This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/0H6DHWgUAtXOivju56hFgL-nhGw.roa File: 0H6DHWgUAtXOivju56hFgL-nhGw.roa (raw, json) Hash identifier: I9m54I/Z01Nh505kPQQ4RFFg0741LI/tIETTjmBrhnA= Subject key identifier: D0:7E:83:1D:68:14:02:D5:CE:8A:F8:EE:E7:A8:45:80:BF:A7:84:6C Certificate issuer: /CN=74722f16a87cffd78fd79050568a1b4c959b1224 Certificate serial: 019B7E38628D21687A1463945BC9D9F5F510 Authority key identifier: 74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/0H6DHWgUAtXOivju56hFgL-nhGw.roa Signing time: Fri 02 Jan 2026 10:19:42 +0000 ROA not before: Fri 02 Jan 2026 10:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202948 IP address blocks: 185.172.116.0/24 maxlen: 24 185.172.117.0/24 maxlen: 24 185.172.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:62:8d:21:68:7a:14:63:94:5b:c9:d9:f5:f5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74722f16a87cffd78fd79050568a1b4c959b1224 Validity Not Before: Jan 2 10:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d07e831d681402d5ce8af8eee7a84580bfa7846c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:74:01:a0:6d:92:d1:ce:31:1c:5f:2f:75: 18:c5:d8:95:04:a0:cc:ce:97:06:56:01:fb:bf:cd: 4f:b7:85:f0:d1:b6:bf:e6:d6:13:a5:e6:9b:f2:ba: 29:c5:80:d5:cc:6a:08:52:f6:d7:65:77:4e:a3:f4: 50:30:46:76:02:38:14:af:6c:84:6e:d7:91:e7:a8: ac:64:d6:89:4a:6e:f4:fe:a5:9c:7c:f9:d9:de:4f: 10:da:fc:d3:4c:13:49:55:f8:76:ea:0c:61:b5:18: f7:e0:e5:98:a0:0a:fa:59:6f:43:7a:a1:05:71:cc: 47:01:78:35:18:e5:b1:6a:bf:19:3d:42:1e:c8:66: 75:28:42:ea:75:39:5b:1e:95:67:48:1b:8d:61:43: b2:93:08:d5:80:8c:a8:31:e2:a7:f4:01:8d:13:ba: 4f:f8:0c:aa:65:af:5d:be:d1:e2:73:a6:a3:f2:ee: dd:8c:10:bb:69:1d:04:5e:f1:af:d1:8b:bd:62:52: f3:41:4e:0a:42:3f:3a:10:dd:fa:02:52:6a:e4:a3: af:02:a2:df:8e:bf:55:24:1b:33:15:40:c8:3c:4d: e0:2f:3d:b0:8a:7b:f1:68:c0:53:a2:42:51:02:48: 61:fc:3c:7e:c7:8d:a3:60:ff:0d:d5:6b:a7:ac:d0: 02:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7E:83:1D:68:14:02:D5:CE:8A:F8:EE:E7:A8:45:80:BF:A7:84:6C X509v3 Authority Key Identifier: keyid:74:72:2F:16:A8:7C:FF:D7:8F:D7:90:50:56:8A:1B:4C:95:9B:12:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHIvFqh8_9eP15BQVoobTJWbEiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/0H6DHWgUAtXOivju56hFgL-nhGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f9e9a1-fe52-451a-a154-33f73d9fddb5/1/dHIvFqh8_9eP15BQVoobTJWbEiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.116.0/23 185.172.119.0/24 Signature Algorithm: sha256WithRSAEncryption 11:8e:40:83:b7:fe:6e:2d:b8:fa:77:95:38:16:17:03:9c:c7: 20:83:b5:95:3e:42:83:7e:1e:33:7d:16:5a:f1:91:b9:00:ed: db:69:70:fc:b8:db:68:3c:80:e0:1c:01:a5:72:d6:1e:8b:2c: 80:00:f6:cb:c5:67:31:04:54:a5:42:2d:2a:8c:28:d2:2b:37: f2:82:1e:dd:4c:0b:bf:6e:54:bf:7d:54:e2:62:9a:98:11:f1: 19:4c:ce:8d:90:07:86:50:09:b1:19:24:64:42:74:1d:7b:2f: b0:28:27:f0:96:f5:c1:e7:49:41:96:0e:99:9c:5c:ef:3d:11: a9:2b:42:a8:fb:0a:13:89:b4:50:37:44:c8:43:f0:62:09:87: 4f:ef:52:60:16:5d:7e:f3:51:c1:19:90:7c:04:6a:f9:5f:0f: c7:59:56:64:7d:c2:9a:e2:43:44:8c:20:06:20:ce:3f:7f:21: 37:77:9f:1c:24:63:93:2d:b5:99:53:d4:22:fa:40:fd:17:26: cb:b8:7d:0f:21:fc:28:2d:7c:20:30:7d:ae:56:40:1b:8d:cd: c2:f8:be:1c:02:77:71:3f:48:de:17:ec:fe:52:03:53:ce:00: 84:fa:55:06:a0:76:d1:69:0a:43:a7:66:52:ff:a5:f9:5b:eb: fb:a4:e4:64 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OGKNIWh6FGOUW8nZ9fUQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NzIyZjE2YTg3Y2ZmZDc4ZmQ3OTA1MDU2OGExYjRjOTU5 YjEyMjQwHhcNMjYwMTAyMTAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDdlODMxZDY4MTQwMmQ1Y2U4YWY4ZWVlN2E4NDU4MGJmYTc4NDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIp0AaBtktHOMRxfL3UYxdiVBKDM zpcGVgH7v81Pt4Xw0ba/5tYTpeab8ropxYDVzGoIUvbXZXdOo/RQMEZ2AjgUr2yE bteR56isZNaJSm70/qWcfPnZ3k8Q2vzTTBNJVfh26gxhtRj34OWYoAr6WW9DeqEF ccxHAXg1GOWxar8ZPUIeyGZ1KELqdTlbHpVnSBuNYUOykwjVgIyoMeKn9AGNE7pP +AyqZa9dvtHic6aj8u7djBC7aR0EXvGv0Yu9YlLzQU4KQj86EN36AlJq5KOvAqLf jr9VJBszFUDIPE3gLz2winvxaMBTokJRAkhh/Dx+x42jYP8N1WunrNACfwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNB+gx1oFALVzor47ueoRYC/p4RsMB8GA1UdIwQY MBaAFHRyLxaofP/Xj9eQUFaKG0yVmxIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhJdkZxaDhfOWVQMTVCUVZvb2JUSldiRWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mOWU5YTEtZmU1Mi00NTFhLWExNTQt MzNmNzNkOWZkZGI1LzEvMEg2REhXZ1VBdFhPaXZqdTU2aEZnTC1uaEd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mOWU5YTEtZmU1Mi00NTFhLWExNTQtMzNmNzNkOWZkZGI1 LzEvZEhJdkZxaDhfOWVQMTVCUVZvb2JUSldiRWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuax0AwQA uax3MA0GCSqGSIb3DQEBCwUAA4IBAQARjkCDt/5uLbj6d5U4FhcDnMcgg7WVPkKD fh4zfRZa8ZG5AO3baXD8uNtoPIDgHAGlctYeiyyAAPbLxWcxBFSlQi0qjCjSKzfy gh7dTAu/blS/fVTiYpqYEfEZTM6NkAeGUAmxGSRkQnQdey+wKCfwlvXB50lBlg6Z nFzvPRGpK0Ko+woTibRQN0TIQ/BiCYdP71JgFl1+81HBGZB8BGr5Xw/HWVZkfcKa 4kNEjCAGIM4/fyE3d58cJGOTLbWZU9Qi+kD9FybLuH0PIfwoLXwgMH2uVkAbjc3C +L4cAndxP0jeF+z+UgNTzgCE+lUGoHbRaQpDp2ZS/6X5W+v7pORk -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:28 2026 by rpki-client