This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/9qy5igh9qX4Uci7bRZZV_psOu7w.roa File: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (raw, json) Hash identifier: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU= Subject key identifier: F6:AC:B9:8A:08:7D:A9:7E:14:72:2E:DB:45:96:55:FE:9B:0E:BB:BC Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429 Certificate serial: 019B7758C2103E0D9B6FD4D2916EC6AF2C39 Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/9qy5igh9qX4Uci7bRZZV_psOu7w.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56595 IP address blocks: 185.94.232.0/22 maxlen: 24 185.94.232.0/23 maxlen: 24 185.94.232.0/24 maxlen: 24 185.94.233.0/24 maxlen: 24 185.94.234.0/23 maxlen: 24 185.94.234.0/24 maxlen: 24 185.94.235.0/24 maxlen: 24 2a03:e840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c2:10:3e:0d:9b:6f:d4:d2:91:6e:c6:af:2c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a10c73530bb684fd569dfc432704675704183429 Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6acb98a087da97e14722edb459655fe9b0ebbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:41:5d:25:54:2e:3f:14:21:b1:94:aa:a0:d6: a2:24:5a:a1:2b:dc:b5:d1:8f:10:da:a1:83:be:84: 5c:1a:61:d2:14:3c:41:af:16:67:8e:a0:c2:b0:3e: 22:16:77:32:86:c9:2f:80:a2:d6:3b:72:ee:0e:a8: 5a:58:08:7b:a8:10:ae:2b:b5:dd:ce:da:e6:ee:d3: 9e:6a:68:9a:b6:a2:89:ba:50:cd:77:03:54:92:a2: 12:bd:4b:c1:c7:5c:e6:3b:8d:b3:56:42:f8:79:e1: 27:d6:8b:1b:02:2f:96:94:8a:ef:49:fd:7a:e5:63: cd:89:f6:71:be:60:cd:ce:bf:66:41:88:9c:8b:5a: a4:ec:10:ff:8a:9d:2b:3b:5d:34:72:54:85:e1:be: b9:0c:e8:fd:c3:8e:77:ce:6c:b8:e7:d2:b8:38:c7: b3:19:d8:e4:62:87:aa:11:01:6d:46:fd:ce:1f:62: e5:80:e3:63:af:78:c7:c6:07:83:2e:49:92:b6:58: 75:db:62:e6:78:fc:86:f5:14:87:f4:c9:1c:1c:b8: c0:aa:e1:9a:f4:f1:73:6d:d3:4e:e4:1f:7b:8a:cd: e6:d2:3c:51:4c:97:4c:fa:96:73:1c:84:54:33:b7: e5:c4:92:ef:e2:52:bf:66:06:ef:72:ab:8c:05:cb: 71:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AC:B9:8A:08:7D:A9:7E:14:72:2E:DB:45:96:55:FE:9B:0E:BB:BC X509v3 Authority Key Identifier: keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/9qy5igh9qX4Uci7bRZZV_psOu7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.232.0/22 IPv6: 2a03:e840::/32 Signature Algorithm: sha256WithRSAEncryption 2f:77:58:af:fa:c7:17:42:72:cd:00:f5:7a:29:a6:e9:03:84: 48:bd:ae:ce:48:a0:6c:5b:cb:26:6b:61:be:1c:25:c7:d1:e7: c2:a6:ee:2a:bc:8d:13:39:c1:11:ca:0a:bf:6a:4c:3e:2b:ea: 40:8c:72:fb:87:f1:ba:87:82:c8:91:47:f9:8a:27:53:bc:3d: d3:64:a3:d2:6c:4c:fb:7c:f1:7e:01:30:69:5f:ff:9e:2f:34: e2:3a:9d:26:f5:67:e4:26:c9:99:80:e0:bd:e0:4b:69:38:5d: 7f:1b:f2:7d:92:d2:e4:29:d9:69:cc:ca:ed:78:60:d3:81:ba: ca:9d:fd:b7:31:52:25:b7:05:3f:19:5e:d6:16:82:4b:4d:a1: da:8e:38:07:74:37:f1:77:22:fb:19:74:76:5c:ae:c8:dc:85: 58:73:55:b1:f1:3f:ca:76:78:26:1e:d0:18:e9:e3:89:a3:1a: 25:fe:ec:af:23:25:0c:02:43:12:36:39:88:3a:bb:b6:27:c9: 9d:3c:75:e8:e3:c5:97:91:e8:81:7f:5e:68:78:0f:1b:70:50: 30:ad:f7:52:72:f2:9d:4d:db:6f:c9:ff:55:9c:e0:c7:a2:3f: c5:5f:2e:e3:e5:22:b8:55:29:fa:17:85:8d:57:4a:c4:86:67: 0f:6a:89:6b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WMIQPg2bb9TSkW7Gryw5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx ODM0MjkwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmFjYjk4YTA4N2RhOTdlMTQ3MjJlZGI0NTk2NTVmZTliMGViYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0FdJVQuPxQhsZSqoNaiJFqhK9y1 0Y8Q2qGDvoRcGmHSFDxBrxZnjqDCsD4iFncyhskvgKLWO3LuDqhaWAh7qBCuK7Xd ztrm7tOeamiatqKJulDNdwNUkqISvUvBx1zmO42zVkL4eeEn1osbAi+WlIrvSf16 5WPNifZxvmDNzr9mQYici1qk7BD/ip0rO100clSF4b65DOj9w453zmy459K4OMez GdjkYoeqEQFtRv3OH2LlgONjr3jHxgeDLkmStlh122LmePyG9RSH9MkcHLjAquGa 9PFzbdNO5B97is3m0jxRTJdM+pZzHIRUM7flxJLv4lK/ZgbvcquMBctxiwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPasuYoIfal+FHIu20WWVf6bDru8MB8GA1UdIwQY MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt N2QwODI5MWE3NjYyLzEvOXF5NWlnaDlxWDRVY2k3YlJaWlZfcHNPdTd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuV7oMA0E AgACMAcDBQAqA+hAMA0GCSqGSIb3DQEBCwUAA4IBAQAvd1iv+scXQnLNAPV6Kabp A4RIva7OSKBsW8sma2G+HCXH0efCpu4qvI0TOcERygq/akw+K+pAjHL7h/G6h4LI kUf5iidTvD3TZKPSbEz7fPF+ATBpX/+eLzTiOp0m9WfkJsmZgOC94EtpOF1/G/J9 ktLkKdlpzMrteGDTgbrKnf23MVIltwU/GV7WFoJLTaHajjgHdDfxdyL7GXR2XK7I 3IVYc1Wx8T/KdngmHtAY6eOJoxol/uyvIyUMAkMSNjmIOru2J8mdPHXo48WXkeiB f15oeA8bcFAwrfdScvKdTdtvyf9VnODHoj/FXy7j5SK4VSn6F4WNV0rEhmcPaolr -----END CERTIFICATE-----Generated at Mon Jan 26 07:41:42 2026 by rpki-client