This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/hQ9NotylFYMkqo3bbUqE9OBXr30.roa File: hQ9NotylFYMkqo3bbUqE9OBXr30.roa (raw, json) Hash identifier: DDGD0ACVZ8p80B8GH1cwIOOojO6HokidqY08m4jPrFU= Subject key identifier: 85:0F:4D:A2:DC:A5:15:83:24:AA:8D:DB:6D:4A:84:F4:E0:57:AF:7D Certificate issuer: /CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Certificate serial: 019B7A5B4F0380412055EA25DA8103E08658 Authority key identifier: 81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/hQ9NotylFYMkqo3bbUqE9OBXr30.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207346 IP address blocks: 185.242.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.mft rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4f:03:80:41:20:55:ea:25:da:81:03:e0:86:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8131240bdaa7c12e810a1738bcdf75a746530bc1 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=850f4da2dca5158324aa8ddb6d4a84f4e057af7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:93:0d:96:af:25:1e:11:cd:33:d7:56:4d: 01:57:5e:f4:c5:bb:80:05:11:89:60:97:9a:ec:88: 52:e0:d3:01:c4:28:f9:e0:ae:9e:df:f4:92:aa:92: 94:4e:29:b8:3a:ce:c5:90:7a:e6:c0:69:fd:42:04: 7c:f5:d3:1e:30:6f:ed:36:e2:a8:e1:1d:b9:5f:21: 00:c0:8b:f9:09:00:1e:ea:ce:9b:7f:50:e3:9c:cf: fc:4d:9a:59:48:5a:bd:0a:e9:da:3a:f9:b8:ff:ed: 9a:1b:54:e6:9e:9d:a4:4d:af:8e:bd:37:10:16:63: b6:23:38:fb:2e:b5:9f:fd:44:e7:b2:9c:48:42:6c: a8:1a:97:41:5d:54:f8:6f:d7:59:00:a3:f1:04:45: a9:d3:d1:5b:04:2c:b2:8e:bc:88:23:e2:5a:3b:ae: a4:32:70:73:4c:2a:f8:5a:d1:c1:b2:8d:3f:4b:b4: 31:e1:4b:c0:64:e7:7c:ef:0e:e5:96:05:0f:e7:73: 8d:05:6e:06:81:44:12:25:e5:b6:bc:eb:65:53:23: 5f:02:e6:cf:fa:80:b7:a9:28:3d:c5:cc:4d:f0:8b: 58:af:72:d4:56:6d:0d:52:9d:cb:4b:13:ae:d9:b5: 1e:2d:fa:d9:9a:91:43:4e:8f:66:00:cc:3c:72:50: 1d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0F:4D:A2:DC:A5:15:83:24:AA:8D:DB:6D:4A:84:F4:E0:57:AF:7D X509v3 Authority Key Identifier: keyid:81:31:24:0B:DA:A7:C1:2E:81:0A:17:38:BC:DF:75:A7:46:53:0B:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTEkC9qnwS6BChc4vN91p0ZTC8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/hQ9NotylFYMkqo3bbUqE9OBXr30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/02bf2a-e919-4add-a18e-e9e023609c7f/1/gTEkC9qnwS6BChc4vN91p0ZTC8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.216.0/24 Signature Algorithm: sha256WithRSAEncryption 86:54:21:e6:e6:61:22:2f:ea:27:ea:5a:b0:fc:d3:70:c6:16: 76:60:0c:62:63:77:da:d0:35:9d:f6:21:31:11:59:29:47:ff: 0b:2e:a6:fd:77:a3:f1:ba:80:da:09:ef:18:e5:e2:e8:69:55: 99:46:74:65:41:b3:99:14:e9:bf:d9:e2:1d:e9:87:e1:28:43: 13:ed:ba:da:c4:f6:45:3c:c3:4d:ff:a7:36:d6:7f:2a:ff:c5: 8e:57:91:4a:39:1d:53:ae:6c:b7:ad:a1:d5:31:db:13:1b:ff: 39:83:90:ca:80:97:9b:04:ca:07:ec:ba:10:a0:3c:ae:f1:c9: cb:e3:7c:73:52:32:85:84:e4:d0:68:58:9d:fd:60:5c:e9:cc: e8:46:4d:13:b8:be:c2:3e:d1:39:9d:7b:4f:94:1b:3e:92:b4: 47:6e:41:7c:2c:74:5e:4c:68:7a:96:da:5b:2d:80:b5:34:a5: 0a:93:29:c2:d6:1a:13:4f:5c:89:af:58:52:e4:c2:bf:38:34: a0:1d:fb:2a:1a:e2:4a:43:e1:bc:32:12:05:56:ac:42:79:6c: e4:6e:4e:d8:64:8b:9a:0d:c8:d4:95:d0:a4:e0:b1:ef:5d:f6: de:41:e9:a5:d8:0a:1d:b9:d6:3a:0e:f3:0c:79:3e:08:b5:8a: 49:a9:15:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W08DgEEgVeol2oED4IZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzEyNDBiZGFhN2MxMmU4MTBhMTczOGJjZGY3NWE3NDY1 MzBiYzEwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTBmNGRhMmRjYTUxNTgzMjRhYThkZGI2ZDRhODRmNGUwNTdhZjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvqTDZavJR4RzTPXVk0BV170xbuA BRGJYJea7IhS4NMBxCj54K6e3/SSqpKUTim4Os7FkHrmwGn9QgR89dMeMG/tNuKo 4R25XyEAwIv5CQAe6s6bf1DjnM/8TZpZSFq9CunaOvm4/+2aG1Tmnp2kTa+OvTcQ FmO2Izj7LrWf/UTnspxIQmyoGpdBXVT4b9dZAKPxBEWp09FbBCyyjryII+JaO66k MnBzTCr4WtHBso0/S7Qx4UvAZOd87w7llgUP53ONBW4GgUQSJeW2vOtlUyNfAubP +oC3qSg9xcxN8ItYr3LUVm0NUp3LSxOu2bUeLfrZmpFDTo9mAMw8clAd2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIUPTaLcpRWDJKqN221KhPTgV699MB8GA1UdIwQY MBaAFIExJAvap8EugQoXOLzfdadGUwvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUt ZTllMDIzNjA5YzdmLzEvaFE5Tm90eWxGWU1rcW8zYmJVcUU5T0JYcjMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMmJmMmEtZTkxOS00YWRkLWExOGUtZTllMDIzNjA5Yzdm LzEvZ1RFa0M5cW53UzZCQ2hjNHZOOTFwMFpUQzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufLYMA0G CSqGSIb3DQEBCwUAA4IBAQCGVCHm5mEiL+on6lqw/NNwxhZ2YAxiY3fa0DWd9iEx EVkpR/8LLqb9d6PxuoDaCe8Y5eLoaVWZRnRlQbOZFOm/2eId6YfhKEMT7braxPZF PMNN/6c21n8q/8WOV5FKOR1Trmy3raHVMdsTG/85g5DKgJebBMoH7LoQoDyu8cnL 43xzUjKFhOTQaFid/WBc6czoRk0TuL7CPtE5nXtPlBs+krRHbkF8LHReTGh6ltpb LYC1NKUKkynC1hoTT1yJr1hS5MK/ODSgHfsqGuJKQ+G8MhIFVqxCeWzkbk7YZIua DcjUldCk4LHvXfbeQeml2AodudY6DvMMeT4ItYpJqRWV -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:34 2026 by rpki-client