This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa File: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (raw, json) Hash identifier: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0= Subject key identifier: 5D:26:7B:2F:41:38:C6:66:2F:52:0B:13:67:75:EF:5C:59:78:12:7A Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Certificate serial: 019B7F14F1D27588019ECCF1BBF9D38A7CA7 Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa Signing time: Fri 02 Jan 2026 14:20:37 +0000 ROA not before: Fri 02 Jan 2026 14:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 185.112.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:f1:d2:75:88:01:9e:cc:f1:bb:f9:d3:8a:7c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Validity Not Before: Jan 2 14:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5d267b2f4138c6662f520b136775ef5c5978127a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:2b:ee:c3:89:57:81:11:c4:5e:92:01:f7: ff:e4:a8:38:ed:90:b5:ca:d1:22:47:d8:6e:f5:98: b0:b5:6e:f5:51:8b:e6:e1:3e:42:46:80:a3:50:b8: 27:4b:4c:d5:8b:c7:f8:8d:91:03:24:c7:0c:4f:6c: 47:c2:cc:cd:3b:32:e0:74:82:5e:f2:dd:f1:eb:d0: 8c:7e:98:db:41:5b:b1:90:05:72:12:8c:d8:04:fd: 52:a0:d0:7a:59:b2:04:25:58:22:4b:64:f3:17:27: 68:a1:4d:12:a8:f8:87:63:e6:51:48:e5:09:06:b9: e4:a3:fe:fb:60:a3:6d:f7:e2:ff:eb:c1:6a:aa:9b: 81:04:2c:9b:75:67:3c:62:68:51:48:4c:46:e5:4e: 56:f3:1d:36:ef:c1:cc:8c:13:77:5b:cf:b1:88:23: 00:a9:11:dd:d3:c9:04:87:38:94:33:45:7c:cb:b0: b5:43:86:2b:2f:e0:78:65:80:02:66:8e:f9:52:e4: 86:b4:08:6d:e6:c1:79:c1:41:5b:d2:da:b3:ae:de: 54:3c:33:d4:b8:be:53:66:d6:09:e8:df:f2:09:00: 3f:9a:d9:e5:85:4d:9a:1c:2d:a3:ed:cb:36:ef:bf: 70:13:28:5c:55:2b:7e:56:74:d8:7d:83:7e:c1:24: 82:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:26:7B:2F:41:38:C6:66:2F:52:0B:13:67:75:EF:5C:59:78:12:7A X509v3 Authority Key Identifier: keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.188.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:81:6d:c7:9f:63:31:9d:4e:86:d9:8a:2f:c5:e9:ea:49:48: 9d:ba:b4:ef:60:97:2b:e8:ea:48:b5:76:84:42:73:a8:dc:c8: 90:4e:f4:71:dd:b1:cb:29:7f:e8:52:f9:4e:40:97:de:f0:75: 63:38:9d:c4:58:94:7a:99:d7:33:c8:0d:1e:15:be:66:89:25: d3:e5:77:12:0b:78:5d:8e:b1:c3:6e:3e:28:5b:eb:c1:42:6b: f1:9b:15:87:b7:ac:67:72:3a:68:6b:90:9a:ae:e4:06:10:16: 3a:71:c7:2f:54:57:82:6a:3c:ec:6b:33:4b:bf:b0:fd:d9:b2: 41:40:52:e7:73:4f:97:32:5f:18:be:0e:e6:ec:a8:3a:74:42: 86:ce:8b:dc:aa:6e:f6:a9:98:91:07:10:4f:b8:1f:f7:e4:a2: 03:4e:29:2b:36:5f:f2:29:21:d6:3d:bb:c6:86:3c:47:51:2a: 85:7d:b3:d1:34:98:f7:47:d1:5b:81:2a:f0:f9:a0:8b:5a:72: 3a:ed:b4:7f:38:a3:44:7e:66:9d:fc:4d:1d:6d:b2:da:38:ca: 27:1b:9c:13:1d:b7:64:14:08:f7:04:4c:58:ef:f3:db:30:c7: 93:14:64:8e:a0:89:f8:20:ae:de:d3:63:f0:48:34:be:a4:e8: 2e:8c:26:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FPHSdYgBnszxu/nTinynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh NjRkNWEwHhcNMjYwMTAyMTQyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZDI2N2IyZjQxMzhjNjY2MmY1MjBiMTM2Nzc1ZWY1YzU5NzgxMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudQr7sOJV4ERxF6SAff/5Kg47ZC1 ytEiR9hu9ZiwtW71UYvm4T5CRoCjULgnS0zVi8f4jZEDJMcMT2xHwszNOzLgdIJe 8t3x69CMfpjbQVuxkAVyEozYBP1SoNB6WbIEJVgiS2TzFydooU0SqPiHY+ZRSOUJ Brnko/77YKNt9+L/68FqqpuBBCybdWc8YmhRSExG5U5W8x0278HMjBN3W8+xiCMA qRHd08kEhziUM0V8y7C1Q4YrL+B4ZYACZo75UuSGtAht5sF5wUFb0tqzrt5UPDPU uL5TZtYJ6N/yCQA/mtnlhU2aHC2j7cs2779wEyhcVSt+VnTYfYN+wSSCCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF0mey9BOMZmL1ILE2d171xZeBJ6MB8GA1UdIwQY MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt ODhlNjgxNjI3MWY3LzEvWFNaN0wwRTR4bVl2VWdzVFozWHZYRmw0RW5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3 LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXC8MA0G CSqGSIb3DQEBCwUAA4IBAQCKgW3Hn2MxnU6G2YovxenqSUidurTvYJcr6OpItXaE QnOo3MiQTvRx3bHLKX/oUvlOQJfe8HVjOJ3EWJR6mdczyA0eFb5miSXT5XcSC3hd jrHDbj4oW+vBQmvxmxWHt6xncjpoa5CaruQGEBY6cccvVFeCajzsazNLv7D92bJB QFLnc0+XMl8Yvg7m7Kg6dEKGzovcqm72qZiRBxBPuB/35KIDTikrNl/yKSHWPbvG hjxHUSqFfbPRNJj3R9FbgSrw+aCLWnI67bR/OKNEfmad/E0dbbLaOMonG5wTHbdk FAj3BExY7/PbMMeTFGSOoIn4IK7e02PwSDS+pOgujCaV -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:21 2026 by rpki-client