This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/0iXNb0qgTsbED9wLh6tNLm4QiSc.roa File: 0iXNb0qgTsbED9wLh6tNLm4QiSc.roa (raw, json) Hash identifier: jPsn3OTLHwRfrJ0BbFjL8MkH0Kkclj3eem8yJT/9xno= Subject key identifier: D2:25:CD:6F:4A:A0:4E:C6:C4:0F:DC:0B:87:AB:4D:2E:6E:10:89:27 Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce Certificate serial: 019B7D5CE1242FA1013D633BB44C5BB20DF2 Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/0iXNb0qgTsbED9wLh6tNLm4QiSc.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39050 IP address blocks: 185.224.214.0/24 maxlen: 24 2a10:9880::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e1:24:2f:a1:01:3d:63:3b:b4:4c:5b:b2:0d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d225cd6f4aa04ec6c40fdc0b87ab4d2e6e108927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:7a:f2:cb:06:93:12:66:04:56:c7:1e:7a: e0:48:de:ac:b5:c4:d1:c6:bf:38:b7:17:76:ab:51: ac:e9:98:b5:60:ea:1a:6a:51:08:ce:99:c0:32:2e: d4:8a:48:7e:7e:c9:33:48:e5:1c:90:fd:a5:b2:2b: a8:1a:c1:3d:fa:97:64:63:58:f9:4f:2b:68:55:a0: 47:90:7e:6f:aa:75:b6:5a:23:5d:0b:36:ab:ac:03: 69:2e:93:1a:9a:7d:99:be:69:c4:62:ab:df:a3:13: 4c:26:84:57:5c:3a:7c:c5:ff:8b:48:49:ed:b7:c9: be:a1:39:5d:a7:0b:d9:db:a1:57:53:e3:cc:36:32: 10:b4:a9:a9:24:48:10:cf:64:98:72:61:5f:22:ef: a3:d5:b6:49:22:15:c7:75:fc:66:11:55:2a:5d:12: 91:4b:dc:b2:6d:27:41:5b:c0:db:27:cf:5b:72:86: 0f:40:45:c9:c0:cc:47:f4:d5:70:6f:e6:66:5d:b8: 28:b2:69:8d:40:78:53:f3:81:33:d9:27:7a:1a:d4: 9d:b9:c5:05:42:32:5f:21:1e:8b:c4:62:33:96:76: af:4c:86:d3:13:0e:00:b1:df:e7:6e:e7:85:81:a7: 80:c6:a3:41:ab:bd:0c:83:9d:a4:c4:ff:84:b6:a0: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:CD:6F:4A:A0:4E:C6:C4:0F:DC:0B:87:AB:4D:2E:6E:10:89:27 X509v3 Authority Key Identifier: keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/0iXNb0qgTsbED9wLh6tNLm4QiSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.214.0/24 IPv6: 2a10:9880::/29 Signature Algorithm: sha256WithRSAEncryption 70:8f:84:55:fb:c4:d1:da:20:ab:ba:c5:a8:d6:eb:82:b4:34: 8a:a5:80:8f:a8:89:49:50:27:90:4c:e6:c4:19:b0:91:53:9a: cc:30:cb:4f:ac:c3:55:c0:37:ba:1a:12:39:74:bc:8a:1a:cd: f0:29:ba:ca:16:0a:52:3d:7a:04:4d:a1:f4:d4:c7:88:e3:5e: b4:84:2e:4d:bb:83:c6:bb:64:f0:e1:63:79:03:93:c7:f9:4c: 69:2f:cf:96:9a:34:41:32:6b:c8:1a:1d:e1:84:3d:23:81:7d: ad:60:16:b7:6a:cf:31:0d:80:5c:75:fa:a6:f8:cf:54:68:88: 5f:e4:dc:32:da:11:b4:af:15:b9:69:fa:34:28:c6:4f:29:1f: e2:9b:e2:af:c6:ea:75:e2:34:a5:62:5b:94:4f:aa:1c:56:0c: df:c9:22:b4:d3:bf:90:30:19:74:01:9f:be:d8:45:39:e4:ab: 9e:03:92:25:69:26:8b:b3:f7:78:f9:bf:ec:31:f0:ff:45:55: 01:4c:e2:75:3f:a8:f7:70:af:c7:52:31:64:29:21:63:d3:8a: 54:43:32:1b:d9:94:14:c6:11:e5:a6:b5:7d:db:3c:ac:ed:42: 05:bd:8e:58:ca:e1:6c:e4:0a:31:fb:64:92:c2:43:3f:55:a8: f4:a3:ed:3e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XOEkL6EBPWM7tExbsg3yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYWM0ZjYxZjQ2OGI3MjAwMmFiMjVmMTEyZTUyMDExZWQ3 ODJjY2UwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjI1Y2Q2ZjRhYTA0ZWM2YzQwZmRjMGI4N2FiNGQyZTZlMTA4OTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjl68ssGkxJmBFbHHnrgSN6stcTR xr84txd2q1Gs6Zi1YOoaalEIzpnAMi7Uikh+fskzSOUckP2lsiuoGsE9+pdkY1j5 TytoVaBHkH5vqnW2WiNdCzarrANpLpMamn2ZvmnEYqvfoxNMJoRXXDp8xf+LSEnt t8m+oTldpwvZ26FXU+PMNjIQtKmpJEgQz2SYcmFfIu+j1bZJIhXHdfxmEVUqXRKR S9yybSdBW8DbJ89bcoYPQEXJwMxH9NVwb+ZmXbgosmmNQHhT84Ez2Sd6GtSducUF QjJfIR6LxGIzlnavTIbTEw4Asd/nbueFgaeAxqNBq70Mg52kxP+EtqB0lQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNIlzW9KoE7GxA/cC4erTS5uEIknMB8GA1UdIwQY MBaAFJysT2H0aLcgAqsl8RLlIBHteCzOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQt MzcxZmM1YzgwOTUwLzEvMGlYTmIwcWdUc2JFRDl3TGg2dE5MbTRRaVNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85ZDE3YmItNmQxNi00ZTZkLWJlMmQtMzcxZmM1YzgwOTUw LzEvbkt4UFlmUm90eUFDcXlYeEV1VWdFZTE0TE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAueDWMA0E AgACMAcDBQMqEJiAMA0GCSqGSIb3DQEBCwUAA4IBAQBwj4RV+8TR2iCrusWo1uuC tDSKpYCPqIlJUCeQTObEGbCRU5rMMMtPrMNVwDe6GhI5dLyKGs3wKbrKFgpSPXoE TaH01MeI4160hC5Nu4PGu2Tw4WN5A5PH+UxpL8+WmjRBMmvIGh3hhD0jgX2tYBa3 as8xDYBcdfqm+M9UaIhf5Nwy2hG0rxW5afo0KMZPKR/im+Kvxup14jSlYluUT6oc VgzfySK007+QMBl0AZ++2EU55KueA5IlaSaLs/d4+b/sMfD/RVUBTOJ1P6j3cK/H UjFkKSFj04pUQzIb2ZQUxhHlprV92zys7UIFvY5YyuFs5Aox+2SSwkM/Vaj0o+0+ -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:56 2026 by rpki-client