This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/gH9SOFGnHPwoUMA2V0WudJj9Q74.roa File: gH9SOFGnHPwoUMA2V0WudJj9Q74.roa (raw, json) Hash identifier: qynBe2yLaxPIvjQZTw4fuQC6WMeX9Hc3FmOm9LE7GH8= Subject key identifier: 80:7F:52:38:51:A7:1C:FC:28:50:C0:36:57:45:AE:74:98:FD:43:BE Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f Certificate serial: 019B7E3885EBF83D550D07639154220F633C Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/gH9SOFGnHPwoUMA2V0WudJj9Q74.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 93.115.103.0/24 maxlen: 24 185.253.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:85:eb:f8:3d:55:0d:07:63:91:54:22:0f:63:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=807f523851a71cfc2850c0365745ae7498fd43be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:38:9c:31:26:dc:dc:5c:33:a9:7c:4c:d2:7a: 19:7c:71:82:dc:44:e2:38:40:f5:b5:c0:b8:d8:bd: 5e:a6:b7:b9:a6:d4:e8:83:1a:1e:a2:07:3a:81:24: 07:bb:4f:ed:19:32:05:13:79:c8:6e:a4:c8:ec:df: b5:9b:4e:5b:d1:8e:ad:f9:da:b6:2a:04:cf:32:8f: 44:55:78:0c:87:b5:36:75:60:b2:87:36:84:3c:55: a0:b6:35:7e:d9:9c:ce:d8:14:12:39:61:8c:ea:c6: 7f:25:25:f0:77:88:61:ce:58:04:c0:05:24:c9:11: 35:aa:bf:19:44:6e:fe:5f:3c:60:71:08:42:74:09: 46:5d:90:73:6f:00:c7:a5:29:a0:7b:52:b2:8a:58: fe:e6:6d:32:61:d0:cd:a7:6c:00:38:aa:b8:81:32: 95:93:bc:81:45:dd:74:d4:d1:62:45:2b:98:70:ea: d5:01:3c:bc:3f:76:ab:e0:eb:02:23:b8:6a:2b:1e: 23:5a:69:10:77:68:ed:d0:d4:8d:07:9a:b8:de:26: 24:1e:35:fb:ca:47:96:44:44:2a:7e:3c:52:7d:8a: 6f:28:e7:e8:52:e3:6c:72:a9:46:3b:49:ca:fd:0e: e6:22:41:0c:a6:55:00:47:04:2c:e3:cb:78:ea:db: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7F:52:38:51:A7:1C:FC:28:50:C0:36:57:45:AE:74:98:FD:43:BE X509v3 Authority Key Identifier: keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/gH9SOFGnHPwoUMA2V0WudJj9Q74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.115.103.0/24 185.253.9.0/24 Signature Algorithm: sha256WithRSAEncryption a7:76:0c:c9:bc:0c:45:3d:8e:23:d5:3a:a6:a8:73:d4:a3:6b: 4f:35:12:7b:25:aa:c7:26:0a:2c:8f:1f:ef:24:84:e9:fb:22: a1:5e:a6:47:a5:aa:26:5f:b6:9d:25:a2:68:38:67:e3:85:6a: 81:f7:6e:c0:a3:b8:4b:87:f3:05:c0:14:70:62:dc:65:2b:35: 45:bb:83:ab:2d:84:5e:70:44:4a:04:e1:43:66:09:0a:27:fc: 1f:2e:c0:d9:5d:c4:1d:8e:db:41:9e:52:d6:7c:c0:cd:60:b4: 8c:27:25:ff:77:8a:70:83:a2:ae:40:b3:fd:80:8c:79:77:b6: 28:1e:c6:6e:61:7c:7a:45:ac:0c:55:6c:f5:6d:93:dc:0f:3e: 83:03:59:8d:2e:c5:bf:db:97:28:e2:21:12:5d:b8:a2:84:46: c7:15:59:c6:68:24:ae:af:1f:4c:8b:bc:a7:f5:03:a7:dc:c2: c0:15:e9:3f:58:da:d4:9d:39:de:fa:ba:e1:c4:fc:95:4a:cd: ea:b0:73:d3:90:42:6e:92:b3:60:71:8e:df:00:80:70:f0:2a: 34:2d:54:66:ab:f2:94:90:8e:44:18:a0:40:87:fa:37:f8:15: d7:7f:71:d7:68:e0:47:91:b5:20:a6:01:f3:84:1f:61:dc:ec: e9:e3:72:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OIXr+D1VDQdjkVQiD2M8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5Y2M0NGQ3ZjFkMGRjMGE1YWJmMjc3NjQ5NWI2MWRlNDgx OTkyNWYwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDdmNTIzODUxYTcxY2ZjMjg1MGMwMzY1NzQ1YWU3NDk4ZmQ0M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DicMSbc3FwzqXxM0noZfHGC3ETi OED1tcC42L1epre5ptTogxoeogc6gSQHu0/tGTIFE3nIbqTI7N+1m05b0Y6t+dq2 KgTPMo9EVXgMh7U2dWCyhzaEPFWgtjV+2ZzO2BQSOWGM6sZ/JSXwd4hhzlgEwAUk yRE1qr8ZRG7+XzxgcQhCdAlGXZBzbwDHpSmge1Kyilj+5m0yYdDNp2wAOKq4gTKV k7yBRd101NFiRSuYcOrVATy8P3ar4OsCI7hqKx4jWmkQd2jt0NSNB5q43iYkHjX7 ykeWREQqfjxSfYpvKOfoUuNscqlGO0nK/Q7mIkEMplUARwQs48t46tvyjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIB/UjhRpxz8KFDANldFrnSY/UO+MB8GA1UdIwQY MBaAFKnMRNfx0NwKWr8ndklbYd5IGZJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjct MTYxN2YzOGE2ZGZjLzEvZ0g5U09GR25IUHdvVU1BMlYwV3VkSmo5UTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjctMTYxN2YzOGE2ZGZj LzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXXNnAwQA uf0JMA0GCSqGSIb3DQEBCwUAA4IBAQCndgzJvAxFPY4j1TqmqHPUo2tPNRJ7JarH Jgosjx/vJITp+yKhXqZHpaomX7adJaJoOGfjhWqB927Ao7hLh/MFwBRwYtxlKzVF u4OrLYRecERKBOFDZgkKJ/wfLsDZXcQdjttBnlLWfMDNYLSMJyX/d4pwg6KuQLP9 gIx5d7YoHsZuYXx6RawMVWz1bZPcDz6DA1mNLsW/25co4iESXbiihEbHFVnGaCSu rx9Mi7yn9QOn3MLAFek/WNrUnTne+rrhxPyVSs3qsHPTkEJukrNgcY7fAIBw8Co0 LVRmq/KUkI5EGKBAh/o3+BXXf3HXaOBHkbUgpgHzhB9h3Ozp43IM -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:35 2026 by rpki-client