This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/9G6UAPf2NIi-dNj0UQ0ASo51_Xo.roa File: 9G6UAPf2NIi-dNj0UQ0ASo51_Xo.roa (raw, json) Hash identifier: HhxpPntotNV+eDoBeE3OFEYS2ZF+Zfm27Bv5b0UVnBg= Subject key identifier: F4:6E:94:00:F7:F6:34:88:BE:74:D8:F4:51:0D:00:4A:8E:75:FD:7A Certificate issuer: /CN=493289256e3388777d95e4d531567ce3672a149a Certificate serial: 019B7759102A60D96C2CE6656D7D5EB287B8 Authority key identifier: 49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/9G6UAPf2NIi-dNj0UQ0ASo51_Xo.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24971 IP address blocks: 185.85.164.0/22 maxlen: 22 194.145.180.0/22 maxlen: 22 2a03:7460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.mft rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:10:2a:60:d9:6c:2c:e6:65:6d:7d:5e:b2:87:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493289256e3388777d95e4d531567ce3672a149a Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f46e9400f7f63488be74d8f4510d004a8e75fd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:22:d4:12:d7:a6:96:77:96:9d:f1:bd:41: e1:92:20:c9:77:b3:57:cc:8b:1f:d0:ba:0a:39:45: 5a:9c:19:19:cd:02:23:48:38:df:ca:e1:56:fa:3f: 4a:5e:a1:04:c6:96:89:5c:e4:b4:12:ee:a5:14:6a: 00:c9:9c:3d:7b:fb:ee:56:2d:26:6f:09:4a:d5:44: d8:57:9d:c5:bc:3d:dd:50:45:4a:ac:61:2e:7a:90: 24:ff:0b:b7:15:be:25:b5:31:05:e0:5d:5a:2f:46: e1:bd:46:fd:3f:38:83:54:44:f1:8c:ed:fe:78:77: e1:91:06:97:04:f3:96:60:c3:cd:7f:b1:c8:d2:4c: 59:28:73:6c:3a:3a:9e:4a:08:ed:79:13:c0:95:b6: c3:6f:5a:81:61:a8:2e:78:1f:e4:8d:2f:bd:9f:21: 86:e3:28:e0:36:73:d5:46:7e:fe:74:79:2f:03:2e: de:79:32:9d:e2:90:19:c9:ba:7b:3b:a9:12:8f:33: bc:50:33:38:5d:a8:03:7e:61:c4:fe:14:08:93:4c: 89:3f:8a:45:c3:a1:71:44:ff:e9:15:9b:02:af:34: 66:20:04:22:a6:e4:c8:68:d7:30:bf:f6:d4:19:66: 19:c5:d7:5a:42:04:e7:5a:0e:66:45:b4:7b:a8:89: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6E:94:00:F7:F6:34:88:BE:74:D8:F4:51:0D:00:4A:8E:75:FD:7A X509v3 Authority Key Identifier: keyid:49:32:89:25:6E:33:88:77:7D:95:E4:D5:31:56:7C:E3:67:2A:14:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STKJJW4ziHd9leTVMVZ842cqFJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/9G6UAPf2NIi-dNj0UQ0ASo51_Xo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7ae133-d0b6-4b68-8f61-d4d9a2e60e64/1/STKJJW4ziHd9leTVMVZ842cqFJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.164.0/22 194.145.180.0/22 IPv6: 2a03:7460::/32 Signature Algorithm: sha256WithRSAEncryption 7e:e9:48:d2:99:2d:2d:57:1c:b8:51:e0:d6:72:70:d0:9e:b3: 92:6c:0e:97:c4:db:96:a5:ae:88:c5:97:a0:d3:50:3e:6b:b5: ea:06:42:cc:a0:5b:0f:e2:c8:d1:3b:97:a2:e4:8f:10:b0:a4: b5:7b:11:a8:a9:cb:fe:ce:61:b8:6e:15:24:73:f7:c3:96:af: de:e4:2c:e0:58:4f:43:72:73:3f:15:41:71:1d:a1:3b:0c:7e: 21:e1:e9:68:aa:3d:4a:b2:cb:87:fc:a0:6b:6b:7f:06:f2:a9: c7:dd:c5:6c:7d:5e:2e:50:09:85:24:63:3d:ae:17:16:f8:b4: e1:0b:5e:43:01:f8:9a:7a:86:2d:85:91:eb:db:87:d6:72:f8: b1:01:78:d1:f8:87:ac:41:84:0d:f2:d5:5a:4a:25:16:85:08: 0b:52:d6:4c:c6:52:64:59:5a:82:f4:68:d7:f3:58:c9:d0:c3: 22:3d:1f:c8:1c:df:a9:02:77:3e:eb:bc:69:03:e2:40:19:b5: 3c:d3:31:ba:33:49:4f:74:91:93:f1:5c:c8:51:9a:ca:dd:7f: e0:8f:1a:d2:a3:7d:cf:65:dd:ea:42:e3:e6:e9:30:6f:94:c6: b8:cc:2f:f6:60:75:64:41:1e:07:a2:6b:8b:f9:a8:5b:e1:a1: 51:81:c9:ad -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WRAqYNlsLOZlbX1esoe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MzI4OTI1NmUzMzg4Nzc3ZDk1ZTRkNTMxNTY3Y2UzNjcy YTE0OWEwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDZlOTQwMGY3ZjYzNDg4YmU3NGQ4ZjQ1MTBkMDA0YThlNzVmZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUki1BLXppZ3lp3xvUHhkiDJd7NX zIsf0LoKOUVanBkZzQIjSDjfyuFW+j9KXqEExpaJXOS0Eu6lFGoAyZw9e/vuVi0m bwlK1UTYV53FvD3dUEVKrGEuepAk/wu3Fb4ltTEF4F1aL0bhvUb9PziDVETxjO3+ eHfhkQaXBPOWYMPNf7HI0kxZKHNsOjqeSgjteRPAlbbDb1qBYagueB/kjS+9nyGG 4yjgNnPVRn7+dHkvAy7eeTKd4pAZybp7O6kSjzO8UDM4XagDfmHE/hQIk0yJP4pF w6FxRP/pFZsCrzRmIAQipuTIaNcwv/bUGWYZxddaQgTnWg5mRbR7qIlIpQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPRulAD39jSIvnTY9FENAEqOdf16MB8GA1UdIwQY MBaAFEkyiSVuM4h3fZXk1TFWfONnKhSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RLSkpXNHppSGQ5bGVUVk1WWjg0MmNxRkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YWUxMzMtZDBiNi00YjY4LThmNjEt ZDRkOWEyZTYwZTY0LzEvOUc2VUFQZjJOSWktZE5qMFVRMEFTbzUxX1hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83YWUxMzMtZDBiNi00YjY4LThmNjEtZDRkOWEyZTYwZTY0 LzEvU1RLSkpXNHppSGQ5bGVUVk1WWjg0MmNxRkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuVWkAwQC wpG0MA0EAgACMAcDBQAqA3RgMA0GCSqGSIb3DQEBCwUAA4IBAQB+6UjSmS0tVxy4 UeDWcnDQnrOSbA6XxNuWpa6IxZeg01A+a7XqBkLMoFsP4sjRO5ei5I8QsKS1exGo qcv+zmG4bhUkc/fDlq/e5CzgWE9DcnM/FUFxHaE7DH4h4eloqj1KssuH/KBra38G 8qnH3cVsfV4uUAmFJGM9rhcW+LThC15DAfiaeoYthZHr24fWcvixAXjR+IesQYQN 8tVaSiUWhQgLUtZMxlJkWVqC9GjX81jJ0MMiPR/IHN+pAnc+67xpA+JAGbU80zG6 M0lPdJGT8VzIUZrK3X/gjxrSo33PZd3qQuPm6TBvlMa4zC/2YHVkQR4HomuL+ahb 4aFRgcmt -----END CERTIFICATE-----Generated at Tue Jan 27 02:07:10 2026 by rpki-client