This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/v9NaEdKzC8X1yV6jmpK7d2qNjF0.roa File: v9NaEdKzC8X1yV6jmpK7d2qNjF0.roa (raw, json) Hash identifier: HsVzpPNEo4X7pN1jnhjgGZFS2tyRpInJqLP27FGb47M= Subject key identifier: BF:D3:5A:11:D2:B3:0B:C5:F5:C9:5E:A3:9A:92:BB:77:6A:8D:8C:5D Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8 Certificate serial: 019B7C131E075FBA7709F0A7E0D7E1075052 Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/v9NaEdKzC8X1yV6jmpK7d2qNjF0.roa Signing time: Fri 02 Jan 2026 00:19:46 +0000 ROA not before: Fri 02 Jan 2026 00:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51201 IP address blocks: 185.231.5.0/24 maxlen: 24 2a0c:3500:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:1e:07:5f:ba:77:09:f0:a7:e0:d7:e1:07:50:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8 Validity Not Before: Jan 2 00:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfd35a11d2b30bc5f5c95ea39a92bb776a8d8c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:05:01:05:08:02:63:68:11:12:94:4d:55: 8a:0d:ef:af:47:32:43:70:20:d1:44:12:a5:56:cc: 40:14:36:47:02:35:35:bc:fa:ec:fe:33:61:22:f5: 25:47:9e:d0:f4:89:8c:85:f1:e9:23:ba:f3:93:d7: 6d:df:e8:c0:34:db:1f:a2:00:b4:0a:9e:3b:40:95: f1:51:b4:7e:2f:51:fd:1a:26:72:b2:4a:be:85:ef: cf:1b:d8:36:b3:d4:bc:dc:08:6e:fa:1c:7d:a5:49: 38:45:d6:25:cc:25:e7:f4:45:ed:87:fa:8b:eb:e3: d4:93:ba:fb:66:61:43:84:be:71:f2:83:f3:b2:9f: e4:cf:0d:f5:74:56:b9:c6:7e:ea:a5:52:c2:80:3e: bc:ab:69:3c:9e:3e:59:06:3e:92:8a:83:16:a6:e3: 20:08:5a:e0:aa:4d:f3:55:2c:63:74:c9:71:3d:4e: 37:59:ea:66:59:5a:7f:f6:b9:66:15:e8:61:f0:e2: 6f:0d:c6:0b:da:29:ab:81:10:29:81:5b:a4:8c:89: 95:f7:99:0b:88:33:c5:24:de:3b:1e:a4:87:fe:72: ae:cc:55:5a:f2:e1:f7:97:f6:91:a7:cd:fe:25:b9: b5:a2:9a:8d:9a:d2:96:17:89:cb:af:a3:32:6c:60: 2d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D3:5A:11:D2:B3:0B:C5:F5:C9:5E:A3:9A:92:BB:77:6A:8D:8C:5D X509v3 Authority Key Identifier: keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/v9NaEdKzC8X1yV6jmpK7d2qNjF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.231.5.0/24 IPv6: 2a0c:3500:1::/48 Signature Algorithm: sha256WithRSAEncryption 65:3b:c8:cd:98:22:1b:c7:36:16:e7:c4:00:31:ab:7d:f5:ff: 70:4c:f9:7e:4a:54:ef:64:95:77:76:e5:84:f9:f1:bd:8e:e4: d9:62:1c:8f:b9:04:5b:9a:eb:cc:e7:a0:49:05:4e:8e:cf:84: 7c:a0:82:35:4d:17:72:12:fc:32:08:73:75:94:89:18:d3:e9: ab:86:34:af:80:f5:e5:c1:1e:8f:36:f8:ed:71:76:c4:7e:0d: db:20:c7:6d:70:d3:c1:5a:a0:12:f9:f9:b7:b2:10:1f:a5:f2: 3a:4d:76:0b:be:43:d1:f2:88:41:9f:3a:fc:6a:3e:95:7e:be: a0:d9:5a:ee:d9:cb:2d:2c:5e:57:78:01:4a:54:65:36:b0:e2: 08:07:68:79:b1:d2:f0:62:01:39:3a:a7:ed:59:b2:e0:ac:46: 00:bd:c2:a7:27:b1:df:a1:6d:67:a1:ba:55:4d:d0:ff:34:ee: 16:b5:4f:b9:36:0d:c0:7d:a9:42:04:f9:eb:b0:9f:dd:25:54: 41:06:b0:06:91:83:8e:2e:78:c4:dc:55:24:4d:4f:4d:0c:30: a6:aa:46:dc:c8:c4:ad:1a:54:b1:83:52:b7:3f:7d:95:53:5f: c8:7e:65:05:98:c4:df:0d:71:7f:f4:4c:a5:ed:7d:bf:d3:c7: 81:d9:aa:c4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Ex4HX7p3CfCn4NfhB1BSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMmU4MDc4ZWE0MjBhZmMxYTc4YmY5MjJhOWEyZjI3NDY3 OWM4YTgwHhcNMjYwMTAyMDAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmQzNWExMWQyYjMwYmM1ZjVjOTVlYTM5YTkyYmI3NzZhOGQ4YzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLoFAQUIAmNoERKUTVWKDe+vRzJD cCDRRBKlVsxAFDZHAjU1vPrs/jNhIvUlR57Q9ImMhfHpI7rzk9dt3+jANNsfogC0 Cp47QJXxUbR+L1H9GiZyskq+he/PG9g2s9S83Ahu+hx9pUk4RdYlzCXn9EXth/qL 6+PUk7r7ZmFDhL5x8oPzsp/kzw31dFa5xn7qpVLCgD68q2k8nj5ZBj6SioMWpuMg CFrgqk3zVSxjdMlxPU43WepmWVp/9rlmFehh8OJvDcYL2imrgRApgVukjImV95kL iDPFJN47HqSH/nKuzFVa8uH3l/aRp83+Jbm1opqNmtKWF4nLr6MybGAtUwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFL/TWhHSswvF9cleo5qSu3dqjYxdMB8GA1UdIwQY MBaAFJMugHjqQgr8Gni/kiqaLydGecioMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODkt MzRiYTA3MzhhMzQxLzEvdjlOYUVkS3pDOFgxeVY2am1wSzdkMnFOakYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81ZWVjZjMtNjM3Zi00NTBjLTg0ODktMzRiYTA3MzhhMzQx LzEva3k2QWVPcENDdndhZUwtU0twb3ZKMFo1eUtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuecFMA8E AgACMAkDBwAqDDUAAAEwDQYJKoZIhvcNAQELBQADggEBAGU7yM2YIhvHNhbnxAAx q331/3BM+X5KVO9klXd25YT58b2O5NliHI+5BFua68znoEkFTo7PhHyggjVNF3IS /DIIc3WUiRjT6auGNK+A9eXBHo82+O1xdsR+Ddsgx21w08FaoBL5+beyEB+l8jpN dgu+Q9HyiEGfOvxqPpV+vqDZWu7Zyy0sXld4AUpUZTaw4ggHaHmx0vBiATk6p+1Z suCsRgC9wqcnsd+hbWehulVN0P807ha1T7k2DcB9qUIE+euwn90lVEEGsAaRg44u eMTcVSRNT00MMKaqRtzIxK0aVLGDUrc/fZVTX8h+ZQWYxN8NcX/0TKXtfb/Tx4HZ qsQ= -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:05 2026 by rpki-client