This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9yoPaUhCStOTM3-c_SaSqB4RnZ0.roa File: 9yoPaUhCStOTM3-c_SaSqB4RnZ0.roa (raw, json) Hash identifier: oEqQojHh2aVK9IWAizqhwBRsxK4M9mlqa6pebuySDfE= Subject key identifier: F7:2A:0F:69:48:42:4A:D3:93:33:7F:9C:FD:26:92:A8:1E:11:9D:9D Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019B7F15057354016B461D5D761AA5767056 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9yoPaUhCStOTM3-c_SaSqB4RnZ0.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 185.179.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:05:73:54:01:6b:46:1d:5d:76:1a:a5:76:70:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f72a0f6948424ad393337f9cfd2692a81e119d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:36:c1:f7:2e:90:9b:90:91:e3:80:05:75: c8:43:8a:0a:9d:34:42:fd:39:0b:44:b4:c1:b9:d4: 74:0c:19:a8:dd:2a:c0:f7:a0:33:b5:74:9f:b4:0d: fe:18:a0:a9:97:9c:a6:2e:bf:85:69:3c:f8:32:99: 34:75:5f:43:5e:86:0c:12:c8:c3:5f:b7:5d:6b:63: 04:97:b7:dd:cb:21:ae:ad:35:38:69:f9:f5:a4:84: 48:c8:11:5d:f7:b5:9a:ca:da:4a:e9:a5:99:3f:44: c3:08:00:53:89:47:27:00:20:3a:30:55:32:3f:78: 29:f8:c2:f5:36:40:b8:76:9d:60:ed:55:84:fc:fe: 56:8c:6f:cf:3e:26:84:d3:b4:a0:13:75:cd:36:ce: cf:a9:33:4e:a7:9a:49:5c:1e:6f:b4:71:c3:80:36: bf:4a:c5:52:a0:5e:60:79:8c:86:e0:51:bf:ad:67: 7d:c4:c0:b9:e6:f7:ba:b2:53:f6:7a:89:fd:96:61: 51:19:b6:ee:f2:bb:5b:3e:06:6d:97:b4:50:ce:ef: f1:62:e6:21:db:c4:33:92:00:a9:79:d2:fb:7e:1f: 6f:b2:6e:88:3f:50:1e:ea:3b:14:8d:13:80:38:1b: 54:57:e5:4b:af:04:e4:12:ea:fb:68:f7:1c:8a:5d: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2A:0F:69:48:42:4A:D3:93:33:7F:9C:FD:26:92:A8:1E:11:9D:9D X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/9yoPaUhCStOTM3-c_SaSqB4RnZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.217.0/24 Signature Algorithm: sha256WithRSAEncryption a9:0d:ca:5d:ef:ac:e6:6b:1f:bb:db:a7:9b:52:c1:99:2d:85: f5:77:ce:45:94:9a:53:1c:9c:a8:f4:90:63:f7:23:12:d8:b9: 69:ca:8e:49:e1:fa:6e:27:a6:b4:92:97:63:d5:f9:33:e6:7e: c2:15:4e:a8:1e:53:8c:31:9f:90:ba:ae:1d:17:f9:97:f5:fe: b1:a9:01:75:b7:70:07:8f:30:f1:ec:40:9d:bd:10:08:bf:c2: 1b:ee:f7:95:0e:c6:79:b3:ee:6e:fc:14:4b:b0:fd:24:eb:af: e1:03:bd:26:0e:1e:62:dd:96:d9:03:1b:c0:62:6b:f0:dc:b1: b4:f2:ed:92:52:e8:37:bb:ee:6e:f0:cf:b0:eb:b4:5d:41:02: eb:9d:4a:e8:c2:a7:c0:49:83:4d:ae:2c:20:1f:9d:45:cd:45: 52:dc:e7:a1:5e:38:8f:28:e7:3e:d7:45:66:5a:16:9c:23:94: ea:db:d6:c2:45:2a:a2:a2:4c:c1:20:1a:06:8c:fb:83:e7:6d: 86:4b:81:24:d6:53:f9:ae:66:eb:eb:5a:c4:cc:21:9b:48:43: 2c:ea:8b:52:a3:2e:79:f0:b5:2c:7b:12:87:ed:7f:15:7c:91: e6:f4:3f:46:01:94:58:43:2a:90:4c:a6:06:8d:9e:8f:77:ec: c7:dc:47:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FQVzVAFrRh1ddhqldnBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzJhMGY2OTQ4NDI0YWQzOTMzMzdmOWNmZDI2OTJhODFlMTE5ZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNU2wfcukJuQkeOABXXIQ4oKnTRC /TkLRLTBudR0DBmo3SrA96AztXSftA3+GKCpl5ymLr+FaTz4Mpk0dV9DXoYMEsjD X7dda2MEl7fdyyGurTU4afn1pIRIyBFd97WaytpK6aWZP0TDCABTiUcnACA6MFUy P3gp+ML1NkC4dp1g7VWE/P5WjG/PPiaE07SgE3XNNs7PqTNOp5pJXB5vtHHDgDa/ SsVSoF5geYyG4FG/rWd9xMC55ve6slP2eon9lmFRGbbu8rtbPgZtl7RQzu/xYuYh 28QzkgCpedL7fh9vsm6IP1Ae6jsUjROAOBtUV+VLrwTkEur7aPccil3tAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPcqD2lIQkrTkzN/nP0mkqgeEZ2dMB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvOXlvUGFVaENTdE9UTTMtY19TYVNxQjRSblowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubPZMA0G CSqGSIb3DQEBCwUAA4IBAQCpDcpd76zmax+726ebUsGZLYX1d85FlJpTHJyo9JBj 9yMS2Llpyo5J4fpuJ6a0kpdj1fkz5n7CFU6oHlOMMZ+Quq4dF/mX9f6xqQF1t3AH jzDx7ECdvRAIv8Ib7veVDsZ5s+5u/BRLsP0k66/hA70mDh5i3ZbZAxvAYmvw3LG0 8u2SUug3u+5u8M+w67RdQQLrnUrowqfASYNNriwgH51FzUVS3OehXjiPKOc+10Vm WhacI5Tq29bCRSqiokzBIBoGjPuD522GS4Ek1lP5rmbr61rEzCGbSEMs6otSoy55 8LUsexKH7X8VfJHm9D9GAZRYQyqQTKYGjZ6Pd+zH3Eee -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:39 2026 by rpki-client