This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/09Idh6750rzqiPUR4c726kV5rOk.roa File: 09Idh6750rzqiPUR4c726kV5rOk.roa (raw, json) Hash identifier: mc1V6hIQgSw8lLoVocREyrEscnS5kZmkg0rvjeUzfkM= Subject key identifier: D3:D2:1D:87:AE:F9:D2:BC:EA:88:F5:11:E1:CE:F6:EA:45:79:AC:E9 Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92 Certificate serial: 019B77596D5FBEF4F8EAEE89112D54AAF127 Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/09Idh6750rzqiPUR4c726kV5rOk.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61128 IP address blocks: 185.16.156.0/24 maxlen: 24 185.16.157.0/24 maxlen: 24 185.16.158.0/24 maxlen: 24 185.16.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:6d:5f:be:f4:f8:ea:ee:89:11:2d:54:aa:f1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3d21d87aef9d2bcea88f511e1cef6ea4579ace9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:21:5f:a4:ec:bd:82:7f:4d:1a:52:8a:ca:99: a1:e9:28:e3:47:fb:6a:0d:1e:4c:14:c5:9a:19:78: ad:de:d5:c0:af:bd:cd:ea:7b:d0:cc:74:37:d5:db: fa:77:62:66:4e:36:fe:9d:5e:5f:15:1c:bb:b5:8f: 51:58:79:31:6e:45:da:88:3f:61:b5:35:c7:cc:a9: c8:54:78:c6:0e:3c:88:4d:c5:2d:e4:ff:ac:bf:5a: 7e:9b:15:07:9a:67:31:b0:f8:2a:a2:f5:f3:b3:df: 31:38:47:1e:50:9b:9f:5a:fc:9f:00:6a:f5:84:bf: 4a:50:15:c2:39:b3:ec:75:2b:8e:59:a9:68:66:a5: d7:77:ca:41:28:cf:92:a1:59:8f:b8:bc:c1:f3:39: cc:b5:f5:56:b5:13:f8:5e:74:9b:7a:2b:b3:01:42: 40:8a:8a:2b:78:77:f5:ef:72:71:fd:87:31:3d:39: 1d:eb:28:a3:d5:12:06:66:6a:81:14:7e:a2:7f:58: b7:9b:1f:64:a1:c4:c5:e7:07:09:44:81:ad:2a:4e: 8d:b4:d7:62:a1:a6:1e:c1:f0:cd:46:27:e1:05:7f: 2a:57:28:d5:56:04:fb:b7:1b:ca:5a:03:90:7d:48: 3a:17:3f:3d:c8:1b:a1:8e:b4:d5:73:a0:a6:2a:24: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D2:1D:87:AE:F9:D2:BC:EA:88:F5:11:E1:CE:F6:EA:45:79:AC:E9 X509v3 Authority Key Identifier: keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/09Idh6750rzqiPUR4c726kV5rOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.156.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:71:3e:1e:a1:b1:c7:da:2e:82:dc:20:cc:4c:2d:7a:8f:71: d4:7a:71:69:ed:28:2d:ce:45:67:6b:02:92:bc:11:6f:f9:37: fe:44:db:50:ec:41:29:22:61:8a:cb:c5:59:aa:ee:ca:fb:84: 05:ff:e8:5c:37:d1:86:ff:c8:0e:4d:d8:7a:d2:db:f3:35:7b: 0d:5c:f0:1b:e7:91:bf:3b:81:a4:53:40:53:37:8f:fc:8f:af: d7:e0:17:ae:81:40:2a:cf:6e:e5:70:d0:61:a4:5d:d2:9c:39: bc:fe:ec:1b:51:cd:a2:8f:27:b1:65:07:40:fc:46:5d:0f:71: f8:4e:22:2b:dd:c3:33:b8:d8:9f:9f:c8:9f:17:c6:8d:49:42: 65:2c:41:c6:75:d2:7a:3a:37:1b:50:2c:35:c5:fe:d5:08:12: 19:f0:29:a2:68:25:88:99:5c:80:18:1a:98:73:8e:f4:99:ef: 41:30:19:fd:74:4e:c3:3d:3a:34:43:9e:06:b7:27:31:40:65: 83:d6:8e:d0:e2:d4:eb:a9:fd:49:3a:fa:11:75:12:7d:95:b4: 69:a9:ec:0d:0f:fa:7c:67:4e:d8:c8:16:73:b0:6e:74:63:10: 49:2d:e6:06:46:42:5a:fc:e9:ab:da:5c:a5:c5:ac:c4:11:72: 69:13:01:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WW1fvvT46u6JES1UqvEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWI1ODE3YmJlN2U1YTFjNWZiMTMwNTUxYjg0YWI0ODgw MTZmOTIwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2QyMWQ4N2FlZjlkMmJjZWE4OGY1MTFlMWNlZjZlYTQ1NzlhY2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SFfpOy9gn9NGlKKypmh6SjjR/tq DR5MFMWaGXit3tXAr73N6nvQzHQ31dv6d2JmTjb+nV5fFRy7tY9RWHkxbkXaiD9h tTXHzKnIVHjGDjyITcUt5P+sv1p+mxUHmmcxsPgqovXzs98xOEceUJufWvyfAGr1 hL9KUBXCObPsdSuOWaloZqXXd8pBKM+SoVmPuLzB8znMtfVWtRP4XnSbeiuzAUJA iooreHf173Jx/YcxPTkd6yij1RIGZmqBFH6if1i3mx9kocTF5wcJRIGtKk6NtNdi oaYewfDNRifhBX8qVyjVVgT7txvKWgOQfUg6Fz89yBuhjrTVc6CmKiRN3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPSHYeu+dK86oj1EeHO9upFeazpMB8GA1UdIwQY MBaAFD3rWBe75+WhxfsTBVG4SrSIAW+SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMt ZjEwNDg2ZTYwYTUzLzEvMDlJZGg2NzUwcnpxaVBVUjRjNzI2a1Y1ck9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wZTQ5YTEtNzNhOS00NTgxLWI4OGMtZjEwNDg2ZTYwYTUz LzEvUGV0WUY3dm41YUhGLXhNRlViaEt0SWdCYjVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRCcMA0G CSqGSIb3DQEBCwUAA4IBAQA/cT4eobHH2i6C3CDMTC16j3HUenFp7SgtzkVnawKS vBFv+Tf+RNtQ7EEpImGKy8VZqu7K+4QF/+hcN9GG/8gOTdh60tvzNXsNXPAb55G/ O4GkU0BTN4/8j6/X4BeugUAqz27lcNBhpF3SnDm8/uwbUc2ijyexZQdA/EZdD3H4 TiIr3cMzuNifn8ifF8aNSUJlLEHGddJ6OjcbUCw1xf7VCBIZ8CmiaCWImVyAGBqY c470me9BMBn9dE7DPTo0Q54GtycxQGWD1o7Q4tTrqf1JOvoRdRJ9lbRpqewND/p8 Z07YyBZzsG50YxBJLeYGRkJa/Omr2lylxazEEXJpEwG5 -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:13 2026 by rpki-client