This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa File: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (raw, json) Hash identifier: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0= Subject key identifier: F6:45:7C:7D:49:7F:2A:B8:8B:48:B5:6D:C6:B9:11:AB:AA:B7:23:1D Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0 Certificate serial: 019B7BA3350CE7DAFB5AF2ED965217638AC7 Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa Signing time: Thu 01 Jan 2026 22:17:32 +0000 ROA not before: Thu 01 Jan 2026 22:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 46.28.236.0/24 maxlen: 24 185.228.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:35:0c:e7:da:fb:5a:f2:ed:96:52:17:63:8a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0 Validity Not Before: Jan 1 22:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6457c7d497f2ab88b48b56dc6b911abaab7231d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:08:a3:13:fa:1f:a1:0d:0c:41:d5:4a:d2: 0f:28:d9:79:10:42:c3:02:dc:b2:ad:f3:16:5b:e0: 81:e0:dc:4f:09:95:12:5a:cb:5b:d4:39:6c:99:a8: cf:b0:83:1b:24:76:ef:8f:e9:17:95:a6:ab:ea:fa: 4e:c0:34:5e:eb:35:19:a4:c7:fd:92:9e:8c:41:7a: 8d:2e:64:22:c7:96:30:d4:a9:4d:a5:d4:ad:f3:97: 4f:b6:56:96:05:0a:1f:3e:8c:7f:7a:31:ef:c1:2a: 71:5d:c0:c3:d5:ee:b7:ec:a3:cb:66:ab:c8:e2:27: ad:ca:07:3a:2d:6d:8e:8e:a2:78:cb:d8:b2:8c:72: a6:c6:bb:bf:d0:74:27:76:c3:56:75:55:25:d5:f6: 02:22:8a:4b:1c:da:1f:81:9c:31:c9:64:9c:0a:d9: f4:f4:ba:a8:75:a6:54:3f:7f:32:1c:71:27:9a:a3: 50:ee:f3:ae:77:bc:35:89:2c:6f:ce:60:74:6e:f0: 9f:27:0d:64:d3:ff:7b:0c:8e:aa:6a:2c:f8:1f:4e: 60:f5:22:f2:1f:59:34:9e:9f:c1:db:4f:c7:32:01: ec:2a:7d:c0:5b:96:fc:b8:71:27:14:c4:d9:6c:5c: ad:f4:48:ad:37:cb:6d:bd:36:18:f5:75:27:71:30: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:45:7C:7D:49:7F:2A:B8:8B:48:B5:6D:C6:B9:11:AB:AA:B7:23:1D X509v3 Authority Key Identifier: keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.236.0/24 185.228.207.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:42:dc:10:d4:01:f2:3f:ef:08:26:47:52:17:35:63:ba:31: f9:62:20:ae:c1:9e:3d:0f:32:0b:4a:67:29:4e:00:03:44:fc: da:98:8b:bc:94:b3:8d:7e:97:8f:b4:40:c3:1b:ad:3e:87:2b: d0:d4:6c:f4:61:f5:ed:b3:f5:66:56:a4:7d:ef:c5:1c:c6:19: dc:06:58:c0:66:39:08:ea:b8:be:25:5c:b6:6d:35:a3:4d:65: f0:24:56:41:2f:6c:18:1c:ea:02:35:e4:aa:19:52:0f:32:9c: 58:f9:c9:e2:64:9a:48:53:c0:57:87:18:ff:de:6e:30:bf:dc: 41:fc:fb:cb:f0:86:a2:76:10:1a:d8:90:b0:11:36:1e:f4:ca: 62:1e:0c:48:71:a3:e7:dc:c2:4b:42:0a:49:ca:58:98:ef:bd: c5:c1:5b:9c:8c:e4:6d:9c:57:e3:f6:df:67:69:ad:47:46:fd: f6:45:8b:aa:0d:4b:6d:1c:41:dd:98:42:c4:0d:12:59:eb:db: 18:bc:92:58:99:94:88:9c:fd:f4:ef:05:8f:58:94:0f:89:a2: 34:57:e6:35:c0:16:29:31:88:d0:e3:be:5a:5c:38:27:82:28: bc:fb:77:f6:75:7c:51:a9:c8:1f:cb:c5:c0:a0:e4:94:09:ee: 97:ab:83:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7ozUM59r7WvLtllIXY4rHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhY2U2NzI1YTBhMGRkZDE2ODA0ODBhODM3ODVkMmNkNTdi ZjZhYjAwHhcNMjYwMTAxMjIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjQ1N2M3ZDQ5N2YyYWI4OGI0OGI1NmRjNmI5MTFhYmFhYjcyMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO0IoxP6H6ENDEHVStIPKNl5EELD AtyyrfMWW+CB4NxPCZUSWstb1DlsmajPsIMbJHbvj+kXlaar6vpOwDRe6zUZpMf9 kp6MQXqNLmQix5Yw1KlNpdSt85dPtlaWBQofPox/ejHvwSpxXcDD1e637KPLZqvI 4ietygc6LW2OjqJ4y9iyjHKmxru/0HQndsNWdVUl1fYCIopLHNofgZwxyWScCtn0 9LqodaZUP38yHHEnmqNQ7vOud7w1iSxvzmB0bvCfJw1k0/97DI6qaiz4H05g9SLy H1k0np/B20/HMgHsKn3AW5b8uHEnFMTZbFyt9EitN8ttvTYY9XUncTA+BwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPZFfH1Jfyq4i0i1bca5EauqtyMdMB8GA1UdIwQY MBaAFKrOZyWgoN3RaASAqDeF0s1Xv2qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTkt NzJhMDgyY2RiMTgyLzEvOWtWOGZVbF9LcmlMU0xWdHhya1JxNnEzSXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTktNzJhMDgyY2RiMTgy LzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhzsAwQA ueTPMA0GCSqGSIb3DQEBCwUAA4IBAQB6QtwQ1AHyP+8IJkdSFzVjujH5YiCuwZ49 DzILSmcpTgADRPzamIu8lLONfpePtEDDG60+hyvQ1Gz0YfXts/VmVqR978Ucxhnc BljAZjkI6ri+JVy2bTWjTWXwJFZBL2wYHOoCNeSqGVIPMpxY+cniZJpIU8BXhxj/ 3m4wv9xB/PvL8IaidhAa2JCwETYe9MpiHgxIcaPn3MJLQgpJyliY773FwVucjORt nFfj9t9naa1HRv32RYuqDUttHEHdmELEDRJZ69sYvJJYmZSInP307wWPWJQPiaI0 V+Y1wBYpMYjQ475aXDgngii8+3f2dXxRqcgfy8XAoOSUCe6Xq4M2 -----END CERTIFICATE-----Generated at Wed Jan 21 07:48:46 2026 by rpki-client