This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/9dcMnZF_hjQhvJcga50J4Lgw0oc.roa File: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (raw, json) Hash identifier: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok= Subject key identifier: F5:D7:0C:9D:91:7F:86:34:21:BC:97:20:6B:9D:09:E0:B8:30:D2:87 Certificate issuer: /CN=d79da465615c60094370833892da84c886e1c4ef Certificate serial: 019B79ED458BB2BBAAED827F76832098AF0F Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/9dcMnZF_hjQhvJcga50J4Lgw0oc.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.186.0/24 maxlen: 24 185.1.231.0/24 maxlen: 24 185.188.82.0/24 maxlen: 24 185.188.83.0/24 maxlen: 24 217.29.64.0/21 maxlen: 21 217.29.66.0/23 maxlen: 23 2001:7f8:b:100::/64 maxlen: 64 2001:7f8:b:101::/64 maxlen: 64 2001:7f8:101:7::/64 maxlen: 64 2001:7f8:101:13::/64 maxlen: 64 2001:7f8:101:14::/64 maxlen: 64 2001:7f8:101:16::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:8b:b2:bb:aa:ed:82:7f:76:83:20:98:af:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d79da465615c60094370833892da84c886e1c4ef Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5d70c9d917f863421bc97206b9d09e0b830d287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c2:77:0e:b6:ce:94:4b:53:20:56:fb:3d:84: 9e:c5:d7:01:4e:87:ff:4f:a6:bc:4e:ef:33:29:38: 1c:f9:7a:07:a5:62:b8:1b:b2:37:19:fc:74:99:49: 4a:4e:c5:fc:39:fc:51:8d:80:ab:c0:18:04:1e:06: f2:aa:41:e6:de:93:f1:12:91:73:07:9d:e6:e5:46: 0c:05:e8:f9:d9:2a:da:52:b4:e4:e9:67:61:70:7f: 33:ba:68:63:b7:5d:24:96:7d:d9:b9:0d:2f:48:59: 27:61:6a:a5:a1:45:db:44:39:23:e5:ce:72:6f:3b: 44:e1:2c:94:d9:92:17:1a:81:d1:21:19:a9:fb:43: 9e:fb:a2:ee:83:26:4e:aa:5e:42:e5:69:ec:49:c5: cf:70:d5:cd:60:d3:31:e1:79:c1:3e:b2:bf:8e:5c: a3:a1:b8:ae:df:6f:22:b5:3d:f2:e3:42:f8:cc:d3: 7e:71:ce:67:70:31:15:59:e1:38:bc:f1:1d:e6:85: 3d:16:9f:ca:e9:5e:9d:cd:79:2b:1f:72:b1:bb:6b: 89:c2:2f:c3:4f:eb:45:42:eb:74:04:7f:92:ab:d9: 81:05:bf:06:5a:44:be:2d:e0:2a:ef:97:e0:36:a7: ad:9b:6f:49:29:05:b7:a3:6e:6c:fe:67:4e:88:95: 92:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D7:0C:9D:91:7F:86:34:21:BC:97:20:6B:9D:09:E0:B8:30:D2:87 X509v3 Authority Key Identifier: keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/9dcMnZF_hjQhvJcga50J4Lgw0oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.186.0/24 185.1.231.0/24 185.188.82.0/23 217.29.64.0/21 IPv6: 2001:7f8:b:100::/63 2001:7f8:101:7::/64 2001:7f8:101:13::-2001:7f8:101:14:ffff:ffff:ffff:ffff 2001:7f8:101:16::/64 Signature Algorithm: sha256WithRSAEncryption 89:09:a5:71:04:3d:11:11:ae:18:af:29:0e:2f:1c:31:1d:65: 82:22:e5:cb:9b:93:8e:e6:bb:55:fa:0f:0a:ab:b9:93:db:d8: c5:75:3a:a0:87:43:16:17:43:76:62:06:13:72:29:2d:fa:f8: 36:b9:08:25:b2:02:f8:bb:b1:bd:21:f8:ab:a8:66:5c:4a:04: e4:87:84:05:18:b0:38:bb:cc:8f:d7:43:70:f6:34:92:71:f2: 25:0f:b9:d8:fe:d4:87:c5:c0:d3:cc:69:36:78:b8:4e:5a:85: 19:f5:3c:e4:c6:3f:e2:a8:d6:e4:0b:b9:19:81:d8:20:c2:46: 2a:ab:84:41:ca:ad:11:fd:17:b1:51:06:a8:e1:41:ec:7c:07: 74:45:1f:a3:ab:b9:d2:67:86:af:3a:8c:45:a8:7a:7e:be:96: 0e:ca:da:01:92:da:36:15:b4:62:bc:dd:9b:38:b2:77:d7:29: a2:8b:d3:11:41:02:e4:33:c7:f4:a0:c3:5a:68:cf:51:f8:ec: c4:b5:97:7f:dd:3d:bf:21:cb:a7:99:a0:4c:02:5b:64:03:93: 1b:94:52:8d:e3:0e:1d:28:f6:1d:2d:aa:9d:33:6a:10:1f:9a: e6:63:73:73:40:e7:a7:f9:b0:7e:39:c8:47:2a:15:33:0b:4d: da:8c:f5:d8 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt57UWLsruq7YJ/doMgmK8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OWRhNDY1NjE1YzYwMDk0MzcwODMzODkyZGE4NGM4ODZl MWM0ZWYwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWQ3MGM5ZDkxN2Y4NjM0MjFiYzk3MjA2YjlkMDllMGI4MzBkMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMJ3DrbOlEtTIFb7PYSexdcBTof/ T6a8Tu8zKTgc+XoHpWK4G7I3Gfx0mUlKTsX8OfxRjYCrwBgEHgbyqkHm3pPxEpFz B53m5UYMBej52SraUrTk6WdhcH8zumhjt10kln3ZuQ0vSFknYWqloUXbRDkj5c5y bztE4SyU2ZIXGoHRIRmp+0Oe+6LugyZOql5C5WnsScXPcNXNYNMx4XnBPrK/jlyj obiu328itT3y40L4zNN+cc5ncDEVWeE4vPEd5oU9Fp/K6V6dzXkrH3Kxu2uJwi/D T+tFQut0BH+Sq9mBBb8GWkS+LeAq75fgNqetm29JKQW3o25s/mdOiJWS+wIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFPXXDJ2Rf4Y0IbyXIGudCeC4MNKHMB8GA1UdIwQY MBaAFNedpGVhXGAJQ3CDOJLahMiG4cTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDkt ZGFkM2JiMTNjMGEyLzEvOWRjTW5aRl9oalFodkpjZ2E1MEo0TGd3MG9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kNzljOTgtYzI3ZC00NWIzLTg2ZDktZGFkM2JiMTNjMGEy LzEvMTUya1pXRmNZQWxEY0lNNGt0cUV5SWJoeE84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTAeBAIAATAYAwQAuQG6AwQA uQHnAwQBubxSAwQD2R1AMD8EAgACMDkDCQEgAQf4AAsBAAMJACABB/gBAQAHMBYD CQAgAQf4AQEAEwMJACABB/gBAQAUAwkAIAEH+AEBABYwDQYJKoZIhvcNAQELBQAD ggEBAIkJpXEEPRERrhivKQ4vHDEdZYIi5cubk47mu1X6DwqruZPb2MV1OqCHQxYX Q3ZiBhNyKS36+Da5CCWyAvi7sb0h+KuoZlxKBOSHhAUYsDi7zI/XQ3D2NJJx8iUP udj+1IfFwNPMaTZ4uE5ahRn1POTGP+Ko1uQLuRmB2CDCRiqrhEHKrRH9F7FRBqjh Qex8B3RFH6OrudJnhq86jEWoen6+lg7K2gGS2jYVtGK83Zs4snfXKaKL0xFBAuQz x/Sgw1poz1H47MS1l3/dPb8hy6eZoEwCW2QDkxuUUo3jDh0o9h0tqp0zahAfmuZj c3NA56f5sH45yEcqFTMLTdqM9dg= -----END CERTIFICATE-----Generated at Fri Jan 9 17:07:00 2026 by rpki-client