This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/0ra2tGA3CZ_wmT1ModZ42xAIr6g.roa File: 0ra2tGA3CZ_wmT1ModZ42xAIr6g.roa (raw, json) Hash identifier: KmQKsrbbyKwBzRxHfn+Lobkic7k6pvTLjr15K++dcm0= Subject key identifier: D2:B6:B6:B4:60:37:09:9F:F0:99:3D:4C:A1:D6:78:DB:10:08:AF:A8 Certificate issuer: /CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd Certificate serial: 019B7C80D9A76301893745E4969B1810B6CC Authority key identifier: D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/0ra2tGA3CZ_wmT1ModZ42xAIr6g.roa Signing time: Fri 02 Jan 2026 02:19:37 +0000 ROA not before: Fri 02 Jan 2026 02:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199419 IP address blocks: 185.16.236.0/24 maxlen: 24 185.16.237.0/24 maxlen: 24 185.16.238.0/24 maxlen: 24 185.16.239.0/24 maxlen: 24 2a03:df40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d9:a7:63:01:89:37:45:e4:96:9b:18:10:b6:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d518bf60d1ef4c76cd07a53f7ec683771aab5cfd Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2b6b6b46037099ff0993d4ca1d678db1008afa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:64:ca:90:25:c3:09:fe:87:d6:e3:5e:bf:67: ac:f2:78:91:36:13:da:ff:68:cb:e6:77:1f:a1:1d: b7:2d:53:20:4d:80:38:06:93:f7:92:70:1f:80:3c: 4d:2d:82:91:63:a3:cc:9f:46:39:66:e8:bd:78:12: 6c:54:63:27:9f:a3:e2:39:fc:b7:2a:10:4a:93:67: 82:73:a8:20:28:14:ef:9c:92:22:e5:64:1a:9a:b2: 69:a9:1f:c2:39:70:6c:e6:2f:83:b9:0a:28:5e:f3: a7:64:bf:c5:a5:9c:49:e8:3d:bf:4e:20:78:1f:f7: a8:d2:54:bc:5b:0c:86:95:f5:ce:ca:5e:93:c4:80: 5d:08:d5:de:ea:ad:45:28:39:bd:0e:01:27:b8:85: c0:78:db:3d:77:3f:0c:4e:79:1c:38:b3:ad:ef:0c: 35:4b:16:20:c3:68:51:2e:43:56:b9:5a:7c:63:04: 1d:b5:75:23:3e:19:cc:18:e5:e1:41:e9:67:b3:bb: 74:a1:a3:52:66:71:c2:25:5f:ae:74:1a:85:f5:82: 2c:fc:dd:f6:8b:2b:df:0f:f9:47:fb:0f:5f:75:cf: b4:8b:ac:c6:95:95:88:a3:92:c1:72:56:0d:ff:d8: a8:dd:7b:17:a2:a5:ba:82:19:ec:dd:dd:7a:d7:95: e9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B6:B6:B4:60:37:09:9F:F0:99:3D:4C:A1:D6:78:DB:10:08:AF:A8 X509v3 Authority Key Identifier: keyid:D5:18:BF:60:D1:EF:4C:76:CD:07:A5:3F:7E:C6:83:77:1A:AB:5C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/0ra2tGA3CZ_wmT1ModZ42xAIr6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5bfdb5-4824-402c-b39b-24488b27ca41/1/1Ri_YNHvTHbNB6U_fsaDdxqrXP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.236.0/22 IPv6: 2a03:df40::/32 Signature Algorithm: sha256WithRSAEncryption 53:8d:3a:f2:5d:8b:03:fa:40:73:63:31:81:d7:17:ee:e7:e0: 6f:d0:54:58:75:d5:73:e1:c4:08:42:f2:3a:cf:80:e9:da:90: 9b:4d:92:4d:47:0f:9a:e3:ee:5b:17:da:86:f2:0b:37:ad:1d: d3:89:f9:8e:f4:db:17:b5:95:93:9b:e5:02:3b:73:61:a7:f5: 43:a1:bf:a0:cc:e2:e6:a7:51:27:05:09:71:1c:1c:83:02:a9: 63:8e:51:74:72:54:3e:54:df:93:52:11:0f:fb:1c:cb:9d:1d: 75:e2:1c:74:e3:a1:a4:32:1d:a0:22:c4:51:78:5b:0d:46:1b: 2c:9c:f6:35:39:ea:ee:4f:28:42:20:38:4c:09:1c:3b:cd:c7: 70:ed:a8:2d:86:93:0e:e0:9f:ce:84:9e:0d:2f:a8:49:7f:15: 2f:64:7e:87:84:fe:3e:66:c3:b2:f6:3c:b0:19:14:d6:cf:7b: cb:02:e5:a1:67:f2:ba:f5:8a:31:26:a5:a5:22:fc:9c:e3:f6: c4:32:45:04:46:c0:0a:83:4e:70:b5:46:f8:65:48:99:5e:e6: 47:6b:e6:b5:17:6d:2b:18:b7:aa:e6:1d:8c:bd:7c:c7:91:11: 6d:94:e6:74:89:18:36:19:7a:04:3f:71:2f:18:79:02:5c:6c: a3:a5:fb:ed -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gNmnYwGJN0XklpsYELbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MThiZjYwZDFlZjRjNzZjZDA3YTUzZjdlYzY4Mzc3MWFh YjVjZmQwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmI2YjZiNDYwMzcwOTlmZjA5OTNkNGNhMWQ2NzhkYjEwMDhhZmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mTKkCXDCf6H1uNev2es8niRNhPa /2jL5ncfoR23LVMgTYA4BpP3knAfgDxNLYKRY6PMn0Y5Zui9eBJsVGMnn6PiOfy3 KhBKk2eCc6ggKBTvnJIi5WQamrJpqR/COXBs5i+DuQooXvOnZL/FpZxJ6D2/TiB4 H/eo0lS8WwyGlfXOyl6TxIBdCNXe6q1FKDm9DgEnuIXAeNs9dz8MTnkcOLOt7ww1 SxYgw2hRLkNWuVp8YwQdtXUjPhnMGOXhQelns7t0oaNSZnHCJV+udBqF9YIs/N32 iyvfD/lH+w9fdc+0i6zGlZWIo5LBclYN/9io3XsXoqW6ghns3d1615Xp6QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNK2trRgNwmf8Jk9TKHWeNsQCK+oMB8GA1UdIwQY MBaAFNUYv2DR70x2zQelP37Gg3caq1z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJpX1lOSHZUSGJOQjZVX2ZzYURkeHFyWFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81YmZkYjUtNDgyNC00MDJjLWIzOWIt MjQ0ODhiMjdjYTQxLzEvMHJhMnRHQTNDWl93bVQxTW9kWjQyeEFJcjZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS81YmZkYjUtNDgyNC00MDJjLWIzOWItMjQ0ODhiMjdjYTQx LzEvMVJpX1lOSHZUSGJOQjZVX2ZzYURkeHFyWFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuRDsMA0E AgACMAcDBQAqA99AMA0GCSqGSIb3DQEBCwUAA4IBAQBTjTryXYsD+kBzYzGB1xfu 5+Bv0FRYddVz4cQIQvI6z4Dp2pCbTZJNRw+a4+5bF9qG8gs3rR3TifmO9NsXtZWT m+UCO3Nhp/VDob+gzOLmp1EnBQlxHByDAqljjlF0clQ+VN+TUhEP+xzLnR114hx0 46GkMh2gIsRReFsNRhssnPY1OeruTyhCIDhMCRw7zcdw7agthpMO4J/OhJ4NL6hJ fxUvZH6HhP4+ZsOy9jywGRTWz3vLAuWhZ/K69YoxJqWlIvyc4/bEMkUERsAKg05w tUb4ZUiZXuZHa+a1F20rGLeq5h2MvXzHkRFtlOZ0iRg2GXoEP3EvGHkCXGyjpfvt -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:15 2026 by rpki-client