This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/_9PpK5enVTYXgtpyPQs5NXw-z6E.roa File: _9PpK5enVTYXgtpyPQs5NXw-z6E.roa (raw, json) Hash identifier: DKNSEQDwXh2gm2BawJYlHDwtR/5I3QKMcQS195/3rWw= Subject key identifier: FF:D3:E9:2B:97:A7:55:36:17:82:DA:72:3D:0B:39:35:7C:3E:CF:A1 Certificate issuer: /CN=4220475b680a18e4da34b2a289906283e285d82d Certificate serial: 019B76EAD585F5B2B8B75CB6BE41B6FE7FE3 Authority key identifier: 42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/_9PpK5enVTYXgtpyPQs5NXw-z6E.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8551 IP address blocks: 185.235.246.0/24 maxlen: 24 2a12:dbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.mft rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d5:85:f5:b2:b8:b7:5c:b6:be:41:b6:fe:7f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4220475b680a18e4da34b2a289906283e285d82d Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffd3e92b97a755361782da723d0b39357c3ecfa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:78:06:e9:ce:54:7d:1e:c5:b7:d8:44:26: 67:89:31:27:4c:ac:2e:cd:11:e1:bb:0c:4a:65:20: f0:16:51:de:d3:c6:0b:15:fe:54:d6:c1:a2:1b:7e: 2b:e8:e4:9e:96:06:90:18:fe:4a:1b:ce:44:9a:c7: 68:44:7b:25:2b:b9:f6:59:a6:a5:c2:cd:6a:3d:c5: 41:2f:17:2e:d1:41:ce:92:db:5e:8e:d9:70:fc:5d: 79:6c:fb:c7:b8:e2:8b:68:2d:05:da:0a:35:81:7e: 87:5a:18:67:1b:bd:37:31:fb:5e:e1:6c:61:88:bf: f5:c3:f7:e9:56:c9:1a:1e:ad:33:0c:38:98:c4:a2: 29:86:9a:91:7e:68:b5:c2:b3:73:b0:70:b8:27:76: 0f:63:b3:f4:6f:3c:ba:dc:23:cf:a8:66:09:bd:c5: 09:0c:52:16:ff:a6:1b:dc:91:27:e1:0c:6b:69:bd: cf:b6:9c:f3:7b:e5:ba:59:1a:30:3e:3c:46:2e:34: 7e:72:86:75:67:88:ab:24:a8:83:c3:8d:f4:fb:38: 29:b2:86:59:a9:d4:83:82:d8:35:e3:9b:83:43:7c: 70:e9:d1:1e:c7:68:be:b3:6f:14:4a:82:52:f1:cc: 78:c1:7c:22:d4:06:e0:a6:66:9e:31:68:35:df:1b: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D3:E9:2B:97:A7:55:36:17:82:DA:72:3D:0B:39:35:7C:3E:CF:A1 X509v3 Authority Key Identifier: keyid:42:20:47:5B:68:0A:18:E4:DA:34:B2:A2:89:90:62:83:E2:85:D8:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiBHW2gKGOTaNLKiiZBig-KF2C0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/_9PpK5enVTYXgtpyPQs5NXw-z6E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/147688-993a-40ff-bb6a-45b8e49bd143/1/QiBHW2gKGOTaNLKiiZBig-KF2C0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.235.246.0/24 IPv6: 2a12:dbc0::/32 Signature Algorithm: sha256WithRSAEncryption 4a:9a:07:e5:ee:b3:6c:d3:9c:ad:31:f2:09:82:f7:65:1c:4c: 73:e1:88:78:d6:82:a0:da:03:14:c0:e1:89:0d:ac:a1:24:b5: b7:16:4f:e7:5d:c5:0c:cb:f4:06:20:57:85:79:c0:ce:2b:c0: 26:3c:a6:9d:3e:22:7a:56:02:81:6d:63:c7:b1:74:a5:94:ae: e9:9a:6f:b9:af:16:9a:56:59:49:56:07:7e:64:b9:48:8e:db: 30:47:3f:c9:0c:5f:32:69:da:82:1c:e8:b2:c5:5a:72:69:8a: 76:ea:2b:10:08:88:6b:5b:c2:ef:c6:6c:14:58:42:b4:96:d8: d7:2c:ef:66:20:02:4b:2a:50:86:1a:28:21:5d:70:19:e9:50: 8e:27:4d:1a:b5:26:16:6f:4f:e9:58:84:76:ab:83:45:b5:3b: a9:81:f0:4b:bf:c2:15:61:d6:86:91:c0:b1:ae:a9:ce:52:5b: 0e:f2:97:7d:ab:09:e0:1c:0a:70:cd:aa:d8:02:5c:22:b4:b0: 9e:96:d8:b8:40:6c:8e:85:6d:52:17:fc:df:bd:cd:8e:d1:ec: b2:c7:9b:59:73:08:36:fa:bd:00:a1:a4:ec:50:31:76:70:0f: 36:e7:c4:a0:6b:7d:31:8d:11:5a:a7:62:fc:76:fd:ad:7a:fb: 63:76:d4:43 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26tWF9bK4t1y2vkG2/n/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyMjA0NzViNjgwYTE4ZTRkYTM0YjJhMjg5OTA2MjgzZTI4 NWQ4MmQwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmQzZTkyYjk3YTc1NTM2MTc4MmRhNzIzZDBiMzkzNTdjM2VjZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDJ4BunOVH0exbfYRCZniTEnTKwu zRHhuwxKZSDwFlHe08YLFf5U1sGiG34r6OSelgaQGP5KG85EmsdoRHslK7n2Waal ws1qPcVBLxcu0UHOkttejtlw/F15bPvHuOKLaC0F2go1gX6HWhhnG703Mfte4Wxh iL/1w/fpVskaHq0zDDiYxKIphpqRfmi1wrNzsHC4J3YPY7P0bzy63CPPqGYJvcUJ DFIW/6Yb3JEn4Qxrab3Ptpzze+W6WRowPjxGLjR+coZ1Z4irJKiDw430+zgpsoZZ qdSDgtg145uDQ3xw6dEex2i+s28USoJS8cx4wXwi1AbgpmaeMWg13xtYtwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP/T6SuXp1U2F4Lacj0LOTV8Ps+hMB8GA1UdIwQY MBaAFEIgR1toChjk2jSyoomQYoPihdgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWlCSFcyZ0tHT1RhTkxLaWlaQmlnLUtGMkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNDc2ODgtOTkzYS00MGZmLWJiNmEt NDViOGU0OWJkMTQzLzEvXzlQcEs1ZW5WVFlYZ3RweVBRczVOWHctejZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xNDc2ODgtOTkzYS00MGZmLWJiNmEtNDViOGU0OWJkMTQz LzEvUWlCSFcyZ0tHT1RhTkxLaWlaQmlnLUtGMkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuev2MA0E AgACMAcDBQAqEtvAMA0GCSqGSIb3DQEBCwUAA4IBAQBKmgfl7rNs05ytMfIJgvdl HExz4Yh41oKg2gMUwOGJDayhJLW3Fk/nXcUMy/QGIFeFecDOK8AmPKadPiJ6VgKB bWPHsXSllK7pmm+5rxaaVllJVgd+ZLlIjtswRz/JDF8yadqCHOiyxVpyaYp26isQ CIhrW8LvxmwUWEK0ltjXLO9mIAJLKlCGGighXXAZ6VCOJ00atSYWb0/pWIR2q4NF tTupgfBLv8IVYdaGkcCxrqnOUlsO8pd9qwngHApwzarYAlwitLCelti4QGyOhW1S F/zfvc2O0eyyx5tZcwg2+r0AoaTsUDF2cA8258Sga30xjRFap2L8dv2tevtjdtRD -----END CERTIFICATE-----Generated at Sat Feb 7 15:11:06 2026 by rpki-client