This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/9VlsElFvyeapto5qvccOpjC_49k.roa File: 9VlsElFvyeapto5qvccOpjC_49k.roa (raw, json) Hash identifier: 24wEiOV9NDdAcm2XambNX169fmxW9oB57RvQRy8fYmg= Subject key identifier: F5:59:6C:12:51:6F:C9:E6:A9:B6:8E:6A:BD:C7:0E:A6:30:BF:E3:D9 Certificate issuer: /CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7 Certificate serial: 019B7EA54126C5824D510D6F4FCCF0C95FF7 Authority key identifier: C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/9VlsElFvyeapto5qvccOpjC_49k.roa Signing time: Fri 02 Jan 2026 12:18:37 +0000 ROA not before: Fri 02 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204988 IP address blocks: 185.229.148.0/22 maxlen: 22 185.229.148.0/24 maxlen: 24 2a0d:9e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:41:26:c5:82:4d:51:0d:6f:4f:cc:f0:c9:5f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7 Validity Not Before: Jan 2 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5596c12516fc9e6a9b68e6abdc70ea630bfe3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:62:d1:a3:8b:9c:ec:2f:e8:32:ba:46:27: 58:c0:ec:15:fe:48:0a:a2:5d:16:66:04:82:f8:6a: 96:76:a3:14:fb:af:bd:61:a5:50:07:0f:4e:84:c9: 62:e6:aa:a6:ce:db:d1:44:8f:5c:18:bd:82:48:c5: 50:4a:9d:2f:7e:42:1e:78:10:f1:91:98:c0:57:86: 4b:88:7a:9c:04:4c:fe:55:34:8e:ec:d7:0a:40:1e: 4b:45:8a:5b:82:44:4e:bf:76:04:a5:e3:31:d9:90: 5f:31:cd:1d:d5:4c:25:71:dc:02:67:cb:8a:84:9f: 9e:47:42:d6:bd:ee:aa:19:3d:0a:0d:bb:8e:8a:f5: ba:3e:93:87:6b:48:35:0b:66:e6:2e:08:61:cb:60: 64:84:0a:9d:b0:a5:88:c6:bf:a5:2c:7f:94:bf:34: 0b:82:9c:ea:a4:ce:c1:23:76:f2:04:b6:69:9c:2e: 57:24:4a:ce:53:7a:dc:45:ba:2f:84:1e:91:39:af: 0d:60:7e:07:1d:45:13:dc:76:18:00:94:95:58:01: 92:b4:3e:96:9f:ac:7b:83:13:cb:1a:cc:b3:30:90: 12:23:0c:ff:19:ef:ed:1f:4f:40:f5:32:73:d7:ec: 49:4a:0b:88:49:5d:0d:a6:f6:3b:83:d4:d0:0a:6e: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:59:6C:12:51:6F:C9:E6:A9:B6:8E:6A:BD:C7:0E:A6:30:BF:E3:D9 X509v3 Authority Key Identifier: keyid:C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/9VlsElFvyeapto5qvccOpjC_49k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.229.148.0/22 IPv6: 2a0d:9e00::/29 Signature Algorithm: sha256WithRSAEncryption 85:5c:87:24:e6:6e:fb:97:96:2c:de:e8:2f:ca:24:14:55:4e: c1:45:d0:69:c6:d1:aa:9b:e0:5b:85:03:09:a1:e6:b0:c8:5e: 87:6a:52:3f:09:b1:e4:8f:19:ba:41:76:a3:7e:4c:ea:6d:49: c2:73:9f:bb:0c:2d:ab:6b:99:47:ae:da:ce:c5:22:4c:2f:da: df:2f:13:83:00:92:55:10:af:20:ec:e4:82:e7:7a:3d:85:b0: c3:33:64:47:d6:28:2e:14:cf:70:31:e7:41:01:ea:de:91:ee: 6e:fe:07:bf:4a:69:04:2f:83:52:86:d5:2c:dc:eb:36:d5:a5: 27:2a:25:65:72:9d:5e:6d:3e:22:12:51:fd:1c:2e:09:39:58: 93:79:8d:37:b2:5f:aa:e9:35:ff:47:4a:d0:64:b5:56:45:66: 3f:93:14:ef:92:1c:bc:db:49:ab:b4:c2:0e:f9:8a:3b:0e:24: 6c:1f:ca:dc:05:49:b7:32:99:3d:34:e1:3d:57:a6:33:c2:5b: 96:43:ff:85:76:26:f5:47:80:96:9d:ca:83:1e:e8:eb:9a:a1: c6:18:a5:05:8b:b1:ff:7f:d1:44:c9:db:0c:e3:1d:39:0b:4d: 6c:86:c5:14:38:f2:ba:8f:17:e3:ff:aa:ed:92:18:68:fa:9a: 7e:97:1b:e5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pUEmxYJNUQ1vT8zwyV/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYjUyZWEzY2FiZDE0NmE1NzdkZmNkZmI4NzVmZjVhMzU3 NTcyZDcwHhcNMjYwMTAyMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTU5NmMxMjUxNmZjOWU2YTliNjhlNmFiZGM3MGVhNjMwYmZlM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk9i0aOLnOwv6DK6RidYwOwV/kgK ol0WZgSC+GqWdqMU+6+9YaVQBw9OhMli5qqmztvRRI9cGL2CSMVQSp0vfkIeeBDx kZjAV4ZLiHqcBEz+VTSO7NcKQB5LRYpbgkROv3YEpeMx2ZBfMc0d1UwlcdwCZ8uK hJ+eR0LWve6qGT0KDbuOivW6PpOHa0g1C2bmLghhy2BkhAqdsKWIxr+lLH+UvzQL gpzqpM7BI3byBLZpnC5XJErOU3rcRbovhB6ROa8NYH4HHUUT3HYYAJSVWAGStD6W n6x7gxPLGsyzMJASIwz/Ge/tH09A9TJz1+xJSguISV0NpvY7g9TQCm7xtQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPVZbBJRb8nmqbaOar3HDqYwv+PZMB8GA1UdIwQY MBaAFMK1LqPKvRRqV33837h1/1o1dXLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kODVhMjMtMTQ4YS00ZGJmLWIyYTMt NGMyNmQwMjBkNDI1LzEvOVZsc0VsRnZ5ZWFwdG81cXZjY09wakNfNDlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kODVhMjMtMTQ4YS00ZGJmLWIyYTMtNGMyNmQwMjBkNDI1 LzEvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueWUMA0E AgACMAcDBQMqDZ4AMA0GCSqGSIb3DQEBCwUAA4IBAQCFXIck5m77l5Ys3ugvyiQU VU7BRdBpxtGqm+BbhQMJoeawyF6HalI/CbHkjxm6QXajfkzqbUnCc5+7DC2ra5lH rtrOxSJML9rfLxODAJJVEK8g7OSC53o9hbDDM2RH1iguFM9wMedBAereke5u/ge/ SmkEL4NShtUs3Os21aUnKiVlcp1ebT4iElH9HC4JOViTeY03sl+q6TX/R0rQZLVW RWY/kxTvkhy820mrtMIO+Yo7DiRsH8rcBUm3Mpk9NOE9V6YzwluWQ/+Fdib1R4CW ncqDHujrmqHGGKUFi7H/f9FEydsM4x05C01shsUUOPK6jxfj/6rtkhho+pp+lxvl -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:15 2026 by rpki-client