This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/I9HH-b3uhEYMGd5k7Iye-im2vcM.roa File: I9HH-b3uhEYMGd5k7Iye-im2vcM.roa (raw, json) Hash identifier: 4R5IweuaeIYK4isAQkRjmQfBB4/D3ub3P+G0IZYR6QU= Subject key identifier: 23:D1:C7:F9:BD:EE:84:46:0C:19:DE:64:EC:8C:9E:FA:29:B6:BD:C3 Certificate issuer: /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5 Certificate serial: 019B7C7F85D200577292D99EAED907531E7B Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/I9HH-b3uhEYMGd5k7Iye-im2vcM.roa Signing time: Fri 02 Jan 2026 02:18:10 +0000 ROA not before: Fri 02 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201901 IP address blocks: 185.204.184.0/24 maxlen: 24 2a0e:c940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:85:d2:00:57:72:92:d9:9e:ae:d9:07:53:1e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5 Validity Not Before: Jan 2 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23d1c7f9bdee84460c19de64ec8c9efa29b6bdc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:a9:5c:e4:36:ba:ca:30:f0:80:98:75:f8: 1d:c5:55:ca:6a:82:1c:61:28:ea:8e:16:a1:58:f3: a0:05:16:96:45:4c:d8:a5:42:29:81:78:d5:6f:02: e2:cd:9a:e0:92:67:4a:5f:ab:b8:04:9f:4a:e8:2a: 07:44:0f:eb:3d:46:54:7c:2f:e1:54:72:eb:a5:3c: e3:e3:5c:6e:93:d2:2a:bb:c1:26:9a:45:f7:df:d9: 9b:8b:94:19:7a:93:ee:c8:cf:d6:e6:11:c3:28:b4: 65:c8:80:a0:16:06:27:be:36:13:19:26:d2:08:b3: 53:fe:4b:55:05:ea:d8:e1:d7:1c:a7:ea:da:52:bf: 42:59:2a:7d:6d:b0:56:4d:97:98:f0:0d:0d:43:cc: 46:71:90:55:4f:32:9d:86:20:c8:fa:d0:72:d8:a0: 27:d4:d6:41:ba:e4:97:42:a3:be:f7:b3:21:62:6b: cf:d0:ca:f8:2d:3b:c9:ec:4a:1d:f4:ba:54:db:fe: 60:66:48:61:a5:bc:3b:0f:fb:5c:f9:63:cf:ab:19: 6a:9e:f8:c8:4d:65:9d:1b:be:0b:17:9e:82:bb:a0: 78:8d:d6:56:3a:6f:db:00:92:5b:f0:c7:c0:e5:35: fe:00:e0:4b:aa:28:62:92:62:43:1b:ff:17:21:a1: 92:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D1:C7:F9:BD:EE:84:46:0C:19:DE:64:EC:8C:9E:FA:29:B6:BD:C3 X509v3 Authority Key Identifier: keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/I9HH-b3uhEYMGd5k7Iye-im2vcM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.184.0/24 IPv6: 2a0e:c940::/29 Signature Algorithm: sha256WithRSAEncryption 3d:13:f9:41:87:94:e2:63:a3:2c:9e:32:1c:fe:08:29:05:a2: a1:db:8c:47:df:8e:ce:f9:ff:fe:59:1d:3a:e9:24:1f:94:a5: 94:a0:85:53:9f:42:24:49:5f:df:cf:dc:99:ef:6a:65:02:3c: c7:eb:6b:a9:06:35:6a:93:eb:05:38:0d:49:14:74:e5:e3:ad: 35:b0:3b:c7:74:91:2f:1d:be:e4:ea:37:2c:75:38:e3:0b:62: a9:74:55:00:4b:d8:e7:e0:d7:06:d3:4d:cc:36:dd:19:b9:87: 9f:31:bd:c3:e2:8e:27:af:f2:80:e6:8e:16:3c:a2:6b:19:82: 3b:55:f2:3a:86:fc:63:dd:f3:a5:d5:a9:77:9c:69:9f:dd:7b: 0d:ee:28:69:0d:5e:04:97:2a:fd:30:19:4c:ef:38:6b:4e:3e: aa:ee:ea:49:0a:6f:31:f4:82:bf:0e:58:72:8a:b0:34:ac:54: 90:24:e8:8a:92:01:8e:79:1f:78:a3:58:f7:32:f1:1d:30:97: 40:95:1b:d6:31:5a:f6:10:c7:10:12:aa:9b:2f:53:43:f6:6c: 1a:84:bd:66:d9:eb:cd:7b:b3:bf:6d:5d:4c:cc:8b:b6:8d:1a: f1:d1:28:71:0b:f7:e5:a4:05:87:9d:85:bf:19:6e:08:f5:93: 0f:97:f7:e9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f4XSAFdyktmertkHUx57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZDAyOGYxYmEzY2VmYjBkZWJkNTFiZTlkYWM2OGM5Y2U1 NmMzZDUwHhcNMjYwMTAyMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2QxYzdmOWJkZWU4NDQ2MGMxOWRlNjRlYzhjOWVmYTI5YjZiZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPOpXOQ2usow8ICYdfgdxVXKaoIc YSjqjhahWPOgBRaWRUzYpUIpgXjVbwLizZrgkmdKX6u4BJ9K6CoHRA/rPUZUfC/h VHLrpTzj41xuk9Iqu8EmmkX339mbi5QZepPuyM/W5hHDKLRlyICgFgYnvjYTGSbS CLNT/ktVBerY4dccp+raUr9CWSp9bbBWTZeY8A0NQ8xGcZBVTzKdhiDI+tBy2KAn 1NZBuuSXQqO+97MhYmvP0Mr4LTvJ7Eod9LpU2/5gZkhhpbw7D/tc+WPPqxlqnvjI TWWdG74LF56Cu6B4jdZWOm/bAJJb8MfA5TX+AOBLqihikmJDG/8XIaGSWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCPRx/m97oRGDBneZOyMnvoptr3DMB8GA1UdIwQY MBaAFCLQKPG6PO+w3r1Rvp2saMnOVsPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82M2E0MDItYTU2YS00YTg5LWE3NDUt OTQ2ODE3YjU5MTQ4LzEvSTlISC1iM3VoRVlNR2Q1azdJeWUtaW0ydmNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82M2E0MDItYTU2YS00YTg5LWE3NDUtOTQ2ODE3YjU5MTQ4 LzEvSXRBbzhibzg3N0RldlZHLW5heG95YzVXdzlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAucy4MA0E AgACMAcDBQMqDslAMA0GCSqGSIb3DQEBCwUAA4IBAQA9E/lBh5TiY6MsnjIc/ggp BaKh24xH347O+f/+WR066SQflKWUoIVTn0IkSV/fz9yZ72plAjzH62upBjVqk+sF OA1JFHTl4601sDvHdJEvHb7k6jcsdTjjC2KpdFUAS9jn4NcG003MNt0ZuYefMb3D 4o4nr/KA5o4WPKJrGYI7VfI6hvxj3fOl1al3nGmf3XsN7ihpDV4Elyr9MBlM7zhr Tj6q7upJCm8x9IK/DlhyirA0rFSQJOiKkgGOeR94o1j3MvEdMJdAlRvWMVr2EMcQ EqqbL1ND9mwahL1m2evNe7O/bV1MzIu2jRrx0ShxC/flpAWHnYW/GW4I9ZMPl/fp -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:22 2026 by rpki-client