This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/DS9V5cI03iWU6BTFtP-Adc7gFS8.roa File: DS9V5cI03iWU6BTFtP-Adc7gFS8.roa (raw, json) Hash identifier: EfmWScYD1/xKpm7FnGiQ1T7p6mFJL8n69fChQHSfjTI= Subject key identifier: 0D:2F:55:E5:C2:34:DE:25:94:E8:14:C5:B4:FF:80:75:CE:E0:15:2F Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa Certificate serial: 019B76EADF9C918DDBD072A6719EB400B17F Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/DS9V5cI03iWU6BTFtP-Adc7gFS8.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6939 IP address blocks: 185.68.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:df:9c:91:8d:db:d0:72:a6:71:9e:b4:00:b1:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d2f55e5c234de2594e814c5b4ff8075cee0152f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:d7:74:c4:ee:5a:f9:d0:d4:c2:63:64:ec: 48:93:5d:03:24:ea:49:2b:97:81:a1:5e:ff:d3:4d: 76:7e:cf:74:24:bd:e6:39:25:bd:75:1c:97:ed:fd: 80:a0:e1:82:bc:77:ed:64:f6:26:01:bb:eb:74:30: d0:01:f0:e2:69:8b:10:bb:75:37:db:95:70:2f:d4: 81:3a:6e:fd:59:7c:52:b6:bc:ea:0d:43:f5:b0:13: f7:3f:80:1f:12:d8:d4:c0:1a:cc:a0:67:dd:93:44: 2d:11:ab:95:4b:95:8b:d5:02:52:95:60:60:a0:bb: f3:c4:5c:d9:f9:18:72:51:01:84:d4:d3:07:7e:8d: 01:68:88:f6:8c:d6:1b:5b:52:c3:be:38:ac:36:8a: 8a:99:5d:ca:47:55:51:84:75:16:9d:72:08:56:ce: 23:6c:b5:dd:2f:32:b8:e4:42:50:2e:c9:20:c0:f0: b0:37:86:da:a3:57:96:b9:43:b6:41:be:df:84:fb: bf:4a:4d:da:40:cb:33:93:b1:b2:9a:2b:fb:ff:34: 9e:08:4a:1a:47:a5:01:6c:1a:c3:27:16:ed:27:9d: 41:44:d0:17:36:d5:fa:4a:c2:85:02:32:06:06:46: 5b:d4:9d:38:31:2c:a1:0c:32:7b:c7:0a:e8:62:38: 65:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2F:55:E5:C2:34:DE:25:94:E8:14:C5:B4:FF:80:75:CE:E0:15:2F X509v3 Authority Key Identifier: keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/DS9V5cI03iWU6BTFtP-Adc7gFS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.47.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:1a:41:aa:78:78:85:86:3c:69:73:ae:fd:e6:6d:13:c8:a7: 56:ee:90:20:32:6e:69:47:5e:cc:45:6f:cb:81:1f:ee:a9:50: a7:f6:f2:6a:f8:7b:a4:fd:b9:7a:55:c0:0f:72:1c:be:45:09: 99:15:7e:35:47:e2:92:3e:87:18:a9:f7:13:05:4f:3f:9a:77: a2:8a:d7:51:78:70:46:ae:67:ac:bc:42:c4:23:93:f3:2d:61: ce:4c:37:4a:62:b2:74:83:a2:0f:85:8e:c5:75:33:6c:82:01: 49:23:e3:a3:9b:6c:e7:09:ab:96:74:a9:5e:fd:64:63:ef:1d: 9e:5f:89:ac:bd:f7:0d:64:92:bd:02:77:d5:d2:93:38:2f:73: e6:57:5c:d5:fc:4a:72:52:28:17:6e:6d:84:46:e5:a9:de:69: 27:2b:6a:24:c8:7a:91:8e:b0:c3:99:87:44:25:7a:2c:01:04: 8a:0c:42:be:29:90:10:ce:e4:4d:71:1a:c6:19:63:19:ad:05: e6:12:b5:60:a4:ff:24:8a:47:5f:c7:a7:46:56:2c:28:af:d2: b3:8c:b3:95:61:1b:11:98:31:1b:89:23:ae:5a:25:5d:91:ec: d1:05:f7:39:cc:ec:f8:75:de:40:a7:aa:21:3e:35:dd:52:8e: 65:bf:f6:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26t+ckY3b0HKmcZ60ALF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm NzY0ZmEwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDJmNTVlNWMyMzRkZTI1OTRlODE0YzViNGZmODA3NWNlZTAxNTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtfXdMTuWvnQ1MJjZOxIk10DJOpJ K5eBoV7/0012fs90JL3mOSW9dRyX7f2AoOGCvHftZPYmAbvrdDDQAfDiaYsQu3U3 25VwL9SBOm79WXxStrzqDUP1sBP3P4AfEtjUwBrMoGfdk0QtEauVS5WL1QJSlWBg oLvzxFzZ+RhyUQGE1NMHfo0BaIj2jNYbW1LDvjisNoqKmV3KR1VRhHUWnXIIVs4j bLXdLzK45EJQLskgwPCwN4bao1eWuUO2Qb7fhPu/Sk3aQMszk7Gymiv7/zSeCEoa R6UBbBrDJxbtJ51BRNAXNtX6SsKFAjIGBkZb1J04MSyhDDJ7xwroYjhloQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA0vVeXCNN4llOgUxbT/gHXO4BUvMB8GA1UdIwQY MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt YjBjNzRiNzZlMTgyLzEvRFM5VjVjSTAzaVdVNkJURnRQLUFkYzdnRlM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUQvMA0G CSqGSIb3DQEBCwUAA4IBAQBOGkGqeHiFhjxpc6795m0TyKdW7pAgMm5pR17MRW/L gR/uqVCn9vJq+Huk/bl6VcAPchy+RQmZFX41R+KSPocYqfcTBU8/mneiitdReHBG rmesvELEI5PzLWHOTDdKYrJ0g6IPhY7FdTNsggFJI+Ojm2znCauWdKle/WRj7x2e X4msvfcNZJK9AnfV0pM4L3PmV1zV/EpyUigXbm2ERuWp3mknK2okyHqRjrDDmYdE JXosAQSKDEK+KZAQzuRNcRrGGWMZrQXmErVgpP8kikdfx6dGViwor9KzjLOVYRsR mDEbiSOuWiVdkezRBfc5zOz4dd5Ap6ohPjXdUo5lv/YG -----END CERTIFICATE-----Generated at Sat Jan 17 08:18:59 2026 by rpki-client