This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/d9IYgCb4O0zZISXP4tK4QuK4cvs.roa File: d9IYgCb4O0zZISXP4tK4QuK4cvs.roa (raw, json) Hash identifier: jBG8EC6qVRrjvDS0o4yvkb3drCofFVHmM9LgSbzRM0s= Subject key identifier: 77:D2:18:80:26:F8:3B:4C:D9:21:25:CF:E2:D2:B8:42:E2:B8:72:FB Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649 Certificate serial: 019B791139DA1C600E3F29C141323303D2D8 Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/d9IYgCb4O0zZISXP4tK4QuK4cvs.roa Signing time: Thu 01 Jan 2026 10:18:50 +0000 ROA not before: Thu 01 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59545 IP address blocks: 185.159.248.0/22 maxlen: 24 185.159.248.0/23 maxlen: 24 185.159.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:39:da:1c:60:0e:3f:29:c1:41:32:33:03:d2:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77d2188026f83b4cd92125cfe2d2b842e2b872fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:90:30:ac:86:26:0a:33:85:b9:af:eb:64:52: 35:bb:fa:f7:07:85:00:e9:f9:df:f5:9e:82:78:e2: 7b:9d:ed:ff:dc:f9:3c:15:31:32:22:cd:ea:a2:0d: b6:26:c3:a9:5b:f6:19:29:f5:0b:4d:6b:20:be:7f: c9:0e:49:c5:54:ed:67:55:e8:d0:ef:85:8b:e9:ac: 0a:3a:35:89:f9:ca:8c:fb:f5:e7:a2:86:a5:66:7e: 83:64:5d:b8:d4:64:35:f7:cb:26:81:fc:45:1e:73: ac:72:f4:90:5b:ec:15:94:49:7c:45:6e:8f:e4:36: cc:55:4f:6e:2f:ea:9c:68:58:1d:bb:90:67:5c:e3: c9:6e:26:c5:a3:35:d9:41:88:06:90:98:e3:da:4f: 03:1d:b6:c3:dd:36:f6:28:b6:88:c7:2a:76:f8:dc: f3:1f:04:66:a3:b1:96:68:90:25:82:33:1e:18:d0: 3d:ff:3e:0f:9a:e9:a0:91:14:3e:2f:62:7c:32:dc: 0c:2c:c1:d3:8a:6d:80:b5:90:3e:78:0c:15:c0:12: 12:7b:0e:72:ba:13:38:12:75:e0:21:94:63:57:0d: 56:e2:c1:92:51:3b:a9:d7:15:c6:7d:44:b7:3c:d2: ce:28:e0:1f:1b:00:0a:23:d9:f4:9a:68:8a:d1:30: a0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D2:18:80:26:F8:3B:4C:D9:21:25:CF:E2:D2:B8:42:E2:B8:72:FB X509v3 Authority Key Identifier: keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/d9IYgCb4O0zZISXP4tK4QuK4cvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.248.0/22 Signature Algorithm: sha256WithRSAEncryption 33:47:df:63:11:2b:9f:11:0e:1d:1a:08:0f:7c:44:67:39:a1: cd:c4:7e:49:1b:8e:9f:55:b1:cb:b1:a4:34:12:51:dd:f2:d0: 0b:89:32:98:12:21:df:94:b8:09:b5:ba:9a:11:ce:f5:1a:1b: 7c:a7:fd:53:92:45:dc:6a:7f:e9:c0:a2:c7:ec:c6:0b:37:d4: 47:7c:1e:51:35:4b:b1:b6:ce:03:5e:22:d9:fb:92:32:ab:2d: 4c:68:50:5b:a6:26:57:43:e0:64:00:96:08:03:a6:e9:eb:24: 0f:eb:d4:c0:7f:18:fe:94:ff:6c:67:f9:f2:bf:4b:1f:83:0f: 44:4b:4c:65:51:c1:4c:9b:69:b3:7c:fb:39:f0:2a:ed:2a:73: 12:8d:58:62:be:93:ea:e9:88:3e:7d:12:11:69:ff:d9:e4:b6: 91:ac:81:38:16:f7:5b:98:3b:58:ea:0f:65:42:95:70:e3:93: 09:c3:ef:c1:43:ac:f1:8f:c1:bb:47:62:39:6b:63:85:87:c3: 48:15:68:88:82:37:7e:80:7c:76:80:de:ee:75:11:24:8b:de: c1:21:72:08:33:45:0c:58:64:d9:c5:4d:e8:8d:d2:c2:85:b5: 27:a5:f1:f5:01:6c:3f:9a:91:f0:d1:65:f4:32:0d:33:3f:ed: b3:a0:10:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETnaHGAOPynBQTIzA9LYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODhmYWUzNWI2NmI0ZGUyZTQxY2E1ZWUwNzdiNWVmMGI0 YWI2NDkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3N2QyMTg4MDI2ZjgzYjRjZDkyMTI1Y2ZlMmQyYjg0MmUyYjg3MmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JAwrIYmCjOFua/rZFI1u/r3B4UA 6fnf9Z6CeOJ7ne3/3Pk8FTEyIs3qog22JsOpW/YZKfULTWsgvn/JDknFVO1nVejQ 74WL6awKOjWJ+cqM+/XnooalZn6DZF241GQ198smgfxFHnOscvSQW+wVlEl8RW6P 5DbMVU9uL+qcaFgdu5BnXOPJbibFozXZQYgGkJjj2k8DHbbD3Tb2KLaIxyp2+Nzz HwRmo7GWaJAlgjMeGNA9/z4PmumgkRQ+L2J8MtwMLMHTim2AtZA+eAwVwBISew5y uhM4EnXgIZRjVw1W4sGSUTup1xXGfUS3PNLOKOAfGwAKI9n0mmiK0TCgZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHfSGIAm+DtM2SElz+LSuELiuHL7MB8GA1UdIwQY MBaAFKqI+uNbZrTeLkHKXuB3te8LSrZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzct YjkyY2I2MTEzMDM1LzEvZDlJWWdDYjRPMHpaSVNYUDR0SzRRdUs0Y3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzctYjkyY2I2MTEzMDM1 LzEvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ/4MA0G CSqGSIb3DQEBCwUAA4IBAQAzR99jESufEQ4dGggPfERnOaHNxH5JG46fVbHLsaQ0 ElHd8tALiTKYEiHflLgJtbqaEc71Ght8p/1TkkXcan/pwKLH7MYLN9RHfB5RNUux ts4DXiLZ+5Iyqy1MaFBbpiZXQ+BkAJYIA6bp6yQP69TAfxj+lP9sZ/nyv0sfgw9E S0xlUcFMm2mzfPs58CrtKnMSjVhivpPq6Yg+fRIRaf/Z5LaRrIE4FvdbmDtY6g9l QpVw45MJw+/BQ6zxj8G7R2I5a2OFh8NIFWiIgjd+gHx2gN7udREki97BIXIIM0UM WGTZxU3ojdLChbUnpfH1AWw/mpHw0WX0Mg0zP+2zoBB9 -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:25 2026 by rpki-client