This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa File: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (raw, json) Hash identifier: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I= Subject key identifier: F5:92:5F:D4:AD:1D:4B:D1:86:12:BF:BB:BC:95:2A:61:C4:F8:56:53 Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15 Certificate serial: 019B7C1357580A85BCA76F92697CCD7C3985 Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199659 IP address blocks: 185.223.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:57:58:0a:85:bc:a7:6f:92:69:7c:cd:7c:39:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5925fd4ad1d4bd18612bfbbbc952a61c4f85653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cc:08:5c:f4:71:c5:51:30:71:80:59:a7:59: 37:7a:ba:c6:e5:a4:56:60:06:1d:91:cf:1e:46:24: 0f:30:96:94:b3:d4:6b:2f:a1:8a:75:73:41:71:d3: 46:71:a2:a9:89:67:c9:f5:5b:ef:70:2a:a1:85:73: bc:90:29:e4:14:09:73:df:9e:5a:ce:f7:30:aa:62: 88:83:2c:e8:c1:99:72:f0:f3:4c:8b:3f:47:64:26: c4:bf:db:2d:71:db:e1:ef:2e:f7:b3:69:e8:2a:48: af:c2:b9:eb:48:04:9a:cf:8a:8c:31:91:3d:9a:a0: 0d:90:67:c3:b3:23:07:98:53:89:dd:19:b7:26:2e: 83:aa:14:0e:5e:e3:c8:a6:c2:b9:fa:67:e0:c4:c6: 91:27:b0:67:10:8f:b9:58:83:fa:70:1c:b2:35:3e: 7f:9e:a1:26:f5:37:41:0d:79:84:86:4d:97:70:6c: 96:b2:8b:81:fc:4f:4f:a0:7f:43:d4:32:9c:dd:29: 02:8d:2b:92:7d:58:72:93:d4:ec:54:49:30:b5:c2: 98:24:87:48:55:84:11:18:71:fa:d0:2f:55:b6:88: 5d:96:17:27:f9:16:b5:d3:02:7b:f0:4a:6a:81:d1: af:bd:80:78:9c:57:d1:55:b7:94:58:9c:8d:31:65: a3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:92:5F:D4:AD:1D:4B:D1:86:12:BF:BB:BC:95:2A:61:C4:F8:56:53 X509v3 Authority Key Identifier: keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.88.0/22 Signature Algorithm: sha256WithRSAEncryption 47:b4:53:d2:25:22:76:05:8e:d1:b1:21:e9:5f:41:9d:cb:bd: 5f:a1:b1:83:ad:3e:70:6b:af:cb:a4:35:24:72:81:01:1f:64: 23:b6:52:fd:6a:8a:5e:78:da:c5:8d:a1:b8:db:4d:23:7b:ee: f3:cb:de:68:d0:9e:b7:8d:77:fe:fc:29:0d:82:77:a3:89:2f: 71:8a:c4:ce:eb:44:0a:90:d4:90:01:2e:c6:67:7e:d9:95:d0: 4c:6a:70:98:37:11:35:26:19:d9:ca:6e:ae:80:b7:c8:1e:1f: 7c:4f:6a:c2:0f:f5:c1:ea:d7:2d:bd:9b:3a:61:89:15:1a:b3: 67:65:67:2a:f5:90:6b:10:5f:78:83:b5:d5:5a:39:ed:9c:26: 6d:7b:0e:57:12:51:7e:81:2a:fd:c3:4f:09:7a:17:e2:47:ef: 71:0b:67:da:0b:f3:93:3e:c7:5d:01:ab:46:09:74:69:63:36: ed:60:e8:bd:49:60:4f:45:6e:4c:c0:8a:c2:84:f5:5b:91:2e: cd:85:39:91:f5:25:e7:6f:7a:87:9b:5f:4c:82:71:72:76:64: d9:e8:a7:15:a2:b2:85:47:4d:45:01:9b:8c:44:e1:42:4f:ff: ed:9d:e9:fa:e1:04:2a:14:75:b0:ac:ba:74:69:52:ad:10:81: 54:79:12:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1dYCoW8p2+SaXzNfDmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjYWU0YjA0NzFhNjE4NzJjNDA0MTQyZTFmOTBmNTA3NGYw ZDZmMTUwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTkyNWZkNGFkMWQ0YmQxODYxMmJmYmJiYzk1MmE2MWM0Zjg1NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1swIXPRxxVEwcYBZp1k3errG5aRW YAYdkc8eRiQPMJaUs9RrL6GKdXNBcdNGcaKpiWfJ9VvvcCqhhXO8kCnkFAlz355a zvcwqmKIgyzowZly8PNMiz9HZCbEv9stcdvh7y73s2noKkivwrnrSASaz4qMMZE9 mqANkGfDsyMHmFOJ3Rm3Ji6DqhQOXuPIpsK5+mfgxMaRJ7BnEI+5WIP6cByyNT5/ nqEm9TdBDXmEhk2XcGyWsouB/E9PoH9D1DKc3SkCjSuSfVhyk9TsVEkwtcKYJIdI VYQRGHH60C9Vtohdlhcn+Ra10wJ78EpqgdGvvYB4nFfRVbeUWJyNMWWjCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWSX9StHUvRhhK/u7yVKmHE+FZTMB8GA1UdIwQY MBaAFNyuSwRxphhyxAQULh+Q9QdPDW8VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQt NGI2OGIxNWQzMDFhLzEvOVpKZjFLMGRTOUdHRXItN3ZKVXFZY1Q0VmxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi82N2Y5YTctYTZlOC00MjZlLWJhYzQtNGI2OGIxNWQzMDFh LzEvM0s1TEJIR21HSExFQkJRdUg1RDFCMDhOYnhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud9YMA0G CSqGSIb3DQEBCwUAA4IBAQBHtFPSJSJ2BY7RsSHpX0Gdy71fobGDrT5wa6/LpDUk coEBH2QjtlL9aopeeNrFjaG4200je+7zy95o0J63jXf+/CkNgnejiS9xisTO60QK kNSQAS7GZ37ZldBManCYNxE1JhnZym6ugLfIHh98T2rCD/XB6tctvZs6YYkVGrNn ZWcq9ZBrEF94g7XVWjntnCZtew5XElF+gSr9w08JehfiR+9xC2faC/OTPsddAatG CXRpYzbtYOi9SWBPRW5MwIrChPVbkS7NhTmR9SXnb3qHm19MgnFydmTZ6KcVorKF R01FAZuMROFCT//tnen64QQqFHWwrLp0aVKtEIFUeRJe -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:30 2026 by rpki-client