This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/0O9vWC_vw7OUH6qBouhrAzEg9nc.roa File: 0O9vWC_vw7OUH6qBouhrAzEg9nc.roa (raw, json) Hash identifier: ikuJBuSdoGWkG2wBAzVqA4TgxffZfq78hbpeayBzWqc= Subject key identifier: D0:EF:6F:58:2F:EF:C3:B3:94:1F:AA:81:A2:E8:6B:03:31:20:F6:77 Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e Certificate serial: 019B78A26B1F9F2D0F59C0D8373127AB2924 Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/0O9vWC_vw7OUH6qBouhrAzEg9nc.roa Signing time: Thu 01 Jan 2026 08:17:48 +0000 ROA not before: Thu 01 Jan 2026 08:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.230.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6b:1f:9f:2d:0f:59:c0:d8:37:31:27:ab:29:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e Validity Not Before: Jan 1 08:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0ef6f582fefc3b3941faa81a2e86b033120f677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:aa:6f:6c:79:d1:9b:53:5c:ba:3d:8b:34:0b: 11:df:fe:18:b2:3b:5b:6a:0f:ca:dd:79:40:0c:79: a4:38:20:81:c7:f5:4b:1f:b6:93:aa:d4:94:b6:bc: 57:b8:01:a9:68:61:1f:2d:26:55:c6:a6:a3:9b:5f: 74:1e:09:5f:aa:84:8f:ef:8f:ef:97:76:2b:44:09: 45:7e:76:f5:cf:27:77:4f:e7:10:64:3d:0c:7d:c6: 22:64:93:9c:6b:fb:01:75:03:d5:b1:7e:d6:d0:a3: 6f:cf:1f:5c:73:6d:1f:21:0a:7f:3b:69:26:52:e7: c2:55:9f:bf:e4:1b:8d:d1:13:40:d6:6f:9d:b2:aa: a1:72:3c:8e:23:f9:26:3a:e6:b1:ed:60:0c:17:6b: 1e:fa:ac:bd:0f:9f:c2:93:06:02:68:a4:7a:f4:b2: a3:ac:ad:92:89:89:61:07:37:4c:f1:0d:d9:08:bd: 8d:ce:3d:ab:ed:26:09:ca:1b:30:5d:41:f7:9a:0e: fb:27:ee:53:df:d9:51:5a:fd:b3:0a:f6:62:5e:99: 38:aa:15:55:19:7d:1f:4d:ee:13:5e:75:ad:fa:66: 42:e5:df:98:91:07:d8:c2:71:5b:78:cb:0e:90:fb: 6a:b2:e7:95:f1:a3:76:34:b5:7c:82:e5:df:27:55: f0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EF:6F:58:2F:EF:C3:B3:94:1F:AA:81:A2:E8:6B:03:31:20:F6:77 X509v3 Authority Key Identifier: keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/0O9vWC_vw7OUH6qBouhrAzEg9nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.104.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:8b:bc:55:68:7f:fa:e4:bf:d4:8b:b7:6d:d6:39:77:c4:21: 25:13:23:53:ed:11:ee:4c:7a:67:56:4a:80:8d:f3:b6:3c:31: 74:03:a9:3e:16:68:b3:f7:ea:ef:8e:77:fd:c5:2f:b3:53:4a: 16:15:e3:a3:33:dc:38:17:14:ad:b2:71:b4:4c:38:65:af:16: 57:ff:d2:ba:e4:ca:36:46:74:d4:d4:e3:17:dd:ea:6f:ec:89: 95:d8:33:e4:c3:53:4b:5d:b2:7d:8d:0f:25:79:d9:82:9e:08: 9e:dc:fe:31:c0:61:6c:d4:a8:67:1e:b2:96:c4:b1:44:e2:3e: 3d:9b:b9:f6:8c:b4:63:82:97:76:9c:dd:85:f9:4a:65:77:54: 3b:08:30:83:08:1b:aa:c1:9b:27:76:d5:08:5b:e6:ad:31:fc: 0d:e0:2a:a9:3b:eb:12:b2:f4:c1:af:c5:d9:af:82:b6:a2:49: 21:68:2a:9c:11:ac:1a:98:23:08:97:41:97:5b:1b:89:a0:ad: e3:21:a5:76:cd:95:1a:0f:08:8a:74:ca:6a:97:e4:59:fd:b4: 6b:65:5c:68:cd:41:65:78:c0:e7:83:1b:d4:00:01:88:9d:30: b3:e1:2d:15:31:f0:c3:61:f1:37:b4:b9:35:c3:e9:a2:ee:79: 48:bc:2b:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4omsfny0PWcDYNzEnqykkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMTFmMDQwM2U5NzQ2NWEwMWRkMTQ1YmMxNTA3YmU1NjU3 MTBkNGUwHhcNMjYwMTAxMDgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGVmNmY1ODJmZWZjM2IzOTQxZmFhODFhMmU4NmIwMzMxMjBmNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6pvbHnRm1Ncuj2LNAsR3/4Ysjtb ag/K3XlADHmkOCCBx/VLH7aTqtSUtrxXuAGpaGEfLSZVxqajm190HglfqoSP74/v l3YrRAlFfnb1zyd3T+cQZD0MfcYiZJOca/sBdQPVsX7W0KNvzx9cc20fIQp/O2km UufCVZ+/5BuN0RNA1m+dsqqhcjyOI/kmOuax7WAMF2se+qy9D5/CkwYCaKR69LKj rK2SiYlhBzdM8Q3ZCL2Nzj2r7SYJyhswXUH3mg77J+5T39lRWv2zCvZiXpk4qhVV GX0fTe4TXnWt+mZC5d+YkQfYwnFbeMsOkPtqsueV8aN2NLV8guXfJ1XwmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNDvb1gv78OzlB+qgaLoawMxIPZ3MB8GA1UdIwQY MBaAFCIR8EA+l0ZaAd0UW8FQe+VlcQ1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NWI0MGQtZTkwMC00ZDlmLWFmMDUt MzE2YzdhOWNkNmI2LzEvME85dldDX3Z3N09VSDZxQm91aHJBekVnOW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS84NWI0MGQtZTkwMC00ZDlmLWFmMDUtMzE2YzdhOWNkNmI2 LzEvSWhId1FENlhSbG9CM1JSYndWQjc1V1Z4RFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueZoMA0G CSqGSIb3DQEBCwUAA4IBAQBsi7xVaH/65L/Ui7dt1jl3xCElEyNT7RHuTHpnVkqA jfO2PDF0A6k+Fmiz9+rvjnf9xS+zU0oWFeOjM9w4FxStsnG0TDhlrxZX/9K65Mo2 RnTU1OMX3epv7ImV2DPkw1NLXbJ9jQ8ledmCngie3P4xwGFs1KhnHrKWxLFE4j49 m7n2jLRjgpd2nN2F+Upld1Q7CDCDCBuqwZsndtUIW+atMfwN4CqpO+sSsvTBr8XZ r4K2okkhaCqcEawamCMIl0GXWxuJoK3jIaV2zZUaDwiKdMpql+RZ/bRrZVxozUFl eMDngxvUAAGInTCz4S0VMfDDYfE3tLk1w+mi7nlIvCt8 -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:29 2026 by rpki-client