This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/9nNyzPySymEM7sc2oK89zLOdPps.roa File: 9nNyzPySymEM7sc2oK89zLOdPps.roa (raw, json) Hash identifier: REW3iMc5Rvj/cI6qbWCaSFdTmGA7s4x31HfoeK6bal8= Subject key identifier: F6:73:72:CC:FC:92:CA:61:0C:EE:C7:36:A0:AF:3D:CC:B3:9D:3E:9B Certificate issuer: /CN=3d2384b784f197ea03dac2feda7895fc4b740729 Certificate serial: 019BE538A7C937C3D065D59FB438349648B1 Authority key identifier: 3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/9nNyzPySymEM7sc2oK89zLOdPps.roa Signing time: Thu 22 Jan 2026 10:20:53 +0000 ROA not before: Thu 22 Jan 2026 10:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206626 IP address blocks: 185.85.56.0/22 maxlen: 24 217.179.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.mft rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:38:a7:c9:37:c3:d0:65:d5:9f:b4:38:34:96:48:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2384b784f197ea03dac2feda7895fc4b740729 Validity Not Before: Jan 22 10:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f67372ccfc92ca610ceec736a0af3dccb39d3e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:0d:c3:89:fe:07:e5:40:6c:63:20:14:9d: bf:3d:b4:bb:8c:31:2b:e9:e9:87:41:72:22:15:44: 32:31:36:4a:37:b9:86:ae:6a:d8:80:4d:c2:ba:c3: e5:3b:ed:e9:9a:5d:dd:26:a5:c0:70:a1:84:dc:e7: 82:7c:8c:e8:27:32:54:35:5a:09:c5:23:5f:6e:e2: 8d:f1:2d:db:6d:de:5b:01:c9:6c:a0:3a:62:fb:dd: 24:61:16:f9:2b:5d:1c:e7:d2:99:72:75:5d:09:0b: 51:72:b6:73:71:2f:fd:d9:f9:20:ce:70:95:f3:bc: 14:23:b5:e7:b4:e9:9f:77:5a:71:bb:c5:2e:38:5f: b3:cc:ca:e1:c1:6f:02:06:32:95:37:41:4f:56:52: fa:bd:bc:10:44:f6:c9:3c:6e:ca:80:95:e2:33:7c: bd:eb:b3:78:01:07:58:0e:da:78:7d:52:47:72:74: 26:dc:58:d9:45:3f:be:75:e7:f9:96:86:c1:63:8a: 12:80:c4:c8:56:c1:73:7c:95:7e:bc:b9:5c:7a:7d: fd:8b:89:3d:98:aa:a1:8f:02:f7:8f:71:ef:d0:d7: 9d:d7:a3:5f:89:bb:d3:53:e1:ef:c4:6c:9c:ef:95: 61:3f:af:e8:bc:41:51:38:14:e8:6b:11:d6:89:5b: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:73:72:CC:FC:92:CA:61:0C:EE:C7:36:A0:AF:3D:CC:B3:9D:3E:9B X509v3 Authority Key Identifier: keyid:3D:23:84:B7:84:F1:97:EA:03:DA:C2:FE:DA:78:95:FC:4B:74:07:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PSOEt4Txl-oD2sL-2niV_Et0Byk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/9nNyzPySymEM7sc2oK89zLOdPps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3bd13d-fe95-486f-80ef-f073548352bf/1/PSOEt4Txl-oD2sL-2niV_Et0Byk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.56.0/22 217.179.74.0/23 Signature Algorithm: sha256WithRSAEncryption 29:48:e3:30:f0:ed:7a:1b:76:1b:42:43:24:5f:75:ee:1a:88: ab:6d:46:38:3b:a7:47:32:98:a7:18:c7:b1:8f:d9:47:9e:03: e5:19:02:3a:b4:6c:f8:05:50:d5:7a:a0:58:dd:41:40:7e:92: 8e:5c:5b:40:2d:aa:6f:87:a0:3e:5a:29:f4:40:f2:61:bf:19: 7d:a8:f9:c6:38:a4:d0:b3:f3:c1:f2:cc:84:59:9e:bb:3d:e0: e7:ff:ab:f9:d6:6f:4c:d8:78:3c:65:0c:c3:99:50:91:bf:52: f2:37:e4:dd:22:37:f0:03:17:06:bf:67:b2:21:1c:ad:e0:12: 90:7e:3b:9a:89:0e:23:88:38:af:db:64:f0:3e:71:8f:5a:ad: ef:c3:3b:8e:e3:c7:d0:00:96:37:7a:f5:0c:da:a1:31:3b:fd: 46:51:ea:b8:a4:c5:d1:83:75:a6:27:3d:f3:89:b4:d9:da:6d: 45:c2:c4:30:1b:27:e5:99:02:ef:51:60:31:45:9b:de:e0:fa: 3b:0b:4a:d0:66:2d:09:ec:b0:87:d3:93:e2:2e:69:df:c5:cb: de:5d:2c:f1:23:e4:23:10:22:43:7f:48:44:1d:67:6d:cc:b1: 79:29:7c:f7:97:e0:b5:ca:0a:f5:64:4c:aa:33:7f:11:f8:ee: e6:da:b3:cc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvlOKfJN8PQZdWftDg0lkixMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMjM4NGI3ODRmMTk3ZWEwM2RhYzJmZWRhNzg5NWZjNGI3 NDA3MjkwHhcNMjYwMTIyMTAyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjczNzJjY2ZjOTJjYTYxMGNlZWM3MzZhMGFmM2RjY2IzOWQzZTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXENw4n+B+VAbGMgFJ2/PbS7jDEr 6emHQXIiFUQyMTZKN7mGrmrYgE3CusPlO+3pml3dJqXAcKGE3OeCfIzoJzJUNVoJ xSNfbuKN8S3bbd5bAclsoDpi+90kYRb5K10c59KZcnVdCQtRcrZzcS/92fkgznCV 87wUI7XntOmfd1pxu8UuOF+zzMrhwW8CBjKVN0FPVlL6vbwQRPbJPG7KgJXiM3y9 67N4AQdYDtp4fVJHcnQm3FjZRT++def5lobBY4oSgMTIVsFzfJV+vLlcen39i4k9 mKqhjwL3j3Hv0Ned16NfibvTU+HvxGyc75VhP6/ovEFROBToaxHWiVv8owIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPZzcsz8ksphDO7HNqCvPcyznT6bMB8GA1UdIwQY MBaAFD0jhLeE8ZfqA9rC/tp4lfxLdAcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYt ZjA3MzU0ODM1MmJmLzEvOW5OeXpQeVN5bUVNN3NjMm9LODl6TE9kUHBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8zYmQxM2QtZmU5NS00ODZmLTgwZWYtZjA3MzU0ODM1MmJm LzEvUFNPRXQ0VHhsLW9EMnNMLTJuaVZfRXQwQnlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuVU4AwQB 2bNKMA0GCSqGSIb3DQEBCwUAA4IBAQApSOMw8O16G3YbQkMkX3XuGoirbUY4O6dH MpinGMexj9lHngPlGQI6tGz4BVDVeqBY3UFAfpKOXFtALapvh6A+Win0QPJhvxl9 qPnGOKTQs/PB8syEWZ67PeDn/6v51m9M2Hg8ZQzDmVCRv1LyN+TdIjfwAxcGv2ey IRyt4BKQfjuaiQ4jiDiv22TwPnGPWq3vwzuO48fQAJY3evUM2qExO/1GUeq4pMXR g3WmJz3zibTZ2m1FwsQwGyflmQLvUWAxRZve4Po7C0rQZi0J7LCH05PiLmnfxcve XSzxI+QjECJDf0hEHWdtzLF5KXz3l+C1ygr1ZEyqM38R+O7m2rPM -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:12 2026 by rpki-client