This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9sIA33djlAumiBvwNs57z9d4lhw.roa File: 9sIA33djlAumiBvwNs57z9d4lhw.roa (raw, json) Hash identifier: WDgxY+7wxD/8QGWw4/SSO1eJ1DfZ/YA/uGyz6XV0S/8= Subject key identifier: F6:C2:00:DF:77:63:94:0B:A6:88:1B:F0:36:CE:7B:CF:D7:78:96:1C Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1373AEAD794B1F9B5573D1E4C4C54E Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9sIA33djlAumiBvwNs57z9d4lhw.roa Signing time: Fri 02 Jan 2026 00:20:08 +0000 ROA not before: Fri 02 Jan 2026 00:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56504 IP address blocks: 185.251.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:73:ae:ad:79:4b:1f:9b:55:73:d1:e4:c4:c5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6c200df7763940ba6881bf036ce7bcfd778961c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3e:3f:2d:6a:48:f0:04:3b:fa:84:ee:b4:95: a1:cf:5f:c8:a3:e9:d4:ca:40:61:48:c7:c2:ff:1f: 5b:fd:6c:84:dc:9e:cb:f9:82:cf:81:0c:a0:72:cf: 30:09:c9:63:56:ee:2a:de:af:e7:cf:cf:e2:5e:39: 78:9b:43:24:bf:09:62:10:97:be:d7:d0:d8:28:9f: f7:fb:17:57:de:70:97:06:63:fc:8d:cb:25:05:3e: 6a:1e:30:2b:37:44:9a:1d:64:a3:29:b4:50:26:e6: a5:61:8d:94:a6:68:26:cb:2b:01:cf:47:09:80:4f: e5:ea:d3:c8:a2:b1:8d:ff:fc:dc:cb:1d:4b:1c:51: f6:e7:33:15:1e:27:99:e2:34:c6:bf:09:90:74:0e: e7:16:a8:e6:d4:67:07:6c:20:b7:2f:34:07:39:a1: 6d:1e:1f:bd:91:5b:b4:0b:b8:de:86:23:31:2c:26: 47:74:09:3f:97:92:da:87:af:11:1b:d0:d2:bd:a6: f0:e2:d6:5e:10:c8:2b:2d:a7:f9:b6:01:83:df:3b: a4:38:ab:87:d8:e5:9a:c3:16:51:de:d6:00:d7:40: f2:00:30:7e:73:6d:a8:71:d3:b3:37:5b:a1:2e:60: 5a:09:01:87:86:ef:d4:c8:84:d4:a5:31:3a:b7:ac: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C2:00:DF:77:63:94:0B:A6:88:1B:F0:36:CE:7B:CF:D7:78:96:1C X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9sIA33djlAumiBvwNs57z9d4lhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.229.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:75:c7:a0:2a:2a:5e:af:ca:84:23:28:30:18:ae:59:b3:a2: eb:50:c9:21:db:95:6d:69:e8:33:18:ef:8c:49:79:d2:52:ab: d6:18:bf:aa:ea:3b:5e:03:8d:56:a2:0b:0c:bc:a2:79:1e:27: c1:e7:36:14:ab:6a:8c:42:a1:14:94:c8:69:e2:d3:e4:4f:b7: 25:29:56:c7:0e:37:5d:6a:50:c3:c6:d3:d5:95:86:14:6c:19: 3d:12:ec:1a:db:e7:26:d4:41:9b:61:37:ff:b1:d0:fb:c9:cb: 42:82:5b:06:7e:f1:a9:b6:d2:99:ed:fe:d5:58:a8:be:a3:93: 51:37:be:23:6b:a2:b4:b9:b7:f8:4f:80:62:5b:9c:d0:3c:3a: 6d:0f:95:3e:0f:c2:96:70:79:96:21:38:df:85:fc:96:7d:dc: 9b:57:7c:12:db:68:fe:78:d2:f5:67:05:2c:c1:07:e9:69:da: 0c:6d:70:da:83:95:d4:32:5d:df:c8:ad:4c:b0:57:1b:c0:e7: 87:42:f1:dc:f6:b8:d1:bd:df:d3:78:29:14:d4:21:6e:06:8e: 12:8a:dc:eb:12:aa:be:40:01:0a:17:62:7c:ee:ae:84:13:bc: d0:d9:f7:b3:8e:77:d4:1f:63:61:e3:f4:84:d5:d2:fe:31:61: 5a:68:15:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E3OurXlLH5tVc9HkxMVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmMyMDBkZjc3NjM5NDBiYTY4ODFiZjAzNmNlN2JjZmQ3Nzg5NjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT4/LWpI8AQ7+oTutJWhz1/Io+nU ykBhSMfC/x9b/WyE3J7L+YLPgQygcs8wCcljVu4q3q/nz8/iXjl4m0MkvwliEJe+ 19DYKJ/3+xdX3nCXBmP8jcslBT5qHjArN0SaHWSjKbRQJualYY2UpmgmyysBz0cJ gE/l6tPIorGN//zcyx1LHFH25zMVHieZ4jTGvwmQdA7nFqjm1GcHbCC3LzQHOaFt Hh+9kVu0C7jehiMxLCZHdAk/l5Lah68RG9DSvabw4tZeEMgrLaf5tgGD3zukOKuH 2OWawxZR3tYA10DyADB+c22ocdOzN1uhLmBaCQGHhu/UyITUpTE6t6x29QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPbCAN93Y5QLpogb8DbOe8/XeJYcMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvOXNJQTMzZGpsQXVtaUJ2d05zNTd6OWQ0bGh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufvlMA0G CSqGSIb3DQEBCwUAA4IBAQAvdcegKiper8qEIygwGK5Zs6LrUMkh25VtaegzGO+M SXnSUqvWGL+q6jteA41WogsMvKJ5HifB5zYUq2qMQqEUlMhp4tPkT7clKVbHDjdd alDDxtPVlYYUbBk9Euwa2+cm1EGbYTf/sdD7yctCglsGfvGpttKZ7f7VWKi+o5NR N74ja6K0ubf4T4BiW5zQPDptD5U+D8KWcHmWITjfhfyWfdybV3wS22j+eNL1ZwUs wQfpadoMbXDag5XUMl3fyK1MsFcbwOeHQvHc9rjRvd/TeCkU1CFuBo4SitzrEqq+ QAEKF2J87q6EE7zQ2fezjnfUH2Nh4/SE1dL+MWFaaBWF -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:23 2026 by rpki-client