/XmuD/9nkQvogBzte Uh47dq0VfQxsbimuMghu5YiqYNi7LzLvQhBGzC21VYl3yD5r5O/HIIl/DAACJiQq Y7R8zuHMfcLjRSJl9EAtRMLEASEPOc0lyLm06zhJBIeR1uk+yzWDIjeFClMapS2y LWiZvwbuuZ293CWPI5GRg9i0iaK0zYh2d+4SHKrvdkKUQEUHccNsb608Xa6zYSC8 tc1VHjsNm6K79a4ME5FLJpXeAnkRGIvj1e4582YnbvN37iGlGQN30FrlmVBBDD3A -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:43 2026 by rpki-client