This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/_KbUElUf-kiJtWzmpDSNHdJCbc0.roa File: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (raw, json) Hash identifier: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc= Subject key identifier: FC:A6:D4:12:55:1F:FA:48:89:B5:6C:E6:A4:34:8D:1D:D2:42:6D:CD Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a Certificate serial: 019B7AC87AAF73770F891F8647DF0F2BA27E Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/_KbUElUf-kiJtWzmpDSNHdJCbc0.roa Signing time: Thu 01 Jan 2026 18:18:37 +0000 ROA not before: Thu 01 Jan 2026 18:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.9.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:7a:af:73:77:0f:89:1f:86:47:df:0f:2b:a2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a Validity Not Before: Jan 1 18:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fca6d412551ffa4889b56ce6a4348d1dd2426dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:32:e4:f8:17:0c:88:ad:20:09:00:dd:cb: c1:10:33:c9:4a:c3:ca:fe:d4:04:59:17:d3:17:67: 40:55:90:7a:22:a0:ae:78:e3:37:ef:af:c4:4a:fc: 02:a8:2c:77:22:db:db:51:d4:4a:2b:92:59:c3:5f: e1:4c:46:f6:b3:d9:15:59:ac:ca:e0:3d:14:79:70: 2d:21:6f:34:b0:24:14:b4:ba:17:22:65:19:d6:a5: d9:4a:ec:9a:31:35:f5:9b:1d:81:4d:cb:5a:ab:91: 1b:32:7d:5c:c9:b1:0d:90:f3:55:22:6c:bb:9b:ca: ad:5c:2b:73:3e:64:23:77:4c:b7:97:77:b5:57:f6: 02:ee:a2:ad:f9:37:42:bf:38:16:07:c9:9a:23:0c: 24:23:11:64:2a:9b:2e:f4:4e:28:a4:6b:fa:4c:4d: 3b:f1:b5:64:67:a1:d5:bd:59:97:af:d6:8d:e1:ce: 6a:18:c1:56:e4:49:df:35:18:49:48:a1:a1:1c:80: 6b:1d:4c:a3:c6:8e:83:3c:2f:6e:41:a1:e7:2e:96: d3:80:ef:74:7d:a5:88:9b:26:f1:eb:5f:e4:8b:1f: 68:6b:f8:59:c7:9e:c8:16:91:68:c9:61:c6:f3:50: 25:af:5f:8a:23:81:f1:04:ed:f3:42:a7:fd:df:28: c1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A6:D4:12:55:1F:FA:48:89:B5:6C:E6:A4:34:8D:1D:D2:42:6D:CD X509v3 Authority Key Identifier: keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/_KbUElUf-kiJtWzmpDSNHdJCbc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.141.0/24 Signature Algorithm: sha256WithRSAEncryption 44:9a:01:08:a9:45:ed:2b:59:46:03:f4:7e:6a:a4:73:9f:74: 3d:44:bd:cb:5a:d5:55:ac:90:87:b8:f3:10:30:cb:f3:ba:bc: fe:38:27:de:60:ef:96:16:65:d2:85:31:e8:8d:2b:90:df:6c: 0c:5b:3b:27:cb:f3:ba:b0:cb:dd:71:e6:17:c7:44:33:e5:d3: e5:b1:88:e6:50:6d:6b:73:1b:ed:46:13:5c:5f:e0:9e:0e:7b: 90:15:fb:64:da:6a:bd:13:4d:0e:93:10:c2:52:5c:e7:37:6d: 65:be:51:3c:ce:23:40:43:8d:c5:a8:66:0d:4c:7c:cb:1d:90: 81:77:13:2d:59:76:7f:c6:54:6b:f2:4a:1a:ed:45:a9:55:d5: 6c:73:ce:48:3b:c3:98:da:4b:b0:3b:aa:28:c4:28:75:a7:85: 93:94:fd:82:8a:dc:cc:da:83:22:99:5e:0d:84:ba:8b:d3:cc: ce:78:0c:b3:65:94:38:ec:bb:2d:23:de:b6:17:e0:86:ee:ec: ad:1a:77:be:6e:fe:7d:ae:e7:89:7b:b2:ad:a1:27:8a:14:61: dc:6f:8b:c8:29:2d:0b:e8:3d:9e:9d:ad:51:ec:9b:39:50:7a: 94:4b:41:98:bb:67:9e:14:4c:89:58:c1:4c:75:f9:58:bd:3f: b7:8c:de:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yHqvc3cPiR+GR98PK6J+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz YThhM2EwHhcNMjYwMTAxMTgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2E2ZDQxMjU1MWZmYTQ4ODliNTZjZTZhNDM0OGQxZGQyNDI2ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye0y5PgXDIitIAkA3cvBEDPJSsPK /tQEWRfTF2dAVZB6IqCueOM376/ESvwCqCx3ItvbUdRKK5JZw1/hTEb2s9kVWazK 4D0UeXAtIW80sCQUtLoXImUZ1qXZSuyaMTX1mx2BTctaq5EbMn1cybENkPNVImy7 m8qtXCtzPmQjd0y3l3e1V/YC7qKt+TdCvzgWB8maIwwkIxFkKpsu9E4opGv6TE07 8bVkZ6HVvVmXr9aN4c5qGMFW5EnfNRhJSKGhHIBrHUyjxo6DPC9uQaHnLpbTgO90 faWImybx61/kix9oa/hZx57IFpFoyWHG81Alr1+KI4HxBO3zQqf93yjBrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPym1BJVH/pIibVs5qQ0jR3SQm3NMB8GA1UdIwQY MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt ZWI2N2Y4ZTYzMmI4LzEvX0tiVUVsVWYta2lKdFd6bXBEU05IZEpDYmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYtZWI2N2Y4ZTYzMmI4 LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQmNMA0G CSqGSIb3DQEBCwUAA4IBAQBEmgEIqUXtK1lGA/R+aqRzn3Q9RL3LWtVVrJCHuPMQ MMvzurz+OCfeYO+WFmXShTHojSuQ32wMWzsny/O6sMvdceYXx0Qz5dPlsYjmUG1r cxvtRhNcX+CeDnuQFftk2mq9E00OkxDCUlznN21lvlE8ziNAQ43FqGYNTHzLHZCB dxMtWXZ/xlRr8koa7UWpVdVsc85IO8OY2kuwO6ooxCh1p4WTlP2CitzM2oMimV4N hLqL08zOeAyzZZQ47LstI962F+CG7uytGne+bv59rueJe7KtoSeKFGHcb4vIKS0L 6D2ena1R7Js5UHqUS0GYu2eeFEyJWMFMdflYvT+3jN7Q -----END CERTIFICATE-----Generated at Sun Jan 18 16:37:48 2026 by rpki-client