This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/9ZpkTQXpmkfvpR0E4XJe3RUF224.roa File: 9ZpkTQXpmkfvpR0E4XJe3RUF224.roa (raw, json) Hash identifier: 03q2A8HDE0gao07Rw7lfTux7UqjzMWOiEnt7Qllp1sU= Subject key identifier: F5:9A:64:4D:05:E9:9A:47:EF:A5:1D:04:E1:72:5E:DD:15:05:DB:6E Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f Certificate serial: 019B7758D43FC26F421B8E3AE25F5AB27694 Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/9ZpkTQXpmkfvpR0E4XJe3RUF224.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203092 IP address blocks: 185.218.24.0/22 maxlen: 24 2a0b:d040::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d4:3f:c2:6f:42:1b:8e:3a:e2:5f:5a:b2:76:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f59a644d05e99a47efa51d04e1725edd1505db6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:b8:99:21:c9:8f:bc:1a:cf:53:f1:fc:db: 25:8d:41:f7:6a:2c:d7:3e:5a:38:9a:c0:2f:f9:da: d9:d0:bb:03:26:00:d2:70:a5:7b:83:4a:c4:a2:6b: 2d:22:50:25:2f:2f:44:64:a4:01:81:93:b4:e3:25: 33:80:8c:15:8a:d4:af:52:78:fa:cb:ff:5a:48:fb: 0b:f2:35:9b:63:ce:84:8b:76:c3:14:0e:c9:13:1f: 8e:53:a5:6a:57:07:63:b3:6c:24:40:38:3b:41:43: 8e:de:6b:c5:5b:57:da:a0:7d:0c:70:87:1b:ef:5f: db:84:17:62:2c:8c:75:44:8c:87:b4:1e:48:76:71: ac:ea:38:bb:40:2e:dc:7b:ba:86:a0:4e:86:11:df: 04:f2:8b:fd:b9:d1:99:1a:07:4f:90:8c:50:f1:22: fe:e9:16:9b:e1:c2:1d:d9:9b:04:b3:d1:39:e3:2b: 36:82:03:ff:1c:36:ec:12:ca:ce:a7:93:f0:65:fa: 35:ee:ed:b0:24:19:d4:e7:0f:fd:5e:2a:ee:e8:57: 1a:f2:15:85:5d:ff:a2:10:84:cc:d0:16:1c:35:ab: fe:45:5d:a3:69:71:54:0b:53:d7:39:1b:a9:92:a5: 17:15:4b:68:df:b5:46:6c:a1:2b:d5:57:0d:62:b6: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9A:64:4D:05:E9:9A:47:EF:A5:1D:04:E1:72:5E:DD:15:05:DB:6E X509v3 Authority Key Identifier: keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/9ZpkTQXpmkfvpR0E4XJe3RUF224.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.24.0/22 IPv6: 2a0b:d040::/29 Signature Algorithm: sha256WithRSAEncryption 2b:95:86:6e:53:d8:d5:ab:e5:26:ca:30:c0:7b:85:cb:79:39: 04:d5:94:7f:45:b9:86:bc:ca:f7:68:ba:ba:0b:60:c6:f7:81: ba:d5:88:0c:d2:83:6e:e1:42:79:74:d2:e3:fd:b6:f5:9c:d6: 79:5b:68:1e:b6:74:f7:8b:52:35:b9:1d:7f:49:51:72:41:ef: 35:a5:d2:74:ca:28:ce:d0:3b:c4:33:46:fa:bc:a1:0b:2b:d2: 4c:ca:4b:be:97:50:e2:0b:77:06:48:87:1c:f7:44:f9:be:a8: 8d:dc:dc:3e:3d:b8:2f:a5:20:b1:cc:79:f4:04:cd:e4:f5:6d: 03:2c:76:e2:32:ad:29:7a:13:3a:5d:48:95:59:50:b6:e6:2f: a4:36:07:71:c6:6e:0c:77:f1:e4:e7:0f:9f:02:f7:1a:11:82: 95:20:3c:54:bb:6d:68:25:52:6f:8c:d8:bd:fe:c9:31:2a:80: fd:e5:3e:27:2a:77:84:ce:32:e5:f6:ea:d1:b7:10:4c:c6:92: 7d:31:af:da:66:84:5c:7b:c3:36:94:49:b2:61:a9:15:b1:16: 94:b4:53:f6:6d:58:82:72:12:0a:93:63:b5:d3:f9:29:e6:65: e2:d3:6c:d1:e3:d8:82:fa:3a:1e:95:2a:d2:62:1c:7f:4d:61: 19:ab:4b:95 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WNQ/wm9CG4464l9asnaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYzgxZDA3NDM1N2RlNWQzMmY4YTY1Y2Q5ZWU3YTU4NWJm M2VjNmYwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTlhNjQ0ZDA1ZTk5YTQ3ZWZhNTFkMDRlMTcyNWVkZDE1MDVkYjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusm4mSHJj7waz1Px/NsljUH3aizX Plo4msAv+drZ0LsDJgDScKV7g0rEomstIlAlLy9EZKQBgZO04yUzgIwVitSvUnj6 y/9aSPsL8jWbY86Ei3bDFA7JEx+OU6VqVwdjs2wkQDg7QUOO3mvFW1faoH0McIcb 71/bhBdiLIx1RIyHtB5IdnGs6ji7QC7ce7qGoE6GEd8E8ov9udGZGgdPkIxQ8SL+ 6Rab4cId2ZsEs9E54ys2ggP/HDbsEsrOp5PwZfo17u2wJBnU5w/9Xiru6Fca8hWF Xf+iEITM0BYcNav+RV2jaXFUC1PXORupkqUXFUto37VGbKEr1VcNYrYSwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPWaZE0F6ZpH76UdBOFyXt0VBdtuMB8GA1UdIwQY MBaAFAzIHQdDV95dMvimXNnuelhb8+xvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEt ZGY1Y2U1NmU3YjRiLzEvOVpwa1RRWHBta2Z2cFIwRTRYSmUzUlVGMjI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEtZGY1Y2U1NmU3YjRi LzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudoYMA0E AgACMAcDBQMqC9BAMA0GCSqGSIb3DQEBCwUAA4IBAQArlYZuU9jVq+UmyjDAe4XL eTkE1ZR/RbmGvMr3aLq6C2DG94G61YgM0oNu4UJ5dNLj/bb1nNZ5W2getnT3i1I1 uR1/SVFyQe81pdJ0yijO0DvEM0b6vKELK9JMyku+l1DiC3cGSIcc90T5vqiN3Nw+ PbgvpSCxzHn0BM3k9W0DLHbiMq0pehM6XUiVWVC25i+kNgdxxm4Md/Hk5w+fAvca EYKVIDxUu21oJVJvjNi9/skxKoD95T4nKneEzjLl9urRtxBMxpJ9Ma/aZoRce8M2 lEmyYakVsRaUtFP2bViCchIKk2O10/kp5mXi02zR49iC+joelSrSYhx/TWEZq0uV -----END CERTIFICATE-----Generated at Mon Feb 9 23:45:11 2026 by rpki-client