This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/9X-2FIRMAaSRhZQ-wkavy4syAOk.roa File: 9X-2FIRMAaSRhZQ-wkavy4syAOk.roa (raw, json) Hash identifier: GKpv6cKMd+W76zaEdJM3JhhiCbwjlSXMqstxMp4WwMU= Subject key identifier: F5:7F:B6:14:84:4C:01:A4:91:85:94:3E:C2:46:AF:CB:8B:32:00:E9 Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c Certificate serial: 019B7DCB337539877EEDF6D8155A324D599F Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/9X-2FIRMAaSRhZQ-wkavy4syAOk.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 185.55.132.0/24 maxlen: 24 185.55.133.0/24 maxlen: 24 185.55.134.0/24 maxlen: 24 185.55.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:33:75:39:87:7e:ed:f6:d8:15:5a:32:4d:59:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f57fb614844c01a49185943ec246afcb8b3200e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:03:5b:40:da:70:7e:21:55:36:25:19:41:7e: 58:7f:cd:2d:61:34:ff:2e:c2:7b:bb:c0:b8:41:f9: 86:20:60:c2:3c:24:a7:d1:68:90:de:ac:31:c1:6f: f2:c4:72:fc:c5:4a:33:d7:00:f3:dc:2e:7e:06:b9: c4:02:26:47:d2:95:b6:86:63:f3:52:da:c1:f9:06: 90:b5:bf:92:c4:ae:01:7c:be:3f:08:d9:4c:b6:83: 63:09:b1:a8:f7:5b:81:95:40:1c:8e:46:cd:d3:8d: 3f:d3:68:e6:c2:d0:94:2d:fd:8a:4d:cf:41:dd:18: ff:a6:cf:7d:f4:16:ed:85:49:92:0e:6d:c0:30:a7: 2c:60:32:21:49:ee:df:df:17:b7:5b:6e:38:75:81: 39:8d:c6:64:54:e5:e1:5d:59:47:51:b1:bb:5d:08: e8:be:74:85:cc:7e:d9:b0:43:f8:ee:18:d0:7d:95: ca:1f:90:2d:8b:44:22:66:b4:37:c1:07:af:62:6a: c2:02:48:9b:56:d0:87:bc:29:9e:ae:de:93:8a:f3: 0d:88:6e:b2:59:91:4a:f5:9d:52:b6:76:86:88:47: f6:9a:2b:cd:db:08:4c:d2:e4:f7:75:9f:c4:6e:d8: 07:a7:0b:eb:01:38:7b:ae:90:c8:c2:80:23:a8:41: d2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7F:B6:14:84:4C:01:A4:91:85:94:3E:C2:46:AF:CB:8B:32:00:E9 X509v3 Authority Key Identifier: keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/9X-2FIRMAaSRhZQ-wkavy4syAOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.55.132.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:71:fb:e1:c5:0c:18:c7:15:3a:8a:c4:e2:7d:43:c9:52:e5: 09:9b:5f:cd:01:ea:02:22:f3:8d:89:49:d9:05:30:89:5f:61: d9:ff:b4:a4:75:32:c7:19:e8:0d:7c:82:ad:40:e3:88:ec:7c: 58:06:c2:6d:77:64:01:bc:cf:29:55:38:fe:2f:01:41:53:b0: f8:52:89:0b:b1:f6:66:d1:b3:93:46:9e:c7:d7:64:54:65:de: f1:16:d0:bd:16:3d:bb:03:1a:e8:aa:4f:02:8d:b5:5e:63:c5: ec:57:fb:3f:09:d2:52:a8:9d:8f:17:f8:b0:c7:ff:d4:79:0e: 18:c2:68:02:0b:cb:e7:a4:8c:01:f3:97:63:ff:0e:97:13:62: 3f:45:09:a8:0c:67:f1:a9:0a:b9:3e:77:1e:64:cc:75:1e:38: 9e:cd:12:c6:fe:b9:c8:dc:06:46:82:8d:a4:2d:34:1f:51:8e: 23:50:1e:0b:ff:75:ec:90:b7:b5:0c:c1:61:6d:f0:b8:32:7b: 71:d7:9e:ed:42:fc:12:47:a6:5f:71:6d:3b:ac:d1:49:8a:3d: 88:a4:53:a1:ec:71:d8:68:c8:97:f9:28:3d:91:9e:f9:09:82: d3:e6:04:f8:3f:ec:b3:e7:c3:51:91:14:a2:99:ae:9e:34:2b: 35:9c:bb:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzN1OYd+7fbYFVoyTVmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlOGIxMDcxMTMxNzYzYWFkYWIxZjI5NGUzN2NkNTBhZGFj MDkzOWMwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTdmYjYxNDg0NGMwMWE0OTE4NTk0M2VjMjQ2YWZjYjhiMzIwMGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wNbQNpwfiFVNiUZQX5Yf80tYTT/ LsJ7u8C4QfmGIGDCPCSn0WiQ3qwxwW/yxHL8xUoz1wDz3C5+BrnEAiZH0pW2hmPz UtrB+QaQtb+SxK4BfL4/CNlMtoNjCbGo91uBlUAcjkbN040/02jmwtCULf2KTc9B 3Rj/ps999BbthUmSDm3AMKcsYDIhSe7f3xe3W244dYE5jcZkVOXhXVlHUbG7XQjo vnSFzH7ZsEP47hjQfZXKH5Ati0QiZrQ3wQevYmrCAkibVtCHvCmert6TivMNiG6y WZFK9Z1StnaGiEf2mivN2whM0uT3dZ/EbtgHpwvrATh7rpDIwoAjqEHSEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPV/thSETAGkkYWUPsJGr8uLMgDpMB8GA1UdIwQY MBaAFI6LEHETF2Oq2rHylON81QrawJOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAt MWM5NGNiN2RmZWIzLzEvOVgtMkZJUk1BYVNSaFpRLXdrYXZ5NHN5QU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zMzMzOWYtNmQ5OC00YjVmLWFiNjAtMWM5NGNiN2RmZWIz LzEvam9zUWNSTVhZNnJhc2ZLVTQzelZDdHJBazV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTeEMA0G CSqGSIb3DQEBCwUAA4IBAQA6cfvhxQwYxxU6isTifUPJUuUJm1/NAeoCIvONiUnZ BTCJX2HZ/7SkdTLHGegNfIKtQOOI7HxYBsJtd2QBvM8pVTj+LwFBU7D4UokLsfZm 0bOTRp7H12RUZd7xFtC9Fj27Axroqk8CjbVeY8XsV/s/CdJSqJ2PF/iwx//UeQ4Y wmgCC8vnpIwB85dj/w6XE2I/RQmoDGfxqQq5PnceZMx1HjiezRLG/rnI3AZGgo2k LTQfUY4jUB4L/3XskLe1DMFhbfC4Mntx157tQvwSR6ZfcW07rNFJij2IpFOh7HHY aMiX+Sg9kZ75CYLT5gT4P+yz58NRkRSima6eNCs1nLvf -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:05 2026 by rpki-client