This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa File: DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa (raw, json) Hash identifier: ie8rWldwV9B67n5/EffGRxDtlu39UUHKQ/tSe/j67xQ= Subject key identifier: 0D:73:5F:2B:D8:83:6C:0C:9A:72:F1:8A:A3:C3:A1:0B:C8:21:E9:6B Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da Certificate serial: 019B7B35CA5DCB5A84546DB21E208C4C0A32 Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa Signing time: Thu 01 Jan 2026 20:18:01 +0000 ROA not before: Thu 01 Jan 2026 20:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137409 IP address blocks: 185.211.8.0/24 maxlen: 24 185.211.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ca:5d:cb:5a:84:54:6d:b2:1e:20:8c:4c:0a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da Validity Not Before: Jan 1 20:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d735f2bd8836c0c9a72f18aa3c3a10bc821e96b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dc:2d:60:32:df:3e:38:a0:e6:2c:da:d2:e4: 87:f1:14:f8:5c:31:d5:4e:78:19:d3:bb:30:a5:c3: 32:c5:e4:69:4f:c5:ea:51:ce:4f:94:5f:06:03:b9: ed:ab:33:4c:ec:70:09:ad:83:92:4e:82:ba:03:6b: 5b:f1:5d:83:7e:e4:21:b9:96:de:70:35:82:06:3d: 27:c8:c9:5b:4e:eb:e1:f6:fe:7f:66:de:d9:f5:69: 76:fa:99:8b:41:03:65:33:ed:1e:1b:f0:35:d1:ed: 7b:aa:3e:1d:f0:aa:ab:8b:c8:4c:2c:22:3b:28:15: 05:a6:22:eb:e6:e7:20:3b:9d:d3:c8:d3:df:2d:f1: c5:57:78:84:f4:25:65:ea:1d:9c:be:ce:fb:26:f6: 35:c0:15:7f:62:57:86:de:0c:a9:13:e3:e3:2f:f8: eb:cc:66:af:a3:eb:60:c4:2b:b2:70:77:76:eb:75: b1:46:24:fa:87:5f:71:21:c6:d3:a1:45:4b:39:15: 08:3c:92:d5:31:f6:f1:d8:92:8b:64:38:f7:19:97: f2:7d:39:13:16:66:5c:ba:74:6a:e4:b3:20:8f:f1: 78:66:db:a7:21:74:ca:e0:bd:58:6a:74:61:a6:63: 22:8f:63:19:e1:6e:ab:40:53:21:9f:48:7d:2a:88: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:73:5F:2B:D8:83:6C:0C:9A:72:F1:8A:A3:C3:A1:0B:C8:21:E9:6B X509v3 Authority Key Identifier: keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.8.0/23 Signature Algorithm: sha256WithRSAEncryption 48:7e:1e:f5:c9:36:1b:9a:29:b5:9a:ee:0b:75:f3:c2:55:b6: 8d:01:bf:e2:7b:ed:d4:cb:48:61:f8:c1:49:4e:ac:b8:50:fd: fe:f9:1a:c5:fd:9f:51:94:2f:d4:38:00:5f:4f:6f:aa:2c:9f: c8:66:95:62:5b:b5:16:98:66:b6:8d:2a:63:88:f5:22:89:cf: 6b:b8:d5:21:a5:10:26:00:ec:41:03:5b:8d:01:c3:b2:65:54: 0e:04:2f:cb:a8:12:f2:45:ba:dd:10:2a:6b:2b:47:e2:b0:94: 4b:7a:07:a0:09:27:6e:58:5c:82:83:2e:db:87:03:f4:e2:45: 1c:fc:9a:e4:fa:ca:f2:cd:5d:c7:16:bb:a5:8a:ff:ec:d7:06: 37:dd:70:d3:df:4f:62:ce:6b:b7:c1:80:96:ac:ef:1b:d6:dd: 96:91:f1:cc:17:31:60:e0:04:a9:3e:63:ae:76:3c:c5:8d:7f: 23:dd:41:30:30:84:47:d0:5e:0f:f0:b2:d9:ce:ff:34:9e:af: 4d:e2:19:f8:31:f3:a2:19:fd:ed:5a:40:38:0d:42:27:88:6c: 90:a8:32:b9:d1:be:f7:75:99:77:3b:01:5c:d6:73:fd:a6:67: 64:83:a4:88:d8:de:35:00:70:52:9d:06:b2:34:ea:6e:8a:49: 08:37:dc:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ncpdy1qEVG2yHiCMTAoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNjhlMzZiYTU3N2VkNDdlNjkyODcyOTY5MTk5MWU0ZTdm MjM1ZGEwHhcNMjYwMTAxMjAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDczNWYyYmQ4ODM2YzBjOWE3MmYxOGFhM2MzYTEwYmM4MjFlOTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNwtYDLfPjig5iza0uSH8RT4XDHV TngZ07swpcMyxeRpT8XqUc5PlF8GA7ntqzNM7HAJrYOSToK6A2tb8V2DfuQhuZbe cDWCBj0nyMlbTuvh9v5/Zt7Z9Wl2+pmLQQNlM+0eG/A10e17qj4d8Kqri8hMLCI7 KBUFpiLr5ucgO53TyNPfLfHFV3iE9CVl6h2cvs77JvY1wBV/YleG3gypE+PjL/jr zGavo+tgxCuycHd263WxRiT6h19xIcbToUVLORUIPJLVMfbx2JKLZDj3GZfyfTkT FmZcunRq5LMgj/F4ZtunIXTK4L1YanRhpmMij2MZ4W6rQFMhn0h9KojriQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1zXyvYg2wMmnLxiqPDoQvIIelrMB8GA1UdIwQY MBaAFOFo42uld+1H5pKHKWkZkeTn8jXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny85YTI5N2QtY2VlNS00YzkzLWIyNTgt Y2I0YmFiZTlkYzhmLzEvRFhOZks5aURiQXlhY3ZHS284T2hDOGdoNldzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny85YTI5N2QtY2VlNS00YzkzLWIyNTgtY2I0YmFiZTlkYzhm LzEvNFdqamE2VjM3VWZta29jcGFSbVI1T2Z5TmRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudMIMA0G CSqGSIb3DQEBCwUAA4IBAQBIfh71yTYbmim1mu4LdfPCVbaNAb/ie+3Uy0hh+MFJ Tqy4UP3++RrF/Z9RlC/UOABfT2+qLJ/IZpViW7UWmGa2jSpjiPUiic9ruNUhpRAm AOxBA1uNAcOyZVQOBC/LqBLyRbrdECprK0fisJRLegegCSduWFyCgy7bhwP04kUc /Jrk+sryzV3HFruliv/s1wY33XDT309izmu3wYCWrO8b1t2WkfHMFzFg4ASpPmOu djzFjX8j3UEwMIRH0F4P8LLZzv80nq9N4hn4MfOiGf3tWkA4DUIniGyQqDK50b73 dZl3OwFc1nP9pmdkg6SI2N41AHBSnQayNOpuikkIN9zk -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:40 2026 by rpki-client