This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/C9Ra18IQZMYPkfBHca82xhr0cTA.roa File: C9Ra18IQZMYPkfBHca82xhr0cTA.roa (raw, json) Hash identifier: SV7yW/23Qp7R5wgSCdgQtEDtBATncL3nb2e5yjh6BqQ= Subject key identifier: 0B:D4:5A:D7:C2:10:64:C6:0F:91:F0:47:71:AF:36:C6:1A:F4:71:30 Certificate issuer: /CN=fce4f396729bf478e636549821f6f6970d893f52 Certificate serial: 019B7DCA0CFFDA10CA5D4B97E736E6DC5338 Authority key identifier: FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/C9Ra18IQZMYPkfBHca82xhr0cTA.roa Signing time: Fri 02 Jan 2026 08:19:12 +0000 ROA not before: Fri 02 Jan 2026 08:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47648 IP address blocks: 152.89.188.0/22 maxlen: 24 185.239.196.0/22 maxlen: 24 195.68.248.0/23 maxlen: 24 195.68.254.0/23 maxlen: 24 2a0c:6180::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:0c:ff:da:10:ca:5d:4b:97:e7:36:e6:dc:53:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fce4f396729bf478e636549821f6f6970d893f52 Validity Not Before: Jan 2 08:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bd45ad7c21064c60f91f04771af36c61af47130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:b3:06:df:1d:df:32:a3:ba:6c:8c:d1:8b: 86:47:89:63:34:38:c3:6b:02:24:14:b8:cf:05:86: 3a:24:8c:62:47:c7:b7:5d:7a:b7:13:fa:bf:9a:a6: f1:c1:d1:90:26:8c:ef:a6:d6:64:76:e7:7f:80:25: 26:26:4b:22:12:1e:f4:e9:98:33:1c:01:b4:eb:80: 8e:18:cf:81:68:ea:fc:6a:7e:19:d4:d0:f8:a3:99: ee:dd:29:9e:22:42:34:55:a5:31:fa:b0:2d:6c:ea: 08:83:d4:67:91:a6:14:6b:e0:62:e6:96:2c:9e:8e: 3f:f8:2f:68:57:cc:3a:7f:57:63:6c:ec:1d:d6:05: 71:ca:bf:4e:00:6a:13:fc:be:73:ee:1a:f9:a3:6d: a8:5c:8f:a2:ad:ac:2f:27:ee:8d:dd:d0:f0:14:60: 26:4e:8e:75:5e:e6:19:4b:1c:a9:99:f7:75:7b:c1: 68:57:e8:15:5f:78:41:8e:c5:38:8d:4f:11:16:9e: 89:04:73:3b:e7:4a:06:64:b1:b3:75:5e:30:21:5d: cf:50:9b:b8:5b:e1:e5:7b:fe:ea:bd:52:f1:43:69: e2:cd:8d:9c:10:1f:f0:ca:cc:e3:60:01:0e:c2:ed: d0:02:fe:e5:e1:77:40:e0:fe:cc:ec:e6:9e:54:f0: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D4:5A:D7:C2:10:64:C6:0F:91:F0:47:71:AF:36:C6:1A:F4:71:30 X509v3 Authority Key Identifier: keyid:FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/C9Ra18IQZMYPkfBHca82xhr0cTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.188.0/22 185.239.196.0/22 195.68.248.0/23 195.68.254.0/23 IPv6: 2a0c:6180::/29 Signature Algorithm: sha256WithRSAEncryption af:10:fb:f3:07:e3:84:63:bd:be:d0:26:52:87:a4:8b:c5:5c: f8:57:e7:8c:ce:ba:00:77:88:c4:2f:0f:99:94:65:7d:97:bc: 0e:c4:60:62:09:95:70:51:35:42:c0:fc:9d:a3:9a:ef:2b:8d: 0c:9c:58:8c:22:1f:02:ad:9e:1b:fa:13:b9:63:63:83:2e:7b: ea:1a:6b:ae:ed:e0:81:11:1e:64:e0:6d:e5:d4:a5:54:6c:dc: 61:f6:db:2c:9a:02:d5:41:cf:11:e2:4c:8d:a5:de:b7:f1:7a: 8b:53:f9:78:dc:34:fc:9e:4b:6e:ee:b6:70:68:a3:46:80:b2: f7:55:c1:3e:15:35:00:ff:db:d9:75:ac:00:1b:6e:b5:bf:73: 93:06:f7:0a:78:f8:92:21:a2:8b:a3:1b:3d:18:b7:91:57:92: c8:5e:44:db:f4:67:2c:7e:20:31:84:51:20:e8:9c:b0:8a:5a: 67:c6:43:5d:d8:2d:82:99:9d:e8:c5:30:4d:bc:b2:3f:6e:cc: 53:1b:bf:54:95:c8:dc:19:5a:e5:99:8d:52:0c:3a:81:72:e5: d5:51:0e:24:77:f8:ef:00:56:71:fd:f1:83:4a:f6:8e:a3:2d: a4:01:cd:b7:6a:30:97:3c:e3:ae:83:05:4c:55:44:d9:8a:00: 73:70:c5:45 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt9ygz/2hDKXUuX5zbm3FM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZTRmMzk2NzI5YmY0NzhlNjM2NTQ5ODIxZjZmNjk3MGQ4 OTNmNTIwHhcNMjYwMTAyMDgxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmQ0NWFkN2MyMTA2NGM2MGY5MWYwNDc3MWFmMzZjNjFhZjQ3MTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/6zBt8d3zKjumyM0YuGR4ljNDjD awIkFLjPBYY6JIxiR8e3XXq3E/q/mqbxwdGQJozvptZkdud/gCUmJksiEh706Zgz HAG064COGM+BaOr8an4Z1ND4o5nu3SmeIkI0VaUx+rAtbOoIg9RnkaYUa+Bi5pYs no4/+C9oV8w6f1djbOwd1gVxyr9OAGoT/L5z7hr5o22oXI+irawvJ+6N3dDwFGAm To51XuYZSxypmfd1e8FoV+gVX3hBjsU4jU8RFp6JBHM750oGZLGzdV4wIV3PUJu4 W+Hle/7qvVLxQ2nizY2cEB/wyszjYAEOwu3QAv7l4XdA4P7M7OaeVPDFLwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAvUWtfCEGTGD5HwR3GvNsYa9HEwMB8GA1UdIwQY MBaAFPzk85Zym/R45jZUmCH29pcNiT9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX09UemxuS2I5SGptTmxTWUlmYjJsdzJKUDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zNjI3NWUtNjc1OS00ZDUyLWIyZDEt OGM3MGRlOWU5YjlkLzEvQzlSYTE4SVFaTVlQa2ZCSGNhODJ4aHIwY1RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zNjI3NWUtNjc1OS00ZDUyLWIyZDEtOGM3MGRlOWU5Yjlk LzEvX09UemxuS2I5SGptTmxTWUlmYjJsdzJKUDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCmFm8AwQC ue/EAwQBw0T4AwQBw0T+MA0EAgACMAcDBQMqDGGAMA0GCSqGSIb3DQEBCwUAA4IB AQCvEPvzB+OEY72+0CZSh6SLxVz4V+eMzroAd4jELw+ZlGV9l7wOxGBiCZVwUTVC wPydo5rvK40MnFiMIh8CrZ4b+hO5Y2ODLnvqGmuu7eCBER5k4G3l1KVUbNxh9tss mgLVQc8R4kyNpd638XqLU/l43DT8nktu7rZwaKNGgLL3VcE+FTUA/9vZdawAG261 v3OTBvcKePiSIaKLoxs9GLeRV5LIXkTb9GcsfiAxhFEg6JywilpnxkNd2C2CmZ3o xTBNvLI/bsxTG79UlcjcGVrlmY1SDDqBcuXVUQ4kd/jvAFZx/fGDSvaOoy2kAc23 ajCXPOOugwVMVUTZigBzcMVF -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:32 2026 by rpki-client