This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/ahiZqqU1sLMyuZr836gd9oxj7Kw.roa File: ahiZqqU1sLMyuZr836gd9oxj7Kw.roa (raw, json) Hash identifier: ihPj0GX7KiHEc0nRL0sGVIybPI61K8/7t6F6pKkft+0= Subject key identifier: 6A:18:99:AA:A5:35:B0:B3:32:B9:9A:FC:DF:A8:1D:F6:8C:63:EC:AC Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a Certificate serial: 019B7D5AECC5FD446D2CE355E091DD071865 Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/ahiZqqU1sLMyuZr836gd9oxj7Kw.roa Signing time: Fri 02 Jan 2026 06:17:49 +0000 ROA not before: Fri 02 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.11.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ec:c5:fd:44:6d:2c:e3:55:e0:91:dd:07:18:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a Validity Not Before: Jan 2 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a1899aaa535b0b332b99afcdfa81df68c63ecac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:6e:82:55:f2:7b:48:04:0e:39:ce:f6:e3: ed:7a:fb:3d:fe:ce:a1:69:4a:13:19:a2:ef:53:be: 6d:b7:2e:12:54:77:98:43:60:db:43:51:b2:06:c2: c6:11:65:05:64:4b:32:98:78:36:3d:cc:77:da:d8: d4:35:75:ae:d5:96:71:c5:87:69:85:cc:3a:01:7a: 88:31:32:60:e6:bd:57:05:1a:d8:2d:fe:99:28:09: 0f:2e:01:69:bc:92:36:77:38:c7:f4:18:96:25:8b: 1f:f4:bd:2f:2d:b0:46:54:1c:20:ee:20:96:69:cf: 8a:13:df:0d:0b:b5:d6:89:28:3e:f2:5a:1a:7b:50: 8f:6a:29:cc:9c:0c:0b:69:29:8d:e8:b9:c5:32:b5: 6f:1e:6a:91:01:96:7c:0d:ca:bb:1c:d6:e6:3c:91: a6:24:bc:21:3f:57:75:dd:54:83:ec:e8:3e:cc:7e: 42:23:2d:e8:be:ab:db:21:d0:a5:86:1c:c6:ef:8f: 66:ee:91:a7:7c:e5:f9:a3:8f:0b:aa:65:df:ad:0f: 78:47:a0:a2:07:b5:92:c4:60:bc:f6:67:04:03:eb: b8:d4:fa:3f:ab:c6:cc:16:7d:e6:fd:70:2f:02:a8: 2b:2e:01:33:d4:ad:d9:52:27:99:58:5f:63:42:11: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:18:99:AA:A5:35:B0:B3:32:B9:9A:FC:DF:A8:1D:F6:8C:63:EC:AC X509v3 Authority Key Identifier: keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/ahiZqqU1sLMyuZr836gd9oxj7Kw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.11.126.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ad:3b:24:3b:81:4c:ae:95:f7:61:88:9c:9c:97:e5:22:8b: 1b:05:76:b0:0c:70:82:1c:47:20:d0:c8:3e:7b:5a:78:32:79: ad:4c:76:56:11:99:ea:26:8c:d2:6b:ec:4e:bf:7a:41:29:71: f1:76:28:57:29:ea:ad:e2:e5:f1:b6:11:66:8f:42:0c:75:88: 55:8e:83:d8:5e:e4:4d:c6:ad:46:81:59:82:2d:30:1e:97:ca: 36:94:16:82:cf:e6:82:b6:06:ff:e3:74:34:d1:8e:69:c9:ee: 2e:2d:94:67:96:23:46:49:e9:1c:b8:fd:a1:f2:7a:e7:79:fc: 6c:24:5b:8f:85:67:70:3c:76:57:77:5a:25:87:18:7d:f2:aa: d3:78:c3:c8:0c:6f:c6:6f:5a:96:54:7c:cf:59:6a:82:65:0f: 6a:3a:83:70:74:cf:5d:bf:e4:e1:36:b0:b3:2c:08:91:fc:1d: eb:f3:39:a6:46:34:a6:c0:49:f5:d8:71:7a:c3:46:44:ed:e6: 2a:c5:81:fd:2f:1d:90:a8:a3:a6:53:42:a4:c7:1c:90:e7:57: 19:db:4b:c8:57:e1:0f:2e:93:d0:7d:3a:5c:b7:7d:62:f7:0b: da:f5:77:37:6f:4c:ad:47:75:5d:6a:a7:81:f4:28:65:4d:bc: 29:e7:ef:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WuzF/URtLONV4JHdBxhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTU1MGU5MDhhOWI5Njg4YzI5YWFjOTg5NTM1M2RlYTgz NmM0NWEwHhcNMjYwMTAyMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTE4OTlhYWE1MzViMGIzMzJiOTlhZmNkZmE4MWRmNjhjNjNlY2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJFuglXye0gEDjnO9uPtevs9/s6h aUoTGaLvU75tty4SVHeYQ2DbQ1GyBsLGEWUFZEsymHg2Pcx32tjUNXWu1ZZxxYdp hcw6AXqIMTJg5r1XBRrYLf6ZKAkPLgFpvJI2dzjH9BiWJYsf9L0vLbBGVBwg7iCW ac+KE98NC7XWiSg+8loae1CPainMnAwLaSmN6LnFMrVvHmqRAZZ8Dcq7HNbmPJGm JLwhP1d13VSD7Og+zH5CIy3ovqvbIdClhhzG749m7pGnfOX5o48LqmXfrQ94R6Ci B7WSxGC89mcEA+u41Po/q8bMFn3m/XAvAqgrLgEz1K3ZUieZWF9jQhGDCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGoYmaqlNbCzMrma/N+oHfaMY+ysMB8GA1UdIwQY MBaAFJpVUOkIqblojCmqyYlTU96oNsRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTIt MTM5OWEyODIyMjdhLzEvYWhpWnFxVTFzTE15dVpyODM2Z2Q5b3hqN0t3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9iYmIzMGItMjY4OC00YTZlLWIyYTItMTM5OWEyODIyMjdh LzEvbWxWUTZRaXB1V2lNS2FySmlWTlQzcWcyeEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQt+MA0G CSqGSIb3DQEBCwUAA4IBAQBFrTskO4FMrpX3YYicnJflIosbBXawDHCCHEcg0Mg+ e1p4MnmtTHZWEZnqJozSa+xOv3pBKXHxdihXKeqt4uXxthFmj0IMdYhVjoPYXuRN xq1GgVmCLTAel8o2lBaCz+aCtgb/43Q00Y5pye4uLZRnliNGSekcuP2h8nrnefxs JFuPhWdwPHZXd1olhxh98qrTeMPIDG/Gb1qWVHzPWWqCZQ9qOoNwdM9dv+ThNrCz LAiR/B3r8zmmRjSmwEn12HF6w0ZE7eYqxYH9Lx2QqKOmU0KkxxyQ51cZ20vIV+EP LpPQfTpct31i9wva9Xc3b0ytR3VdaqeB9ChlTbwp5+/r -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:04 2026 by rpki-client