This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K9bNmRzaKpAnNgV7wBTqHOOLEpE.roa File: K9bNmRzaKpAnNgV7wBTqHOOLEpE.roa (raw, json) Hash identifier: uG6nOhZlKkVKCmdd1wMpGZoghQTB5r6t79/e7Vv2qVM= Subject key identifier: 2B:D6:CD:99:1C:DA:2A:90:27:36:05:7B:C0:14:EA:1C:E3:8B:12:91 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB7BEA7D9941EA9DC7BBAE3D9E355 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K9bNmRzaKpAnNgV7wBTqHOOLEpE.roa Signing time: Thu 01 Jan 2026 16:18:44 +0000 ROA not before: Thu 01 Jan 2026 16:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199654 IP address blocks: 185.49.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b7:be:a7:d9:94:1e:a9:dc:7b:ba:e3:d9:e3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bd6cd991cda2a902736057bc014ea1ce38b1291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dc:dd:76:8a:93:3e:41:7e:91:47:97:f9:43: a9:f2:07:17:e1:f4:27:69:34:3e:d9:7e:35:5d:3f: 9e:ea:68:23:4b:33:cd:95:a7:27:18:42:86:73:9a: 20:37:22:53:55:c8:d4:f4:a9:67:e3:c9:51:d1:d2: ce:d4:b4:c3:d7:15:d6:36:64:23:55:28:ab:1a:c0: cc:a6:2d:47:50:4d:e4:98:c8:7b:24:b0:5a:62:60: 88:d1:22:a0:5d:3f:ad:75:98:07:88:26:e9:8f:97: 9e:ff:8a:b1:57:3b:34:7b:1c:8c:b5:d8:c5:d8:b4: 25:5e:70:bd:5c:ae:66:1c:52:32:65:d6:8b:06:ae: 5d:69:04:c8:5e:db:40:75:bb:f1:de:67:53:5d:c3: 1c:45:76:4b:6e:5c:b8:d1:aa:c7:85:91:af:c0:e8: 1a:d4:54:1f:42:79:33:8f:b1:2f:d1:aa:bb:b2:1e: 1e:10:0b:6c:c9:c2:bd:29:93:85:8b:85:26:72:1e: 98:44:c7:d6:fd:7a:fd:41:33:5a:ea:87:41:fd:c0: 18:15:eb:03:a1:0f:81:53:2e:9f:f7:b1:43:08:54: 5c:24:c4:a7:3e:dc:b5:5e:b6:c0:b6:a5:46:e8:9f: 14:63:04:29:97:05:69:e7:64:a6:bc:42:26:11:c2: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D6:CD:99:1C:DA:2A:90:27:36:05:7B:C0:14:EA:1C:E3:8B:12:91 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/K9bNmRzaKpAnNgV7wBTqHOOLEpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.126.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:cf:20:dc:e4:94:d8:d4:dd:d7:11:f7:50:33:13:cb:cc:74: f2:30:d2:94:ea:95:14:0c:01:81:4c:4f:d1:f1:f0:a3:43:be: 78:88:b6:b8:30:66:31:56:47:61:dd:e6:61:ca:3f:a5:1c:b0: d2:96:6e:58:88:a4:0e:4d:8b:a6:ca:17:23:68:5e:ac:00:5d: f0:0b:08:b9:5c:ee:dd:f3:65:96:28:af:53:7c:be:f5:6d:fe: 95:64:48:8b:34:81:b0:83:ae:39:67:e1:61:23:5b:34:c1:c8: de:81:74:b2:61:9b:bf:3b:2d:0f:96:7d:e9:cf:c9:b5:86:45: 03:84:ac:0b:c6:bd:cf:92:b2:5b:31:43:fa:e7:2f:c7:96:09: 9b:7b:fe:31:1b:af:e9:76:bd:21:b1:32:98:44:c0:95:52:c6: ae:bb:fa:49:cc:c1:f9:33:02:08:1f:b5:28:ec:08:90:ae:d2: 70:16:b4:89:b0:97:2a:29:a9:65:ee:d0:22:e5:64:84:9a:ed: b4:58:40:61:a7:d1:96:89:d9:64:08:b3:70:88:b9:98:c2:58: ec:60:e7:28:ea:bf:19:7f:7f:0d:69:b6:91:3c:1f:5d:e4:c7: c6:2f:4e:f5:67:c9:f7:82:99:aa:6c:27:23:5f:cd:b7:b9:fa: 3a:e7:06:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wre+p9mUHqnce7rj2eNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmQ2Y2Q5OTFjZGEyYTkwMjczNjA1N2JjMDE0ZWExY2UzOGIxMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NzddoqTPkF+kUeX+UOp8gcX4fQn aTQ+2X41XT+e6mgjSzPNlacnGEKGc5ogNyJTVcjU9Kln48lR0dLO1LTD1xXWNmQj VSirGsDMpi1HUE3kmMh7JLBaYmCI0SKgXT+tdZgHiCbpj5ee/4qxVzs0exyMtdjF 2LQlXnC9XK5mHFIyZdaLBq5daQTIXttAdbvx3mdTXcMcRXZLbly40arHhZGvwOga 1FQfQnkzj7Ev0aq7sh4eEAtsycK9KZOFi4Umch6YRMfW/Xr9QTNa6odB/cAYFesD oQ+BUy6f97FDCFRcJMSnPty1XrbAtqVG6J8UYwQplwVp52SmvEImEcI6lQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCvWzZkc2iqQJzYFe8AU6hzjixKRMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvSzliTm1SemFLcEFuTmdWN3dCVHFIT09MRXBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTF+MA0G CSqGSIb3DQEBCwUAA4IBAQBOzyDc5JTY1N3XEfdQMxPLzHTyMNKU6pUUDAGBTE/R 8fCjQ754iLa4MGYxVkdh3eZhyj+lHLDSlm5YiKQOTYumyhcjaF6sAF3wCwi5XO7d 82WWKK9TfL71bf6VZEiLNIGwg645Z+FhI1s0wcjegXSyYZu/Oy0Pln3pz8m1hkUD hKwLxr3PkrJbMUP65y/Hlgmbe/4xG6/pdr0hsTKYRMCVUsauu/pJzMH5MwIIH7Uo 7AiQrtJwFrSJsJcqKall7tAi5WSEmu20WEBhp9GWidlkCLNwiLmYwljsYOco6r8Z f38NabaRPB9d5MfGL071Z8n3gpmqbCcjX823ufo65wYv -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:53 2026 by rpki-client