This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T9-y-QAmDeHC0hHN1pEj_NgcwNM.roa File: T9-y-QAmDeHC0hHN1pEj_NgcwNM.roa (raw, json) Hash identifier: dC8hLfr/p/t07UWGRYeHOEFcz5DJB/T3BEOpG3bwaEE= Subject key identifier: 4F:DF:B2:F9:00:26:0D:E1:C2:D2:11:CD:D6:91:23:FC:D8:1C:C0:D3 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019B7FF1C96DDB2C9EB97A4E37F3A5204B1B Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T9-y-QAmDeHC0hHN1pEj_NgcwNM.roa Signing time: Fri 02 Jan 2026 18:21:50 +0000 ROA not before: Fri 02 Jan 2026 18:21:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210676 IP address blocks: 185.99.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c9:6d:db:2c:9e:b9:7a:4e:37:f3:a5:20:4b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Jan 2 18:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fdfb2f900260de1c2d211cdd69123fcd81cc0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:c7:6f:fe:c4:ce:19:7f:f8:8a:98:2e:af: f2:45:fa:c2:f0:85:88:b3:51:15:bb:12:7f:3d:ce: 6c:a2:86:40:00:da:6a:c8:a4:e8:6c:e7:81:c2:48: 84:be:92:ce:8b:76:0a:0d:3a:76:51:8f:47:48:4b: d9:f8:e3:59:c2:56:5c:eb:cc:e3:7e:4e:3e:2c:cf: 21:99:bb:30:cc:73:c4:ad:ab:c7:0d:9c:24:6d:ab: 11:e2:78:1a:66:19:29:57:82:95:dc:ff:7d:93:86: eb:83:e8:82:a8:2b:c2:e8:a9:90:4e:d6:60:bf:74: 36:fd:5f:d1:d7:b7:24:c4:46:2b:9b:4c:76:e1:f3: 20:fa:1e:c7:dd:20:85:9a:20:81:ac:c9:a1:c2:6b: 73:c3:79:6d:a1:e9:bb:8e:b5:f0:bc:a9:e9:78:77: 6b:e8:f1:7a:a3:8d:bc:f3:17:a6:f9:03:7c:0c:00: 78:1f:ab:19:1a:b0:e2:ff:83:f3:0d:b0:8a:06:b5: 43:f6:fe:10:6f:31:b1:83:d7:ac:b8:60:b7:00:ff: f5:a0:0d:c7:fe:aa:15:d5:08:58:8e:e0:51:ae:66: 91:29:54:5d:70:90:09:92:27:70:64:7b:b0:e3:c4: ea:b4:ec:98:97:76:00:93:91:6c:77:fe:79:b1:fc: c3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DF:B2:F9:00:26:0D:E1:C2:D2:11:CD:D6:91:23:FC:D8:1C:C0:D3 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T9-y-QAmDeHC0hHN1pEj_NgcwNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.97.0/24 Signature Algorithm: sha256WithRSAEncryption 20:3d:c7:17:19:07:75:2e:6b:00:4c:63:8c:87:07:ea:38:c7: 47:dd:b7:52:14:ed:fe:a4:88:10:c2:19:74:61:0c:ec:31:af: fe:a3:92:e9:7a:2d:b5:17:f1:12:87:37:3b:99:ee:b2:19:38: 0d:9d:f2:d7:cc:44:11:cc:e9:6c:5b:30:08:e1:1d:4c:12:a4: b0:b1:ce:73:e8:c0:52:1e:8c:ab:55:06:ca:04:37:0f:a3:52: ac:d6:7c:0a:03:18:05:05:82:dd:cf:2f:84:30:37:ee:dd:d4: 92:e3:8a:d6:ed:7f:58:8f:27:ea:da:e4:42:a7:48:29:50:c5: 8b:0c:d1:14:97:58:54:b3:35:11:1d:02:a9:12:1c:f2:cd:a1: 65:f1:4f:27:44:fa:b6:98:c8:a6:3f:d1:3c:8a:b7:c8:ec:de: 26:32:aa:43:08:53:24:03:46:22:dc:65:0a:81:bd:c4:e7:76: 70:8a:ba:9c:89:49:8c:2c:f1:94:7e:02:92:c1:49:e8:ad:d2: 41:37:cb:85:92:50:55:ff:eb:97:28:84:57:ea:e5:ee:41:a1: 5d:5f:9d:60:7d:d2:07:90:7e:78:59:d6:14:70:1f:ab:0b:1c: 14:7c:4f:20:ee:d9:50:b2:75:f4:48:d8:68:ba:99:bc:0c:69: ca:e9:56:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8clt2yyeuXpON/OlIEsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjYwMTAyMTgyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmRmYjJmOTAwMjYwZGUxYzJkMjExY2RkNjkxMjNmY2Q4MWNjMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1XHb/7Ezhl/+IqYLq/yRfrC8IWI s1EVuxJ/Pc5sooZAANpqyKTobOeBwkiEvpLOi3YKDTp2UY9HSEvZ+ONZwlZc68zj fk4+LM8hmbswzHPEravHDZwkbasR4ngaZhkpV4KV3P99k4brg+iCqCvC6KmQTtZg v3Q2/V/R17ckxEYrm0x24fMg+h7H3SCFmiCBrMmhwmtzw3ltoem7jrXwvKnpeHdr 6PF6o4288xem+QN8DAB4H6sZGrDi/4PzDbCKBrVD9v4QbzGxg9esuGC3AP/1oA3H /qoV1QhYjuBRrmaRKVRdcJAJkidwZHuw48TqtOyYl3YAk5Fsd/55sfzDdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/fsvkAJg3hwtIRzdaRI/zYHMDTMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvVDkteS1RQW1EZUhDMGhITjFwRWpfTmdjd05NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWNhMA0G CSqGSIb3DQEBCwUAA4IBAQAgPccXGQd1LmsATGOMhwfqOMdH3bdSFO3+pIgQwhl0 YQzsMa/+o5Lpei21F/EShzc7me6yGTgNnfLXzEQRzOlsWzAI4R1MEqSwsc5z6MBS HoyrVQbKBDcPo1Ks1nwKAxgFBYLdzy+EMDfu3dSS44rW7X9Yjyfq2uRCp0gpUMWL DNEUl1hUszURHQKpEhzyzaFl8U8nRPq2mMimP9E8irfI7N4mMqpDCFMkA0Yi3GUK gb3E53ZwirqciUmMLPGUfgKSwUnordJBN8uFklBV/+uXKIRX6uXuQaFdX51gfdIH kH54WdYUcB+rCxwUfE8g7tlQsnX0SNhoupm8DGnK6VZE -----END CERTIFICATE-----Generated at Tue Jan 20 09:08:56 2026 by rpki-client