This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/G9j4sjTeWzLExGQLke1RPswI0EU.roa File: G9j4sjTeWzLExGQLke1RPswI0EU.roa (raw, json) Hash identifier: Hiz7NVerTeUMvhHieLj4YdPxQvNl9jDBd3ik+M6E8jI= Subject key identifier: 1B:D8:F8:B2:34:DE:5B:32:C4:C4:64:0B:91:ED:51:3E:CC:08:D0:45 Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77 Certificate serial: 019B797F241EE976622C822E8C2621729BAA Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/G9j4sjTeWzLExGQLke1RPswI0EU.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206324 IP address blocks: 185.189.144.0/22 maxlen: 23 2a0b:ed80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:24:1e:e9:76:62:2c:82:2e:8c:26:21:72:9b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77 Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bd8f8b234de5b32c4c4640b91ed513ecc08d045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:ab:3a:04:5b:8b:c3:ab:92:59:22:50:db: 58:e7:67:ac:ea:54:f7:f1:73:cd:43:70:a3:07:cd: 01:aa:be:f4:df:e6:74:11:b4:00:64:ad:dd:89:70: 3c:17:3d:dd:e0:b8:1c:14:49:a8:48:c8:54:a7:81: be:06:a7:aa:dc:cb:49:1d:f0:14:f4:94:75:56:9b: f6:4f:98:e0:18:45:58:7b:5f:83:14:31:b0:81:a3: 6e:aa:3c:b5:8c:c6:55:2a:35:a7:ff:eb:cd:f4:b3: 17:59:f9:26:4e:45:90:74:13:05:a8:62:75:d6:03: db:85:de:03:02:8e:2f:c5:3c:be:12:44:c7:82:4d: a9:d5:69:da:2a:f5:7c:de:4e:6d:e1:d8:85:c4:3d: 37:82:ed:ec:57:8e:04:77:c9:3d:13:9b:70:51:fa: 90:97:ef:4e:32:2b:9d:ee:2e:79:88:9d:1e:58:2f: de:76:15:57:f1:d6:05:0b:5d:66:44:48:9a:f8:f1: 2c:68:93:cc:a8:52:1d:f4:34:68:72:1f:eb:db:16: f2:01:16:53:4e:68:ab:40:de:62:6c:fa:4e:cc:ef: 79:71:08:53:72:b2:fd:65:9a:85:31:70:6b:54:f3: 2e:ee:16:fd:18:17:93:7d:7d:34:85:1e:8f:c0:4d: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D8:F8:B2:34:DE:5B:32:C4:C4:64:0B:91:ED:51:3E:CC:08:D0:45 X509v3 Authority Key Identifier: keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/G9j4sjTeWzLExGQLke1RPswI0EU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.144.0/22 IPv6: 2a0b:ed80::/29 Signature Algorithm: sha256WithRSAEncryption 0a:5e:b7:ae:55:0b:e1:64:97:53:a9:b2:b1:2c:04:2c:cd:ec: 77:df:1c:00:a1:0e:94:dd:83:e1:ee:4d:53:b4:07:52:b8:5b: b6:d3:d9:2e:ab:9b:fd:4c:2f:39:e0:92:42:2c:6c:54:5b:96: f1:da:3e:08:5f:96:7a:82:b6:b8:28:26:a5:c7:32:e8:bb:ab: 0a:46:52:16:78:8e:70:6a:9f:64:e2:e1:42:4e:3a:da:7e:22: 6f:61:14:98:cd:ef:b0:d9:43:1b:9a:a6:8f:21:85:81:fb:2c: a0:a1:02:29:d9:40:61:54:6e:48:f3:5d:42:ec:9c:55:04:8a: 73:c5:b5:8d:ca:f7:66:19:55:99:14:d9:0a:50:5d:15:0e:e4: 78:cd:1f:f2:1e:3c:8c:3d:5e:12:e6:53:ad:86:b2:1d:1a:b1: 7b:57:aa:44:95:88:02:a7:63:22:07:92:92:ef:f4:24:3f:46: e8:84:28:0a:a9:f4:4f:9c:63:8e:f7:4e:51:30:8e:fa:4c:4d: bb:5e:c7:27:98:45:59:29:be:0a:d4:79:0f:e1:55:5c:52:30: 92:0c:e5:a9:d7:24:98:e7:0e:30:36:30:e8:a6:fe:86:0c:4c: 46:4b:4c:ea:e5:04:e4:02:0c:de:0e:a1:c1:4a:60:fb:35:2e: 6f:c6:7a:cd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fyQe6XZiLIIujCYhcpuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MzdjN2Y1NWI4Y2YwZTc0YTVkZTA5MDMyOWFkOWI3Mjhj NmFkNzcwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmQ4ZjhiMjM0ZGU1YjMyYzRjNDY0MGI5MWVkNTEzZWNjMDhkMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1urOgRbi8OrklkiUNtY52es6lT3 8XPNQ3CjB80Bqr703+Z0EbQAZK3diXA8Fz3d4LgcFEmoSMhUp4G+Bqeq3MtJHfAU 9JR1Vpv2T5jgGEVYe1+DFDGwgaNuqjy1jMZVKjWn/+vN9LMXWfkmTkWQdBMFqGJ1 1gPbhd4DAo4vxTy+EkTHgk2p1WnaKvV83k5t4diFxD03gu3sV44Ed8k9E5twUfqQ l+9OMiud7i55iJ0eWC/edhVX8dYFC11mREia+PEsaJPMqFId9DRoch/r2xbyARZT TmirQN5ibPpOzO95cQhTcrL9ZZqFMXBrVPMu7hb9GBeTfX00hR6PwE342QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBvY+LI03lsyxMRkC5HtUT7MCNBFMB8GA1UdIwQY MBaAFJk3x/VbjPDnSl3gkDKa2bcoxq13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYt Yjc1ZWY1NjM3MjBjLzEvRzlqNHNqVGVXekxFeEdRTGtlMVJQc3dJMEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80ZjhjMmQtZWM0MC00ZDNjLTg0MjYtYjc1ZWY1NjM3MjBj LzEvbVRmSDlWdU04T2RLWGVDUU1wclp0eWpHclhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub2QMA0E AgACMAcDBQMqC+2AMA0GCSqGSIb3DQEBCwUAA4IBAQAKXreuVQvhZJdTqbKxLAQs zex33xwAoQ6U3YPh7k1TtAdSuFu209kuq5v9TC854JJCLGxUW5bx2j4IX5Z6gra4 KCalxzLou6sKRlIWeI5wap9k4uFCTjrafiJvYRSYze+w2UMbmqaPIYWB+yygoQIp 2UBhVG5I811C7JxVBIpzxbWNyvdmGVWZFNkKUF0VDuR4zR/yHjyMPV4S5lOthrId GrF7V6pElYgCp2MiB5KS7/QkP0bohCgKqfRPnGOO905RMI76TE27XscnmEVZKb4K 1HkP4VVcUjCSDOWp1ySY5w4wNjDopv6GDExGS0zq5QTkAgzeDqHBSmD7NS5vxnrN -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:57 2026 by rpki-client