This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/9D_hL6BTFMqVDteQVeKe20j1dLA.roa File: 9D_hL6BTFMqVDteQVeKe20j1dLA.roa (raw, json) Hash identifier: NIOHGASDD2CfBiUud4MTlBzLoCpd2hk9q9QgBiWLS7s= Subject key identifier: F4:3F:E1:2F:A0:53:14:CA:95:0E:D7:90:55:E2:9E:DB:48:F5:74:B0 Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Certificate serial: 019B78353DA221671E7FF10F241D7321FD73 Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/9D_hL6BTFMqVDteQVeKe20j1dLA.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60051 IP address blocks: 185.141.8.0/24 maxlen: 24 185.141.9.0/24 maxlen: 24 185.141.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3d:a2:21:67:1e:7f:f1:0f:24:1d:73:21:fd:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f43fe12fa05314ca950ed79055e29edb48f574b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7e:44:2c:cb:f7:a2:5d:11:6e:7b:ae:f3:71: 60:df:2c:18:52:d2:25:87:72:cb:a3:5e:68:91:24: 17:13:0a:db:57:70:6b:e0:8c:bd:60:1b:01:1a:93: ae:6a:ee:27:51:5a:c9:ed:95:3f:7c:35:cb:39:9c: ed:c3:4c:37:fd:1d:1b:36:39:c3:0c:16:6d:59:10: 11:70:05:79:4e:62:84:8c:64:3d:29:52:71:7b:e7: 4a:6b:1a:23:a1:62:3d:47:57:12:58:d3:9e:d8:00: e7:8e:7e:21:2c:21:87:9c:24:a2:1c:ec:34:a2:88: 52:ee:be:88:91:2f:aa:3f:f3:6a:43:dd:80:f0:eb: 72:e6:40:b8:f8:f3:f0:28:0a:dc:ce:f6:60:38:5e: 04:ad:8e:3d:5b:fa:47:88:7d:28:53:c8:98:4a:e2: c9:59:d9:9e:21:9c:87:9a:30:8a:9a:c4:7a:62:4a: 57:62:3f:71:34:95:70:21:70:4a:da:ae:2a:d0:97: 2b:2e:f8:3f:18:d7:d0:62:43:33:08:31:93:ef:5a: 0b:1e:6a:90:ba:f7:90:6a:58:76:26:fa:d8:cb:0c: 6e:19:14:ba:72:68:ce:94:01:bf:72:61:ce:c0:2f: 5d:e1:f9:f7:b3:4e:5e:67:e5:93:c1:0d:97:0f:d1: 67:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3F:E1:2F:A0:53:14:CA:95:0E:D7:90:55:E2:9E:DB:48:F5:74:B0 X509v3 Authority Key Identifier: keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/9D_hL6BTFMqVDteQVeKe20j1dLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.8.0-185.141.10.255 Signature Algorithm: sha256WithRSAEncryption 8b:02:6e:33:27:48:2e:78:01:ea:75:38:53:64:ad:38:76:91: ae:80:6b:88:a9:6b:a3:b8:61:95:38:44:71:91:83:e8:65:5c: 8b:76:44:b3:2e:7e:84:c4:ea:ef:51:99:08:8f:6f:88:c1:59: b3:31:44:f9:e9:a9:d3:8c:66:e7:85:40:2f:57:40:77:70:fc: e3:89:7d:c3:5c:2f:cc:63:84:41:f3:1e:d0:a9:11:fc:77:22: 32:22:8e:8f:fe:29:e3:ed:42:68:26:dd:0e:c8:21:bb:94:07: de:ba:24:f4:ba:56:60:ca:d4:37:0c:03:ae:23:94:c1:2b:d5: f9:32:7f:02:59:76:3a:4e:cd:c9:9d:66:aa:51:28:15:3d:e1: 11:a3:24:08:46:82:41:ef:94:31:f0:30:c9:31:a0:e3:26:01: 0d:2a:d9:0d:e8:39:ba:5d:ed:ab:6f:53:4c:10:6c:11:74:79: f4:d3:f4:a5:1c:5a:10:b2:5c:eb:bd:00:81:fc:a8:0e:e2:29: a7:0b:aa:2e:7f:42:84:ff:77:69:dc:22:97:07:6e:a3:92:39: 3b:c3:77:02:df:05:cf:a3:08:32:e5:5d:d5:88:65:72:01:8d: 23:6e:28:3d:52:70:df:7d:40:a1:4e:68:b4:f2:3a:9b:f7:04: e3:10:d5:09 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NT2iIWcef/EPJB1zIf1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NmVkNmU0YjVjN2MxOWRiOThjNTc0MzJhZjRkY2Y2MzBi ZjYwYWUwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDNmZTEyZmEwNTMxNGNhOTUwZWQ3OTA1NWUyOWVkYjQ4ZjU3NGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln5ELMv3ol0Rbnuu83Fg3ywYUtIl h3LLo15okSQXEwrbV3Br4Iy9YBsBGpOuau4nUVrJ7ZU/fDXLOZztw0w3/R0bNjnD DBZtWRARcAV5TmKEjGQ9KVJxe+dKaxojoWI9R1cSWNOe2ADnjn4hLCGHnCSiHOw0 oohS7r6IkS+qP/NqQ92A8Oty5kC4+PPwKArczvZgOF4ErY49W/pHiH0oU8iYSuLJ WdmeIZyHmjCKmsR6YkpXYj9xNJVwIXBK2q4q0JcrLvg/GNfQYkMzCDGT71oLHmqQ uveQalh2JvrYywxuGRS6cmjOlAG/cmHOwC9d4fn3s05eZ+WTwQ2XD9FngwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPQ/4S+gUxTKlQ7XkFXinttI9XSwMB8GA1UdIwQY MBaAFIlu1uS1x8GduYxXQyr03PYwv2CuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYt ZGMxZmY2NzQ2ZDJlLzEvOURfaEw2QlRGTXFWRHRlUVZlS2UyMGoxZExBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC85MDA0NDQtZGQ0MC00YTA0LWE2MTYtZGMxZmY2NzQ2ZDJl LzEvaVc3VzVMWEh3WjI1akZkREt2VGM5akNfWUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5jQgD BAC5jQowDQYJKoZIhvcNAQELBQADggEBAIsCbjMnSC54Aep1OFNkrTh2ka6Aa4ip a6O4YZU4RHGRg+hlXIt2RLMufoTE6u9RmQiPb4jBWbMxRPnpqdOMZueFQC9XQHdw /OOJfcNcL8xjhEHzHtCpEfx3IjIijo/+KePtQmgm3Q7IIbuUB966JPS6VmDK1DcM A64jlMEr1fkyfwJZdjpOzcmdZqpRKBU94RGjJAhGgkHvlDHwMMkxoOMmAQ0q2Q3o Obpd7atvU0wQbBF0efTT9KUcWhCyXOu9AIH8qA7iKacLqi5/QoT/d2ncIpcHbqOS OTvDdwLfBc+jCDLlXdWIZXIBjSNuKD1ScN99QKFOaLTyOpv3BOMQ1Qk= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:52 2026 by rpki-client